This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer File: kd0OSNkBGt83ZmWtTWLPMc5jBYw.cer (raw, json) Hash identifier: 9mtLuB3WezDq5iVJvpJjrrhLwtpUYvZP6Bt07ByWZPg= Subject key identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EE984F511FE3C8E1CD29563BBCEF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209105 IP: 2001:67c:99c::/48 IP: 2001:67c:9a0::/48 IP: 2001:67c:9a4::/48 IP: 2001:67c:9a8::/48 IP: 2001:67c:9ac::/48 IP: 2001:67c:9b0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e9:84:f5:11:fe:3c:8e:1c:d2:95:63:bb:ce:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91dd0e48d9011adf376665ad4d62cf31ce63058c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fa:39:f8:8f:78:47:89:ad:b3:dd:80:6e:5e: a8:c2:2f:b4:e3:34:12:1c:cf:ba:c6:5e:6e:36:51: 8c:7c:44:cd:23:bb:7b:1e:24:4d:27:f7:f7:26:f4: 24:a4:51:27:aa:57:44:d3:e6:ed:28:37:09:ce:6a: 54:c9:96:a0:e6:b2:0e:34:cb:8b:0e:81:77:ff:0e: 03:10:f6:73:31:55:0f:1e:4f:d7:e9:cf:57:09:61: 4f:33:b9:ef:cd:1d:c5:45:fd:8e:87:e3:3f:cf:60: 00:de:62:b3:d9:67:7c:e4:73:bd:2d:5f:e1:9c:3d: 9f:4a:9a:4e:1a:b2:d8:3b:22:4e:c9:be:f7:ab:40: bc:6c:07:50:56:e0:e5:8c:09:b0:73:71:14:26:a0: 64:80:ec:63:8f:15:57:83:f4:76:68:32:0d:f9:bc: bd:4d:6a:c3:eb:7f:2f:f4:00:24:9b:28:d4:78:28: d1:1f:35:de:ab:90:66:44:ba:2e:c7:d1:bf:f8:d9: 85:ef:09:f6:76:e0:bc:41:bb:e8:85:65:48:2d:e7: a8:99:53:ac:40:4d:4d:56:ec:c4:b7:a0:d7:2e:32: 10:d7:f5:bc:47:4b:0d:3b:7e:a7:3a:52:73:a3:1e: 28:0b:67:40:93:1b:b6:b0:45:71:94:d0:62:94:53: 53:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DD:0E:48:D9:01:1A:DF:37:66:65:AD:4D:62:CF:31:CE:63:05:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1e9d04-d94f-4f13-be3c-10f34f558363/1/kd0OSNkBGt83ZmWtTWLPMc5jBYw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:99c::/48 2001:67c:9a0::/48 2001:67c:9a4::/48 2001:67c:9a8::/48 2001:67c:9ac::/48 2001:67c:9b0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209105 Signature Algorithm: sha256WithRSAEncryption 49:f1:7e:cc:05:5c:df:03:8f:9a:91:71:d0:1d:cb:62:dd:5b: d5:c7:05:12:33:66:f0:2a:66:97:86:8b:44:11:91:3c:34:ce: f8:5f:70:5e:e8:ba:70:e6:82:b9:99:28:a8:ec:19:36:df:a8: b9:ec:6d:ef:61:d2:72:b1:7b:36:3b:7b:25:4e:24:cf:5e:14: 85:c8:7e:1b:f3:ee:ee:47:b7:d9:d0:23:44:c0:26:ce:2f:ce: 96:f8:d7:e4:13:cf:c1:5a:bf:54:0d:2b:ce:54:86:3c:6c:07: f9:60:03:90:23:4e:71:2e:4c:3a:40:70:81:09:35:ee:c8:74: 30:40:76:99:ed:aa:75:7f:bd:34:d7:5f:3f:74:4d:de:57:19: 74:35:56:19:02:c1:b0:f4:c3:5d:81:87:c5:a9:86:af:c3:73: ca:bb:6c:9a:9a:77:82:45:72:eb:2f:09:f9:22:81:cc:5e:26: 8a:ff:49:c8:c7:cf:0a:ee:4f:b8:c5:5b:af:3b:ae:de:48:f8: 7b:f1:c5:ea:18:4a:41:40:31:b8:b6:09:9b:64:f2:ef:fd:d7: 89:c0:2a:72:0a:2b:51:1e:77:98:d2:05:43:6b:92:63:a1:9a: fa:ed:4d:58:47:af:31:93:62:8b:07:cd:97:b5:9c:e1:74:01: 56:ae:6f:4f -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZt5fumE9RH+PI4c0pVju872MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWRkMGU0OGQ5MDExYWRmMzc2NjY1YWQ0ZDYyY2YzMWNlNjMwNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/o5+I94R4mts92Abl6owi+04zQS HM+6xl5uNlGMfETNI7t7HiRNJ/f3JvQkpFEnqldE0+btKDcJzmpUyZag5rIONMuL DoF3/w4DEPZzMVUPHk/X6c9XCWFPM7nvzR3FRf2Oh+M/z2AA3mKz2Wd85HO9LV/h nD2fSppOGrLYOyJOyb73q0C8bAdQVuDljAmwc3EUJqBkgOxjjxVXg/R2aDIN+by9 TWrD638v9AAkmyjUeCjRHzXeq5BmRLoux9G/+NmF7wn2duC8QbvohWVILeeomVOs QE1NVuzEt6DXLjIQ1/W8R0sNO36nOlJzox4oC2dAkxu2sEVxlNBilFNTBQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFJHdDkjZARrfN2ZlrU1izzHOYwWMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzFlOWQw NC1kOTRmLTRmMTMtYmUzYy0xMGYzNGY1NTgzNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvMWU5ZDA0 LWQ5NGYtNGYxMy1iZTNjLTEwZjM0ZjU1ODM2My8xL2tkME9TTmtCR3Q4M1ptV3RU V0xQTWM1akJZdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjA8BAIAAjA2AwcAIAEGfAmcAwcAIAEGfAmgAwcAIAEGfAmkAwcA IAEGfAmoAwcAIAEGfAmsAwcAIAEGfAmwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMw0TANBgkqhkiG9w0BAQsFAAOCAQEASfF+zAVc3wOPmpFx0B3LYt1b1ccFEjNm 8Cpml4aLRBGRPDTO+F9wXui6cOaCuZkoqOwZNt+ouext72HScrF7Njt7JU4kz14U hch+G/Pu7ke32dAjRMAmzi/OlvjX5BPPwVq/VA0rzlSGPGwH+WADkCNOcS5MOkBw gQk17sh0MEB2me2qdX+9NNdfP3RN3lcZdDVWGQLBsPTDXYGHxamGr8Nzyrtsmpp3 gkVy6y8J+SKBzF4miv9JyMfPCu5PuMVbrzuu3kj4e/HF6hhKQUAxuLYJm2Ty7/3X icAqcgorUR53mNIFQ2uSY6Ga+u1NWEevMZNiiwfNl7Wc4XQBVq5vTw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:41 2026 by rpki-client