This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer File: RbmFSwRFlObPCEb7Qd57CQj7X3I.cer (raw, json) Hash identifier: R+UWKBcH0Ug63VBfCtdixAWb4tBqvdrliwokE9HE/lY= Subject key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77588F825C662A63FE866FDF2BD85F58 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24679 AS: 44780 IP: 81.3.0.0/18 IP: 83.246.0.0/17 IP: 185.148.168.0/22 IP: 193.201.52.0/22 IP: 193.238.228.0/22 IP: 195.47.229.0/24 IP: 195.149.92.0/23 IP: 195.158.238.0/23 IP: 217.175.224.0/19 IP: 217.195.32.0/20 IP: 2a02:790::/32 IP: 2a07:60c0::/29 IP: 2a0f:b2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8f:82:5c:66:2a:63:fe:86:6f:df:2b:d8:5f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:5e:c2:28:19:a3:67:64:1d:01:d0:96:9d: e4:3f:76:62:83:e1:4e:8d:01:2f:31:75:28:e5:ae: 26:7f:a3:e7:77:3c:8f:a0:4d:1f:d8:80:2d:19:ae: 03:b0:bf:5d:63:74:64:97:39:ca:13:c1:3b:e0:cb: 8e:45:c4:65:cf:61:d8:57:b8:97:99:43:43:2c:28: 62:25:8a:a6:db:c8:5f:ba:1d:46:69:7e:02:95:f7: d2:ac:ff:8e:2f:d4:99:84:d5:c3:b3:c4:38:f1:4f: be:e5:4b:4f:36:9c:c9:6d:42:18:5d:f6:c3:7f:e6: 00:2f:6a:de:9f:32:e5:b9:e4:d2:eb:17:0a:0d:c7: be:4d:a0:0f:e7:3f:2a:4e:b1:94:b8:97:b4:8c:97: 5e:ab:30:19:7e:cb:68:63:37:bc:b0:f4:1e:6e:ef: 30:8d:98:4c:90:19:c1:d1:c3:0b:9f:bf:d0:6e:e9: fc:c9:d5:d7:d2:89:9b:cb:51:c6:bd:7c:85:ed:7c: 81:9b:e5:f9:71:97:84:20:31:e1:38:62:af:1e:4a: 08:e1:66:ea:74:ca:9c:00:2c:fc:e5:1e:ed:55:5f: 87:2f:6e:9d:0f:7c:7c:ae:81:86:3f:e2:dc:a9:70: 88:9d:21:cf:ef:45:dd:d4:ac:61:30:36:67:81:12: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.3.0.0/18 83.246.0.0/17 185.148.168.0/22 193.201.52.0/22 193.238.228.0/22 195.47.229.0/24 195.149.92.0/23 195.158.238.0/23 217.175.224.0/19 217.195.32.0/20 IPv6: 2a02:790::/32 2a07:60c0::/29 2a0f:b2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24679 44780 Signature Algorithm: sha256WithRSAEncryption 41:bb:73:55:e8:6a:98:8a:65:41:63:f4:5d:e3:4a:48:2e:ad: 8f:95:1a:ec:86:3a:bd:34:e9:e1:1d:c8:44:e1:71:32:7b:f3: bf:cd:13:0a:d4:68:12:8d:29:9f:84:66:f4:10:38:ab:06:28: 6b:f6:bd:05:6b:5c:8a:13:21:40:98:5c:f6:39:87:8b:51:06: 83:fb:a1:cd:9e:9d:a8:e7:cf:60:95:09:17:90:3b:8e:95:19: 12:47:81:aa:7e:aa:3b:56:c2:70:f1:e6:e6:22:9a:63:9f:a0: 82:10:20:7d:19:96:a1:37:58:b4:35:77:fb:76:82:ce:97:50: 4e:22:aa:17:8b:94:77:64:55:19:96:15:1a:37:ab:7d:54:61: 5b:be:04:cc:fa:e4:d9:ac:a0:66:f9:9f:86:77:79:9b:6b:26: 65:30:dc:fd:12:7e:32:28:54:47:a4:08:8b:d3:c9:4d:f9:21: 3f:63:c8:cc:9f:86:66:b5:e4:10:e7:5b:db:e9:c1:29:74:3d: 7e:45:2a:5d:c5:50:bc:9c:b8:0e:10:34:34:90:3e:ac:99:69: e0:47:09:57:57:40:92:75:f0:a3:cd:b7:26:ea:44:0f:b7:58: aa:c7:b7:fd:5b:5c:55:9c:35:1d:dd:24:ef:ac:66:d4:87:83: 4c:c6:ca:18 -----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgISAZt3WI+CXGYqY/6Gb98r2F9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWI5ODU0YjA0NDU5NGU2Y2YwODQ2ZmI0MWRlN2IwOTA4ZmI1ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuutewigZo2dkHQHQlp3kP3Zig+FO jQEvMXUo5a4mf6PndzyPoE0f2IAtGa4DsL9dY3RklznKE8E74MuORcRlz2HYV7iX mUNDLChiJYqm28hfuh1GaX4ClffSrP+OL9SZhNXDs8Q48U++5UtPNpzJbUIYXfbD f+YAL2renzLlueTS6xcKDce+TaAP5z8qTrGUuJe0jJdeqzAZfstoYze8sPQebu8w jZhMkBnB0cMLn7/Qbun8ydXX0omby1HGvXyF7XyBm+X5cZeEIDHhOGKvHkoI4Wbq dMqcACz85R7tVV+HL26dD3x8roGGP+LcqXCInSHP70Xd1KxhMDZngRKSDQIDAQAB o4IC9zCCAvMwHQYDVR0OBBYEFEW5hUsERZTmzwhG+0HeewkI+19yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzVlNjEx Ni01NmU2LTRjMWQtOTY4My00YjIyZmM1MTg0YTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvNWU2MTE2 LTU2ZTYtNGMxZC05NjgzLTRiMjJmYzUxODRhMi8xL1JibUZTd1JGbE9iUENFYjdR ZDU3Q1FqN1gzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHIGCCsGAQUF BwEHAQH/BGMwYTBCBAIAATA8AwQGUQMAAwQHU/YAAwQCuZSoAwQCwck0AwQCwe7k AwQAwy/lAwQBw5VcAwQBw57uAwQF2a/gAwQE2cMgMBsEAgACMBUDBQAqAgeQAwUD KgdgwAMFAyoPssAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICYGcCAwCu7DANBgkq hkiG9w0BAQsFAAOCAQEAQbtzVehqmIplQWP0XeNKSC6tj5Ua7IY6vTTp4R3IROFx Mnvzv80TCtRoEo0pn4Rm9BA4qwYoa/a9BWtcihMhQJhc9jmHi1EGg/uhzZ6dqOfP YJUJF5A7jpUZEkeBqn6qO1bCcPHm5iKaY5+gghAgfRmWoTdYtDV3+3aCzpdQTiKq F4uUd2RVGZYVGjerfVRhW74EzPrk2aygZvmfhnd5m2smZTDc/RJ+MihUR6QIi9PJ TfkhP2PIzJ+GZrXkEOdb2+nBKXQ9fkUqXcVQvJy4DhA0NJA+rJlp4EcJV1dAknXw o823JupED7dYqse3/VtcVZw1Hd0k76xm1IeDTMbKGA== -----END CERTIFICATE-----Generated at Wed Jan 21 04:42:08 2026 by rpki-client