This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer File: 448QoseS0NNlZ4o2yn9_FAnKOv0.cer (raw, json) Hash identifier: 7uhrOHbLB+kPg1bIWBPLvOFq/3yHYeeinRdkgOWIr4Q= Subject key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F159795C2C27328B2FEC80158C6BBE3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 64472 IP: 185.162.180.0 -- 185.162.182.255 IP: 2a0a:9000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:97:95:c2:c2:73:28:b2:fe:c8:01:58:c6:bb:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:a9:01:5f:e8:6d:c6:16:88:4b:66:86:c6: 87:b2:56:5a:fc:78:ad:58:6b:e4:f2:a6:2f:f1:16: 1b:f1:a0:6d:a5:57:5a:0d:94:77:f9:3c:73:ce:77: ad:32:7f:59:b4:7e:de:63:38:1f:2c:66:21:10:6d: a3:f3:b1:99:ca:1a:6e:98:cb:fe:00:bf:e1:2a:5d: 6d:96:95:2a:e8:b7:a5:65:41:28:13:c5:aa:e2:6a: 6c:ba:ee:2b:4b:c9:2e:8f:84:bc:14:1e:ab:66:51: 9a:19:b7:78:dc:bd:30:ef:16:bb:2f:44:cf:bb:20: 18:78:07:34:d7:aa:93:71:8d:6f:a4:4d:97:49:18: 1e:42:c1:15:8f:74:1d:71:a3:b4:9a:a7:3a:e9:86: 42:cc:d6:a0:8b:26:76:82:79:b4:f6:ed:fe:a2:a8: 63:c5:b5:b3:e0:35:bd:57:4e:e4:e0:06:fe:f9:b8: 6b:e5:06:29:68:83:39:2f:be:15:0c:e5:88:67:25: 48:f6:76:2a:f1:c9:d7:cf:d9:c6:12:ab:54:e9:b9: 7a:b2:41:53:4a:4d:ce:9c:8c:b2:37:d9:71:76:2c: 17:38:d0:56:ac:00:e0:9e:78:44:36:82:fc:77:96: e9:78:b8:4b:1b:32:61:b3:29:78:b9:a4:86:34:d7: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.180.0-185.162.182.255 IPv6: 2a0a:9000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64472 Signature Algorithm: sha256WithRSAEncryption 1c:71:1d:48:1e:53:b8:0f:75:63:57:d9:4d:33:54:dc:e1:f6: 0d:c7:54:a0:c9:a9:12:43:5d:8c:04:d8:75:81:70:08:5c:6f: d1:9f:9a:fa:2e:3f:3c:4c:7e:5f:48:54:c3:e9:d9:38:32:58: 57:83:be:e1:23:fe:73:fd:d5:9e:af:cb:47:24:16:03:8f:ae: fe:f1:33:ae:bd:60:66:c7:53:1d:d5:27:62:31:4d:ca:2b:20: 8c:a8:17:c6:44:dc:f1:68:f8:bc:65:1c:ca:39:4b:5c:cf:3e: a4:b4:c7:d9:6e:f9:b4:82:db:98:3c:31:9e:4c:a6:5b:9f:01: a7:fd:bb:f7:4e:02:a0:05:61:c4:75:bd:cf:1e:0f:4d:1b:d1: 16:a3:40:fd:a0:65:25:07:8b:db:08:2b:57:af:35:1d:f5:18: ee:98:9c:d9:34:7a:4b:bd:db:27:52:6a:a8:6b:8b:4d:db:d9: 77:1e:c3:06:7f:1d:3b:59:b9:8c:5e:48:a8:92:76:55:9b:a8: bd:23:71:17:9a:17:15:e1:db:d4:ec:56:cf:77:d4:3f:04:63: eb:6e:24:7a:25:27:64:b6:89:a8:17:9c:75:47:10:d0:87:f4: de:a1:91:c2:70:12:57:06:d6:89:b9:8f:1f:cf:3f:a7:76:e3: f3:18:9e:bc -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt/FZeVwsJzKLL+yAFYxrvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzhmMTBhMmM3OTJkMGQzNjU2NzhhMzZjYTdmN2YxNDA5Y2EzYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5mpAV/obcYWiEtmhsaHslZa/Hit WGvk8qYv8RYb8aBtpVdaDZR3+TxzznetMn9ZtH7eYzgfLGYhEG2j87GZyhpumMv+ AL/hKl1tlpUq6LelZUEoE8Wq4mpsuu4rS8kuj4S8FB6rZlGaGbd43L0w7xa7L0TP uyAYeAc016qTcY1vpE2XSRgeQsEVj3QdcaO0mqc66YZCzNagiyZ2gnm09u3+oqhj xbWz4DW9V07k4Ab++bhr5QYpaIM5L74VDOWIZyVI9nYq8cnXz9nGEqtU6bl6skFT Sk3OnIyyN9lxdiwXONBWrADgnnhENoL8d5bpeLhLGzJhsyl4uaSGNNcrnwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFOOPEKLHktDTZWeKNsp/fxQJyjr9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzUzMzVl Mi0xNTk4LTQ4MjItODIyNy04MzUzYWE0MGJhZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvNTMzNWUy LTE1OTgtNDgyMi04MjI3LTgzNTNhYTQwYmFlYi8xLzQ0OFFvc2VTME5ObFo0bzJ5 bjlfRkFuS092MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5orQDBAC5orYwDQQCAAIwBwMFAyoKkAAw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPvYMA0GCSqGSIb3DQEBCwUAA4IBAQAc cR1IHlO4D3VjV9lNM1Tc4fYNx1SgyakSQ12MBNh1gXAIXG/Rn5r6Lj88TH5fSFTD 6dk4MlhXg77hI/5z/dWer8tHJBYDj67+8TOuvWBmx1Md1SdiMU3KKyCMqBfGRNzx aPi8ZRzKOUtczz6ktMfZbvm0gtuYPDGeTKZbnwGn/bv3TgKgBWHEdb3PHg9NG9EW o0D9oGUlB4vbCCtXrzUd9RjumJzZNHpLvdsnUmqoa4tN29l3HsMGfx07WbmMXkio knZVm6i9I3EXmhcV4dvU7FbPd9Q/BGPrbiR6JSdktomoF5x1RxDQh/TeoZHCcBJX BtaJuY8fzz+nduPzGJ68 -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:13 2026 by rpki-client