This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18R1QD_dkDgYkeWgwyZrR43YyjU.cer File: 18R1QD_dkDgYkeWgwyZrR43YyjU.cer (raw, json) Hash identifier: VUM/mgYEikworutT7apLXtOnopIOnQElorrs0ugWd6Q= Subject key identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8521537B76817B7862EDE48BFECB2B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50590 IP: 46.175.168.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:21:53:7b:76:81:7b:78:62:ed:e4:8b:fe:cb:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7c475403fdd90381891e5a0c3266b478dd8ca35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6b:27:7f:ce:5f:ea:70:a4:1a:c9:44:00:af: 73:4a:cb:ee:0f:06:09:e7:5d:b4:44:8b:8e:d2:90: de:f5:09:48:53:af:a0:7d:33:64:a5:1e:68:a2:d5: 5b:33:58:71:bb:95:00:c7:44:57:91:7d:93:bc:14: 0c:5b:84:b7:ee:d6:f3:c8:22:40:1e:d4:37:7c:bc: 20:7c:18:d2:35:7e:04:2a:b5:49:65:19:f5:c2:80: 36:91:de:8c:a6:9a:b5:5a:4b:48:1e:9c:05:ea:07: e8:6a:49:62:62:00:2d:0d:9e:42:51:b9:d1:ee:3e: 22:a7:58:fc:cb:31:46:e2:40:ef:af:99:f6:67:d5: 66:48:98:ac:01:b9:a9:35:62:5e:6f:ea:7c:b6:77: 1d:06:83:17:e7:19:b8:15:38:e1:75:a8:6d:e4:70: 71:4a:dd:11:74:ce:b3:46:7b:c5:db:ab:b1:99:e6: 6a:f2:ca:32:f7:d1:e8:31:ff:c8:00:df:ff:f4:ae: b7:e7:b3:de:fd:91:ac:44:e6:f8:45:44:09:c5:6f: c7:43:38:c2:3c:e0:77:66:3a:c4:6d:8a:0f:89:7a: d9:2c:0e:fe:f2:d5:28:76:85:fc:6f:62:8a:3d:69: 73:18:89:fc:4d:72:ef:6d:8a:24:fb:c0:eb:72:96: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C4:75:40:3F:DD:90:38:18:91:E5:A0:C3:26:6B:47:8D:D8:CA:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/974c70-e13c-4699-b31b-7ac9e2ce4e33/1/18R1QD_dkDgYkeWgwyZrR43YyjU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.168.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50590 Signature Algorithm: sha256WithRSAEncryption 22:7d:96:58:f8:8e:d9:8a:23:07:e5:2a:d9:39:9e:b7:9b:15: 2a:69:b5:44:26:7e:8c:b7:85:fa:a5:cd:d4:3e:70:e9:06:af: d4:ef:6e:01:90:a0:7f:f9:3a:6a:f5:f8:39:d9:c3:f9:b4:30: 0f:9c:80:69:34:0e:f6:75:30:65:2a:2c:4b:f8:9c:47:18:50: a8:06:c7:dd:28:8b:be:b1:66:04:d7:f1:a0:27:64:5b:ac:15: d9:ed:9e:96:45:d9:21:1a:8e:ab:13:85:9c:47:f6:33:89:40: 40:78:dd:c6:bf:e5:b9:4e:3e:96:aa:fa:68:1c:93:be:2a:17: da:1e:72:6c:80:31:5b:52:4c:3c:b3:5e:f7:40:0f:e0:52:15: f8:d5:e4:7d:ab:61:3a:9a:77:56:03:28:a9:4f:c0:e8:37:81: 0b:f5:48:3b:70:26:31:52:fb:a5:a4:8f:16:8c:d8:96:10:09: 62:0e:3b:86:2f:2f:50:fd:ed:5e:ed:20:13:05:3d:c1:b4:8c: fd:b0:df:17:76:5f:62:46:2c:99:e7:a2:e5:f9:08:3e:16:dc: 38:23:2d:94:28:7c:f0:39:2d:e5:b2:56:d1:40:18:2d:8d:55: e6:5f:c6:89:30:95:ab:5e:a3:03:74:e5:b3:b7:cc:e4:59:81: 1b:47:87:5b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/hSFTe3aBe3hi7eSL/ssrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2M0NzU0MDNmZGQ5MDM4MTg5MWU1YTBjMzI2NmI0NzhkZDhjYTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gsnf85f6nCkGslEAK9zSsvuDwYJ 5120RIuO0pDe9QlIU6+gfTNkpR5ootVbM1hxu5UAx0RXkX2TvBQMW4S37tbzyCJA HtQ3fLwgfBjSNX4EKrVJZRn1woA2kd6Mppq1WktIHpwF6gfoakliYgAtDZ5CUbnR 7j4ip1j8yzFG4kDvr5n2Z9VmSJisAbmpNWJeb+p8tncdBoMX5xm4FTjhdaht5HBx St0RdM6zRnvF26uxmeZq8soy99HoMf/IAN//9K6357Pe/ZGsROb4RUQJxW/HQzjC POB3ZjrEbYoPiXrZLA7+8tUodoX8b2KKPWlzGIn8TXLvbYok+8DrcpaxrwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNfEdUA/3ZA4GJHloMMma0eN2Mo1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2Lzk3NGM3 MC1lMTNjLTQ2OTktYjMxYi03YWM5ZTJjZTRlMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvOTc0Yzcw LWUxM2MtNDY5OS1iMzFiLTdhYzllMmNlNGUzMy8xLzE4UjFRRF9ka0RnWWtlV2d3 eVpyUjQzWXlqVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDLq+oMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDFnjANBgkqhkiG9w0BAQsFAAOCAQEAIn2WWPiO2YojB+Uq2Tmet5sVKmm1RCZ+ jLeF+qXN1D5w6Qav1O9uAZCgf/k6avX4OdnD+bQwD5yAaTQO9nUwZSosS/icRxhQ qAbH3SiLvrFmBNfxoCdkW6wV2e2elkXZIRqOqxOFnEf2M4lAQHjdxr/luU4+lqr6 aByTvioX2h5ybIAxW1JMPLNe90AP4FIV+NXkfathOpp3VgMoqU/A6DeBC/VIO3Am MVL7paSPFozYlhAJYg47hi8vUP3tXu0gEwU9wbSM/bDfF3ZfYkYsmeei5fkIPhbc OCMtlCh88Dkt5bJW0UAYLY1V5l/GiTCVq16jA3Tls7fM5FmBG0eHWw== -----END CERTIFICATE-----Generated at Tue Feb 10 06:27:58 2026 by rpki-client