This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0972iMD4D6ANP52MfUEi5mF9n4.cer File: d0972iMD4D6ANP52MfUEi5mF9n4.cer (raw, json) Hash identifier: +0JupY194o7nADGswW5MpVv4IQ3gMS0IB9WvXzYTS7Y= Subject key identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15DD16E833B8C60762D633BC1896AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211167 IP: 195.35.112.0/24 IP: 2001:678:484::/48 IP: 2a13:1100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:dd:16:e8:33:b8:c6:07:62:d6:33:bc:18:96:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=774f7bda2303e03e8034fe7631f5048b9985f67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:44:41:dc:8c:e1:9b:76:d5:57:47:1d:2f: 89:24:a7:86:66:af:8e:00:0f:3b:0c:a4:c1:7d:0b: a2:20:b0:4f:37:61:27:6f:28:fa:29:ef:ae:d7:ee: 8a:8c:f6:b6:b9:13:20:b3:1f:64:ea:bf:1a:ce:ff: 67:01:6a:58:22:85:0d:0a:3f:0e:bf:bd:9d:7f:81: 01:00:3c:c1:e9:17:58:c9:f1:ea:81:3b:0b:73:73: e3:a1:ac:c0:73:5b:05:f9:af:c2:0f:e3:9d:25:50: 9a:64:45:98:6b:16:99:72:ba:65:4d:57:18:c9:31: 10:9c:58:d3:c4:e7:5d:2a:f3:f6:aa:78:18:d0:f9: 83:19:51:06:73:19:fc:39:76:cb:f7:9d:61:54:33: 65:f1:b0:22:64:6b:fe:82:20:4f:6f:e4:1b:67:d3: 5d:bb:24:4e:67:7d:49:fa:c1:fc:1a:88:96:8f:c6: 41:b5:db:17:ba:56:76:3f:62:52:aa:e3:eb:45:8b: a2:1e:f9:85:92:02:4f:7a:7e:fc:e0:df:ea:bf:f8: 93:77:4e:b9:fd:f8:87:cf:0b:9c:e9:e3:ce:40:21: e3:de:82:ca:5e:2f:b6:09:43:d4:f1:a1:0c:0a:25: 76:ed:3a:e0:e4:69:ea:1b:a3:f9:f8:52:b6:19:f2: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4F:7B:DA:23:03:E0:3E:80:34:FE:76:31:F5:04:8B:99:85:F6:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9f490d-9c01-4d2f-a9ed-381704012ce2/1/d0972iMD4D6ANP52MfUEi5mF9n4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.35.112.0/24 IPv6: 2001:678:484::/48 2a13:1100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211167 Signature Algorithm: sha256WithRSAEncryption 32:5a:55:13:09:ab:d3:90:1d:17:62:29:b2:44:fd:12:4b:92: f3:7d:d7:e2:eb:71:69:bd:f6:88:58:73:29:67:0e:02:95:14: e5:e0:74:84:26:12:d4:a3:b5:c8:1f:dd:5f:fb:e0:1c:04:34: f2:68:11:08:44:77:9b:6c:01:65:59:8c:9e:27:25:81:2d:f1: 15:33:73:8d:8a:5d:cb:14:3a:3d:a4:8b:cf:3b:ab:3e:24:4c: 76:31:0e:7a:b0:29:9b:7d:c8:e3:10:b8:a6:46:5b:78:a6:90: 53:97:79:ab:1f:e7:01:0e:75:46:fd:c4:c5:6a:0c:04:a1:5e: 7f:12:c8:42:12:5f:8a:e3:7d:08:d8:b0:d2:0a:f0:db:7a:64: db:b3:b7:9c:b9:d6:47:16:fd:a1:cc:2a:aa:32:97:e8:9f:31: af:6a:6a:46:6f:97:49:5e:3d:ca:13:6f:d7:5b:e4:66:a0:1b: 8f:50:9c:01:c9:a3:58:e7:32:08:3f:db:ef:e3:7e:6e:e2:3b: 7c:d0:2a:de:f6:4e:93:39:a7:86:e9:41:b4:47:64:d8:15:d5: 05:d0:74:e0:03:b1:df:0d:ff:0d:aa:a1:4a:05:68:63:90:ca: a1:72:82:61:f1:46:3c:be:9b:34:6c:bb:06:cb:43:91:59:56: 68:e3:81:6b -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZt/Fd0W6DO4xgdi1jO8GJauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzRmN2JkYTIzMDNlMDNlODAzNGZlNzYzMWY1MDQ4Yjk5ODVmNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HNEQdyM4Zt21VdHHS+JJKeGZq+O AA87DKTBfQuiILBPN2Enbyj6Ke+u1+6KjPa2uRMgsx9k6r8azv9nAWpYIoUNCj8O v72df4EBADzB6RdYyfHqgTsLc3PjoazAc1sF+a/CD+OdJVCaZEWYaxaZcrplTVcY yTEQnFjTxOddKvP2qngY0PmDGVEGcxn8OXbL951hVDNl8bAiZGv+giBPb+QbZ9Nd uyROZ31J+sH8GoiWj8ZBtdsXulZ2P2JSquPrRYuiHvmFkgJPen784N/qv/iTd065 /fiHzwuc6ePOQCHj3oLKXi+2CUPU8aEMCiV27Trg5GnqG6P5+FK2GfJpDwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFHdPe9ojA+A+gDT+djH1BIuZhfZ+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzlmNDkw ZC05YzAxLTRkMmYtYTllZC0zODE3MDQwMTJjZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvOWY0OTBk LTljMDEtNGQyZi1hOWVkLTM4MTcwNDAxMmNlMi8xL2QwOTcyaU1ENEQ2QU5QNTJN ZlVFaTVtRjluNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQAwyNwMBYEAgACMBADBwAgAQZ4BIQDBQMqExEA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM43zANBgkqhkiG9w0BAQsFAAOCAQEA MlpVEwmr05AdF2IpskT9EkuS833X4utxab32iFhzKWcOApUU5eB0hCYS1KO1yB/d X/vgHAQ08mgRCER3m2wBZVmMniclgS3xFTNzjYpdyxQ6PaSLzzurPiRMdjEOerAp m33I4xC4pkZbeKaQU5d5qx/nAQ51Rv3ExWoMBKFefxLIQhJfiuN9CNiw0grw23pk 27O3nLnWRxb9ocwqqjKX6J8xr2pqRm+XSV49yhNv11vkZqAbj1CcAcmjWOcyCD/b 7+N+buI7fNAq3vZOkzmnhulBtEdk2BXVBdB04AOx3w3/DaqhSgVoY5DKoXKCYfFG PL6bNGy7BstDkVlWaOOBaw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:14 2026 by rpki-client