This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.cer (raw, json) Hash identifier: m4DA9okwOw4SQumwaZv6ia0q+uea1EqdJ4r/5nv9zT8= Subject key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDCE3C343445559873F1CF5F30E802 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205103 IP: 185.230.68.0/22 IP: 2a0c:500::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ce:3c:34:34:45:55:98:73:f1:cf:5f:30:e8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d32277ea304b2844a78689b3aa0d9219e3366773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:8f:1f:3f:99:7a:34:95:4b:2f:3c:28:e8: 31:44:38:41:1c:01:9f:3c:09:b7:3f:21:06:ce:43: 9e:f6:2a:1e:fd:49:49:71:be:b3:27:ca:d4:49:98: 38:75:0f:78:2c:ed:70:42:e7:75:1e:a3:47:f5:cf: 02:da:87:98:93:15:cc:e9:a7:0e:b7:6a:47:e5:62: c2:a3:82:c3:64:63:19:ac:05:2c:90:e3:28:54:a4: 0f:11:e7:f9:10:1e:23:0e:f3:2a:ca:f3:56:2b:dd: 20:d8:be:0a:c4:d6:16:c2:29:35:e1:a3:9f:4b:da: b7:db:5d:a8:67:3d:3e:eb:78:3f:57:db:c7:c4:2f: 03:dc:c4:f7:1f:49:d0:f9:c4:2b:e9:5b:c3:f7:e4: 88:18:71:ea:3e:0b:3c:04:91:8a:a9:79:b4:b4:d4: 4b:5d:0d:e9:1e:0f:1f:8c:b3:ea:f3:d3:f1:00:9d: d1:ca:fe:38:58:92:1c:e6:b6:03:9b:99:59:93:c9: 92:f2:5b:26:7d:d5:1a:fd:cf:0b:c4:0c:f9:03:87: 7e:91:d9:f3:f4:7f:2d:3f:5a:cd:ad:7c:38:20:c2: 65:70:88:6a:9b:7a:1c:75:19:ad:67:1b:b5:0e:6f: 15:87:84:a1:98:41:72:64:14:e7:db:e6:cf:b5:d3: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.68.0/22 IPv6: 2a0c:500::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205103 Signature Algorithm: sha256WithRSAEncryption 0a:12:5d:52:88:ef:f6:87:1f:b7:be:da:9e:0a:4a:a4:27:a5: bd:0e:80:d1:f3:20:09:a7:db:dc:e3:68:f7:fc:52:3d:d4:6d: 11:92:7f:75:98:3d:40:2e:03:46:4b:2c:f1:66:35:fb:1f:b5: 80:3c:8d:51:81:7b:63:fc:62:6a:da:c5:79:9c:af:03:1b:b9: 63:a8:ce:13:1c:df:59:25:bd:3b:1e:ae:34:1d:e2:8b:04:80: 18:31:de:fa:57:d9:d1:3b:de:f0:dd:1e:86:ff:21:39:ee:1b: 83:fd:06:16:48:84:14:0f:9b:c9:08:71:79:9d:be:1b:a5:71: 31:7b:d8:39:d1:4c:7e:a2:57:bd:a4:f0:fd:7c:b3:c0:86:a0: 1e:4b:5a:e9:97:3d:70:0f:60:63:2a:8b:2b:97:79:34:b1:f8: 5f:19:5f:cd:08:43:25:b9:80:a4:3f:84:81:0f:3c:9d:c7:f6: fa:4f:21:a1:bc:5b:8f:c8:1c:43:45:46:1e:bc:81:b9:00:70: 8f:0d:76:8f:0d:8e:73:83:58:f4:48:2c:00:00:30:9d:e5:11: 0e:7f:41:b5:f5:f3:08:5b:a5:c9:16:a4:45:2c:b6:24:c8:e7: 81:5d:31:84:19:b9:18:0d:70:05:b1:64:4d:57:c8:5c:12:c6: 43:53:a1:fb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87c48NDRFVZhz8c9fMOgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzIyNzdlYTMwNGIyODQ0YTc4Njg5YjNhYTBkOTIxOWUzMzY2NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwuPHz+ZejSVSy88KOgxRDhBHAGf PAm3PyEGzkOe9ioe/UlJcb6zJ8rUSZg4dQ94LO1wQud1HqNH9c8C2oeYkxXM6acO t2pH5WLCo4LDZGMZrAUskOMoVKQPEef5EB4jDvMqyvNWK90g2L4KxNYWwik14aOf S9q3212oZz0+63g/V9vHxC8D3MT3H0nQ+cQr6VvD9+SIGHHqPgs8BJGKqXm0tNRL XQ3pHg8fjLPq89PxAJ3Ryv44WJIc5rYDm5lZk8mS8lsmfdUa/c8LxAz5A4d+kdnz 9H8tP1rNrXw4IMJlcIhqm3ocdRmtZxu1Dm8Vh4ShmEFyZBTn2+bPtdNzNwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNMid+owSyhEp4aJs6oNkhnjNmdzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3Lzg1MzNj My0yOWUwLTQ1MDYtYjAwZC0zNmM4NzM5NjkyM2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvODUzM2Mz LTI5ZTAtNDUwNi1iMDBkLTM2Yzg3Mzk2OTIzYS8xLzB5SjM2akJMS0VTbmhvbXpx ZzJTR2VNMlozTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCueZEMA0EAgACMAcDBQIqDAUAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMhLzANBgkqhkiG9w0BAQsFAAOCAQEAChJdUojv9ocf t77angpKpCelvQ6A0fMgCafb3ONo9/xSPdRtEZJ/dZg9QC4DRkss8WY1+x+1gDyN UYF7Y/xiatrFeZyvAxu5Y6jOExzfWSW9Ox6uNB3iiwSAGDHe+lfZ0Tve8N0ehv8h Oe4bg/0GFkiEFA+byQhxeZ2+G6VxMXvYOdFMfqJXvaTw/XyzwIagHkta6Zc9cA9g YyqLK5d5NLH4XxlfzQhDJbmApD+EgQ88ncf2+k8hobxbj8gcQ0VGHryBuQBwjw12 jw2Oc4NY9EgsAAAwneURDn9BtfXzCFulyRakRSy2JMjngV0xhBm5GA1wBbFkTVfI XBLGQ1Oh+w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:07 2026 by rpki-client