This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer File: 0vl4nhtZ-i8sUM4ejhLrl2VbvN0.cer (raw, json) Hash identifier: aQbAAdfMXuUY2+9eWgif5w/fL5LucE/pwOFEpIGsEss= Subject key identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775894BB7B4432033E2F13A2962F9034 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.53.170.0 -- 193.53.199.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:94:bb:7b:44:32:03:3e:2f:13:a2:96:2f:90:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2f9789e1b59fa2f2c50ce1e8e12eb97655bbcdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ab:03:18:61:76:62:bd:30:7d:ff:52:ac:e0: 48:85:1b:47:a6:fa:8a:ed:91:b1:9a:0f:44:60:00: 8d:98:56:5a:1e:62:0c:19:1a:68:b8:26:42:4d:1d: 16:c5:5d:00:a9:29:08:fb:94:ce:ca:a8:15:36:67: 78:5a:45:b9:a7:40:04:d6:98:41:e3:c2:9c:90:bd: 59:48:de:c2:98:b9:8d:ee:4b:f6:94:17:d9:97:77: 09:29:0c:80:29:2c:a8:8f:47:a0:5b:e1:50:cd:42: 6f:fd:c9:46:d0:31:b6:3e:e1:ba:96:9f:5d:23:c4: 21:7c:19:60:2a:dc:8e:ac:ba:dd:4d:10:85:1e:18: 6b:26:0a:05:7a:c5:7f:38:ff:78:d3:cd:88:54:67: ca:16:81:2a:33:40:9c:a6:b0:6a:f2:e5:9e:03:bd: 29:12:99:82:14:ad:88:68:63:ba:7c:01:36:01:d7: ef:cc:59:62:1e:5b:83:41:0d:ea:1e:97:74:33:45: 4b:e0:e2:6c:47:36:79:1d:f4:b0:ac:c0:e4:fa:53: e7:16:d4:74:c8:6b:80:9d:e0:1b:10:e0:eb:b4:39: f1:0f:aa:4b:26:45:9a:43:9f:89:51:9a:77:13:8e: aa:7b:8a:1b:4b:c8:36:9c:2c:ea:d0:f5:6e:45:d4: 00:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:78:9E:1B:59:FA:2F:2C:50:CE:1E:8E:12:EB:97:65:5B:BC:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/580769-a9c4-499a-b9db-bc5ab81987f0/1/0vl4nhtZ-i8sUM4ejhLrl2VbvN0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.53.170.0-193.53.199.255 Signature Algorithm: sha256WithRSAEncryption 10:01:22:d0:da:fa:24:a5:2c:a5:2b:cc:ed:79:5d:e4:fa:7c: 9a:8e:c8:2a:b8:6b:9c:0f:f0:3f:71:8a:e5:b4:60:cd:cb:d3: 17:a4:12:85:53:c3:56:a1:70:80:79:1c:10:83:27:02:a2:2d: 60:95:32:0f:03:5f:ac:69:a3:a3:a9:08:ad:ae:f1:0a:f6:b7: a5:57:4d:23:55:f1:20:e0:9e:ec:43:b3:0e:91:a8:4f:61:3c: 53:75:23:18:89:72:ff:47:28:39:c4:43:af:bd:da:b3:90:8a: 90:7b:02:95:13:6a:58:0a:f2:1e:f4:92:ab:09:21:0c:31:07: 26:8e:27:7e:f0:e1:65:87:cd:2e:23:82:e2:78:16:0d:04:95: 57:a4:7e:2a:74:5d:89:65:ff:fa:be:a2:2b:64:aa:28:54:d7: 4c:79:71:82:ac:e9:1e:71:75:ce:61:06:64:5e:be:9c:a5:6d: 52:2d:19:c8:09:80:3a:94:ed:79:72:31:35:07:b7:bb:11:55: 8e:9a:d6:00:0f:c4:05:93:a5:4b:9b:a2:90:0e:15:d2:e6:a4: d9:ae:18:8c:2e:02:7e:1e:04:a7:a6:26:5a:ba:d5:0c:43:e4: d7:d1:59:4f:16:f4:44:a0:0b:24:b4:ae:c0:7f:55:9d:69:59: 8b:69:09:f3 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt3WJS7e0QyAz4vE6KWL5A0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY5Nzg5ZTFiNTlmYTJmMmM1MGNlMWU4ZTEyZWI5NzY1NWJiY2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KsDGGF2Yr0wff9SrOBIhRtHpvqK 7ZGxmg9EYACNmFZaHmIMGRpouCZCTR0WxV0AqSkI+5TOyqgVNmd4WkW5p0AE1phB 48KckL1ZSN7CmLmN7kv2lBfZl3cJKQyAKSyoj0egW+FQzUJv/clG0DG2PuG6lp9d I8QhfBlgKtyOrLrdTRCFHhhrJgoFesV/OP94082IVGfKFoEqM0CcprBq8uWeA70p EpmCFK2IaGO6fAE2AdfvzFliHluDQQ3qHpd0M0VL4OJsRzZ5HfSwrMDk+lPnFtR0 yGuAneAbEODrtDnxD6pLJkWaQ5+JUZp3E46qe4obS8g2nCzq0PVuRdQAJwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFNL5eJ4bWfovLFDOHo4S65dlW7zdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjLzU4MDc2 OS1hOWM0LTQ5OWEtYjlkYi1iYzVhYjgxOTg3ZjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvNTgwNzY5 LWE5YzQtNDk5YS1iOWRiLWJjNWFiODE5ODdmMC8xLzB2bDRuaHRaLWk4c1VNNGVq aExybDJWYnZOMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAHBNaoDBAPBNcAwDQYJKoZIhvcNAQELBQAD ggEBABABItDa+iSlLKUrzO15XeT6fJqOyCq4a5wP8D9xiuW0YM3L0xekEoVTw1ah cIB5HBCDJwKiLWCVMg8DX6xpo6OpCK2u8Qr2t6VXTSNV8SDgnuxDsw6RqE9hPFN1 IxiJcv9HKDnEQ6+92rOQipB7ApUTalgK8h70kqsJIQwxByaOJ37w4WWHzS4jguJ4 Fg0ElVekfip0XYll//q+oitkqihU10x5cYKs6R5xdc5hBmRevpylbVItGcgJgDqU 7XlyMTUHt7sRVY6a1gAPxAWTpUubopAOFdLmpNmuGIwuAn4eBKemJlq61QxD5NfR WU8W9ESgCyS0rsB/VZ1pWYtpCfM= -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:17 2026 by rpki-client