This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer (raw, json) Hash identifier: O9cXcJwEO6A/EBWLdOWUsqMYKdXy787LCGTE55rbYOw= Subject key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11C52D9F6FC8DA87427805C3A6F8E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3295 -- 3299 IP: 193.47.192.0/24 IP: 193.178.154.0/23 IP: 194.119.0.0/17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c5:2d:9f:6f:c8:da:87:42:78:05:c3:a6:f8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:40:8d:b9:1f:0a:40:bf:5e:2d:c9:db:41: 66:11:af:6e:4b:5d:9f:72:1a:ea:00:e4:22:14:8b: 5a:86:3a:27:6c:a2:07:ea:e8:0a:47:10:b7:22:ad: c4:69:ec:bb:1d:23:94:d6:db:23:35:ae:7a:93:e8: f3:97:88:1a:14:5a:69:fa:71:80:4b:c7:52:52:62: a4:b6:b8:bb:1f:a6:3c:36:db:95:55:ea:97:02:5e: f0:81:86:32:86:ac:a2:33:58:47:bf:91:a6:01:62: 56:4b:ad:33:d1:30:e3:16:0b:3f:39:ab:62:97:2a: db:8a:f7:50:6a:8b:1b:9f:ed:fd:97:aa:74:21:fd: bf:9f:f6:28:a3:e7:93:48:28:e3:4f:b0:fd:85:78: cf:e5:31:b2:c6:09:64:f7:e0:78:1f:9f:09:cd:b1: 7e:79:ea:99:b1:62:67:c2:af:b9:58:c4:8b:8e:8e: f6:73:47:80:b1:4d:c3:58:73:7a:1b:28:b8:61:ec: a3:f2:9b:a5:89:2d:74:fd:38:5c:60:27:74:0b:1f: 47:35:3c:83:a5:51:8d:6e:b8:04:de:b0:e5:fb:03: 04:ec:3b:4f:98:30:9f:8a:ee:d9:c3:4b:83:b1:02: f5:9f:c1:10:0e:bf:5c:69:4d:55:21:60:3e:33:ff: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.47.192.0/24 193.178.154.0/23 194.119.0.0/17 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3295-3299 Signature Algorithm: sha256WithRSAEncryption 01:bd:2e:84:30:4c:4e:35:95:4a:11:cb:5e:bd:a9:ac:d3:54: 6b:e7:70:ff:e2:65:08:5d:e5:2e:47:3d:0a:67:76:99:c7:bc: b1:3f:c8:44:7f:a4:ba:5c:c2:63:c1:33:33:73:75:d8:c9:91: f7:d2:20:43:31:56:61:2b:0f:22:43:f6:74:b7:cc:6f:56:4a: 7a:87:62:25:b7:7c:87:93:da:f0:4c:18:c4:b0:34:6e:b6:45: e8:0e:c2:f5:5e:1b:9c:ef:49:27:b4:45:54:e5:65:60:81:80: 63:8e:c6:1b:a1:a1:06:46:ac:d2:4f:76:54:5a:34:d2:2c:82: 31:61:ca:28:ad:de:50:5f:cb:ff:74:1a:09:c2:66:f8:be:9f: 22:b7:fb:c7:8b:b4:f8:64:2e:bc:71:7b:be:5d:e9:a6:6f:c2: 37:64:87:11:bc:da:24:c9:f2:70:00:e7:ba:e0:c8:e8:8c:1d: ae:3f:5e:90:11:ab:0c:8a:41:e4:e6:e9:a4:10:4a:92:8e:e9: 78:13:32:77:7d:b9:f4:1b:aa:9e:f4:40:a0:e4:79:30:c8:2a: ce:b9:bc:8d:6b:e5:be:bc:15:4f:63:09:b9:de:08:24:02:80: d5:68:4d:f0:08:75:80:85:6c:7e:09:b3:8a:55:5a:4c:21:60: af:06:c0:70 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt8EcUtn2/I2odCeAXDpvjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWQzNGZkMDQ4YjU5N2IzZTVmN2RhODlkZmU2NDY1NzY5N2U4ZWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofFAjbkfCkC/Xi3J20FmEa9uS12f chrqAOQiFItahjonbKIH6ugKRxC3Iq3Eaey7HSOU1tsjNa56k+jzl4gaFFpp+nGA S8dSUmKktri7H6Y8NtuVVeqXAl7wgYYyhqyiM1hHv5GmAWJWS60z0TDjFgs/Oati lyrbivdQaosbn+39l6p0If2/n/Yoo+eTSCjjT7D9hXjP5TGyxglk9+B4H58JzbF+ eeqZsWJnwq+5WMSLjo72c0eAsU3DWHN6Gyi4Yeyj8puliS10/ThcYCd0Cx9HNTyD pVGNbrgE3rDl+wME7DtPmDCfiu7Zw0uDsQL1n8EQDr9caU1VIWA+M/9UiQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFEXTT9BItZez5ffaid/mRldpfo7jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2NlNzdi MS0xYzRkLTQ3YjAtYTc3Yi04NDM5NDhjYmZiODEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvY2U3N2Ix LTFjNGQtNDdiMC1hNzdiLTg0Mzk0OGNiZmI4MS8xL1JkTlAwRWkxbDdQbDk5cUoz LVpHVjJsLWp1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAwS/AAwQBwbKaAwQHwncAMB8GCCsGAQUFBwEI AQH/BBAwDqAMMAowCAICDN8CAgzjMA0GCSqGSIb3DQEBCwUAA4IBAQABvS6EMExO NZVKEctevams01Rr53D/4mUIXeUuRz0KZ3aZx7yxP8hEf6S6XMJjwTMzc3XYyZH3 0iBDMVZhKw8iQ/Z0t8xvVkp6h2Ilt3yHk9rwTBjEsDRutkXoDsL1Xhuc70kntEVU 5WVggYBjjsYboaEGRqzST3ZUWjTSLIIxYcoord5QX8v/dBoJwmb4vp8it/vHi7T4 ZC68cXu+Xemmb8I3ZIcRvNokyfJwAOe64MjojB2uP16QEasMikHk5umkEEqSjul4 EzJ3fbn0G6qe9ECg5HkwyCrOubyNa+W+vBVPYwm53ggkAoDVaE3wCHWAhWx+CbOK VVpMIWCvBsBw -----END CERTIFICATE-----Generated at Fri Jan 9 17:09:01 2026 by rpki-client