This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.cer (raw, json) Hash identifier: WugTta8N0efr7xeBIx4ayi/ohqK2lgNjx3kMN1pYUeY= Subject key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E19082D1DB57EC88751407057DCD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51161 IP: 91.235.215.0/24 IP: 2a07:ea00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e1:90:82:d1:db:57:ec:88:75:14:07:05:7d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:95:5a:d1:64:19:3e:c7:8f:0b:4b:dd:bd: 17:9a:d1:5d:5a:5b:77:2b:39:f0:05:7c:fb:5d:3a: 14:44:15:34:06:8b:01:f8:39:8a:57:11:e6:1f:8d: 0e:97:0d:26:64:4f:1a:d4:3a:82:32:1c:76:af:10: 51:e2:89:d7:f2:9f:f5:7a:43:11:b8:73:f5:ba:4c: 2f:74:df:c2:f6:39:33:55:50:46:75:ac:f2:52:7f: c2:64:c8:d0:41:5f:3d:12:dc:2b:00:d0:27:c8:a6: ad:2f:97:88:a6:e7:7f:ea:ca:6c:d6:47:d9:36:fd: 71:a8:01:e1:0a:3b:c3:d3:a3:b9:6a:8a:67:4e:1b: d2:6a:4e:b0:0e:c1:51:de:f3:c7:33:d2:b4:cb:12: 2b:e1:83:10:67:f9:91:94:90:25:f6:fd:45:d0:68: 88:93:fc:02:1f:f0:15:23:72:ac:1e:fd:c1:53:ab: 75:aa:b9:04:1f:33:cf:21:08:b0:26:66:b8:ec:a5: b5:22:2c:64:d6:48:2d:15:e5:e5:60:4b:2b:5c:f1: ff:32:41:13:38:0e:de:45:ee:22:c4:50:7f:2c:aa: 7b:2f:80:bf:c7:f2:07:a5:40:fb:9c:ed:7a:7a:1f: c7:ee:33:26:b2:e0:46:2b:41:f6:37:05:b3:91:d9: 8f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.215.0/24 IPv6: 2a07:ea00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51161 Signature Algorithm: sha256WithRSAEncryption 68:f0:3f:69:1f:cd:7f:dc:3b:fe:c7:27:a5:57:83:b8:d3:15: 45:80:41:74:e1:94:c2:7e:dc:1e:b6:25:57:49:7e:6e:35:40: 69:cc:97:7a:d9:ac:78:0a:45:a2:8c:a5:99:7c:c3:42:cb:6a: f8:3a:d9:d5:0d:d7:4a:d8:13:6e:5a:58:71:00:68:5b:13:69: 13:29:78:52:de:e5:12:1b:24:c8:8a:55:76:b5:03:c6:54:05: 19:f6:2e:e4:79:2a:29:77:39:9c:04:e1:d2:17:2a:ae:dc:5e: f6:47:6a:b4:51:9e:98:1d:e8:e9:98:1d:c5:59:39:8a:a5:0e: 73:f6:52:f3:2f:23:cb:a0:8c:eb:c2:ec:68:5b:cc:d5:60:83: f6:dd:d1:7d:62:c1:35:17:b1:2a:c4:88:17:e2:e1:da:87:b9: 85:0e:e6:ac:68:69:b1:f7:1d:11:8f:9e:41:0b:53:6a:94:48: 53:90:89:cb:67:c8:b3:c5:02:05:d2:f5:7f:6c:76:6e:ce:2d: 06:c5:f6:30:4f:6d:38:6b:34:d2:d5:e6:65:44:2e:49:fc:a9: 89:4d:dd:f5:83:fc:cd:53:38:28:de:07:bc:71:74:ca:53:a2: 0e:68:a1:a9:2e:92:03:bf:c4:21:ce:b5:0a:4e:64:11:20:fa: 4a:e8:76:f1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3WOGQgtHbV+yIdRQHBX3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmI1MjU2ZmUzZTA3MzAyYWI3MzI3Yjc0N2I4ZGYzODI0NWM0ZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu6VWtFkGT7HjwtL3b0XmtFdWlt3 KznwBXz7XToURBU0BosB+DmKVxHmH40Olw0mZE8a1DqCMhx2rxBR4onX8p/1ekMR uHP1ukwvdN/C9jkzVVBGdazyUn/CZMjQQV89EtwrANAnyKatL5eIpud/6sps1kfZ Nv1xqAHhCjvD06O5aopnThvSak6wDsFR3vPHM9K0yxIr4YMQZ/mRlJAl9v1F0GiI k/wCH/AVI3KsHv3BU6t1qrkEHzPPIQiwJma47KW1Iixk1kgtFeXlYEsrXPH/MkET OA7eRe4ixFB/LKp7L4C/x/IHpUD7nO16eh/H7jMmsuBGK0H2NwWzkdmPywIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOu1JW/j4HMCq3Mnt0e43zgkXE7fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzQwYjJh OS1iMmM3LTQyMjMtODg0OC0wZDJlNDIwNTY4NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvNDBiMmE5 LWIyYzctNDIyMy04ODQ4LTBkMmU0MjA1Njg2Zi8xLzY3VWxiLVBnY3dLcmN5ZTNS N2pmT0NSY1R0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW+vXMA0EAgACMAcDBQAqB+oAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDH2TANBgkqhkiG9w0BAQsFAAOCAQEAaPA/aR/Nf9w7 /scnpVeDuNMVRYBBdOGUwn7cHrYlV0l+bjVAacyXetmseApFooylmXzDQstq+DrZ 1Q3XStgTblpYcQBoWxNpEyl4Ut7lEhskyIpVdrUDxlQFGfYu5HkqKXc5nATh0hcq rtxe9kdqtFGemB3o6ZgdxVk5iqUOc/ZS8y8jy6CM68LsaFvM1WCD9t3RfWLBNRex KsSIF+Lh2oe5hQ7mrGhpsfcdEY+eQQtTapRIU5CJy2fIs8UCBdL1f2x2bs4tBsX2 ME9tOGs00tXmZUQuSfypiU3d9YP8zVM4KN4HvHF0ylOiDmihqS6SA7/EIc61Ck5k ESD6Suh28Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:40 2026 by rpki-client