This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer File: 45WDhONGlWoAZjpWVQe5bxTMCXM.cer (raw, json) Hash identifier: eg3aJ3OHdkkW6oJpNwaV3aLfDOQvh94CylcRlhQdd8A= Subject key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AF42FBFBF52D5C4859EE04B53F119 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197770 IP: 194.9.58.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f4:2f:bf:bf:52:d5:c4:85:9e:e0:4b:53:f1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3958384e346956a00663a565507b96f14cc0973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:46:86:5c:08:ee:57:7f:1c:de:ab:9d:2f: 4c:66:61:0e:10:00:4f:f6:3c:ee:3f:6d:0f:b6:3d: 40:d8:0c:fb:0f:1b:22:f5:e9:76:16:73:85:c4:57: ec:57:e6:9a:98:9f:e6:c0:de:9a:17:13:fe:85:9a: e6:6f:20:e8:af:3a:68:b4:bc:eb:c9:f0:67:f0:b5: 35:de:af:5e:dd:63:6a:a7:19:cf:b6:29:de:95:52: 25:4c:54:0d:63:1b:5f:45:6e:7c:0b:ae:70:be:6d: c7:54:c0:a1:15:d5:9b:04:f0:77:e9:9e:5a:d2:6e: f9:ff:60:ba:6e:ae:fd:b8:e4:4a:26:f4:53:90:87: 75:b7:6f:b7:54:9f:9d:bc:6b:45:f1:fa:5e:69:84: a9:70:b7:a6:05:f7:8e:9f:ee:15:3c:83:ec:66:23: 7a:1d:4b:51:d9:4b:28:b1:6a:69:d7:41:99:ff:6b: 90:bf:be:54:ab:20:e5:13:f1:cf:46:0d:66:7f:a4: d4:41:3b:35:32:5f:a4:d1:bb:4c:cf:32:69:bf:87: e8:6c:fa:14:00:e1:bc:de:c4:27:4f:84:35:49:b7: 08:56:31:e9:bd:0c:c8:6d:a3:fd:36:07:54:70:ed: 34:a8:a5:da:58:9a:48:a5:6c:c0:ad:f0:97:19:44: 21:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.58.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197770 Signature Algorithm: sha256WithRSAEncryption 5e:47:ce:93:e5:03:a5:8a:7c:ca:3f:e6:ad:24:14:dc:a9:d1: 47:0c:7e:42:d6:f8:74:24:9d:e6:c2:b5:07:c3:94:69:38:30: cb:02:9b:93:7e:e4:51:9e:a7:3b:60:12:02:94:85:8b:1a:5b: a9:13:d3:23:2d:e1:ef:50:ae:42:8b:4c:c4:dc:d4:c5:5a:ab: d6:1a:bf:c1:83:cc:6b:5b:23:be:1a:ad:ea:a4:c2:9a:a1:ae: 12:50:b0:fa:44:1c:21:e3:44:d1:e4:61:f5:4a:05:13:1d:78: 0a:59:58:49:d2:85:6e:7d:0f:4d:cf:02:d4:24:23:4e:62:0e: 7f:b3:e7:6e:9d:85:06:83:6b:be:94:b9:ae:23:48:b2:40:c2: 42:1b:38:68:23:2d:52:fa:81:6b:77:df:37:73:92:64:7a:33: ed:c5:4d:ac:2a:6e:91:65:e1:fb:68:e4:6a:db:2a:c3:e7:ff: 4f:0b:92:fe:f1:fd:a2:67:75:63:69:8b:cb:c3:7a:ce:c4:f0: e7:e4:2d:fe:df:08:f4:3d:3d:53:26:8b:db:50:dc:3e:00:4b: 1a:b6:dd:b7:30:ea:1c:7f:1e:25:60:74:3c:fb:8f:6a:3a:a2: 20:80:e5:f2:df:7d:8f:92:72:a3:5f:2b:47:55:50:88:12:67: fc:14:63:6b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WvQvv79S1cSFnuBLU/EZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzk1ODM4NGUzNDY5NTZhMDA2NjNhNTY1NTA3Yjk2ZjE0Y2MwOTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps9GhlwI7ld/HN6rnS9MZmEOEABP 9jzuP20Ptj1A2Az7Dxsi9el2FnOFxFfsV+aamJ/mwN6aFxP+hZrmbyDorzpotLzr yfBn8LU13q9e3WNqpxnPtinelVIlTFQNYxtfRW58C65wvm3HVMChFdWbBPB36Z5a 0m75/2C6bq79uORKJvRTkId1t2+3VJ+dvGtF8fpeaYSpcLemBfeOn+4VPIPsZiN6 HUtR2UsosWpp10GZ/2uQv75UqyDlE/HPRg1mf6TUQTs1Ml+k0btMzzJpv4fobPoU AOG83sQnT4Q1SbcIVjHpvQzIbaP9NgdUcO00qKXaWJpIpWzArfCXGUQh4QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOOVg4TjRpVqAGY6VlUHuW8UzAlzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzc0MGIx ZC03NTFkLTRhZmEtYjcwMC0xOTQzYmI3ZWFlYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvNzQwYjFk LTc1MWQtNGFmYS1iNzAwLTE5NDNiYjdlYWVjNy8xLzQ1V0RoT05HbFdvQVpqcFdW UWU1YnhUTUNYTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwgk6MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMEijANBgkqhkiG9w0BAQsFAAOCAQEAXkfOk+UDpYp8yj/mrSQU3KnRRwx+Qtb4 dCSd5sK1B8OUaTgwywKbk37kUZ6nO2ASApSFixpbqRPTIy3h71CuQotMxNzUxVqr 1hq/wYPMa1sjvhqt6qTCmqGuElCw+kQcIeNE0eRh9UoFEx14CllYSdKFbn0PTc8C 1CQjTmIOf7Pnbp2FBoNrvpS5riNIskDCQhs4aCMtUvqBa3ffN3OSZHoz7cVNrCpu kWXh+2jkatsqw+f/TwuS/vH9omd1Y2mLy8N6zsTw5+Qt/t8I9D09UyaL21DcPgBL GrbdtzDqHH8eJWB0PPuPajqiIIDl8t99j5Jyo18rR1VQiBJn/BRjaw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:05 2026 by rpki-client