This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer File: 80fO2aDtf5RLn078OFd7OObRxnM.cer (raw, json) Hash identifier: jscEM+ugXNwsGMcBBk0FDDhHk9tOiK9SynyNYucOwmE= Subject key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECC78B4DAE65717AB0C6C0E670C3DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.159.244.0/24 IP: 2a13:780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c7:8b:4d:ae:65:71:7a:b0:c6:c0:e6:70:c3:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:51:87:08:45:93:f4:cc:b5:cb:84:6d:16: 4d:c0:7f:5e:cf:02:06:62:32:20:43:1e:af:0f:89: 6a:2c:a9:a7:82:a5:57:2e:33:a6:f0:96:b6:f1:d7: e2:23:fc:9a:05:f1:64:d0:f2:93:27:b7:79:81:09: fb:bd:76:8a:d7:b7:86:52:d9:97:a9:1c:45:3c:65: 78:67:ba:56:6f:5c:e9:34:a5:07:1f:5e:1f:88:77: f1:15:48:de:75:48:db:d0:c5:e7:57:b1:c9:e8:97: 61:c9:75:82:a3:88:f6:dd:84:5a:f4:29:24:67:fb: 27:e9:de:4c:de:ac:56:cf:40:77:ae:03:24:27:a4: 77:39:1e:73:4d:66:b7:71:0a:ba:01:ce:0b:b8:84: 23:36:8b:6d:29:ba:a3:92:7c:5f:44:46:11:65:86: fb:56:be:c8:53:89:2e:82:ec:de:ee:7c:d6:27:34: 06:9e:79:5f:c0:d9:d4:0a:f8:df:99:b5:8f:f0:1d: e9:59:99:ba:91:ac:59:58:9a:c6:19:5a:bf:02:51: 25:3e:0f:28:47:ed:25:46:f0:12:e3:b2:e9:3b:a2: df:99:4a:d0:33:17:3e:9c:44:8f:56:97:7b:7a:0a: 8b:c8:56:bc:dd:86:40:50:c5:37:22:93:2d:bd:fa: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.244.0/24 IPv6: 2a13:780::/29 Signature Algorithm: sha256WithRSAEncryption 77:c3:79:6b:53:68:d2:01:62:cc:e3:0e:0d:10:39:8d:20:86: 04:1d:67:2b:f0:b2:39:95:1b:c4:44:8e:b4:17:2b:fe:d1:55: 57:a3:63:a7:e2:5c:10:3a:88:c1:5b:f6:c9:06:67:80:97:d4: 7b:76:73:78:9c:c3:8d:07:1b:e6:1d:26:74:d6:22:9d:72:ab: c3:6c:54:68:81:5b:72:80:bd:42:ba:53:ad:85:ee:a0:0b:3d: 7c:c0:ed:75:06:c1:31:77:83:53:ef:f4:1c:eb:a5:c2:0c:e1: 16:0a:98:79:fe:14:8a:66:59:44:b6:71:6a:8e:a9:54:b2:ec: 1d:18:09:0f:51:ec:21:3b:b1:55:37:2d:af:cf:53:cd:8b:bc: ee:c8:a8:ed:e1:3b:40:8a:bb:7a:86:00:db:b7:03:55:17:87: 4b:0e:44:04:36:60:1d:65:51:f6:c4:fd:be:aa:46:b9:16:67: c9:d1:5c:39:69:2f:15:be:03:da:04:7a:f4:be:49:cc:0d:fc: bf:31:fd:50:47:dd:d2:d8:95:48:f5:3f:42:c5:c5:06:61:16: ee:f8:1e:eb:fc:4a:02:3b:be:b2:71:4b:04:57:77:52:a4:09: dd:06:e5:ca:7a:4f:19:3b:a9:c6:97:91:5f:ed:fa:09:66:a2: 4d:f4:42:db -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt57MeLTa5lcXqwxsDmcMPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzQ3Y2VkOWEwZWQ3Zjk0NGI5ZjRlZmMzODU3N2IzOGU2ZDFjNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vhRhwhFk/TMtcuEbRZNwH9ezwIG YjIgQx6vD4lqLKmngqVXLjOm8Ja28dfiI/yaBfFk0PKTJ7d5gQn7vXaK17eGUtmX qRxFPGV4Z7pWb1zpNKUHH14fiHfxFUjedUjb0MXnV7HJ6JdhyXWCo4j23YRa9Ckk Z/sn6d5M3qxWz0B3rgMkJ6R3OR5zTWa3cQq6Ac4LuIQjNottKbqjknxfREYRZYb7 Vr7IU4kuguze7nzWJzQGnnlfwNnUCvjfmbWP8B3pWZm6kaxZWJrGGVq/AlElPg8o R+0lRvAS47LpO6LfmUrQMxc+nESPVpd7egqLyFa83YZAUMU3IpMtvfo76wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFPNHztmg7X+US59O/DhXezjm0cZzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0LzA4OTYw My1iNWJlLTRmZmEtYTJiMi0yMzJiNGI0NjU3ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvMDg5NjAz LWI1YmUtNGZmYS1hMmIyLTIzMmI0YjQ2NTdlOS8xLzgwZk8yYUR0ZjVSTG4wNzhP RmQ3T09iUnhuTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuZ/0MA0EAgACMAcDBQMqEweAMA0GCSqGSIb3 DQEBCwUAA4IBAQB3w3lrU2jSAWLM4w4NEDmNIIYEHWcr8LI5lRvERI60Fyv+0VVX o2On4lwQOojBW/bJBmeAl9R7dnN4nMONBxvmHSZ01iKdcqvDbFRogVtygL1CulOt he6gCz18wO11BsExd4NT7/Qc66XCDOEWCph5/hSKZllEtnFqjqlUsuwdGAkPUewh O7FVNy2vz1PNi7zuyKjt4TtAirt6hgDbtwNVF4dLDkQENmAdZVH2xP2+qka5FmfJ 0Vw5aS8VvgPaBHr0vknMDfy/Mf1QR93S2JVI9T9CxcUGYRbu+B7r/EoCO76ycUsE V3dSpAndBuXKek8ZO6nGl5Ff7foJZqJN9ELb -----END CERTIFICATE-----Generated at Sun Jan 25 21:07:30 2026 by rpki-client