This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer File: 45VXJQVD5Edq-IxGEtSolTExO1c.cer (raw, json) Hash identifier: MmZ34PLYDgCsCq+L4LKUUajGatfr6GGN6dAvzhiJWXk= Subject key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F847662BA086C89EF9C2345706614E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56734 AS: 60184 AS: 197771 AS: 197775 IP: 91.223.231.0/24 IP: 91.226.180.0/24 IP: 91.227.49.0/24 IP: 194.48.213.0/24 IP: 2001:67c:5f4::/48 IP: 2a0a:b780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:76:62:ba:08:6c:89:ef:9c:23:45:70:66:14:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e39557250543e4476af88c4612d4a89531313b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:13:2f:7d:25:30:25:ab:bd:0b:44:62:b3: a3:e6:fe:92:99:0d:10:76:f8:22:cd:15:f2:b7:76: 81:d4:1a:f0:ea:77:76:6c:07:a7:be:ad:a2:1a:f3: 67:c0:26:74:c5:62:a2:5f:b8:a5:fd:56:06:a3:bb: 51:01:ca:ed:21:35:fc:75:bf:46:43:7f:5b:0f:e9: 40:53:64:dd:32:1e:d3:cd:b8:70:b8:03:b9:37:16: 81:c9:3d:43:0c:48:f4:a8:b6:69:24:6b:5d:ab:b3: 18:f3:49:73:f4:05:7f:65:b1:87:78:f5:cb:0a:da: f5:d1:da:ed:42:96:54:7d:0a:b1:97:a4:94:e4:78: 2f:b6:8f:b2:49:94:c6:16:75:21:d3:d2:67:12:45: ac:b1:37:51:03:a2:12:dc:90:d1:69:32:9a:9a:74: 88:1c:05:39:31:69:61:f2:85:ce:ab:1a:b7:31:20: 4a:44:0b:31:04:db:ef:85:ed:52:ef:2e:b6:3e:07: bc:7d:89:52:8c:64:cb:fc:73:6c:d8:77:b4:06:84: 4e:d4:d4:2d:a5:c1:ee:cc:ea:3c:34:43:50:71:d3: 05:19:aa:2c:95:0d:d7:5c:d2:a6:ce:59:4c:0f:63: 5a:86:63:e4:8f:ed:81:81:1c:34:01:25:4f:d6:e7: 2f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.231.0/24 91.226.180.0/24 91.227.49.0/24 194.48.213.0/24 IPv6: 2001:67c:5f4::/48 2a0a:b780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56734 60184 197771 197775 Signature Algorithm: sha256WithRSAEncryption 89:f3:13:7d:a9:05:ae:c8:4d:55:3d:37:41:5f:36:32:76:5d: 0f:a0:3b:a0:bf:4c:58:12:ba:c8:60:e1:62:a8:9a:3c:21:94: 86:46:2c:0b:00:14:5e:2f:6c:2a:91:c1:de:93:24:8d:b0:b7: 18:af:a6:43:b1:97:98:27:8a:23:2a:db:23:5f:03:f3:45:41: bd:95:df:74:65:54:e9:dd:97:20:07:10:86:a8:5f:7d:dd:59: 2f:a9:f0:63:ad:c7:8f:5c:3c:95:3f:b9:65:cb:a7:f0:1e:bb: 7b:0a:91:63:12:06:05:88:4f:dc:51:f5:4d:0f:77:80:cc:91: da:98:05:11:95:1e:43:30:0f:63:a0:b4:db:43:4b:30:3c:b1: b6:a8:ca:aa:23:d3:10:b7:58:e9:2e:d3:8d:ea:71:5b:7d:b2: 7d:90:ea:47:bf:de:d0:65:c3:78:cc:6c:b9:b6:0b:3d:81:ff: 11:bb:1a:94:0f:b7:f7:e0:3b:f9:96:88:f3:19:b1:22:01:f5: 3e:f2:4b:61:bf:cd:bb:3a:56:35:9f:40:73:64:f6:1e:e2:1c: 0f:54:d6:cf:51:af:66:b8:03:6d:b7:e9:70:f9:52:98:b0:84: b4:37:71:f7:0f:c6:0a:b2:94:1a:ca:af:21:57:8a:7f:45:3e: e6:03:d5:88 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt/hHZiughsie+cI0VwZhTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzk1NTcyNTA1NDNlNDQ3NmFmODhjNDYxMmQ0YTg5NTMxMzEzYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzsTL30lMCWrvQtEYrOj5v6SmQ0Q dvgizRXyt3aB1Brw6nd2bAenvq2iGvNnwCZ0xWKiX7il/VYGo7tRAcrtITX8db9G Q39bD+lAU2TdMh7TzbhwuAO5NxaByT1DDEj0qLZpJGtdq7MY80lz9AV/ZbGHePXL Ctr10drtQpZUfQqxl6SU5Hgvto+ySZTGFnUh09JnEkWssTdRA6IS3JDRaTKamnSI HAU5MWlh8oXOqxq3MSBKRAsxBNvvhe1S7y62Pge8fYlSjGTL/HNs2He0BoRO1NQt pcHuzOo8NENQcdMFGaoslQ3XXNKmzllMD2NahmPkj+2BgRw0ASVP1ucvIwIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFOOVVyUFQ+RHaviMRhLUqJUxMTtXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzI5ZDI2 NC1iOTQxLTQ3YTQtOWVjNS0yMDY5NTE5M2FjMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMjlkMjY0 LWI5NDEtNDdhNC05ZWM1LTIwNjk1MTkzYWMwNy8xLzQ1VlhKUVZENUVkcS1JeEdF dFNvbFRFeE8xYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkGCCsGAQUF BwEHAQH/BDowODAeBAIAATAYAwQAW9/nAwQAW+K0AwQAW+MxAwQAwjDVMBYEAgAC MBADBwAgAQZ8BfQDBQMqCreAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQCAwDdngID AOsYAgMDBIsCAwMEjzANBgkqhkiG9w0BAQsFAAOCAQEAifMTfakFrshNVT03QV82 MnZdD6A7oL9MWBK6yGDhYqiaPCGUhkYsCwAUXi9sKpHB3pMkjbC3GK+mQ7GXmCeK IyrbI18D80VBvZXfdGVU6d2XIAcQhqhffd1ZL6nwY63Hj1w8lT+5Zcun8B67ewqR YxIGBYhP3FH1TQ93gMyR2pgFEZUeQzAPY6C020NLMDyxtqjKqiPTELdY6S7Tjepx W32yfZDqR7/e0GXDeMxsubYLPYH/EbsalA+39+A7+ZaI8xmxIgH1PvJLYb/NuzpW NZ9Ac2T2HuIcD1TWz1GvZrgDbbfpcPlSmLCEtDdx9w/GCrKUGsqvIVeKf0U+5gPV iA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:52 2026 by rpki-client