This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CaT39OTp5yw6M5P7XW6nQrwbTCg.cer File: CaT39OTp5yw6M5P7XW6nQrwbTCg.cer (raw, json) Hash identifier: pcVxh3xuvrvOOEXL1UeB6JpPws0aUX57hztg/23fr20= Subject key identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79112156EB87BD6C559868700641531C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 87.236.164.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:21:56:eb:87:bd:6c:55:98:68:70:06:41:53:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a4f7f4e4e9e72c3a3393fb5d6ea742bc1b4c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:3c:09:94:ed:48:d2:e2:79:53:56:74:f2: 55:91:92:8b:40:bc:93:14:f7:a6:a1:c8:2a:87:dd: 30:72:8c:f6:1a:45:49:53:da:bf:98:2d:0e:d3:29: 40:bd:dc:f7:93:14:e3:66:6a:ee:32:aa:9e:6b:d8: e1:64:a1:bc:95:d7:a7:52:e6:07:f0:c5:d2:6f:bc: d4:06:6e:e5:55:38:d2:09:0b:84:ba:8e:8a:16:dd: 57:9a:ab:cd:26:5e:ed:3f:72:b8:94:e7:b6:2a:37: f0:c6:70:b7:1d:31:c8:16:16:75:75:8c:c9:2b:7a: 85:bb:46:db:ea:50:d6:e7:68:f5:2f:8a:64:ef:ab: 1a:b5:97:2d:ed:7d:89:ff:22:96:94:79:0d:32:10: 6d:00:80:5f:dc:f0:89:2e:42:90:b0:74:62:63:50: 4a:b9:78:85:72:ae:78:b2:bd:4a:02:ae:44:d5:ac: 83:4d:70:1f:dd:db:25:91:c1:cb:b8:a0:bd:e0:69: f9:3f:43:d0:bf:54:f2:03:cc:8f:7d:63:51:87:27: 84:29:02:2e:cd:5f:19:b0:ad:8b:d9:23:03:69:79: 69:94:34:4b:73:50:82:2b:cb:a1:03:85:30:5d:3e: 41:4f:d4:08:dc:62:26:61:2b:40:30:51:1f:28:b8: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A4:F7:F4:E4:E9:E7:2C:3A:33:93:FB:5D:6E:A7:42:BC:1B:4C:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3b48d5-28da-4385-9395-284c82dec7c6/1/CaT39OTp5yw6M5P7XW6nQrwbTCg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.164.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c1:40:76:8d:56:27:a1:94:74:6c:7d:f6:87:c1:34:7a:30: b2:d6:f9:e9:f3:1e:08:da:17:ce:2e:57:2e:48:b0:cb:7f:f4: 86:ab:a8:75:1c:36:c0:2f:f9:cf:30:2b:5a:3e:94:e4:23:45: 63:c9:23:63:3d:b7:22:e4:72:c1:2c:b2:d2:98:9e:9b:57:39: af:06:00:d0:2f:c1:a9:9c:70:61:3c:97:25:a5:bc:ac:19:59: 5a:fc:5c:9b:c4:d4:c1:b7:28:76:8c:c8:f1:3f:fa:47:fa:9a: 13:95:e3:5e:c4:fd:7a:c4:18:b7:2a:41:c3:17:ff:98:b2:89: 18:12:3d:ba:4f:ff:ff:ea:ce:20:e1:4d:16:47:80:75:59:b4: a1:84:f8:94:60:c5:8c:27:0f:8f:c4:db:9c:a2:4c:fe:80:b0: 9c:ef:dc:ee:0b:96:d5:d1:d6:71:ba:42:65:1d:8d:1e:c2:8e: ff:e4:48:90:d7:8a:cc:86:28:71:4f:80:1f:e0:42:d3:f4:9c: e0:0b:b8:34:dd:78:9f:17:d7:7e:b4:f5:7c:d8:df:27:b5:98: 26:b0:aa:aa:47:4c:c5:6d:26:db:79:e5:e7:13:e4:bc:91:f8: 60:d7:7d:dc:b6:75:16:6c:c5:08:8c:cc:fe:83:1c:93:30:3a: 6e:d5:9c:e4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ESFW64e9bFWYaHAGQVMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWE0ZjdmNGU0ZTllNzJjM2EzMzkzZmI1ZDZlYTc0MmJjMWI0YzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb08CZTtSNLieVNWdPJVkZKLQLyT FPemocgqh90wcoz2GkVJU9q/mC0O0ylAvdz3kxTjZmruMqqea9jhZKG8ldenUuYH 8MXSb7zUBm7lVTjSCQuEuo6KFt1XmqvNJl7tP3K4lOe2KjfwxnC3HTHIFhZ1dYzJ K3qFu0bb6lDW52j1L4pk76satZct7X2J/yKWlHkNMhBtAIBf3PCJLkKQsHRiY1BK uXiFcq54sr1KAq5E1ayDTXAf3dslkcHLuKC94Gn5P0PQv1TyA8yPfWNRhyeEKQIu zV8ZsK2L2SMDaXlplDRLc1CCK8uhA4UwXT5BT9QI3GImYStAMFEfKLgfeQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAmk9/Tk6ecsOjOT+11up0K8G0woMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzNiNDhk NS0yOGRhLTQzODUtOTM5NS0yODRjODJkZWM3YzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvM2I0OGQ1 LTI4ZGEtNDM4NS05Mzk1LTI4NGM4MmRlYzdjNi8xL0NhVDM5T1RwNXl3Nk01UDdY VzZuUXJ3YlRDZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAV+ykMA0GCSqGSIb3DQEBCwUAA4IBAQCHwUB2 jVYnoZR0bH32h8E0ejCy1vnp8x4I2hfOLlcuSLDLf/SGq6h1HDbAL/nPMCtaPpTk I0VjySNjPbci5HLBLLLSmJ6bVzmvBgDQL8GpnHBhPJclpbysGVla/FybxNTBtyh2 jMjxP/pH+poTleNexP16xBi3KkHDF/+YsokYEj26T///6s4g4U0WR4B1WbShhPiU YMWMJw+PxNucokz+gLCc79zuC5bV0dZxukJlHY0ewo7/5EiQ14rMhihxT4Af4ELT 9JzgC7g03XifF9d+tPV82N8ntZgmsKqqR0zFbSbbeeXnE+S8kfhg133ctnUWbMUI jMz+gxyTMDpu1Zzk -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:09 2026 by rpki-client