This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer File: d2-uQ_c9o1_houQpZirguRdR4_s.cer (raw, json) Hash identifier: HN9JGiNp/GHH3gMp3DoJMUYAheFfr808LEnEtxsMCxc= Subject key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36A353AAEECAB6FE1671A812AD1EED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.230.121.0/24 IP: 91.235.142.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a3:53:aa:ee:ca:b6:fe:16:71:a8:12:ad:1e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:bc:bb:03:15:77:52:fb:cf:3d:b6:c5:1d: e5:a2:b5:58:c0:41:c8:41:51:68:1c:aa:b9:d1:57: e0:7d:92:98:a7:bb:b6:56:79:e8:90:dc:c6:c8:d9: e9:f7:64:52:28:81:15:24:ea:bd:91:c4:47:71:36: 6b:0c:8e:42:17:4f:ef:6c:be:89:0f:02:f1:b7:18: 3e:36:f3:51:78:30:dd:0d:d5:61:51:59:ab:ea:07: 63:5f:c8:26:23:a0:d3:f7:14:02:f9:34:e0:f8:52: d1:a9:97:e7:e7:4c:8f:e2:18:53:bc:dc:58:e8:fa: c0:64:1f:a8:85:63:f5:20:30:e1:f7:dd:31:36:60: 83:ed:57:dd:7b:20:d2:80:56:c7:e2:f9:88:eb:a8: c1:4e:dc:00:cb:b1:de:e5:ae:2d:a8:29:2a:65:73: c8:53:8f:a7:76:17:6f:2d:a8:fe:f6:b5:91:ff:66: ae:cd:bb:94:f8:97:42:a5:2b:0f:a0:3c:e2:ff:d1: 9f:47:42:2c:56:4d:3a:87:53:98:80:2a:0f:01:6d: 46:cc:ee:a7:23:43:b2:ae:fc:9a:9c:34:22:8c:5f: a4:22:d2:5c:56:52:08:10:0f:8f:cb:3f:93:40:c2: 57:b5:b5:b0:e2:25:fe:63:00:d8:e8:81:90:6e:fc: 7a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.121.0/24 91.235.142.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:04:61:a6:76:ab:94:1a:7b:ed:50:c8:f1:0e:c6:8f:38:8c: 1d:57:b4:54:9e:60:82:82:04:e1:b9:1c:cf:09:d5:50:00:e6: b7:0a:4c:a5:be:33:7c:48:a1:56:f9:30:7a:21:b9:7b:8a:c8: 83:cc:8f:e0:c7:df:a2:0c:92:04:f8:aa:89:07:96:ed:ee:13: 99:21:2c:51:dd:3a:78:70:0e:00:b7:44:75:77:95:7e:05:09: 73:ae:e1:f8:60:0b:4d:44:6f:4d:73:6e:51:31:90:28:17:ff: 15:4b:3e:8d:22:1b:94:61:20:8b:d8:36:42:21:fa:6e:80:68: e6:fc:7d:84:81:61:e1:b2:b7:19:aa:ed:06:be:82:06:70:7f: 0e:b9:ed:7f:5a:26:76:b7:54:bf:bf:cd:56:cd:71:8f:52:fe: cf:4a:68:f2:af:08:b7:7c:f5:8b:7f:7d:88:f3:d7:9a:e4:34: 97:4a:31:80:ef:d1:d4:71:cb:f7:c1:7e:3c:e6:31:58:64:fb: 76:b4:60:06:ac:31:d3:c5:e3:74:e8:5e:86:fa:dc:25:81:f1: 46:02:a2:a6:77:2c:ac:50:ec:d3:48:00:93:e7:47:82:29:5b: 88:02:d0:51:7e:b5:79:84:be:0d:ec:8f:d3:68:77:f8:1a:58: 1a:c7:5e:cd -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt7NqNTqu7Ktv4WcagSrR7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzZmYWU0M2Y3M2RhMzVmZTFhMmU0Mjk2NjJhZTBiOTE3NTFlM2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQa8uwMVd1L7zz22xR3lorVYwEHI QVFoHKq50VfgfZKYp7u2VnnokNzGyNnp92RSKIEVJOq9kcRHcTZrDI5CF0/vbL6J DwLxtxg+NvNReDDdDdVhUVmr6gdjX8gmI6DT9xQC+TTg+FLRqZfn50yP4hhTvNxY 6PrAZB+ohWP1IDDh990xNmCD7VfdeyDSgFbH4vmI66jBTtwAy7He5a4tqCkqZXPI U4+ndhdvLaj+9rWR/2auzbuU+JdCpSsPoDzi/9GfR0IsVk06h1OYgCoPAW1GzO6n I0OyrvyanDQijF+kItJcVlIIEA+Pyz+TQMJXtbWw4iX+YwDY6IGQbvx63QIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHdvrkP3PaNf4aLkKWYq4LkXUeP7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzBhY2Yy ZC01ZDYyLTQzZjMtOGQxNC00ZTBjYzU4MTYzYjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMGFjZjJk LTVkNjItNDNmMy04ZDE0LTRlMGNjNTgxNjNiMC8xL2QyLXVRX2M5bzFfaG91UXBa aXJndVJkUjRfcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAW+Z5AwQBW+uOMA0GCSqGSIb3DQEBCwUAA4IB AQAfBGGmdquUGnvtUMjxDsaPOIwdV7RUnmCCggThuRzPCdVQAOa3CkylvjN8SKFW +TB6Ibl7isiDzI/gx9+iDJIE+KqJB5bt7hOZISxR3Tp4cA4At0R1d5V+BQlzruH4 YAtNRG9Nc25RMZAoF/8VSz6NIhuUYSCL2DZCIfpugGjm/H2EgWHhsrcZqu0GvoIG cH8Oue1/WiZ2t1S/v81WzXGPUv7PSmjyrwi3fPWLf32I89ea5DSXSjGA79HUccv3 wX485jFYZPt2tGAGrDHTxeN06F6G+twlgfFGAqKmdyysUOzTSACT50eCKVuIAtBR frV5hL4N7I/TaHf4Glgax17N -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:09 2026 by rpki-client