This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer File: NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer (raw, json) Hash identifier: CgRAmbbCz9L0F+S/vStOAPVr/J04qvbv8bFZnMVK6NA= Subject key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA72C701C73E833DF264B57B0E56EBF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197086 IP: 91.217.205.0/24 IP: 91.233.32.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2c:70:1c:73:e8:33:df:26:4b:57:b0:e5:6e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:67:12:58:04:ab:df:24:0b:a2:52:a5:e3: 06:64:8e:83:46:ce:97:8e:14:7c:d7:ff:4a:ed:72: fe:19:a8:88:fb:70:dd:7e:10:2c:1f:5c:3b:c1:f0: 30:a5:2e:e4:d5:d5:07:3d:b6:c1:0a:c1:4f:2e:2c: eb:ff:b4:3a:ce:cb:94:94:a0:05:02:73:d5:10:73: 91:b9:48:e2:5f:ff:5a:4e:64:b1:c3:18:42:e7:fb: bb:4c:cc:07:9d:1c:dc:fe:c7:e3:79:42:0c:c4:96: 2e:8d:c1:3a:c9:e9:49:64:9f:5a:5f:67:99:75:b9: 4e:81:33:52:fc:11:1c:f0:aa:77:5e:22:53:2c:25: 5a:b3:b8:a0:7e:e6:c4:2a:90:b7:b7:38:ef:40:0a: 93:41:03:26:ae:c8:89:74:01:d3:b0:e1:ed:ed:41: 77:9a:16:25:fc:73:59:21:f6:0e:11:22:c8:1e:52: c3:d3:8e:18:86:93:2b:34:5b:71:da:40:b2:16:4a: 43:6c:6b:e0:29:01:b0:c1:1c:5c:17:5c:8d:75:f5: 96:cb:49:6d:39:aa:c6:8f:b9:5f:32:a7:f5:e5:83: e8:75:b3:d2:bb:0d:cc:9b:4b:83:3b:ff:04:f0:04: 4a:04:f7:13:f8:1a:fb:e6:dc:ae:4c:65:67:a8:c1: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.205.0/24 91.233.32.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197086 Signature Algorithm: sha256WithRSAEncryption 78:5d:d5:9d:0b:a5:ae:e0:35:dc:f6:10:80:27:a4:74:cb:77: 7e:10:07:fa:9a:14:34:a0:50:1b:a4:37:d2:f8:0f:83:42:b7: 51:87:21:99:ae:38:91:84:f4:09:82:5f:da:8d:6e:79:95:84: f2:a2:6d:89:1a:32:e1:84:06:7d:62:1c:46:94:75:72:86:66: 8c:b8:bb:d4:ea:c6:4f:b0:7d:63:2c:3a:cf:6a:b4:c7:2e:0c: de:2b:51:49:16:7e:00:19:00:26:e3:db:7f:05:cc:11:54:06: b9:39:4e:6d:eb:31:43:60:da:df:15:38:4a:1f:40:e6:e0:f7: c3:93:a6:76:00:dd:48:fb:06:95:08:e2:2c:b4:28:35:eb:fa: 97:d4:4d:7a:be:03:76:87:79:59:1d:eb:eb:8c:48:e0:b6:4a: f0:d7:27:08:a6:e9:73:4c:e6:42:b3:2c:7a:15:c7:13:32:a0: 79:bf:a9:2c:44:44:d9:d5:7d:f2:a0:da:ad:18:fb:b5:74:9f: 81:62:45:35:a1:db:e2:6a:fc:74:d2:30:29:f2:20:e7:62:c7: f4:e4:41:f1:c1:c1:37:40:e7:53:8b:5a:2c:f9:6d:87:ee:4e: 63:0a:d1:d7:61:33:bf:24:57:22:19:c5:0a:e4:52:80:6c:a9: 3a:6e:9d:7c -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+pyxwHHPoM98mS1ew5W6/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNGU0ZjYwYjBlNTA4NzI2ZGRlNjhjMWMyNTVkMDRiZDIxYTNhMTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zpnElgEq98kC6JSpeMGZI6DRs6X jhR81/9K7XL+GaiI+3DdfhAsH1w7wfAwpS7k1dUHPbbBCsFPLizr/7Q6zsuUlKAF AnPVEHORuUjiX/9aTmSxwxhC5/u7TMwHnRzc/sfjeUIMxJYujcE6yelJZJ9aX2eZ dblOgTNS/BEc8Kp3XiJTLCVas7igfubEKpC3tzjvQAqTQQMmrsiJdAHTsOHt7UF3 mhYl/HNZIfYOESLIHlLD044YhpMrNFtx2kCyFkpDbGvgKQGwwRxcF1yNdfWWy0lt OarGj7lfMqf15YPodbPSuw3Mm0uDO/8E8ARKBPcT+Br75tyuTGVnqMEa1QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFDTk9gsOUIcm3eaMHCVdBL0ho6GDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3L2FmM2Rh MC1hZjkyLTQxYjgtODdiZi1kNThiMDk0ZGYwNmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvYWYzZGEw LWFmOTItNDFiOC04N2JmLWQ1OGIwOTRkZjA2Yy8xL05PVDJDdzVRaHliZDVvd2NK VjBFdlNHam9ZTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW9nNAwQAW+kgMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMB3jANBgkqhkiG9w0BAQsFAAOCAQEAeF3VnQulruA13PYQgCekdMt3 fhAH+poUNKBQG6Q30vgPg0K3UYchma44kYT0CYJf2o1ueZWE8qJtiRoy4YQGfWIc RpR1coZmjLi71OrGT7B9Yyw6z2q0xy4M3itRSRZ+ABkAJuPbfwXMEVQGuTlObesx Q2Da3xU4Sh9A5uD3w5OmdgDdSPsGlQjiLLQoNev6l9RNer4Ddod5WR3r64xI4LZK 8NcnCKbpc0zmQrMsehXHEzKgeb+pLERE2dV98qDarRj7tXSfgWJFNaHb4mr8dNIw KfIg52LH9ORB8cHBN0DnU4taLPlth+5OYwrR12EzvyRXIhnFCuRSgGypOm6dfA== -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:51 2026 by rpki-client