This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer File: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer (raw, json) Hash identifier: tAREN0t3Ee4yOYcowENaPE8cvlTupd9L1OAORE0L3/Y= Subject key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3CE67C0595EB1FE6A30063584C862 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203217 AS: 211908 AS: 212250 IP: 93.180.216.0/21 IP: 138.124.156.0/22 IP: 144.86.228.0/22 IP: 185.20.196.0/22 IP: 185.138.120.0/22 IP: 185.254.12.0/22 IP: 195.133.220.0/22 IP: 199.74.188.0/22 IP: 2a0b:1880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ce:67:c0:59:5e:b1:fe:6a:30:06:35:84:c8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:70:61:47:68:68:cc:1a:ea:3a:dd:e2:5a: 62:8c:2f:07:93:eb:15:3a:18:4a:b8:e6:7c:22:84: 50:d3:f8:c4:ba:b6:72:8b:ce:59:95:7b:a5:03:a2: 5f:f4:a5:96:6c:cd:36:63:4b:39:65:2a:90:f7:d7: 10:96:bf:0a:29:2a:ab:56:2a:2e:0a:4d:27:70:18: 09:50:38:9b:52:97:67:81:98:26:84:a9:7c:94:af: 7f:e7:39:c1:8d:65:5d:dd:3a:0b:0c:d6:f5:bb:b0: 3c:8b:bd:41:2b:37:1a:60:0b:07:e5:80:1a:67:ab: 9e:69:84:37:dd:61:15:0c:92:e0:b2:de:47:f5:18: 41:fb:46:73:c1:64:fd:c9:5e:ad:cf:06:d2:91:b6: 8e:c5:eb:80:0c:00:73:13:ed:d1:fd:6b:da:fb:0b: 2d:84:2b:81:3c:6e:3e:2f:04:9c:5d:e6:37:da:12: 89:ce:5b:b0:55:cd:4a:03:ab:db:b6:b8:d6:e1:81: 90:f5:93:6d:12:95:3b:31:79:f3:24:2e:0e:d2:e2: 37:01:d2:4b:78:43:a7:66:94:56:f8:87:97:22:dd: cd:0e:26:c5:57:ce:eb:4a:3f:7e:a5:05:05:76:99: 4a:bf:8b:b3:44:ce:00:69:55:27:1a:c9:a9:a9:00: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.180.216.0/21 138.124.156.0/22 144.86.228.0/22 185.20.196.0/22 185.138.120.0/22 185.254.12.0/22 195.133.220.0/22 199.74.188.0/22 IPv6: 2a0b:1880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203217 211908 212250 Signature Algorithm: sha256WithRSAEncryption a1:da:49:5d:ae:2a:cb:06:61:d4:91:7c:14:95:db:9c:21:9d: 85:8f:c1:73:e0:a7:7c:fd:37:7c:39:44:09:5d:ce:9b:5b:68: 2a:2a:7b:7f:4d:52:b5:2c:8d:bd:3d:c4:39:62:84:40:09:93: 95:fa:4a:b4:70:39:1c:e8:f3:a8:aa:86:a1:83:4a:a9:0a:ad: 00:a5:45:82:0e:cb:42:1c:8a:60:35:e7:e6:c3:0d:cd:a1:05: 6c:53:d5:75:52:7e:78:79:e4:44:09:56:f8:1a:8b:5d:3a:68: 8a:28:ef:e3:d0:55:d7:ec:39:f9:a6:78:2b:85:c9:a2:7f:03: f4:e5:49:24:2f:02:48:06:a9:cb:85:96:f0:3d:b9:5b:6b:fe: ad:02:dd:5c:7d:00:76:2a:f6:bb:64:2a:3a:d7:8b:66:f7:a2: 6b:c3:1c:df:e1:e6:96:c8:0f:60:00:54:18:71:70:2e:ac:07: e7:27:7d:ee:d3:06:fc:cd:1f:cb:bf:28:c3:47:d8:8e:78:9f: 09:b0:40:96:d9:35:45:7a:db:77:e9:2a:8d:94:0c:c7:f3:cb: 9d:79:de:2d:47:b0:0d:8b:bd:5e:c4:87:65:cb:e1:fb:a4:ce: 3a:6e:6d:b2:ad:aa:a5:cd:5e:12:14:bd:3c:ca:ec:cf:3c:2d: 88:e9:d1:03 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt7o85nwFlesf5qMAY1hMhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjU0ZDllNDFlYTVlMmQxNjFiN2M0Y2RiMmU0NzAyYzRmMjQ4ZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC5wYUdoaMwa6jrd4lpijC8Hk+sV OhhKuOZ8IoRQ0/jEurZyi85ZlXulA6Jf9KWWbM02Y0s5ZSqQ99cQlr8KKSqrViou Ck0ncBgJUDibUpdngZgmhKl8lK9/5znBjWVd3ToLDNb1u7A8i71BKzcaYAsH5YAa Z6ueaYQ33WEVDJLgst5H9RhB+0ZzwWT9yV6tzwbSkbaOxeuADABzE+3R/Wva+wst hCuBPG4+LwScXeY32hKJzluwVc1KA6vbtrjW4YGQ9ZNtEpU7MXnzJC4O0uI3AdJL eEOnZpRW+IeXIt3NDibFV87rSj9+pQUFdplKv4uzRM4AaVUnGsmpqQDPowIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFO9U2eQepeLRYbfEzbLkcCxPJI4UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3L2VjMDBl Mi1jYmRhLTRiMzItOGMzMi1mYmM2ZmNiNWU3YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvZWMwMGUy LWNiZGEtNGIzMi04YzMyLWZiYzZmY2I1ZTdhNi8xLzcxVFo1QjZsNHRGaHQ4VE5z dVJ3TEU4a2poUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQDXbTYAwQCinycAwQCkFbkAwQCuRTEAwQCuYp4 AwQCuf4MAwQCw4XcAwQCx0q8MA0EAgACMAcDBQMqCxiAMCQGCCsGAQUFBwEIAQH/ BBUwE6ARMA8CAwMZ0QIDAzvEAgMDPRowDQYJKoZIhvcNAQELBQADggEBAKHaSV2u KssGYdSRfBSV25whnYWPwXPgp3z9N3w5RAldzptbaCoqe39NUrUsjb09xDlihEAJ k5X6SrRwORzo86iqhqGDSqkKrQClRYIOy0IcimA15+bDDc2hBWxT1XVSfnh55EQJ Vvgai106aIoo7+PQVdfsOfmmeCuFyaJ/A/TlSSQvAkgGqcuFlvA9uVtr/q0C3Vx9 AHYq9rtkKjrXi2b3omvDHN/h5pbID2AAVBhxcC6sB+cnfe7TBvzNH8u/KMNH2I54 nwmwQJbZNUV623fpKo2UDMfzy5153i1HsA2LvV7Eh2XL4fukzjpubbKtqqXNXhIU vTzK7M88LYjp0QM= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:07 2026 by rpki-client