This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer File: RRi4nH3OK17cBVgVFs_BnXoxdOg.cer (raw, json) Hash identifier: C4WTp1Gk+9hiklozgEQHrcxN97qqZS7Gw9Pr6VV3k0c= Subject key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB385749C21AE26A8C013821795335 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60103 IP: 185.57.152.0/22 IP: 2a02:5ce0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:38:57:49:c2:1a:e2:6a:8c:01:38:21:79:53:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:4a:e6:6c:05:84:ac:08:d3:9b:8d:80:46: 1b:66:66:25:61:3a:d3:3e:9d:16:ab:c3:43:21:85: 9d:34:7a:31:e4:ae:19:cf:e5:4d:37:0e:8a:ee:00: 2e:a6:c0:5a:80:49:d6:2e:52:cc:46:f6:20:ba:81: 25:af:e9:1b:b1:a9:44:8d:aa:6f:ed:86:aa:88:9a: 13:5a:6a:71:24:48:fc:0c:42:26:5f:8b:3c:f1:73: 56:c6:ca:a8:06:68:f0:45:3d:92:79:4e:b6:e5:5c: 40:4b:69:1d:32:e0:0b:65:d3:b5:c2:89:6c:fb:77: e2:e1:84:6f:57:69:12:07:64:f7:21:59:2d:ca:99: 55:97:13:c3:3c:87:73:4f:1d:fc:3e:8b:58:4d:0c: a9:4d:a3:f5:ed:48:64:a5:25:05:f7:a4:2e:bd:a6: 9c:05:ca:fb:2b:ec:03:8e:26:28:af:ac:1e:89:31: 76:69:d1:87:b4:c8:1c:97:a1:9d:91:24:05:ed:a1: e1:af:2d:c5:2e:6d:ad:18:b5:f8:a2:9c:4d:e2:bc: fb:81:4f:07:0e:3a:dc:6e:e2:d2:28:00:8b:1c:02: ee:ca:29:a2:66:45:ee:00:fd:62:f1:90:06:1a:16: 16:e4:f3:e5:32:93:39:af:ec:82:70:25:23:c9:00: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.152.0/22 IPv6: 2a02:5ce0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60103 Signature Algorithm: sha256WithRSAEncryption 13:f7:e6:b2:5b:9a:2c:b8:f4:73:c2:20:8d:ad:82:40:1a:a9: f8:2a:2e:22:9f:60:72:ae:e3:5b:0b:b1:e3:c6:c2:7f:fe:ca: bc:b2:22:4a:2c:11:e6:4e:4a:37:ab:8b:4c:7a:1d:fb:0b:96: db:b4:5a:e7:8a:07:04:d1:fa:bf:03:d5:60:d1:58:eb:fe:87: a1:68:04:8e:89:5c:dd:70:17:5c:1f:99:0c:ee:42:c4:d4:81: 92:c4:76:78:72:e6:d1:cc:31:b7:3c:f3:63:34:6c:a6:78:16: 14:59:20:47:c9:60:36:1a:76:e8:fc:d9:42:24:b8:fb:d8:96: a0:34:a8:82:98:a2:a3:4a:e3:7f:b9:76:a5:0e:44:89:98:36: b5:0b:ff:52:85:4a:45:c5:9e:96:50:3a:9a:3a:f7:50:2f:04: 63:e1:71:ae:fa:cf:95:82:d5:32:d2:a8:7c:4d:ba:bb:0b:42: 21:5b:45:8d:64:4d:60:41:1a:97:06:9b:04:af:45:1d:54:44: 3d:13:38:95:a5:b1:47:52:35:0d:21:63:02:fe:64:de:a7:02: 9b:e5:de:90:ce:0d:e8:c2:57:f2:da:d4:52:d8:ba:6b:2e:23: fc:85:4f:74:02:a4:27:dd:90:f6:33:d6:a4:5a:c9:97:22:b7: 5f:d9:d8:c4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26zhXScIa4mqMATgheVM1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTE4Yjg5YzdkY2UyYjVlZGMwNTU4MTUxNmNmYzE5ZDdhMzE3NGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPxK5mwFhKwI05uNgEYbZmYlYTrT Pp0Wq8NDIYWdNHox5K4Zz+VNNw6K7gAupsBagEnWLlLMRvYguoElr+kbsalEjapv 7YaqiJoTWmpxJEj8DEImX4s88XNWxsqoBmjwRT2SeU625VxAS2kdMuALZdO1wols +3fi4YRvV2kSB2T3IVktyplVlxPDPIdzTx38PotYTQypTaP17UhkpSUF96Quvaac Bcr7K+wDjiYor6weiTF2adGHtMgcl6GdkSQF7aHhry3FLm2tGLX4opxN4rz7gU8H DjrcbuLSKACLHALuyimiZkXuAP1i8ZAGGhYW5PPlMpM5r+yCcCUjyQDJQQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEUYuJx9zite3AVYFRbPwZ16MXToMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2NjZjQ0 NC1hMjJjLTRmY2QtYmYxYS0wZjkzN2NjZjAyZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvY2NmNDQ0 LWEyMmMtNGZjZC1iZjFhLTBmOTM3Y2NmMDJlMC8xL1JSaTRuSDNPSzE3Y0JWZ1ZG c19CblhveGRPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTmYMA0EAgACMAcDBQAqAlzgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDqxzANBgkqhkiG9w0BAQsFAAOCAQEAE/fmsluaLLj0 c8Igja2CQBqp+CouIp9gcq7jWwux48bCf/7KvLIiSiwR5k5KN6uLTHod+wuW27Ra 54oHBNH6vwPVYNFY6/6HoWgEjolc3XAXXB+ZDO5CxNSBksR2eHLm0cwxtzzzYzRs pngWFFkgR8lgNhp26PzZQiS4+9iWoDSogpiio0rjf7l2pQ5EiZg2tQv/UoVKRcWe llA6mjr3UC8EY+FxrvrPlYLVMtKofE26uwtCIVtFjWRNYEEalwabBK9FHVREPRM4 laWxR1I1DSFjAv5k3qcCm+XekM4N6MJX8trUUti6ay4j/IVPdAKkJ92Q9jPWpFrJ lyK3X9nYxA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:31 2026 by rpki-client