This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer File: 97Bp0z3xIlqLNkOgE2Tyed9A2Hc.cer (raw, json) Hash identifier: jt1C3e/IU4eKngEOM5JaJFhAlsyFirMAxhNvivK+ysQ= Subject key identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECE4FB38A606D168C97E7BC44B7E7C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.207.232.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e4:fb:38:a6:06:d1:68:c9:7e:7b:c4:4b:7e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7b069d33df1225a8b3643a01364f279df40d877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6e:24:f4:e2:0d:60:91:39:aa:c3:9a:3e:7f: 7b:cd:b1:67:e8:de:77:22:e6:c7:c8:c6:15:ec:a2: ab:b7:49:fb:45:6a:a2:f0:fb:bf:49:66:a8:f7:df: bd:08:0d:2a:ac:7b:a0:05:87:45:cb:83:fd:67:e2: f0:2a:3b:c7:65:88:82:7e:93:66:33:d3:0e:bc:25: 38:64:07:7f:03:6c:c5:53:28:3f:4c:46:6e:45:fa: df:6f:ab:be:a2:24:18:25:7a:fa:d6:ed:da:75:39: 2a:1a:93:51:76:e7:db:cc:73:b3:a9:45:90:82:da: d4:70:bf:bf:49:db:41:81:36:b9:01:0d:b6:60:25: 48:4e:73:da:1f:0a:a7:80:c8:e7:4b:1f:52:9a:b0: 68:91:45:b6:c9:ee:85:59:40:f8:53:95:30:51:9d: 0e:84:08:b7:ad:33:c0:35:ff:f8:f4:20:ad:21:d7: 39:81:f0:48:aa:c2:eb:6d:e9:f0:df:c8:08:58:58: db:7e:a8:7e:7a:5f:0c:ef:a5:a8:d5:96:d0:96:89: 57:77:4f:bd:a8:2b:f3:95:25:7e:50:0a:37:10:bd: d7:08:63:04:39:29:74:ae:6e:59:68:85:7e:17:99: 61:5b:9f:8f:a5:ef:94:0c:35:15:ac:20:76:b4:51: 62:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B0:69:D3:3D:F1:22:5A:8B:36:43:A0:13:64:F2:79:DF:40:D8:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f49e1-e704-4ab4-b94c-5fdcb783a6ec/1/97Bp0z3xIlqLNkOgE2Tyed9A2Hc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.232.0/23 Signature Algorithm: sha256WithRSAEncryption 92:5e:57:c6:9f:f6:06:08:1a:f6:ad:f2:0a:6a:65:dd:61:d7: 51:8e:ff:d3:26:e0:14:a7:5a:8a:64:73:7d:0c:9a:fa:b7:b3: e5:e7:de:60:41:51:a7:f1:ad:d1:81:bb:97:10:c7:62:ff:60: 4c:67:9e:c5:4b:40:d0:92:cb:24:89:28:25:0d:7e:74:58:96: b2:23:74:88:3c:5b:d0:5d:d5:ed:d9:0e:a4:ef:f9:5d:5a:d7: b0:78:0e:38:80:67:9b:93:76:9c:31:0a:24:6f:d9:03:a9:e7: 47:7f:60:a2:0d:91:bb:ef:1d:2a:e5:09:c1:81:4a:30:48:4a: c9:b6:6b:e3:fc:48:49:ac:d3:14:8a:38:94:cc:83:e4:d4:bd: e0:be:76:27:dc:92:ef:16:d2:21:1e:c2:ef:94:b2:b0:96:74: 8b:7c:35:db:7f:8f:a7:9e:48:1a:dd:fc:ae:c1:4b:bc:26:2e: 95:c4:f2:6e:3b:d9:bc:c2:7f:ad:38:19:04:84:93:78:32:f0: d0:64:4b:6c:06:24:ee:74:49:be:e7:d1:42:a4:f9:35:5c:53: 83:3d:1a:9f:4b:59:17:b2:51:63:bc:f6:5d:5e:bd:01:00:2a: 4e:3c:1a:7c:f1:83:77:2a:29:9c:18:31:22:1d:83:ce:e5:5f: 0f:d6:ad:86 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87OT7OKYG0WjJfnvES358MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2IwNjlkMzNkZjEyMjVhOGIzNjQzYTAxMzY0ZjI3OWRmNDBkODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW4k9OINYJE5qsOaPn97zbFn6N53 IubHyMYV7KKrt0n7RWqi8Pu/SWao99+9CA0qrHugBYdFy4P9Z+LwKjvHZYiCfpNm M9MOvCU4ZAd/A2zFUyg/TEZuRfrfb6u+oiQYJXr61u3adTkqGpNRdufbzHOzqUWQ gtrUcL+/SdtBgTa5AQ22YCVITnPaHwqngMjnSx9SmrBokUW2ye6FWUD4U5UwUZ0O hAi3rTPANf/49CCtIdc5gfBIqsLrbenw38gIWFjbfqh+el8M76Wo1ZbQlolXd0+9 qCvzlSV+UAo3EL3XCGMEOSl0rm5ZaIV+F5lhW5+Ppe+UDDUVrCB2tFFizwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFPewadM98SJaizZDoBNk8nnfQNh3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzZmNDll MS1lNzA0LTRhYjQtYjk0Yy01ZmRjYjc4M2E2ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNmY0OWUx LWU3MDQtNGFiNC1iOTRjLTVmZGNiNzgzYTZlYy8xLzk3QnAwejN4SWxxTE5rT2dF MlR5ZWQ5QTJIYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBW8/oMA0GCSqGSIb3DQEBCwUAA4IBAQCSXlfG n/YGCBr2rfIKamXdYddRjv/TJuAUp1qKZHN9DJr6t7Pl595gQVGn8a3RgbuXEMdi /2BMZ57FS0DQksskiSglDX50WJayI3SIPFvQXdXt2Q6k7/ldWteweA44gGebk3ac MQokb9kDqedHf2CiDZG77x0q5QnBgUowSErJtmvj/EhJrNMUijiUzIPk1L3gvnYn 3JLvFtIhHsLvlLKwlnSLfDXbf4+nnkga3fyuwUu8Ji6VxPJuO9m8wn+tOBkEhJN4 MvDQZEtsBiTudEm+59FCpPk1XFODPRqfS1kXslFjvPZdXr0BACpOPBp88YN3Kimc GDEiHYPO5V8P1q2G -----END CERTIFICATE-----Generated at Sun Jan 25 22:43:03 2026 by rpki-client