This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer File: 61DTCEv4qp6nd9JFtg1RG-GJ6rI.cer (raw, json) Hash identifier: r4jwUWfKMi9HXqTTZmyAKrIukfdyH61uiytxoNV6QSc= Subject key identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C113B3CDA7DF3021D80E16C73F45C9B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56999 IP: 91.217.253.0/24 IP: 91.220.28.0/24 IP: 91.220.35.0/24 IP: 91.220.71.0/24 IP: 164.138.248.0/21 IP: 2a0a:7d40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:3b:3c:da:7d:f3:02:1d:80:e1:6c:73:f4:5c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb50d3084bf8aa9ea777d245b60d511be189eab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:80:78:78:09:b6:99:2d:0f:ae:2f:2b:35:b9: 48:4a:55:0f:49:1c:39:8f:ad:06:84:32:5b:94:29: 06:bd:86:d5:2a:77:f5:87:aa:5a:b2:0d:db:7a:e4: 8b:9b:14:01:2c:1c:79:9e:54:f2:49:d6:e9:01:db: 1b:17:42:66:98:f2:b9:2c:bc:56:b3:f7:03:39:10: 38:05:b1:d3:ca:15:77:82:d2:a3:4c:7d:cf:5c:b0: d2:da:c1:87:3d:ac:14:d4:36:95:ad:dd:ec:40:62: ba:85:ca:9a:e2:58:d5:df:28:e6:e0:92:1b:32:3c: 32:d3:56:54:b9:25:ed:b0:42:f1:7f:59:c2:ab:96: 12:7e:8e:a2:ee:f0:97:77:de:db:be:4c:35:e9:8e: 94:5f:64:e9:03:60:53:ca:6b:df:59:6a:25:ec:8f: 17:13:7d:0e:e2:47:2b:af:c6:7f:67:cd:67:3b:db: 82:b1:03:b0:4f:a4:89:36:b7:a2:b1:f9:c2:fe:2d: 7a:88:c6:f5:49:3a:74:f4:dd:1c:38:a9:c1:bc:10: d5:e2:37:f8:d2:48:f2:8d:42:1d:7f:b8:7b:bb:ce: 47:fb:60:76:a0:a6:28:87:6f:5f:4c:c6:14:52:46: 1a:26:ce:8c:52:2f:5b:66:98:35:68:77:53:0d:d6: d6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:50:D3:08:4B:F8:AA:9E:A7:77:D2:45:B6:0D:51:1B:E1:89:EA:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/12e72c-7491-47e2-ac53-ac0c60100478/1/61DTCEv4qp6nd9JFtg1RG-GJ6rI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.253.0/24 91.220.28.0/24 91.220.35.0/24 91.220.71.0/24 164.138.248.0/21 IPv6: 2a0a:7d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56999 Signature Algorithm: sha256WithRSAEncryption 27:39:97:df:be:99:09:9d:0b:7b:14:22:31:99:45:e9:c5:62: 5c:06:60:b9:c7:90:88:da:4f:8a:77:9c:b9:fb:d0:da:4f:95: af:1e:66:90:fd:9b:90:e8:8b:55:49:bd:db:18:8a:0e:d4:b5: 9d:86:f7:aa:96:ab:96:28:89:32:bb:09:ce:6e:86:bf:13:92: 6f:00:89:f1:24:35:12:5b:7a:24:3b:ea:94:1d:9e:69:75:7b: 50:d5:f4:e8:c6:82:0a:06:ad:e7:ca:31:b2:66:36:cb:52:6a: 53:e6:65:2c:2d:5d:46:09:7a:78:a2:0c:d6:4c:b1:f7:aa:43: 92:59:fa:9f:e0:60:4a:44:d0:2e:39:ee:82:1e:cb:ef:f3:fb: 7a:e6:4b:0a:d3:9e:8b:f3:1f:f4:1b:7a:5c:db:5a:cd:0b:fa: 19:76:e7:9f:ac:b3:2a:97:05:64:cb:b2:e4:e2:4f:36:70:ae: cc:3e:6f:6f:7a:3a:23:4f:e8:15:00:18:7c:58:91:95:84:fd: 6a:c2:05:ef:00:9d:2c:be:b9:52:64:af:be:ff:8b:ac:81:f6: ff:52:87:1a:94:fb:ec:67:50:1e:0e:d4:61:3a:03:72:eb:b3: b1:03:97:13:f3:40:2b:c4:c3:85:5b:47:f9:ef:e6:c7:68:19: 58:e9:f7:21 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZt8ETs82n3zAh2A4Wxz9FybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjUwZDMwODRiZjhhYTllYTc3N2QyNDViNjBkNTExYmUxODllYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIB4eAm2mS0Pri8rNblISlUPSRw5 j60GhDJblCkGvYbVKnf1h6pasg3beuSLmxQBLBx5nlTySdbpAdsbF0JmmPK5LLxW s/cDORA4BbHTyhV3gtKjTH3PXLDS2sGHPawU1DaVrd3sQGK6hcqa4ljV3yjm4JIb Mjwy01ZUuSXtsELxf1nCq5YSfo6i7vCXd97bvkw16Y6UX2TpA2BTymvfWWol7I8X E30O4kcrr8Z/Z81nO9uCsQOwT6SJNreisfnC/i16iMb1STp09N0cOKnBvBDV4jf4 0kjyjUIdf7h7u85H+2B2oKYoh29fTMYUUkYaJs6MUi9bZpg1aHdTDdbWrwIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFOtQ0whL+Kqep3fSRbYNURvhieqyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzEyZTcy Yy03NDkxLTQ3ZTItYWM1My1hYzBjNjAxMDA0NzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvMTJlNzJj LTc0OTEtNDdlMi1hYzUzLWFjMGM2MDEwMDQ3OC8xLzYxRFRDRXY0cXA2bmQ5SkZ0 ZzFSRy1HSjZySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQAW9n9AwQAW9wcAwQAW9wjAwQAW9xHAwQDpIr4 MA0EAgACMAcDBQAqCn1AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDepzANBgkq hkiG9w0BAQsFAAOCAQEAJzmX376ZCZ0LexQiMZlF6cViXAZguceQiNpPinecufvQ 2k+Vrx5mkP2bkOiLVUm92xiKDtS1nYb3qparliiJMrsJzm6GvxOSbwCJ8SQ1Elt6 JDvqlB2eaXV7UNX06MaCCgat58oxsmY2y1JqU+ZlLC1dRgl6eKIM1kyx96pDkln6 n+BgSkTQLjnugh7L7/P7euZLCtOei/Mf9Bt6XNtazQv6GXbnn6yzKpcFZMuy5OJP NnCuzD5vb3o6I0/oFQAYfFiRlYT9asIF7wCdLL65UmSvvv+LrIH2/1KHGpT77GdQ Hg7UYToDcuuzsQOXE/NAK8TDhVtH+e/mx2gZWOn3IQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:47 2026 by rpki-client