This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer File: D96X7tTY6EXrn45_8ybj_lJIAPo.cer (raw, json) Hash identifier: 1U0vAvf//8xvCmFGZZ5IK6zc/J/7QKmxqUVbwfUFIXs= Subject key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8218A6D902C86E79C52211034B2B2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 45015 IP: 194.35.176.0/22 IP: 2a0c:bc40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:21:8a:6d:90:2c:86:e7:9c:52:21:10:34:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:da:bd:4c:d6:b1:36:72:e2:e2:15:02:84: f3:31:62:10:34:60:03:ac:47:81:3d:0a:1b:45:b7: b2:da:93:6e:b9:00:ce:9f:d5:06:27:78:92:f8:5b: 9e:9b:8e:c5:f3:60:66:89:d0:7b:10:05:8f:2b:4e: 8c:22:30:97:e1:b6:29:04:35:b7:57:95:04:ba:a5: d3:9a:e3:dc:69:ad:ad:fb:2e:ca:c3:0c:a3:b5:da: f3:b5:85:4c:04:45:80:07:d3:b9:f3:cb:2f:b8:8f: 77:94:11:10:c5:d0:75:b8:07:8f:cc:bb:72:5e:b0: 9d:df:0d:2d:2a:4a:eb:48:fb:cb:42:bb:d5:13:e0: 1d:bf:99:d5:69:89:82:08:ba:2b:9e:b3:eb:95:30: 4b:01:0b:4e:d6:10:f8:05:b4:1e:fa:8d:67:18:b1: 3e:0d:32:9f:3c:3b:78:e3:52:e2:1f:78:15:18:ce: ee:55:69:70:5c:c4:c2:54:98:49:72:1e:d9:79:3a: 89:a1:1c:b1:ab:a4:59:69:c2:6c:84:a6:d7:41:a8: 72:c5:f8:bb:fe:95:b4:cf:f2:5a:05:4d:2e:a6:0b: db:24:9e:ee:a4:c9:84:86:53:f6:24:58:63:b2:c5: d3:e3:85:a9:5c:c3:4b:ce:93:73:a1:a0:85:84:4a: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.35.176.0/22 IPv6: 2a0c:bc40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 45015 Signature Algorithm: sha256WithRSAEncryption 38:0f:0c:1f:79:11:f9:bc:59:3d:a7:18:6a:4f:90:39:14:10: e8:89:1c:32:7c:92:20:98:0f:96:60:d4:af:f3:5e:29:5e:ea: 53:45:60:53:2c:cc:5c:54:c3:b9:3d:f8:78:ca:ab:8c:ed:ee: 99:89:c7:90:dd:5d:91:a8:77:88:6e:97:1f:68:c2:5b:f1:7a: ae:ef:d4:54:b1:e8:78:47:b5:64:e6:00:9c:0d:28:81:36:88: bd:94:58:1f:88:cf:59:18:0e:92:9d:76:0e:13:1f:f6:35:e1: 21:91:38:25:55:32:78:83:94:72:20:71:7d:88:49:ed:82:01: df:b7:8b:ed:b8:aa:07:28:1a:b5:3c:41:60:5f:73:47:80:b0: 5c:55:8e:e6:9f:2d:e8:b5:94:c2:54:c8:37:e4:65:a5:01:41: 91:aa:81:81:6a:fe:95:98:d7:0b:ba:f6:3a:24:8c:90:dc:49: bb:fc:ee:77:58:65:17:81:6b:71:83:6a:c4:fc:d7:0b:69:08: f2:72:e1:81:7e:0a:bd:0a:48:4a:d8:44:b0:f8:64:fc:f0:4d: 2b:00:9b:f9:56:d3:b4:77:fe:87:10:f9:ae:d6:8c:10:f5:58: e4:e7:1f:50:7a:ed:c2:d5:7b:ff:cd:70:6f:a6:c8:3b:9c:4a: 78:49:91:26 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yCGKbZAshuecUiEQNLKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmRlOTdlZWQ0ZDhlODQ1ZWI5ZjhlN2ZmMzI2ZTNmZTUyNDgwMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPLavUzWsTZy4uIVAoTzMWIQNGAD rEeBPQobRbey2pNuuQDOn9UGJ3iS+Fuem47F82BmidB7EAWPK06MIjCX4bYpBDW3 V5UEuqXTmuPcaa2t+y7KwwyjtdrztYVMBEWAB9O588svuI93lBEQxdB1uAePzLty XrCd3w0tKkrrSPvLQrvVE+Adv5nVaYmCCLornrPrlTBLAQtO1hD4BbQe+o1nGLE+ DTKfPDt441LiH3gVGM7uVWlwXMTCVJhJch7ZeTqJoRyxq6RZacJshKbXQahyxfi7 /pW0z/JaBU0upgvbJJ7upMmEhlP2JFhjssXT44WpXMNLzpNzoaCFhErLMQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFA/el+7U2OhF65+Of/Mm4/5SSAD6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3LzkyZTQ2 YS00YjlmLTRmODMtYjExMS1lZjAwMTk4YjQzNDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvOTJlNDZh LTRiOWYtNGY4My1iMTExLWVmMDAxOThiNDM0Mi8xL0Q5Nlg3dFRZNkVYcm40NV84 eWJqX2xKSUFQby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwiOwMA0EAgACMAcDBQMqDLxAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCv1zANBgkqhkiG9w0BAQsFAAOCAQEAOA8MH3kR+bxZ PacYak+QORQQ6IkcMnySIJgPlmDUr/NeKV7qU0VgUyzMXFTDuT34eMqrjO3umYnH kN1dkah3iG6XH2jCW/F6ru/UVLHoeEe1ZOYAnA0ogTaIvZRYH4jPWRgOkp12DhMf 9jXhIZE4JVUyeIOUciBxfYhJ7YIB37eL7biqBygatTxBYF9zR4CwXFWO5p8t6LWU wlTIN+RlpQFBkaqBgWr+lZjXC7r2OiSMkNxJu/zud1hlF4FrcYNqxPzXC2kI8nLh gX4KvQpISthEsPhk/PBNKwCb+VbTtHf+hxD5rtaMEPVY5OcfUHrtwtV7/81wb6bI O5xKeEmRJg== -----END CERTIFICATE-----Generated at Mon Jan 26 11:42:00 2026 by rpki-client