This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer File: RRZvo3x2TNxioAvKKyssh5_2mdk.cer (raw, json) Hash identifier: tRtL52jg+QbjnmYQXlY4HCtxEGV7P5dmGj1zbDNDSmE= Subject key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED821C2DBC09035946015854D506E6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58195 IP: 91.239.173.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:82:1c:2d:bc:09:03:59:46:01:58:54:d5:06:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:c0:a4:03:c2:12:63:f8:18:c5:57:c2:a4: 18:b1:eb:ae:d7:ba:ea:e9:49:71:5d:35:03:32:f6: 74:eb:ee:1c:09:9c:7f:0d:e5:eb:65:78:ec:9a:4c: 66:2c:7b:b9:5e:db:0f:e7:a2:b1:05:91:3c:a7:94: f5:1a:47:52:2f:5a:1c:17:58:2d:58:1c:46:3b:de: 02:7c:f7:c0:75:df:fa:f2:17:0f:32:65:c7:f6:60: bb:02:16:de:7d:c5:7c:85:7a:9d:59:20:01:bf:cd: 44:e9:46:93:90:3e:c6:01:79:18:18:e2:a9:0a:a9: 5b:20:6f:92:f9:7d:c1:95:10:31:ef:f1:1e:e6:fb: 6d:55:20:e3:85:74:15:d0:10:0f:5e:45:8e:c0:69: c3:4c:c4:bd:f3:a9:07:88:b8:b4:44:db:86:01:12: 79:05:31:7b:1d:dd:74:3c:a1:91:bb:75:1e:d2:63: c0:3d:b2:33:0c:fb:77:37:05:f8:68:38:43:18:74: 38:21:9f:f1:bc:eb:f7:fd:f1:92:fd:24:4e:d4:da: 1f:2c:09:db:53:29:90:1e:ec:9a:50:5b:60:cb:46: 3b:90:1d:88:62:c6:07:19:54:b7:45:07:80:69:3c: 74:f1:35:8b:c5:82:76:7e:e5:12:7e:d3:85:23:aa: e2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.173.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58195 Signature Algorithm: sha256WithRSAEncryption 26:c6:a2:67:0b:a9:2b:4e:e8:e1:12:d0:5e:dd:74:fa:80:f0: 81:ad:1d:ed:8d:e0:80:68:75:e2:4d:d2:fb:78:1a:49:d6:81: 8d:4b:65:c2:b0:37:c1:ed:c1:88:61:3b:bc:32:6c:1b:cc:a3: 3b:98:15:bb:b9:db:93:2f:90:2d:22:f1:20:31:13:f5:53:f7: a6:c4:10:04:e4:46:51:7c:77:ae:de:a3:bd:85:c1:86:08:48: 76:54:b7:d9:4d:68:ff:07:36:b1:08:a4:ec:87:1f:3a:6b:e4: 94:f8:ba:ee:54:b6:e5:c7:09:b1:1e:0a:35:30:2b:69:e6:81: 22:f9:93:dc:99:91:72:cb:36:92:65:e9:56:b7:ff:ad:f7:fb: 4c:d5:65:41:1f:8f:e6:58:b2:e2:53:1e:12:9f:76:5c:7a:18: 1c:7f:80:2a:dc:87:23:f1:75:91:b5:b0:cf:86:5f:d0:cd:d4: 2f:a2:86:87:42:af:5a:51:89:ab:6a:52:eb:36:40:6f:0f:93: 5d:92:76:41:e1:75:e3:29:64:26:da:5f:59:e0:74:28:45:af: f1:99:72:4d:c4:20:63:b9:5b:37:76:35:d4:f7:27:65:97:c2: e4:46:35:9c:40:43:87:6b:4a:2f:64:23:b4:b4:16:32:95:f4: fd:d2:db:94 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87YIcLbwJA1lGAVhU1QbmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTE2NmZhMzdjNzY0Y2RjNjJhMDBiY2EyYjJiMmM4NzlmZjY5OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQzApAPCEmP4GMVXwqQYseuu17rq 6UlxXTUDMvZ06+4cCZx/DeXrZXjsmkxmLHu5XtsP56KxBZE8p5T1GkdSL1ocF1gt WBxGO94CfPfAdd/68hcPMmXH9mC7AhbefcV8hXqdWSABv81E6UaTkD7GAXkYGOKp CqlbIG+S+X3BlRAx7/Ee5vttVSDjhXQV0BAPXkWOwGnDTMS986kHiLi0RNuGARJ5 BTF7Hd10PKGRu3Ue0mPAPbIzDPt3NwX4aDhDGHQ4IZ/xvOv3/fGS/SRO1NofLAnb UymQHuyaUFtgy0Y7kB2IYsYHGVS3RQeAaTx08TWLxYJ2fuUSftOFI6riMwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEUWb6N8dkzcYqALyisrLIef9pnZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhhLzA4ZTJj ZC1mOTFhLTQwMjUtOTJlZi1lMDY2MGQwMjMxMDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGEvMDhlMmNk LWY5MWEtNDAyNS05MmVmLWUwNjYwZDAyMzEwNC8xL1JSWnZvM3gyVE54aW9BdktL eXNzaDVfMm1kay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW++tMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDjUzANBgkqhkiG9w0BAQsFAAOCAQEAJsaiZwupK07o4RLQXt10+oDwga0d7Y3g gGh14k3S+3gaSdaBjUtlwrA3we3BiGE7vDJsG8yjO5gVu7nbky+QLSLxIDET9VP3 psQQBORGUXx3rt6jvYXBhghIdlS32U1o/wc2sQik7IcfOmvklPi67lS25ccJsR4K NTAraeaBIvmT3JmRcss2kmXpVrf/rff7TNVlQR+P5liy4lMeEp92XHoYHH+AKtyH I/F1kbWwz4Zf0M3UL6KGh0KvWlGJq2pS6zZAbw+TXZJ2QeF14ylkJtpfWeB0KEWv 8ZlyTcQgY7lbN3Y11PcnZZfC5EY1nEBDh2tKL2QjtLQWMpX0/dLblA== -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:48 2026 by rpki-client