This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer (raw, json) Hash identifier: 6tbeMnnMEmgvaUPZ2oDLwwUWiJQBr6kFYu0xSOsHNCs= Subject key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF162702F1F1528EE9F573B8E2BB91A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60150 AS: 202592 IP: 43.240.148.0/22 IP: 45.12.100.0/22 IP: 91.109.40.0/21 IP: 147.185.196.0/23 IP: 147.185.206.0/23 IP: 185.96.56.0/22 IP: 185.136.16.0/22 IP: 193.160.220.0/22 IP: 193.168.200.0/22 IP: 194.38.48.0/22 IP: 207.244.196.0/22 IP: 207.244.208.0/22 IP: 2a05:ff00::/29 IP: 2a07:5b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:62:70:2f:1f:15:28:ee:9f:57:3b:8e:2b:b9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:0f:c5:55:b0:97:04:23:34:26:e3:70:df: 6e:ee:b9:56:a9:04:0f:9a:20:08:6b:91:ee:a7:82: f0:2a:82:12:e4:91:a8:9f:23:86:6b:de:19:4f:28: aa:04:a4:e6:dd:27:e2:f1:31:d2:83:fb:dc:2a:81: f4:62:1a:3a:c3:50:25:2c:d9:bb:42:d6:44:db:78: dd:b0:ab:1a:55:ac:cc:1d:a5:cd:80:2b:b2:14:db: 78:50:2b:e0:fd:15:33:75:bd:40:ba:27:c6:69:3b: 9d:97:b3:eb:99:a2:e3:ca:fc:ea:87:5d:1d:d4:27: 33:7e:f1:ce:f6:67:1d:d1:b3:67:c4:a2:83:aa:2d: 07:52:9d:72:b4:bb:aa:59:2a:ce:f1:83:46:66:f3: 6f:8a:af:83:2b:fd:3f:2f:f4:60:c6:da:01:b0:48: 37:1e:17:da:6e:5d:26:df:25:9a:09:b7:d6:3a:7d: 23:22:f3:50:de:19:1f:7e:0b:47:ad:24:18:fb:36: 47:e7:71:6a:a6:95:17:90:de:f1:2f:48:97:04:a7: cd:a5:a2:a7:69:1b:c2:7c:22:24:9d:01:71:3b:eb: 73:93:b5:38:e6:e0:cd:65:19:65:94:02:63:fd:48: d7:c8:e4:f3:40:78:5e:4c:45:aa:e2:fe:b7:4f:dd: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.148.0/22 45.12.100.0/22 91.109.40.0/21 147.185.196.0/23 147.185.206.0/23 185.96.56.0/22 185.136.16.0/22 193.160.220.0/22 193.168.200.0/22 194.38.48.0/22 207.244.196.0/22 207.244.208.0/22 IPv6: 2a05:ff00::/29 2a07:5b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60150 202592 Signature Algorithm: sha256WithRSAEncryption 19:86:63:a9:6d:70:e7:f0:d4:82:fa:39:de:46:1f:20:8c:ac: 64:49:4f:34:67:61:7f:ba:1a:8c:93:8f:cd:15:ff:3d:e8:48: 2c:78:98:f6:fc:27:ca:dc:5f:c4:16:84:e4:7c:ee:c7:26:67: 78:70:f6:8b:f5:21:fa:19:4a:d5:90:5f:8d:b6:5f:e3:4d:40: 95:f1:9f:f0:b2:ef:28:c1:c4:7a:d7:e3:56:ae:de:50:d5:90: 8c:6a:a2:54:9d:c0:0d:eb:cf:8d:90:77:d8:a9:30:b7:63:3e: 6f:55:10:0f:97:15:db:67:65:b4:60:d5:2b:32:6b:97:38:73: 3b:34:80:57:92:21:32:38:94:e0:d4:5b:b8:3b:77:67:b0:19: 16:36:38:f7:85:b3:95:e3:48:fc:01:95:40:2a:a6:86:ba:04: cc:fb:92:03:11:a3:02:be:f8:3f:b2:cf:e3:8c:bc:d6:03:d9: 97:1f:94:54:e7:9d:34:65:c8:50:57:64:38:73:2c:ae:7b:03: ce:09:fa:8d:61:10:4e:dc:1d:d6:c9:a4:7c:11:b2:ac:2b:bb: d8:7b:86:05:55:8c:c6:60:65:6a:5a:ff:3d:95:15:3e:a8:35: c6:c5:34:d2:73:bb:0b:5d:32:cc:25:fe:82:0d:89:2b:21:a5: ed:98:8d:c8 -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISAZt/8WJwLx8VKO6fVzuOK7kaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDhkYTljZjAwZDRkNThiODU0ZmZjNjIwMTBmMjM1YjA2ZGYzNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWEPxVWwlwQjNCbjcN9u7rlWqQQP miAIa5Hup4LwKoIS5JGonyOGa94ZTyiqBKTm3Sfi8THSg/vcKoH0Yho6w1AlLNm7 QtZE23jdsKsaVazMHaXNgCuyFNt4UCvg/RUzdb1AuifGaTudl7PrmaLjyvzqh10d 1CczfvHO9mcd0bNnxKKDqi0HUp1ytLuqWSrO8YNGZvNviq+DK/0/L/RgxtoBsEg3 Hhfabl0m3yWaCbfWOn0jIvNQ3hkffgtHrSQY+zZH53FqppUXkN7xL0iXBKfNpaKn aRvCfCIknQFxO+tzk7U45uDNZRlllAJj/UjXyOTzQHheTEWq4v63T93P5wIDAQAB o4IC/TCCAvkwHQYDVR0OBBYEFNCNqc8A1NWLhU/8YgEPI1sG3zVKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5L2ZlYmVm OC1hMGVhLTRjN2UtODgwNi0yMGUxOTc4MGNiMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvZmViZWY4 LWEwZWEtNGM3ZS04ODA2LTIwZTE5NzgwY2IyZS8xLzBJMnB6d0RVMVl1RlRfeGlB UThqV3diZk5Vby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHcGCCsGAQUF BwEHAQH/BGgwZjBOBAIAATBIAwQCK/CUAwQCLQxkAwQDW20oAwQBk7nEAwQBk7nO AwQCuWA4AwQCuYgQAwQCwaDcAwQCwajIAwQCwiYwAwQCz/TEAwQCz/TQMBQEAgAC MA4DBQMqBf8AAwUDKgdbQDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA6vYCAwMX YDANBgkqhkiG9w0BAQsFAAOCAQEAGYZjqW1w5/DUgvo53kYfIIysZElPNGdhf7oa jJOPzRX/PehILHiY9vwnytxfxBaE5HzuxyZneHD2i/Uh+hlK1ZBfjbZf401AlfGf 8LLvKMHEetfjVq7eUNWQjGqiVJ3ADevPjZB32Kkwt2M+b1UQD5cV22dltGDVKzJr lzhzOzSAV5IhMjiU4NRbuDt3Z7AZFjY494WzleNI/AGVQCqmhroEzPuSAxGjAr74 P7LP44y81gPZlx+UVOedNGXIUFdkOHMsrnsDzgn6jWEQTtwd1smkfBGyrCu72HuG BVWMxmBlalr/PZUVPqg1xsU00nO7C10yzCX+gg2JKyGl7ZiNyA== -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:36 2026 by rpki-client