This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer File: a0dcb7gDO14R19tfLJl8hLpyXKI.cer (raw, json) Hash identifier: 8raBKleexUGsNdtizSPgoewqJoOnmKs+aiCO1MOb2g0= Subject key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC1D0D121DF5494B596B2EF149EBAA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.227.245.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1d:0d:12:1d:f5:49:4b:59:6b:2e:f1:49:eb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6a:80:f7:87:c1:a3:f6:d5:9d:78:98:c0:97: 48:a1:bb:fe:4d:dd:0a:34:70:c6:f0:c9:5a:61:68: f9:b2:db:04:fb:16:d3:2f:46:6d:81:a6:97:69:61: 35:d3:c1:77:3d:f1:f2:5c:26:a3:16:14:a6:96:fc: 0a:ce:ec:0f:af:60:0c:78:53:ae:20:16:87:39:e8: 37:13:83:8c:06:56:61:4d:2b:4e:3d:3b:28:d0:44: b4:7e:77:0b:53:4b:05:33:e5:e0:5a:cb:f9:06:13: 22:11:85:2c:5e:3f:d1:3d:48:44:bf:5c:f7:b9:1b: d3:e2:ba:56:24:b1:dd:2f:f5:fb:1a:c5:5a:66:dd: 31:67:e4:68:ca:bc:32:e9:04:42:33:65:f4:5f:43: b8:41:54:94:0a:c8:f3:78:4e:fb:ac:e6:49:8b:8f: 6c:e8:53:35:d0:6b:60:1b:51:48:93:a7:be:36:98: b5:85:8e:59:35:fe:4b:69:9e:45:4d:7f:ec:c9:cd: 0e:f9:89:e4:67:8e:3f:e0:bb:e3:c0:69:19:cc:eb: e0:5f:fc:20:dd:21:1c:92:bc:bc:37:19:d6:0f:cf: 6f:b2:09:ea:6d:14:86:43:86:7d:08:1f:d9:cb:5d: 1b:c8:87:eb:98:d3:ce:51:b1:48:fa:84:f7:d7:19: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.245.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:15:77:78:b0:58:df:6d:1f:25:13:25:a8:e2:c4:1d:22:93: aa:25:a4:af:c6:7d:28:bd:0b:13:ea:1e:da:df:10:65:92:a7: ac:2c:ae:6b:01:94:0d:7e:62:5f:82:33:fc:54:77:06:59:23: e4:e4:71:74:35:16:19:99:a4:89:8f:15:09:03:52:f2:a1:90: 15:ef:9a:63:a9:5e:8e:23:bb:36:4c:73:71:19:3f:da:85:81: ac:0f:41:36:bd:a0:b1:87:38:80:73:25:a3:70:df:c7:7b:37: 9b:0e:2c:ad:9e:5d:bd:ec:99:22:0d:0e:ec:50:ef:8e:fa:8e: aa:93:fe:fa:83:a0:35:fc:a4:16:9e:de:c9:d8:a5:fa:22:7a: 17:16:29:4d:e0:07:08:f1:f2:db:13:84:d2:50:45:4a:65:a4: fa:08:60:dd:28:f7:7c:f3:3a:39:9a:bb:5d:f3:eb:3c:26:62: 76:2e:5d:eb:70:f3:64:30:b3:d3:63:10:1f:d1:57:11:9a:e0: 09:74:b6:58:da:45:e4:07:69:60:82:5e:ce:72:66:f2:b5:d5: 6f:ff:03:e1:b8:93:1f:a0:43:e2:6b:55:8b:47:54:c2:8d:a6: bc:f5:47:e1:c4:28:5e:c9:61:0a:ba:af:45:2a:75:5e:5f:e2: b4:00:d7:cf -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt57B0NEh31SUtZay7xSeuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjQ3NWM2ZmI4MDMzYjVlMTFkN2RiNWYyYzk5N2M4NGJhNzI1Y2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WqA94fBo/bVnXiYwJdIobv+Td0K NHDG8MlaYWj5stsE+xbTL0ZtgaaXaWE108F3PfHyXCajFhSmlvwKzuwPr2AMeFOu IBaHOeg3E4OMBlZhTStOPTso0ES0fncLU0sFM+XgWsv5BhMiEYUsXj/RPUhEv1z3 uRvT4rpWJLHdL/X7GsVaZt0xZ+Royrwy6QRCM2X0X0O4QVSUCsjzeE77rOZJi49s 6FM10GtgG1FIk6e+Npi1hY5ZNf5LaZ5FTX/syc0O+YnkZ44/4LvjwGkZzOvgX/wg 3SEckry8NxnWD89vsgnqbRSGQ4Z9CB/Zy10byIfrmNPOUbFI+oT31xmUxwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGtHXG+4AzteEdfbXyyZfIS6clyiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzlmNDNh YS1jNWM5LTRlZjctODc2Ni01YTlkNzAyZTc3ZTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOWY0M2Fh LWM1YzktNGVmNy04NzY2LTVhOWQ3MDJlNzdlMy8xL2EwZGNiN2dETzE0UjE5dGZM Smw4aExweVhLSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+P1MA0GCSqGSIb3DQEBCwUAA4IBAQAbFXd4 sFjfbR8lEyWo4sQdIpOqJaSvxn0ovQsT6h7a3xBlkqesLK5rAZQNfmJfgjP8VHcG WSPk5HF0NRYZmaSJjxUJA1LyoZAV75pjqV6OI7s2THNxGT/ahYGsD0E2vaCxhziA cyWjcN/HezebDiytnl297JkiDQ7sUO+O+o6qk/76g6A1/KQWnt7J2KX6InoXFilN 4AcI8fLbE4TSUEVKZaT6CGDdKPd88zo5mrtd8+s8JmJ2Ll3rcPNkMLPTYxAf0VcR muAJdLZY2kXkB2lggl7OcmbytdVv/wPhuJMfoEPia1WLR1TCjaa89UfhxCheyWEK uq9FKnVeX+K0ANfP -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:05 2026 by rpki-client