This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer File: 98sUpB-NnmKNroj0dSgi_Hff7AI.cer (raw, json) Hash identifier: l/4mum9x20TIFl+XpKnQruC825UKRmIZfIsTJQz5z6Y= Subject key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12A7DF3E2D3AF3F3D0A1C897AC71F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208064 IP: 45.157.132.0/22 IP: 2a0f:4280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a7:df:3e:2d:3a:f3:f3:d0:a1:c8:97:ac:71:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:28:e9:f7:7d:47:53:0a:3a:49:47:de:54:6b: d4:23:ed:ef:f5:94:76:cc:bb:ac:52:a9:45:d0:9b: c6:bb:fd:ba:fe:1b:42:fd:f3:fc:fb:b4:24:f5:d0: 59:00:be:ea:02:28:46:ed:df:20:ff:ac:17:5c:d6: 38:cb:d8:32:26:4c:b5:02:41:f5:8c:6b:80:5a:d6: e4:f6:78:b1:ef:7b:5a:b4:e7:6a:0d:61:75:c8:ed: 5c:df:d8:2a:49:7d:7c:c0:49:5d:ed:d0:4b:98:5f: 98:27:05:4d:68:d6:96:49:9d:23:54:f3:b3:59:48: 1b:04:6a:50:4c:67:7b:a5:1a:4f:ab:9b:38:39:f7: 74:1f:2a:68:97:b7:4f:93:57:94:13:1a:82:f3:b8: d9:cd:71:29:2f:9e:d4:85:7f:48:ce:f0:60:2f:91: fe:fe:2a:e6:b3:58:35:91:02:f7:57:4e:dd:c2:6c: 5b:1f:7b:d7:c5:eb:c0:47:85:a7:a4:10:90:b2:c4: fc:65:c8:3f:8b:a0:c6:51:77:55:85:67:c3:a2:b6: 9c:cb:4a:c7:00:4e:e3:75:a1:20:79:33:2c:73:89: c4:37:7c:c2:f6:07:ab:2c:1d:64:88:64:0f:55:99: 75:8b:ca:ff:66:32:51:bb:d8:d9:be:cd:ac:44:1d: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.132.0/22 IPv6: 2a0f:4280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208064 Signature Algorithm: sha256WithRSAEncryption 7f:01:7a:d1:7e:27:e8:57:a8:f1:cd:9d:14:87:11:6c:a4:a0: d3:8f:5a:aa:e7:a0:88:54:fe:24:16:d5:86:c3:aa:06:8d:f4: 31:04:27:ff:2d:eb:92:d5:8a:ab:3a:e8:02:cf:6f:cd:c6:cc: 2f:f2:26:98:4b:ee:01:f5:64:49:7e:1f:3a:12:98:66:f0:bd: 15:8b:e1:1d:a6:2e:17:95:10:06:9d:ae:2e:60:f9:59:2f:cc: b3:23:5d:27:45:02:7a:8b:27:f9:29:2f:ea:41:80:08:2c:09: 82:c3:fa:6c:35:eb:45:4f:50:6a:f3:99:b0:0f:eb:ff:cb:58: 8a:17:9b:9d:53:1a:20:3c:f2:ce:cc:b1:93:50:61:51:61:78: 46:a6:92:eb:78:40:f6:4c:9c:86:e1:f8:af:11:bf:11:f0:37: 5f:b4:84:e7:ad:9c:0e:cc:07:ce:50:d5:32:b5:3d:e4:b7:81: 04:f8:7b:06:39:a0:e4:42:85:79:97:b0:78:2a:03:7d:fc:10: 02:4d:ec:1c:6f:e6:0c:37:f2:b9:6d:76:51:74:f6:6f:db:6f: 85:2c:1c:59:e0:26:c6:fe:06:4f:84:61:fd:54:ea:06:f6:4e: 8a:61:65:02:19:b6:8c:e0:d9:75:18:28:0e:50:32:6a:57:9f: 69:6f:25:c6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EqffPi068/PQociXrHHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2NiMTRhNDFmOGQ5ZTYyOGRhZTg4ZjQ3NTI4MjJmYzc3ZGZlYzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSjp931HUwo6SUfeVGvUI+3v9ZR2 zLusUqlF0JvGu/26/htC/fP8+7Qk9dBZAL7qAihG7d8g/6wXXNY4y9gyJky1AkH1 jGuAWtbk9nix73tatOdqDWF1yO1c39gqSX18wEld7dBLmF+YJwVNaNaWSZ0jVPOz WUgbBGpQTGd7pRpPq5s4Ofd0Hypol7dPk1eUExqC87jZzXEpL57UhX9IzvBgL5H+ /irms1g1kQL3V07dwmxbH3vXxevAR4WnpBCQssT8Zcg/i6DGUXdVhWfDoracy0rH AE7jdaEgeTMsc4nEN3zC9gerLB1kiGQPVZl1i8r/ZjJRu9jZvs2sRB0+MwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPfLFKQfjZ5ija6I9HUoIvx33+wCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4Lzg5MDMx MS00OGVlLTQ4NmQtOTM1OS1lN2VlNGU3NWQzYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvODkwMzEx LTQ4ZWUtNDg2ZC05MzU5LWU3ZWU0ZTc1ZDNhZi8xLzk4c1VwQi1Obm1LTnJvajBk U2dpX0hmZjdBSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZ2EMA0EAgACMAcDBQMqD0KAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMswDANBgkqhkiG9w0BAQsFAAOCAQEAfwF60X4n6Feo 8c2dFIcRbKSg049aquegiFT+JBbVhsOqBo30MQQn/y3rktWKqzroAs9vzcbML/Im mEvuAfVkSX4fOhKYZvC9FYvhHaYuF5UQBp2uLmD5WS/MsyNdJ0UCeosn+Skv6kGA CCwJgsP6bDXrRU9QavOZsA/r/8tYihebnVMaIDzyzsyxk1BhUWF4RqaS63hA9kyc huH4rxG/EfA3X7SE562cDswHzlDVMrU95LeBBPh7Bjmg5EKFeZeweCoDffwQAk3s HG/mDDfyuW12UXT2b9tvhSwcWeAmxv4GT4Rh/VTqBvZOimFlAhm2jODZdRgoDlAy alefaW8lxg== -----END CERTIFICATE-----Generated at Sun Jan 25 21:42:44 2026 by rpki-client