This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer File: Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer (raw, json) Hash identifier: jTB8AUoWH5E8+0KVGcH0y2CYZcUYc6sNgjHDS/wCToI= Subject key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E1520F957224048953814921A2B68 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31113 IP: 193.23.58.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:15:20:f9:57:22:40:48:95:38:14:92:1a:2b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45be271d6495293347465c69b97d7380e4bbb46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3b:f4:70:2d:ae:ab:c1:2b:62:36:47:45:cc: 8d:d4:be:0a:2d:17:6d:ac:bd:1c:88:16:7c:c0:fb: 02:84:6e:46:32:b4:54:b1:9f:cb:c9:f2:64:b6:3c: 42:7e:c4:15:a0:1e:a0:03:43:ea:6e:b2:62:d9:84: fc:c8:2b:19:ba:b0:7c:f5:75:e3:de:8d:ed:86:45: 0e:f7:b4:cf:86:ca:cf:8b:dd:49:04:d0:ea:25:89: f6:98:45:4d:91:c5:da:23:20:bb:df:df:54:8f:3f: 7c:75:6c:08:aa:3e:6d:01:0f:c2:fa:94:22:3b:6b: e8:e4:cd:6a:52:04:b6:17:7b:bf:d8:e9:5c:03:a6: fb:07:7d:40:e2:4d:01:6e:55:0a:c6:a7:fa:53:bf: 07:d7:ab:6e:7c:50:55:be:0a:8e:cc:00:c9:71:05: f0:fa:14:30:04:04:ba:34:ce:86:fd:27:f3:af:f5: 19:25:f5:f9:86:af:0f:6d:d3:53:8e:f1:42:11:e5: 65:bc:92:f4:25:ed:e6:bf:81:93:18:47:d2:3c:b2: 6f:31:7c:82:f4:3a:87:b4:af:bb:0b:64:f8:f7:7b: b3:6c:43:82:2b:6d:35:a7:70:2f:3e:f1:df:17:83: b3:1e:22:87:4a:ed:02:17:74:9c:76:f7:d2:6b:e5: f3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.58.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31113 Signature Algorithm: sha256WithRSAEncryption 5a:b3:94:b2:7d:c8:4b:d9:d9:70:89:dc:a0:ae:d0:21:fc:28: c8:15:3c:07:c3:1e:d5:77:ec:72:a3:46:b9:5c:87:1d:64:0d: f0:ec:2c:dd:ac:01:9b:b5:d2:0e:0c:35:ce:58:09:d4:79:8d: e6:1c:cd:8c:cd:83:1b:fe:31:b6:35:91:5d:f4:5a:cd:df:34: e9:f7:30:63:76:10:48:5c:74:81:ce:e8:ba:44:4b:a5:a2:d4: dc:5f:46:5d:1e:79:86:8f:61:94:e3:e5:34:e0:70:e4:b1:9d: 12:d8:b5:6a:d3:d0:2a:4b:1f:69:36:e7:2c:50:2a:e8:b4:61: 7c:62:7c:fd:6c:25:20:1c:41:76:0f:ba:0f:09:49:14:f6:2b: e7:cb:bf:b5:84:1d:ea:c9:18:87:ef:80:1e:b2:c6:63:f3:03: 25:0d:08:b2:b9:6e:b9:39:b0:1b:b7:58:4f:7a:49:7d:07:68: 3b:6d:9a:7c:9e:83:db:44:01:dc:24:43:91:e9:83:e1:47:04: e8:70:de:f8:c8:2c:d0:ef:f4:34:51:a8:ca:f4:cf:92:eb:b7: 72:f2:f4:4c:0e:d5:7d:bb:95:29:1e:55:e3:3e:bd:f6:f9:55: 0b:46:d6:79:8c:5a:f6:c2:41:ad:f6:20:c5:80:49:f7:03:0b: 7b:1c:89:e9 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt5fhUg+VciQEiVOBSSGitoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWJlMjcxZDY0OTUyOTMzNDc0NjVjNjliOTdkNzM4MGU0YmJiNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTv0cC2uq8ErYjZHRcyN1L4KLRdt rL0ciBZ8wPsChG5GMrRUsZ/LyfJktjxCfsQVoB6gA0PqbrJi2YT8yCsZurB89XXj 3o3thkUO97TPhsrPi91JBNDqJYn2mEVNkcXaIyC7399Ujz98dWwIqj5tAQ/C+pQi O2vo5M1qUgS2F3u/2OlcA6b7B31A4k0BblUKxqf6U78H16tufFBVvgqOzADJcQXw +hQwBAS6NM6G/Sfzr/UZJfX5hq8PbdNTjvFCEeVlvJL0Je3mv4GTGEfSPLJvMXyC 9DqHtK+7C2T493uzbEOCK201p3AvPvHfF4OzHiKHSu0CF3ScdvfSa+XzxQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFEW+Jx1klSkzR0Zcabl9c4Dku7RtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2JiOWY2 NS00OWQ4LTQxZTMtOWViYy1jODJlMTU4YzAxMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvYmI5ZjY1 LTQ5ZDgtNDFlMy05ZWJjLWM4MmUxNThjMDEyZC8xL1JiNG5IV1NWS1ROSFJseHB1 WDF6Z09TN3RHMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRc6MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnmJMA0GCSqGSIb3DQEBCwUAA4IBAQBas5SyfchL2dlwidygrtAh/CjIFTwHwx7V d+xyo0a5XIcdZA3w7CzdrAGbtdIODDXOWAnUeY3mHM2MzYMb/jG2NZFd9FrN3zTp 9zBjdhBIXHSBzui6REulotTcX0ZdHnmGj2GU4+U04HDksZ0S2LVq09AqSx9pNucs UCrotGF8Ynz9bCUgHEF2D7oPCUkU9ivny7+1hB3qyRiH74AessZj8wMlDQiyuW65 ObAbt1hPekl9B2g7bZp8noPbRAHcJEOR6YPhRwTocN74yCzQ7/Q0UajK9M+S67dy 8vRMDtV9u5UpHlXjPr32+VULRtZ5jFr2wkGt9iDFgEn3Awt7HInp -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:43 2026 by rpki-client