This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D1_0mbpYuv1Ht-cdTvgBTu1RWKI.cer File: D1_0mbpYuv1Ht-cdTvgBTu1RWKI.cer (raw, json) Hash identifier: ktNFIM+ubnFIT/hQ4fcSNoj6d0rbP8xC0TQ5F+iOx8k= Subject key identifier: 0F:5F:F4:99:BA:58:BA:FD:47:B7:E7:1D:4E:F8:01:4E:ED:51:58:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BAE2617BFD0EE509AEBA55DD94CC7E635 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/ Notify URL: https://rpki.as207960.net/rrdp/notification.xml Certificate not before: Sun 11 Jan 2026 17:41:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216141 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:26:17:bf:d0:ee:50:9a:eb:a5:5d:d9:4c:c7:e6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 11 17:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f5ff499ba58bafd47b7e71d4ef8014eed5158a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:f3:d9:04:b4:e1:89:32:b8:b1:83:af:9e: 88:be:79:32:a0:92:c5:1b:7e:df:12:26:a0:ee:75: a8:92:ae:3c:69:01:11:55:95:0c:8a:64:bc:e7:65: 55:2f:df:47:d3:d8:ca:52:89:8b:02:8e:a9:eb:57: da:4a:11:ca:5f:f3:28:64:3e:76:6c:34:96:3a:f7: 59:99:f2:51:4b:6f:27:61:21:7f:88:13:b9:39:94: d1:f6:48:88:48:b3:4a:55:60:db:94:54:1b:fe:47: 91:de:78:48:bd:ff:2f:8a:b9:eb:47:7e:59:8a:a9: 65:16:ce:7a:26:60:64:65:60:dd:b1:bf:8f:ab:09: ea:52:b1:dc:31:00:26:54:98:51:6c:04:20:b6:02: b3:4b:40:8b:aa:6f:8e:f8:4f:56:c9:b2:57:7c:84: 9a:14:ca:09:92:0a:a6:16:0b:2e:e4:4e:fe:be:c2: b8:06:90:10:e5:53:f5:d2:6a:df:a1:f3:31:d9:36: 5a:9a:12:ce:1a:bd:56:9a:6c:4c:7a:ff:ad:6e:83: ff:aa:2b:8e:86:ad:29:8b:1c:61:bd:3c:94:7c:8d: 8b:f8:ec:31:3a:4e:0f:d3:69:8c:9a:b1:32:78:4e: 76:fa:c3:2b:cb:d9:31:9f:42:16:b3:1a:dd:a5:56: 7e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5F:F4:99:BA:58:BA:FD:47:B7:E7:1D:4E:F8:01:4E:ED:51:58:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/ RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216141 Signature Algorithm: sha256WithRSAEncryption 13:09:32:a0:03:09:9c:2e:e0:1a:b8:3f:03:1c:93:c2:3b:a0: 69:55:91:82:3e:a7:ff:c7:31:06:e9:c3:dd:ff:17:78:09:15: c6:d5:86:e7:01:5a:3b:a4:6d:95:14:93:f8:a1:15:70:6c:31: a0:22:3a:7a:1a:57:e9:5b:9c:fc:f7:30:63:48:62:91:08:7e: e3:86:b3:ba:cc:f2:2f:c7:d8:73:a9:3a:17:aa:ac:ae:39:2f: 34:f0:ed:23:9c:61:a8:7d:c5:89:36:04:31:ca:35:64:50:08: 38:4f:27:86:c0:2c:ed:32:66:64:e5:2e:ff:7a:9f:80:7c:60: 5a:2c:d7:73:b9:cd:f3:1a:ce:88:6a:df:af:5e:ad:e8:07:b6: 7e:41:bf:f5:f1:cb:be:5b:66:31:c5:d1:25:95:49:80:7d:bb: 39:88:c1:bc:1b:cd:e0:55:7f:20:df:c1:66:d1:d6:4f:1d:06: a1:94:2b:58:f6:1c:9b:07:56:d4:c3:c7:af:84:30:f3:cf:cf: d7:b2:24:c0:a9:73:4e:2f:7b:1b:9d:69:93:32:ac:46:34:ff: 64:a8:0a:fa:69:4e:22:8a:65:48:e2:50:a3:f0:0c:3a:22:35: 06:e6:95:a5:68:90:4e:5d:b0:58:76:e2:da:4b:9e:92:b4:f8: b2:6a:3f:ad -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZuuJhe/0O5QmuulXdlMx+Y1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTExMTc0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjVmZjQ5OWJhNThiYWZkNDdiN2U3MWQ0ZWY4MDE0ZWVkNTE1OGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRzz2QS04YkyuLGDr56IvnkyoJLF G37fEiag7nWokq48aQERVZUMimS852VVL99H09jKUomLAo6p61faShHKX/MoZD52 bDSWOvdZmfJRS28nYSF/iBO5OZTR9kiISLNKVWDblFQb/keR3nhIvf8virnrR35Z iqllFs56JmBkZWDdsb+PqwnqUrHcMQAmVJhRbAQgtgKzS0CLqm+O+E9WybJXfISa FMoJkgqmFgsu5E7+vsK4BpAQ5VP10mrfofMx2TZamhLOGr1WmmxMev+tboP/qiuO hq0pixxhvTyUfI2L+OwxOk4P02mMmrEyeE52+sMry9kxn0IWsxrdpVZ+qwIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFA9f9Jm6WLr9R7fnHU74AU7tUViiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE2BggrBgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9y c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzEvMIGHBggrBgEFBQcwCoZ7cnN5 bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wOTgwZTI2 MmYwODE0OTA5OTlkZDBkNWUyMjllOWNmYS8xLzBGNUZGNDk5QkE1OEJBRkQ0N0I3 RTcxRDRFRjgwMTRFRUQ1MTU4QTIubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jw a2kuYXMyMDc5NjAubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDTE0wDQYJKoZIhvcN AQELBQADggEBABMJMqADCZwu4Bq4PwMck8I7oGlVkYI+p//HMQbpw93/F3gJFcbV hucBWjukbZUUk/ihFXBsMaAiOnoaV+lbnPz3MGNIYpEIfuOGs7rM8i/H2HOpOheq rK45LzTw7SOcYah9xYk2BDHKNWRQCDhPJ4bALO0yZmTlLv96n4B8YFos13O5zfMa zohq369eregHtn5Bv/Xxy75bZjHF0SWVSYB9uzmIwbwbzeBVfyDfwWbR1k8dBqGU K1j2HJsHVtTDx6+EMPPPz9eyJMCpc04vexudaZMyrEY0/2SoCvppTiKKZUjiUKPw DDoiNQbmlaVokE5dsFh24tpLnpK0+LJqP60= -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:03 2026 by rpki-client