This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer File: v124EbXV0FvsN-6dCaTsUu7tGtU.cer (raw, json) Hash identifier: g9baizz+nKHtgkckPDyRjSz7lOlhcao7fG07FxtTo6s= Subject key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C0483703F9B2ABC3B3EEDB3DD6ADD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201689 AS: 212939 IP: 185.66.228.0/22 IP: 2a05:ac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:04:83:70:3f:9b:2a:bc:3b:3e:ed:b3:dd:6a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:13:b0:e6:ba:70:8e:0e:95:f5:e3:64:e8: 2b:f4:19:01:bc:55:67:d9:d7:7f:51:0a:b3:fa:b6: 86:65:87:06:4f:c9:62:2a:8e:28:43:02:69:e0:5c: d4:b5:54:d8:c8:bc:ca:c1:45:04:f3:f4:d6:f7:50: ad:4c:1d:0e:b9:d5:38:fc:bc:2c:ae:c0:d3:5d:3a: e0:53:87:41:b9:a6:47:64:95:d5:6f:e1:e4:d8:f2: 28:1a:20:3c:a6:db:a0:79:7f:e5:f5:d9:8c:4f:e6: 93:cd:68:a4:dc:1e:43:b6:56:47:d8:de:d9:1e:08: 4d:f9:03:db:7c:df:65:5d:72:f9:94:21:52:71:d9: e8:48:dd:47:83:af:76:51:ae:76:71:d8:1d:76:6e: 33:b4:ce:d6:d4:ae:c4:89:cb:b5:3e:88:39:25:88: 06:63:9f:73:bd:2b:5f:1f:dc:6d:09:35:35:c4:ed: 4d:57:aa:04:7d:75:b9:42:7b:e0:b6:c3:a7:bf:91: a9:a9:b0:2c:39:ae:9d:11:31:cd:2d:57:06:ea:2c: 6d:f6:21:d2:fc:61:cc:82:2c:a5:93:3d:9c:d7:b5: ba:2b:87:17:95:87:ce:dd:3e:e1:84:c1:17:93:25: 45:8b:23:37:06:90:a9:08:5b:a3:ac:c0:b6:1b:db: 76:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.228.0/22 IPv6: 2a05:ac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201689 212939 Signature Algorithm: sha256WithRSAEncryption 63:79:12:fc:af:e4:db:7b:ea:29:b1:5a:75:91:2a:8b:7b:3d: 93:29:9f:23:e2:e7:9b:77:98:16:02:3e:74:d1:a2:c1:7b:42: b6:43:45:a7:09:fe:fe:f3:a7:f3:55:f6:57:c1:b6:5a:c9:35: f8:b0:2b:c2:96:ac:10:97:f3:49:47:57:cf:b4:c3:44:85:36: fb:b7:37:7c:a2:3c:b6:55:8a:e7:95:74:71:dd:09:e6:f1:03: 12:05:d4:c0:1f:11:50:80:f2:f5:60:cd:46:09:8a:a2:15:ab: af:ac:05:6f:d3:ad:28:97:e4:7e:ec:d9:27:6c:a8:cf:51:0c: b7:3a:9d:86:b8:5a:3a:32:b1:99:be:c3:19:0d:4f:bf:f3:55: 67:68:fb:24:8c:c7:90:c8:d8:69:6a:34:50:92:31:56:e6:57: 75:16:55:98:de:24:ba:1d:a0:a5:0e:ce:de:97:dc:09:71:d6: 6f:fd:a3:d5:57:a0:df:25:b8:e9:c4:43:34:6d:5e:cd:70:2f: 89:a0:d1:5e:51:c8:36:71:16:fb:76:bf:0e:dd:40:92:b6:7e: 13:e7:86:df:d9:a6:bb:cd:d7:b4:84:3b:d1:c1:d2:a5:20:48: 0c:60:3c:a2:01:ad:7b:cc:eb:f5:a9:ee:7e:d4:dc:9f:ba:af: 63:1a:22:72 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9XASDcD+bKrw7Pu2z3WrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjVkYjgxMWI1ZDVkMDViZWMzN2VlOWQwOWE0ZWM1MmVlZWQxYWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdETsOa6cI4OlfXjZOgr9BkBvFVn 2dd/UQqz+raGZYcGT8liKo4oQwJp4FzUtVTYyLzKwUUE8/TW91CtTB0OudU4/Lws rsDTXTrgU4dBuaZHZJXVb+Hk2PIoGiA8ptugeX/l9dmMT+aTzWik3B5DtlZH2N7Z HghN+QPbfN9lXXL5lCFScdnoSN1Hg692Ua52cdgddm4ztM7W1K7Eicu1Pog5JYgG Y59zvStfH9xtCTU1xO1NV6oEfXW5QnvgtsOnv5GpqbAsOa6dETHNLVcG6ixt9iHS /GHMgiylkz2c17W6K4cXlYfO3T7hhMEXkyVFiyM3BpCpCFujrMC2G9t2VQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFL9duBG11dBb7DfunQmk7FLu7RrVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzMwZjVl MC1hMDRmLTQ5OTMtOTgzYy03MTVmMDk4MTczNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMzBmNWUw LWEwNGYtNDk5My05ODNjLTcxNWYwOTgxNzM0MS8xL3YxMjRFYlhWMEZ2c04tNmRD YVRzVXU3dEd0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuULkMA0EAgACMAcDBQMqBQrAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMT2QIDAz/LMA0GCSqGSIb3DQEBCwUAA4IBAQBjeRL8 r+Tbe+opsVp1kSqLez2TKZ8j4uebd5gWAj500aLBe0K2Q0WnCf7+86fzVfZXwbZa yTX4sCvClqwQl/NJR1fPtMNEhTb7tzd8ojy2VYrnlXRx3Qnm8QMSBdTAHxFQgPL1 YM1GCYqiFauvrAVv060ol+R+7NknbKjPUQy3Op2GuFo6MrGZvsMZDU+/81VnaPsk jMeQyNhpajRQkjFW5ld1FlWY3iS6HaClDs7el9wJcdZv/aPVV6DfJbjpxEM0bV7N cC+JoNFeUcg2cRb7dr8O3UCStn4T54bf2aa7zde0hDvRwdKlIEgMYDyiAa17zOv1 qe5+1Nyfuq9jGiJy -----END CERTIFICATE-----Generated at Mon Jan 26 01:29:05 2026 by rpki-client