This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer (raw, json) Hash identifier: evyOpUf+pOJlVFBJKO5Yz3wS6Px7j7IK4U+ge1a8LRc= Subject key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78344D3107930A6A436EEAB7BF4DA300 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42718 IP: 176.117.62.0/24 IP: 2001:678:3e0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4d:31:07:93:0a:6a:43:6e:ea:b7:bf:4d:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:09:e2:77:4b:18:bd:30:ec:da:b5:2b:25: 4b:ff:f1:42:e3:0e:40:fc:0f:91:7f:73:3c:2d:ba: 29:14:17:8c:aa:e8:b5:b4:b7:d2:3d:60:b1:38:fc: 65:f9:c4:dd:c2:34:6b:82:a4:a7:e9:1f:83:45:5b: 44:b6:92:29:fd:d2:d9:bd:e7:b1:6d:8c:4b:7b:a3: bb:60:19:32:1e:34:71:35:98:64:2d:29:44:25:a9: b4:74:75:80:64:35:21:a9:0a:99:02:b9:d0:45:05: fc:88:e9:ac:0d:d1:88:8d:36:8e:d6:69:53:aa:bc: 74:37:ca:06:3a:84:17:d5:41:c4:80:90:b2:67:e3: 5e:38:f2:e8:62:11:8c:e3:52:82:ac:17:4c:70:e3: 6a:da:aa:db:bc:da:f0:7f:13:6f:d2:59:4c:6c:58: b0:40:38:5c:67:40:f3:56:c9:f0:ac:df:e1:2b:dc: a3:3a:31:9a:e0:aa:af:d4:fa:16:46:d3:19:55:b7: ea:20:be:ed:de:47:d2:82:a3:05:86:d1:28:62:a6: 45:d2:b4:0c:c5:9f:86:6c:48:b4:99:41:a7:d6:f8: fd:96:b9:b4:12:9e:81:28:2b:49:fe:56:eb:8e:14: 8a:61:d1:9e:06:d4:87:20:e9:67:27:cc:56:4a:63: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.62.0/24 IPv6: 2001:678:3e0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42718 Signature Algorithm: sha256WithRSAEncryption a6:60:87:81:6e:d7:3c:d4:52:53:5c:86:32:84:ca:2a:1b:1c: e8:ef:0a:77:48:17:eb:d1:3c:a0:de:7f:0f:41:cb:80:99:22: f8:5d:f0:07:c6:d9:75:91:e9:b3:2b:88:54:6d:bd:d5:70:3f: b3:e4:96:69:71:dd:2a:ce:b0:34:72:03:09:55:f3:31:36:8b: d3:2b:ee:85:25:a9:7e:1c:de:03:80:f3:91:0a:f7:ba:84:74: 0f:c9:34:a7:76:f6:cd:fc:d7:b5:46:03:3a:26:a9:72:fe:5e: bb:e1:89:9d:8f:14:00:c0:1a:c4:23:35:04:89:bf:22:94:99: 95:ff:84:cb:d2:75:70:c7:6a:65:90:11:6b:6d:1c:92:ba:ec: 1f:1e:f6:72:d5:c4:43:5a:a5:a7:01:17:14:8c:99:d5:8a:4e: c8:ac:ac:1e:4e:91:22:22:0b:d8:72:56:9e:0e:e7:33:db:28: 23:c6:01:a7:82:3d:88:0c:e9:46:96:ec:b6:93:bd:47:0e:7f: d8:7e:fa:3a:31:57:1a:70:a2:b3:41:1e:89:98:42:34:e8:d7: ba:13:fe:e6:fb:d1:b9:1f:ab:53:d9:ca:58:44:10:ad:2c:83: 1b:36:4d:3d:b3:ab:19:46:c4:8f:94:34:65:0b:58:7c:90:58: b1:41:79:67 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt4NE0xB5MKakNu6re/TaMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzhkMjQ4OThkMWNmNTJkMjNmOTU2MWRjNmFjMGYxMzYzZTZjNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5gJ4ndLGL0w7Nq1KyVL//FC4w5A /A+Rf3M8LbopFBeMqui1tLfSPWCxOPxl+cTdwjRrgqSn6R+DRVtEtpIp/dLZveex bYxLe6O7YBkyHjRxNZhkLSlEJam0dHWAZDUhqQqZArnQRQX8iOmsDdGIjTaO1mlT qrx0N8oGOoQX1UHEgJCyZ+NeOPLoYhGM41KCrBdMcONq2qrbvNrwfxNv0llMbFiw QDhcZ0DzVsnwrN/hK9yjOjGa4Kqv1PoWRtMZVbfqIL7t3kfSgqMFhtEoYqZF0rQM xZ+GbEi0mUGn1vj9lrm0Ep6BKCtJ/lbrjhSKYdGeBtSHIOlnJ8xWSmNVRwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFEeNJImNHPUtI/lWHcasDxNj5sdgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzZjYjcy ZC00NWE3LTQ0OTAtOWM1OS05M2VhZDM1YTEyY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvNmNiNzJk LTQ1YTctNDQ5MC05YzU5LTkzZWFkMzVhMTJjYS8xL1I0MGtpWTBjOVMwai1WWWR4 cXdQRTJQbXgyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAsHU+MA8EAgACMAkDBwAgAQZ4A+AwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAKbeMA0GCSqGSIb3DQEBCwUAA4IBAQCmYIeBbtc8 1FJTXIYyhMoqGxzo7wp3SBfr0Tyg3n8PQcuAmSL4XfAHxtl1kemzK4hUbb3VcD+z 5JZpcd0qzrA0cgMJVfMxNovTK+6FJal+HN4DgPORCve6hHQPyTSndvbN/Ne1RgM6 Jqly/l674YmdjxQAwBrEIzUEib8ilJmV/4TL0nVwx2plkBFrbRySuuwfHvZy1cRD WqWnARcUjJnVik7IrKweTpEiIgvYclaeDucz2ygjxgGngj2IDOlGluy2k71HDn/Y fvo6MVcacKKzQR6JmEI06Ne6E/7m+9G5H6tT2cpYRBCtLIMbNk09s6sZRsSPlDRl C1h8kFixQXln -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:47 2026 by rpki-client