This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer File: H0c4OJyzuZjsT6bUJy-N15n7xKk.cer (raw, json) Hash identifier: M7A5P4KAbIQmMX7ap/0v6TYTbwb+11jucbU1hoSIjNk= Subject key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AA5CC920BB4C4E523DAA818DD1EE0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.10.68.0/22 IP: 45.83.236.0/22 IP: 45.150.196.0/22 IP: 91.208.69.0/24 IP: 91.208.73.0/24 IP: 91.208.104.0/24 IP: 91.208.109.0/24 IP: 91.208.236.0/24 IP: 91.208.240.0/24 IP: 91.208.245.0 -- 91.208.246.255 IP: 91.213.174.0/24 IP: 91.213.186.0/24 IP: 91.213.189.0/24 IP: 91.213.200.0/24 IP: 91.216.169.0/24 IP: 91.216.190.0/24 IP: 91.216.215.0/24 IP: 91.217.135.0/24 IP: 2a12:ab80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a5:cc:92:0b:b4:c4:e5:23:da:a8:18:dd:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:0f:66:d1:e3:95:be:c2:28:e1:3d:4c:63: 93:af:5c:17:c7:2f:02:c3:7c:e7:1e:4f:2d:c0:8a: ae:52:0b:a5:4b:80:58:ef:46:9f:b6:06:9f:60:3e: 09:f1:9b:44:59:4b:a3:de:4d:a8:92:b9:be:7c:19: a2:ea:51:72:df:3a:83:fe:8a:82:dc:38:02:f7:85: ec:d8:f0:31:16:05:ee:ff:91:c3:c7:5c:4a:41:c5: 9b:56:be:ce:9e:89:50:c9:a5:5b:5e:4b:41:83:cf: cf:be:e2:57:3d:23:d6:de:7b:f8:7b:09:8e:f4:aa: e8:ed:fb:20:84:14:9a:00:fd:08:93:ac:f4:e2:90: 78:20:22:13:3f:4b:16:03:f7:55:0d:db:7e:b4:2e: fa:7c:36:7d:6b:3a:f4:97:d1:fe:b6:8f:6e:fa:58: 0f:d9:59:18:20:ee:48:01:6c:7d:ea:6b:3c:e4:14: 83:10:fb:0b:00:18:ed:d5:62:6f:ed:b0:10:d1:a4: 6a:c0:42:1e:5a:62:d0:32:05:f0:23:bb:a6:21:be: 06:d5:a2:d0:91:f7:13:a2:0a:72:7e:77:6b:f3:d3: fb:1a:5a:dd:a0:7b:40:ff:d8:04:5f:98:df:8b:cd: 88:de:86:d3:70:b7:b7:2a:32:2c:1b:d9:a1:37:91: b7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.68.0/22 45.83.236.0/22 45.150.196.0/22 91.208.69.0/24 91.208.73.0/24 91.208.104.0/24 91.208.109.0/24 91.208.236.0/24 91.208.240.0/24 91.208.245.0-91.208.246.255 91.213.174.0/24 91.213.186.0/24 91.213.189.0/24 91.213.200.0/24 91.216.169.0/24 91.216.190.0/24 91.216.215.0/24 91.217.135.0/24 IPv6: 2a12:ab80::/29 Signature Algorithm: sha256WithRSAEncryption 25:74:bd:53:e8:0a:4e:04:0c:d3:57:5a:29:7f:d4:b8:c9:e6: 95:87:b5:76:bb:3d:85:68:c0:9c:dc:87:04:cd:a9:b1:f6:f0: cf:36:e1:43:43:64:86:e2:71:4e:c6:d7:9a:f2:2c:e0:5b:ae: