This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer File: 861SH4OIdIPIybDG895f1e1Whck.cer (raw, json) Hash identifier: GVOiQS9lTfaVv+4j5Rd7dqBiFXkQ5NlUWxJYWIjyEm4= Subject key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6EB2DDE01F1B255046F143CC9EDFD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.180.76.0/22 IP: 5.183.100.0/22 IP: 45.11.0.0/22 IP: 45.88.40.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:eb:2d:de:01:f1:b2:55:04:6f:14:3c:c9:ed:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:c6:67:0d:be:3c:3f:db:58:4d:11:aa:a2: c9:08:e1:0d:9a:cf:7e:1b:bd:ee:e0:9f:40:74:77: f1:5e:31:1e:c5:01:2b:9e:8c:57:2c:ae:a9:7e:b3: 6e:94:5f:56:fd:f1:16:65:16:7e:5f:fa:ba:8a:c4: 81:7f:e0:ea:98:df:7e:25:55:89:92:75:48:72:23: cc:b6:27:c6:32:75:e1:8b:01:1a:6f:ef:88:da:91: 3d:e0:2a:c3:98:14:b7:20:a7:64:fb:eb:43:3b:8f: 04:57:d2:1b:15:0a:c3:4d:09:b2:fb:ae:48:7a:02: 4d:a6:0c:c1:f5:71:b4:2e:ae:7b:58:4d:46:99:7c: 44:28:61:0d:3d:a5:01:17:5e:02:cf:db:bc:c7:e9: 31:b7:19:9e:ac:ff:6d:4b:13:1c:08:c5:9f:af:1d: fa:4d:7f:5d:89:02:be:1b:7b:93:a4:fe:28:ba:82: 1a:9e:2d:67:3d:47:ac:6d:5d:e4:e5:26:fe:b7:92: be:2b:17:70:9e:f0:a3:0f:fa:85:1a:0b:12:84:7e: da:04:db:1c:21:36:29:c8:2f:10:85:21:97:3f:72: 2a:4d:f5:c3:db:6a:45:a9:46:eb:c0:b8:bc:76:0e: a6:af:8c:25:9d:df:93:eb:1b:2e:44:8c:e6:36:44: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.76.0/22 5.183.100.0/22 45.11.0.0/22 45.88.40.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:bf:73:a9:a9:3a:2a:7b:60:9f:01:0c:3f:31:a1:ea:fc:a2: 9e:85:28:ac:f1:41:1e:56:2a:c7:e3:5d:b9:52:29:2c:04:f6: 1f:4e:c8:e6:a2:f7:a9:f7:87:1f:c2:b3:e9:2b:f0:b8:96:65: 3b:ed:c5:e2:6d:24:74:8a:2a:aa:25:c2:2b:d4:42:22:0f:ad: b7:6a:d4:28:cc:6b:fd:a6:8a:c0:7d:cb:eb:ff:b8:a8:5c:c8: d8:1e:f1:48:5a:b9:37:6c:31:c4:50:e0:e0:64:46:08:d0:1a: 92:23:a0:44:88:11:9b:e0:79:a2:10:f2:76:de:3a:03:39:29: cd:ed:60:31:56:e4:f4:0f:64:be:d4:bb:e3:31:79:5d:be:7c: 3b:c6:15:9d:85:3a:18:d6:7e:71:c1:d8:c1:fa:5b:7b:91:c5: af:c2:ec:15:5a:8e:eb:22:c1:85:df:68:1b:14:7f:a6:a4:ab: aa:cb:87:c7:50:a3:0e:72:22:2c:09:a9:6b:1a:79:a2:3e:45: 69:b2:07:d1:92:8e:fb:53:aa:02:73:f8:b8:31:49:85:1d:08: 7a:b3:14:d2:27:bc:1e:b2:a9:96:e4:5b:38:f2:cf:7b:2a:e0: fe:a5:26:a6:3e:c4:f6:c7:ca:56:f9:48:92:6e:a2:6c:d8:35: d2:aa:1d:5f -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZt3xust3gHxslUEbxQ8ye39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2FkNTIxZjgzODg3NDgzYzhjOWIwYzZmM2RlNWZkNWVkNTY4NWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbfGZw2+PD/bWE0RqqLJCOENms9+ G73u4J9AdHfxXjEexQErnoxXLK6pfrNulF9W/fEWZRZ+X/q6isSBf+DqmN9+JVWJ knVIciPMtifGMnXhiwEab++I2pE94CrDmBS3IKdk++tDO48EV9IbFQrDTQmy+65I egJNpgzB9XG0Lq57WE1GmXxEKGENPaUBF14Cz9u8x+kxtxmerP9tSxMcCMWfrx36 TX9diQK+G3uTpP4ouoIani1nPUesbV3k5Sb+t5K+KxdwnvCjD/qFGgsShH7aBNsc ITYpyC8QhSGXP3IqTfXD22pFqUbrwLi8dg6mr4wlnd+T6xsuRIzmNkQHlQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFPOtUh+DiHSDyMmwxvPeX9XtVoXJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRlL2NkZDk4 NS0zMzRjLTRhMGQtYTdhOC03NWMwY2NlZGY5NzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvY2RkOTg1 LTMzNGMtNGEwZC1hN2E4LTc1YzBjY2VkZjk3Ni8xLzg2MVNINE9JZElQSXliREc4 OTVmMWUxV2hjay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQCBbRMAwQCBbdkAwQCLQsAAwQCLVgoMA0GCSqG SIb3DQEBCwUAA4IBAQB8v3OpqToqe2CfAQw/MaHq/KKehSis8UEeVirH4125Uiks BPYfTsjmovep94cfwrPpK/C4lmU77cXibSR0iiqqJcIr1EIiD623atQozGv9porA fcvr/7ioXMjYHvFIWrk3bDHEUODgZEYI0BqSI6BEiBGb4HmiEPJ23joDOSnN7WAx VuT0D2S+1LvjMXldvnw7xhWdhToY1n5xwdjB+lt7kcWvwuwVWo7rIsGF32gbFH+m pKuqy4fHUKMOciIsCalrGnmiPkVpsgfRko77U6oCc/i4MUmFHQh6sxTSJ7wesqmW 5Fs48s97KuD+pSamPsT2x8pW+UiSbqJs2DXSqh1f -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:02 2026 by rpki-client