This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer File: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer (raw, json) Hash identifier: YVXmvV4a6t8q4HRwQ3gnaGlfa0NDLT/WCBJM7XXZs5g= Subject key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775883AFBA8C7FC59194AB390D568E20 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.30.233.0 -- 185.30.235.255 IP: 185.142.236.0/22 IP: 185.165.188.0/22 IP: 195.144.21.0/24 IP: 2a07:85c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:83:af:ba:8c:7f:c5:91:94:ab:39:0d:56:8e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efa842e67147252505f41551f0f735b7f72e3e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:da:c2:0f:86:d0:41:10:92:d9:7b:8a:34: a6:ea:44:6b:ae:98:ef:c7:1e:4a:80:15:b6:2e:49: 8c:17:17:14:1c:9c:1a:26:10:9c:6e:64:27:05:70: 87:18:b9:ae:92:e3:2d:29:49:ff:a9:41:e9:dd:29: f6:6d:1c:7a:93:d3:6c:1c:2c:5c:f0:d6:56:5a:b7: e6:ec:51:f5:2e:f6:f6:fe:2f:0a:55:c3:91:7b:29: 8d:12:d2:71:8e:de:0d:ff:92:f4:e4:de:6b:8d:56: e2:23:a2:6c:aa:65:2b:67:55:d1:79:9f:c2:60:7b: 01:d9:be:0e:17:06:aa:58:c7:9a:3f:64:f6:0b:09: da:83:12:69:07:7c:41:65:e5:f4:4c:02:bd:f3:02: 54:e9:eb:2c:d8:2f:a1:a9:b5:77:71:b5:3f:c5:aa: 0d:f5:8d:22:8d:b7:10:dc:91:ac:cf:4f:4f:e1:30: 20:2a:04:a2:01:a5:a8:68:fc:76:62:2b:3a:f6:d1: 02:42:a1:0b:54:0a:05:b2:4e:64:51:de:57:c4:5e: f6:f9:dc:48:01:0a:2b:d8:e5:e8:ad:18:fd:c2:54: d9:a1:47:00:e1:d7:32:d8:25:3a:e7:06:50:eb:5f: 47:4c:f7:aa:7d:a4:10:12:b1:a1:a9:86:46:bb:54: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.233.0-185.30.235.255 185.142.236.0/22 185.165.188.0/22 195.144.21.0/24 IPv6: 2a07:85c0::/29 Signature Algorithm: sha256WithRSAEncryption ae:e5:92:d9:ca:23:1e:d2:f9:09:21:f1:6e:c3:94:d6:6e:10: 52:f3:67:9d:5e:ea:22:9e:1f:39:a2:10:59:38:2e:3b:7d:22: e3:73:7c:09:fe:7a:5f:9c:b0:0e:7d:e2:da:6c:62:d1:ab:f1: a9:0c:3c:6b:34:2d:76:f4:57:88:18:fc:5d:12:e6:f5:6f:82: 61:55:25:a1:be:46:ae:b8:cc:96:36:65:3f:84:54:61:89:ce: b7:a1:d5:cf:67:51:ba:20:b4:33:98:d7:f3:33:cc:c2:17:49: 8b:91:c0:63:03:c4:e5:83:72:45:bf:b3:79:97:ee:d1:75:1a: d8:e2:93:fb:7c:a7:2b:87:e2:fd:57:0e:9b:11:89:0a:74:a7: ff:e3:3e:4c:29:d5:41:bc:49:a8:c9:ed:70:c5:63:4b:8e:f6: fc:ab:f6:da:09:56:0b:73:0c:7d:23:be:11:40:c4:28:e9:70: 3a:b5:7a:40:a5:6c:62:68:15:fe:d6:df:04:0b:67:66:f4:13: 41:8b:ac:a0:2c:ae:8a:bb:7e:8a:ac:e1:79:d2:ec:35:9a:4a: 17:50:cd:bc:79:0b:b5:45:b2:23:49:1c:4e:36:34:4f:6e:e1: cd:eb:bf:e0:26:f8:f1:bb:9c:19:e2:41:89:05:4b:3a:bc:01: 8f:a6:d8:3e -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAZt3WIOvuox/xZGUqzkNVo4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmE4NDJlNjcxNDcyNTI1MDVmNDE1NTFmMGY3MzViN2Y3MmUzZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8zawg+G0EEQktl7ijSm6kRrrpjv xx5KgBW2LkmMFxcUHJwaJhCcbmQnBXCHGLmukuMtKUn/qUHp3Sn2bRx6k9NsHCxc 8NZWWrfm7FH1Lvb2/i8KVcOReymNEtJxjt4N/5L05N5rjVbiI6JsqmUrZ1XReZ/C YHsB2b4OFwaqWMeaP2T2CwnagxJpB3xBZeX0TAK98wJU6ess2C+hqbV3cbU/xaoN 9Y0ijbcQ3JGsz09P4TAgKgSiAaWoaPx2Yis69tECQqELVAoFsk5kUd5XxF72+dxI AQor2OXorRj9wlTZoUcA4dcy2CU65wZQ619HTPeqfaQQErGhqYZGu1Tu8wIDAQAB o4ICrTCCAqkwHQYDVR0OBBYEFO+oQuZxRyUlBfQVUfD3Nbf3Lj6XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyL2U5Yzhl OS1iOTU0LTRkMjAtYTQyNi04ZTBjMzEyMjNkYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvZTljOGU5 LWI5NTQtNGQyMC1hNDI2LThlMGMzMTIyM2RiOC8xLzc2aEM1bkZISlNVRjlCVlI4 UGMxdF9jdVBwYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAmBAIAATAgMAwDBAC5HukDBAK5HugDBAK5juwDBAK5pbwDBADD kBUwDQQCAAIwBwMFAyoHhcAwDQYJKoZIhvcNAQELBQADggEBAK7lktnKIx7S+Qkh 8W7DlNZuEFLzZ51e6iKeHzmiEFk4Ljt9IuNzfAn+el+csA594tpsYtGr8akMPGs0 LXb0V4gY/F0S5vVvgmFVJaG+Rq64zJY2ZT+EVGGJzreh1c9nUbogtDOY1/MzzMIX SYuRwGMDxOWDckW/s3mX7tF1Gtjik/t8pyuH4v1XDpsRiQp0p//jPkwp1UG8SajJ 7XDFY0uO9vyr9toJVgtzDH0jvhFAxCjpcDq1ekClbGJoFf7W3wQLZ2b0E0GLrKAs roq7foqs4XnS7DWaShdQzbx5C7VFsiNJHE42NE9u4c3rv+Am+PG7nBniQYkFSzq8 AY+m2D4= -----END CERTIFICATE-----Generated at Thu Jan 1 08:30:41 2026 by rpki-client