This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5otI3SqascUtfim7duA3GlnnMY.cer File: D5otI3SqascUtfim7duA3GlnnMY.cer (raw, json) Hash identifier: fObQAQq8c1RSPJ3mwkD40Bm8pnIQZkPNyhTSQbUIkK0= Subject key identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8E64176FFBF706B070FA81AF7334 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57117 IP: 91.201.197.0/24 IP: 185.202.105.0/24 IP: 188.95.64.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8e:64:17:6f:fb:f7:06:b0:70:fa:81:af:73:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f9a2d2374aa6ac714b5f8a6eddb80dc69679cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:94:66:01:4d:dd:a6:01:b7:c4:f3:7d:85:e2: 4b:dc:41:0c:86:93:5f:ca:29:d1:78:22:60:01:0f: 40:bb:ad:2f:10:de:58:2a:08:e2:57:eb:3a:6b:b6: 4d:77:a1:df:c0:41:72:b8:4b:91:ca:da:73:50:1f: d2:12:a7:f0:6a:cb:bb:e3:37:95:a6:40:a1:45:ee: 29:d9:f2:e6:9b:cf:fb:f0:96:c1:a5:6f:5e:73:6e: e6:3e:0f:6e:2c:46:47:33:a0:da:fd:d0:d4:0d:64: f9:59:4a:8d:f2:2b:54:bc:2f:7d:17:12:07:fb:ef: 5f:eb:b2:1c:35:34:59:60:56:7a:92:ce:ce:df:68: f4:2b:e3:85:99:c4:ed:b7:b4:2e:08:dd:7e:62:77: 0a:7c:18:20:6e:16:bc:d8:32:91:69:3a:51:64:d9: ac:1a:47:0e:b2:b6:b0:45:ef:29:d9:a2:9f:68:9d: fb:ac:dc:1e:9b:b4:31:d9:5f:ef:62:0c:63:e7:93: 3d:67:32:b7:6e:02:9b:10:38:38:6c:49:d1:9e:d8: a1:89:ad:66:1a:1a:d9:51:46:0f:6b:f5:e2:ef:ba: ca:7b:a7:3d:7e:89:2d:ee:30:cf:39:85:8f:e7:5a: c2:c2:92:a6:c0:e5:d9:24:01:68:3a:3d:fb:04:bc: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9A:2D:23:74:AA:6A:C7:14:B5:F8:A6:ED:DB:80:DC:69:67:9C:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/00248c-3791-4629-a6c6-6d971992c349/1/D5otI3SqascUtfim7duA3GlnnMY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.197.0/24 185.202.105.0/24 188.95.64.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57117 Signature Algorithm: sha256WithRSAEncryption 80:1b:79:ef:b0:03:c2:03:52:c9:9d:c9:22:17:7b:70:f1:f4: cc:31:fc:22:94:84:98:54:f7:1d:fb:8d:5a:c9:13:c3:ac:ec: 57:26:ec:ae:ff:cc:46:d7:c8:a5:4f:22:72:9d:82:42:10:02: de:fb:6a:d3:06:c3:96:ec:35:8c:01:94:51:40:cd:0f:d7:37: df:3c:d8:3b:36:ee:55:5c:dd:4c:33:2c:33:12:d6:3f:ce:79: 09:d5:e2:c4:83:a0:1d:c5:ad:4b:f5:a7:a2:64:2f:b1:ce:33: 15:46:76:b3:c6:6e:32:4a:84:93:9f:ae:99:1e:f1:e7:bd:a0: c6:cf:30:df:2e:37:40:3b:86:bc:c0:ad:d1:90:81:8d:15:69: ca:03:25:82:01:c7:ba:fd:5f:50:59:e1:00:ee:57:f6:dc:c5: e9:0f:d6:0a:43:ba:e1:75:47:31:9c:32:15:7a:8e:28:a3:d3: 84:66:9c:29:bd:d3:58:dc:a0:73:07:43:28:5f:fe:34:38:2e: 8d:e4:17:8d:89:08:6f:d5:3d:4b:25:4b:46:79:18:2f:61:47: 7f:4b:2c:28:56:bb:63:70:ff:a5:0d:8f:8a:bb:6f:c1:85:cd: 7c:12:ac:5f:93:be:42:95:36:e1:a1:93:50:eb:58:14:fd:25: 19:c8:3b:3d -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt6Wo5kF2/79wawcPqBr3M0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjlhMmQyMzc0YWE2YWM3MTRiNWY4YTZlZGRiODBkYzY5Njc5Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpRmAU3dpgG3xPN9heJL3EEMhpNf yinReCJgAQ9Au60vEN5YKgjiV+s6a7ZNd6HfwEFyuEuRytpzUB/SEqfwasu74zeV pkChRe4p2fLmm8/78JbBpW9ec27mPg9uLEZHM6Da/dDUDWT5WUqN8itUvC99FxIH ++9f67IcNTRZYFZ6ks7O32j0K+OFmcTtt7QuCN1+YncKfBggbha82DKRaTpRZNms GkcOsrawRe8p2aKfaJ37rNwem7Qx2V/vYgxj55M9ZzK3bgKbEDg4bEnRntihia1m GhrZUUYPa/Xi77rKe6c9fokt7jDPOYWP51rCwpKmwOXZJAFoOj37BLyVzwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFA+aLSN0qmrHFLX4pu3bgNxpZ5zGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmLzAwMjQ4 Yy0zNzkxLTQ2MjktYTZjNi02ZDk3MTk5MmMzNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvMDAyNDhj LTM3OTEtNDYyOS1hNmM2LTZkOTcxOTkyYzM0OS8xL0Q1b3RJM1NxYXNjVXRmaW03 ZHVBM0dsbm5NWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAW8nFAwQAucppAwQAvF9AMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwDfHTANBgkqhkiG9w0BAQsFAAOCAQEAgBt577ADwgNSyZ3J Ihd7cPH0zDH8IpSEmFT3HfuNWskTw6zsVybsrv/MRtfIpU8icp2CQhAC3vtq0wbD luw1jAGUUUDND9c33zzYOzbuVVzdTDMsMxLWP855CdXixIOgHcWtS/WnomQvsc4z FUZ2s8ZuMkqEk5+umR7x572gxs8w3y43QDuGvMCt0ZCBjRVpygMlggHHuv1fUFnh AO5X9tzF6Q/WCkO64XVHMZwyFXqOKKPThGacKb3TWNygcwdDKF/+NDgujeQXjYkI b9U9SyVLRnkYL2FHf0ssKFa7Y3D/pQ2PirtvwYXNfBKsX5O+QpU24aGTUOtYFP0l Gcg7PQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:35 2026 by rpki-client