This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer File: 156keuFhy7Pa75d4lzDXDEy6idA.cer (raw, json) Hash identifier: DcHZ9kWoud6mCIEpqRQh1k+Fxtwfvb5aL7yTt9bD31E= Subject key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6FA1511CB44FA6D0DA9103A1D6B05 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 129.88.0.0/16 IP: 147.171.0.0/16 IP: 152.77.0.0/16 IP: 192.33.171.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fa:15:11:cb:44:fa:6d:0d:a9:10:3a:1d:6b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:11:ae:5c:e1:51:92:2d:b5:e4:a6:e8:33: 9d:41:b9:97:fd:7f:e0:85:17:a9:22:c2:b2:52:9c: db:8b:a8:7c:31:e2:bd:0d:e6:fd:b4:3e:21:70:c9: 8e:2d:41:cc:7a:4c:7b:98:24:bd:a2:f6:79:9a:5f: 80:a1:01:bc:99:53:0d:c5:1a:8e:fe:9b:0d:cf:f1: 8c:2f:35:a0:b8:cc:14:b9:89:a1:b5:1f:8e:db:63: 35:71:94:05:c9:40:d7:8d:b9:19:ab:dd:55:14:ca: 78:d2:11:0a:38:6c:d1:9a:fc:64:da:00:47:a0:d0: b8:27:be:90:c3:2b:ea:40:64:56:cb:61:33:c0:3e: 67:7b:b3:39:5d:c5:13:2d:be:12:f2:f3:38:f4:ef: 29:2e:6b:7a:e8:ef:d9:9b:20:da:53:86:03:60:bd: 7d:58:70:42:ff:cd:0e:ab:21:49:90:69:d6:b7:d3: df:b3:51:c8:c9:60:8b:67:0a:bb:ea:41:d4:d3:bb: 52:91:4e:ec:0b:20:da:71:cd:e1:2d:11:fa:f1:d7: 67:c5:96:65:32:73:ed:9b:f9:9b:fa:2b:ac:7c:98: 01:29:87:bf:78:81:6c:38:34:35:88:7a:59:4b:e6: 1c:65:96:96:be:04:e7:dd:00:5e:42:1f:32:a1:f5: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.88.0.0/16 147.171.0.0/16 152.77.0.0/16 192.33.171.0/24 Signature Algorithm: sha256WithRSAEncryption ad:95:d4:69:d8:10:8a:82:52:fd:aa:ff:8d:4a:b2:c4:15:f9: d9:28:79:c6:c2:16:72:c7:5a:5a:cb:3c:21:a0:65:4d:3b:5d: f4:3f:4e:e4:e8:5e:8a:bc:61:7d:7e:b7:2d:1b:2a:db:9d:4b: a2:cc:de:75:da:56:b7:ce:64:ba:2e:0d:c8:11:7d:2e:d2:8e: 66:6c:5b:e9:94:3d:2c:4f:06:d3:3c:48:ac:10:f3:07:d7:d3: 2b:08:0d:16:0a:ea:27:97:ad:89:c5:62:d0:87:a3:53:61:1d: 8a:28:2d:24:0d:7d:32:33:e4:2f:ae:d7:28:7c:74:81:72:40: 6d:0f:b6:22:a7:d9:b9:98:d6:f4:5d:fe:00:1b:10:bf:0f:76: 91:d4:37:4f:14:39:40:f8:90:a3:9d:27:aa:1a:56:8b:4b:1e: c6:08:bb:80:cd:4b:71:f0:2c:95:5b:a7:ec:7e:b1:76:3d:11: f7:71:bb:dd:40:70:37:be:ae:9d:33:1a:81:5b:a8:dd:45:01: f1:61:78:04:e3:85:2d:b0:2a:4c:f4:89:90:91:59:36:e0:a3: ae:e1:ec:35:6b:93:b3:b9:7f:a3:b6:2e:b6:3a:33:03:db:d7: 22:18:a0:70:7f:bd:44:f8:c2:0f:35:9a:49:d9:7e:e1:70:97: 9a:0e:a0:29 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+pvoVEctE+m0NqRA6HWsFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzllYTQ3YWUxNjFjYmIzZGFlZjk3Nzg5NzMwZDcwYzRjYmE4OWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA174RrlzhUZItteSm6DOdQbmX/X/g hRepIsKyUpzbi6h8MeK9Deb9tD4hcMmOLUHMekx7mCS9ovZ5ml+AoQG8mVMNxRqO /psNz/GMLzWguMwUuYmhtR+O22M1cZQFyUDXjbkZq91VFMp40hEKOGzRmvxk2gBH oNC4J76QwyvqQGRWy2EzwD5ne7M5XcUTLb4S8vM49O8pLmt66O/ZmyDaU4YDYL19 WHBC/80OqyFJkGnWt9Pfs1HIyWCLZwq76kHU07tSkU7sCyDacc3hLRH68ddnxZZl MnPtm/mb+iusfJgBKYe/eIFsODQ1iHpZS+YcZZaWvgTn3QBeQh8yofUDoQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNeepHrhYcuz2u+XeJcw1wxMuonQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2Q5Y2I0 MS0xYzNiLTQ2YWItYTk5My0zYzNlNTBkZGE2Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvZDljYjQx LTFjM2ItNDZhYi1hOTkzLTNjM2U1MGRkYTZjYy8xLzE1NmtldUZoeTdQYTc1ZDRs ekRYREV5NmlkQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAbBAIAATAVAwMAgVgDAwCTqwMDAJhNAwQAwCGrMA0GCSqGSIb3 DQEBCwUAA4IBAQCtldRp2BCKglL9qv+NSrLEFfnZKHnGwhZyx1payzwhoGVNO130 P07k6F6KvGF9frctGyrbnUuizN512la3zmS6Lg3IEX0u0o5mbFvplD0sTwbTPEis EPMH19MrCA0WCuonl62JxWLQh6NTYR2KKC0kDX0yM+QvrtcofHSBckBtD7Yip9m5 mNb0Xf4AGxC/D3aR1DdPFDlA+JCjnSeqGlaLSx7GCLuAzUtx8CyVW6fsfrF2PRH3 cbvdQHA3vq6dMxqBW6jdRQHxYXgE44UtsCpM9ImQkVk24KOu4ew1a5OzuX+jti62 OjMD29ciGKBwf71E+MIPNZpJ2X7hcJeaDqAp -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:13 2026 by rpki-client