This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.cer (raw, json) Hash identifier: /WQgkxhwAyVNYJ0HzLPIaXmZ42XKGS1TshPR4AXPSDU= Subject key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910929D085CF777696BD89AC7ACA518 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213192 IP: 46.235.40.0/21 IP: 83.150.232.0/22 IP: 2a00:d640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:92:9d:08:5c:f7:77:69:6b:d8:9a:c7:ac:a5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:a5:60:96:16:c3:57:98:da:e3:47:9f:cb: fc:9e:89:5f:43:d3:63:ad:a9:cb:03:4f:ed:0b:05: 0c:f8:f5:eb:5c:a8:e8:38:b5:a1:c8:a2:a4:11:4e: e0:f5:4f:02:02:96:39:11:4b:c8:8e:d2:42:a4:2b: 4d:bb:84:a6:c8:41:d7:bc:e0:d6:32:29:65:1f:f4: 42:dc:24:5b:f0:fb:ab:ad:a1:cd:80:ab:83:be:c5: 79:c7:9c:b1:ae:56:43:15:c4:9c:26:56:fe:a7:34: e5:31:c4:f7:36:9e:00:33:06:72:8b:29:26:e8:cf: 04:b9:02:ae:a1:cc:8e:9c:04:b4:04:fc:a7:8b:59: 96:90:1c:3a:1f:1f:5b:09:5f:87:19:7f:a3:26:e9: 40:4b:1d:f1:70:fa:23:24:7b:e1:38:8f:b1:30:c3: b8:e5:45:31:17:58:fd:84:5e:8c:40:ba:f2:5f:d1: 39:66:c9:ea:fd:9f:ee:97:e3:ba:90:a2:8c:87:28: 0f:ce:12:e4:12:fa:cb:db:34:10:ba:62:41:f1:95: 31:ab:36:85:bc:6a:c7:3b:49:58:ce:74:19:01:83: cb:cd:b3:a3:ee:5d:5f:23:93:43:50:c4:14:1e:16: 8a:33:22:19:f1:96:7a:cf:cd:67:38:6b:ee:a2:fe: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.40.0/21 83.150.232.0/22 IPv6: 2a00:d640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213192 Signature Algorithm: sha256WithRSAEncryption 5e:37:8c:90:62:36:20:1f:a5:cc:46:a2:0b:65:09:0b:38:ee: 50:dd:bd:25:3a:97:01:fe:ce:19:1e:d9:1c:de:88:25:54:6d: 5b:ec:66:01:67:a2:06:c8:f9:b1:10:5b:11:db:4e:c4:29:3f: 96:a3:a9:7b:f3:9d:fb:cf:af:95:f5:f1:95:18:10:53:60:66: 71:81:ae:04:f6:98:5b:14:82:a0:63:3d:9c:fd:00:1c:4f:25: 9a:b8:ba:8e:24:a2:7b:f1:8c:da:64:fc:94:b6:e3:78:5b:14: 85:96:05:30:1b:60:0c:eb:9b:f9:ed:c5:0f:0b:45:d2:96:a3: aa:55:c7:63:17:b1:35:ec:97:61:50:b9:60:59:9e:f7:36:d6: 34:34:78:c6:13:90:b3:f8:82:8b:43:53:a9:17:59:38:e9:5a: 12:d9:d1:13:df:bb:e2:cf:53:4b:e3:28:0b:3e:95:1c:10:77: fe:57:89:c1:61:61:64:20:77:5b:7b:ee:cb:e7:1d:28:9b:38: 0a:59:c4:f6:24:5a:b6:e5:ab:bc:3c:af:e5:d8:2d:a7:18:89: fb:15:6d:9b:24:93:cd:82:bf:7a:8c:c6:d3:4a:47:75:eb:da: ce:5a:d0:70:f5:3e:04:e5:1e:47:8d:60:95:05:cb:a6:61:53: 53:6b:9a:5e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EJKdCFz3d2lr2JrHrKUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmZhMmE3MDAwMzg4MGQ3NTYxNjEyYTNjMGExMjYwMmNlMzU0MWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4WlYJYWw1eY2uNHn8v8nolfQ9Nj ranLA0/tCwUM+PXrXKjoOLWhyKKkEU7g9U8CApY5EUvIjtJCpCtNu4SmyEHXvODW MillH/RC3CRb8PurraHNgKuDvsV5x5yxrlZDFcScJlb+pzTlMcT3Np4AMwZyiykm 6M8EuQKuocyOnAS0BPyni1mWkBw6Hx9bCV+HGX+jJulASx3xcPojJHvhOI+xMMO4 5UUxF1j9hF6MQLryX9E5Zsnq/Z/ul+O6kKKMhygPzhLkEvrL2zQQumJB8ZUxqzaF vGrHO0lYznQZAYPLzbOj7l1fI5NDUMQUHhaKMyIZ8ZZ6z81nOGvuov5+5QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNL6KnAAOIDXVhYSo8ChJgLONUGkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5L2IyMDdk MS04YjdiLTRlMjctODM3MC1hNzk2NTAxZTc3YTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvYjIwN2Qx LThiN2ItNGUyNy04MzcwLWE3OTY1MDFlNzdhMS8xLzB2b3FjQUE0Z05kV0ZoS2p3 S0VtQXM0MVFhUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDLusoAwQCU5boMA0EAgACMAcDBQMqANZAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNAyDANBgkqhkiG9w0BAQsFAAOCAQEAXjeM kGI2IB+lzEaiC2UJCzjuUN29JTqXAf7OGR7ZHN6IJVRtW+xmAWeiBsj5sRBbEdtO xCk/lqOpe/Od+8+vlfXxlRgQU2BmcYGuBPaYWxSCoGM9nP0AHE8lmri6jiSie/GM 2mT8lLbjeFsUhZYFMBtgDOub+e3FDwtF0pajqlXHYxexNeyXYVC5YFme9zbWNDR4 xhOQs/iCi0NTqRdZOOlaEtnRE9+74s9TS+MoCz6VHBB3/leJwWFhZCB3W3vuy+cd KJs4ClnE9iRatuWrvDyv5dgtpxiJ+xVtmySTzYK/eozG00pHdevazlrQcPU+BOUe R41glQXLpmFTU2uaXg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:53:41 2026 by rpki-client