This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer File: v99XKOyr1W70Y3NWlVhmylRoaRo.cer (raw, json) Hash identifier: Nz/71DV0Oc6G86GGfdA8uAsdkV4x7g2PNACGivB95qw= Subject key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3738100BEECF8C14F8C41BC0A62B7A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.32.215.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:38:10:0b:ee:cf:8c:14:f8:c4:1b:c0:a6:2b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfdf5728ecabd56ef4637356955866ca5468691a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:63:f6:d1:dc:81:06:72:91:d2:bd:89:52: 54:b9:e7:6a:ce:b0:f8:78:d8:23:31:b1:df:6d:de: d4:14:f1:f5:dd:5a:44:6a:58:c7:ce:76:44:57:0c: 68:9b:36:03:8e:36:7c:d5:7c:24:49:6e:f0:68:1a: 51:03:1a:18:4b:64:1e:35:d1:70:f7:78:bd:45:ea: fe:10:43:78:24:67:d7:b2:90:61:8e:4b:64:2f:5e: c6:40:a9:33:e0:ef:98:89:7b:41:01:84:84:3f:db: dc:de:d2:bb:86:79:82:75:fa:e0:b5:7b:69:6d:9a: d2:ef:dc:7c:37:11:ec:83:ef:8c:4d:c9:91:1e:a0: 07:22:70:0e:5e:05:28:f1:65:32:00:29:0e:52:59: 70:3a:d9:2e:ca:56:19:46:f8:34:b5:6a:ba:59:12: c5:3d:a0:a7:10:c2:7a:46:94:36:94:20:e2:d9:90: e7:91:22:a0:64:ff:91:1b:f0:7e:db:a5:a7:00:c1: e6:84:8a:ed:65:7e:78:ab:9b:3b:62:da:34:1b:99: 5c:2b:b1:95:ed:39:87:3a:e6:22:0f:ce:68:5c:08: ae:b9:66:a4:8f:f2:1f:bd:69:88:6b:6c:fc:1d:f0: 92:84:b1:9e:9a:5f:e4:c2:60:08:d6:34:2b:c1:e9: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.215.0/24 Signature Algorithm: sha256WithRSAEncryption 38:7a:42:ea:01:7e:bb:b2:ff:b5:07:81:00:e7:fb:4a:dc:9e: 08:60:66:9d:a4:58:ae:9c:ac:57:bc:bd:c5:a2:aa:b0:b8:99: 47:ff:7e:07:35:55:a8:53:3d:99:fa:e5:d8:87:73:48:a4:91: 2c:4d:3c:1a:bd:5d:8c:3a:72:34:ed:86:32:fa:87:9b:44:2b: 5c:6d:05:70:cb:97:fc:50:4f:ee:c4:af:49:4d:64:08:c1:72: 98:60:7c:6e:f6:b2:da:9c:8a:c3:62:b6:95:2c:34:3a:af:70: 2b:fc:82:ec:5e:80:82:28:93:51:5b:e2:c6:d0:2e:6f:5e:f1: c7:b4:75:7a:67:fa:43:bc:00:e1:ae:25:a6:f9:f0:e5:db:b7: 14:f9:64:a3:fb:aa:6a:45:58:c8:90:ae:41:58:84:c1:0c:54: 5f:23:e1:5c:8b:08:d9:51:be:67:7a:35:1f:e0:54:8e:23:49: 4a:58:ce:86:90:44:82:dc:6e:48:ff:23:26:9a:92:83:4f:75: 41:23:69:2d:1c:f4:12:ff:a5:7d:a0:e2:91:0f:72:9e:85:80: e5:c6:f7:f8:3b:05:86:3f:3e:98:7c:a9:db:43:95:10:d2:62: 79:ac:40:f4:9e:48:76:ae:34:3f:ab:8d:1b:12:5c:ab:cf:95: 43:f9:fb:b9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+NzgQC+7PjBT4xBvApit6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmRmNTcyOGVjYWJkNTZlZjQ2MzczNTY5NTU4NjZjYTU0Njg2OTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuihj9tHcgQZykdK9iVJUuedqzrD4 eNgjMbHfbd7UFPH13VpEaljHznZEVwxomzYDjjZ81XwkSW7waBpRAxoYS2QeNdFw 93i9Rer+EEN4JGfXspBhjktkL17GQKkz4O+YiXtBAYSEP9vc3tK7hnmCdfrgtXtp bZrS79x8NxHsg++MTcmRHqAHInAOXgUo8WUyACkOUllwOtkuylYZRvg0tWq6WRLF PaCnEMJ6RpQ2lCDi2ZDnkSKgZP+RG/B+26WnAMHmhIrtZX54q5s7Yto0G5lcK7GV 7TmHOuYiD85oXAiuuWakj/IfvWmIa2z8HfCShLGeml/kwmAI1jQrwemApwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFL/fVyjsq9Vu9GNzVpVYZspUaGkaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2ZjZjMy Mi0xN2MxLTRmNDAtYTYxOC1iZDE0ZDM0NGJiZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvZmNmMzIy LTE3YzEtNGY0MC1hNjE4LWJkMTRkMzQ0YmJmMi8xL3Y5OVhLT3lyMVc3MFkzTlds VmhteWxSb2FSby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwiDXMA0GCSqGSIb3DQEBCwUAA4IBAQA4ekLq AX67sv+1B4EA5/tK3J4IYGadpFiunKxXvL3FoqqwuJlH/34HNVWoUz2Z+uXYh3NI pJEsTTwavV2MOnI07YYy+oebRCtcbQVwy5f8UE/uxK9JTWQIwXKYYHxu9rLanIrD YraVLDQ6r3Ar/ILsXoCCKJNRW+LG0C5vXvHHtHV6Z/pDvADhriWm+fDl27cU+WSj +6pqRVjIkK5BWITBDFRfI+FciwjZUb5nejUf4FSOI0lKWM6GkESC3G5I/yMmmpKD T3VBI2ktHPQS/6V9oOKRD3KehYDlxvf4OwWGPz6YfKnbQ5UQ0mJ5rED0nkh2rjQ/ q40bElyrz5VD+fu5 -----END CERTIFICATE-----Generated at Mon Jan 12 22:24:27 2026 by rpki-client