b9:8e:d4:96:38:e1:8a:3f:42:aa:74:5d:8b:bc:be:45:eb:01: 6d:0c:a5:04:2d:28:88:8b:4e:d3:3d:f0:8a:c8:46:ea:03:ba: 98:39:e6:6e:a9:5e:98:3e:98:cf:23:b1:4f:e0:56:25:d0:1f: 76:84:86:c8:0c:d6:78:1b:74:ab:29:6d:49:c0:33:a4:b5:cc: 69:6b:cc:57:58:cb:3c:1e:85:06:ee:b6:cc:14:b0:77:51:93: 2e:6b:37:03:f6:27:6b:6f:bc:82:fb:e1:da:37:e4:b0:e8:1d: b0:bf:3f:52:ab:f4:a4:13:6f:e9:ef:d9:c3:b3:c6:bb:c0:24: 0f:71:27:59:19:2f:8d:39:ed:9a:47:05:2d:ae:bf:96:70:ca: 44:29:52:22:ea:ba:ba:ea:d3:43:7f:90:15:a5:c8:e8:31:08: ac:22:d0:a5:e8:f4:2e:7b:b6:43:ea:d7:79:9e:ec:03:65:74: dd:37:83:f2:86:d1:d5:b7:f3:6f:ce:b5:71:ec:e1:5e:f3:43: 74:9f:d9:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgISAZt6WqXMkgu0xOUj2qgY3R7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjQ3MzgzODljYjNiOTk4ZWM0ZmE2ZDQyNzJmOGRkNzk5ZmJjNGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCQPZtHjlb7CKOE9TGOTr1wXxy8C w3znHk8twIquUgulS4BY70aftgafYD4J8ZtEWUuj3k2okrm+fBmi6lFy3zqD/oqC 3DgC94Xs2PAxFgXu/5HDx1xKQcWbVr7OnolQyaVbXktBg8/PvuJXPSPW3nv4ewmO 9Kro7fsghBSaAP0Ik6z04pB4ICITP0sWA/dVDdt+tC76fDZ9azr0l9H+to9u+lgP 2VkYIO5IAWx96ms85BSDEPsLABjt1WJv7bAQ0aRqwEIeWmLQMgXwI7umIb4G1aLQ kfcTogpyfndr89P7GlrdoHtA/9gEX5jfi82I3obTcLe3KjIsG9mhN5G3pQIDAQAB o4IDBDCCAwAwHQYDVR0OBBYEFB9HODics7mY7E+m1CcvjdeZ+8SpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1LzUxNzY5 NC1jOGExLTQ1OGItOWNmMi02YzdlNTY4NTg5MGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvNTE3Njk0 LWM4YTEtNDU4Yi05Y2YyLTZjN2U1Njg1ODkwYy8xL0gwYzRPSnl6dVpqc1Q2YlVK eS1OMTVuN3hLay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGeBggrBgEF BQcBBwEB/wSBjjCBizB6BAIAATB0AwQCLQpEAwQCLVPsAwQCLZbEAwQAW9BFAwQA W9BJAwQAW9BoAwQAW9BtAwQAW9DsAwQAW9DwMAwDBABb0PUDBABb0PYDBABb1a4D BABb1boDBABb1b0DBABb1cgDBABb2KkDBABb2L4DBABb2NcDBABb2YcwDQQCAAIw BwMFAyoSq4AwDQYJKoZIhvcNAQELBQADggEBACV0vVPoCk4EDNNXWil/1LjJ5pWH tXa7PYVowJzchwTNqbH28M824UNDZIbicU7G15ryLOBbrrmO1JY44Yo/Qqp0XYu8 vkXrAW0MpQQtKIiLTtM98IrIRuoDupg55m6pXpg+mM8jsU/gViXQH3aEhsgM1ngb dKspbUnAM6S1zGlrzFdYyzwehQbutswUsHdRky5rNwP2J2tvvIL74do35LDoHbC/ P1Kr9KQTb+nv2cOzxrvAJA9xJ1kZL4057ZpHBS2uv5ZwykQpUiLqurrq00N/kBWl yOgxCKwi0KXo9C57tkPq13me7ANldN03g/KG0dW382/OtXHs4V7zQ3Sf2a8= -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:18 2026 by rpki-client