This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer File: ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer (raw, json) Hash identifier: DXCpTDEkUJU7QyN0dkFL9VHlleL5Q1fsXip8CXnCcxk= Subject key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BE0D9C362BA5F87C02400CC11E0A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204152 IP: 185.112.232.0/22 IP: 2a0e:a480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e0:d9:c3:62:ba:5f:87:c0:24:00:cc:11:e0:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45e3a0c1f1d81ee069643b40c323999bb5584631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:ae:9f:16:93:ea:dd:34:79:78:0b:6f:fb: c4:80:ea:43:d3:03:97:48:17:fe:de:40:b2:2f:de: ae:46:8e:18:35:f1:d6:64:db:ed:cb:5a:69:fc:ca: 20:e6:22:57:6f:d2:9c:f4:06:04:bc:fa:6f:63:85: 1e:38:ed:a0:7a:0d:96:5f:b5:cd:44:4e:eb:cd:66: 0a:73:fd:ab:81:12:9d:8f:a2:1b:fb:00:d5:96:d8: a7:47:9c:21:c5:61:e7:1e:42:68:50:38:dd:80:97: b6:78:15:64:8e:ca:f4:42:cd:15:56:9f:07:ad:2d: c9:b9:18:62:4f:e0:06:cd:af:1a:5c:82:3b:a9:7f: e8:f1:0b:c2:9a:38:1c:05:3a:13:31:69:42:e3:1b: 81:b0:e8:2d:91:ad:1e:4c:17:de:7a:3c:82:e7:59: b7:04:f3:c0:ca:4b:32:fa:f1:f0:17:e3:f9:bb:91: 37:55:94:9c:57:0d:60:be:aa:c6:b3:86:fc:3c:31: 5a:8a:01:29:7f:67:2c:67:e7:96:03:d0:ac:0c:7d: 61:0b:d1:bc:17:58:eb:97:79:1f:57:8d:54:00:a8: ce:63:45:40:53:d9:f5:df:85:02:f9:eb:9f:cb:1e: 69:c9:9e:1b:31:af:1b:1d:2d:19:97:05:d4:ea:18: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.232.0/22 IPv6: 2a0e:a480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204152 Signature Algorithm: sha256WithRSAEncryption 23:ab:c4:7e:26:fd:2f:b6:da:65:79:0e:02:ca:67:9e:d5:12: cd:34:9a:4b:90:53:6e:7d:d4:76:bd:4c:0a:2b:16:40:88:b7: 4d:73:99:0e:ee:a0:79:ef:8d:b3:57:1e:e6:e3:06:5d:41:95: a6:69:7c:68:86:7a:f3:21:99:75:af:36:88:07:7b:c7:76:d0: 94:33:3b:1c:93:40:f1:ce:b9:de:c7:71:0f:6b:1a:e2:8a:2b: 57:b5:59:1c:78:95:15:8c:f8:2e:99:36:f3:b8:ba:02:67:31: 5a:a4:ae:13:31:90:f0:0c:db:70:f6:d9:0e:4b:1e:fd:79:2b: 88:23:4d:12:5e:a8:33:6c:17:06:af:3f:5f:b2:f4:29:d7:cb: 34:db:85:52:2f:7a:0a:58:63:b9:f7:72:7e:39:71:1d:c6:a9: 64:83:47:22:cb:45:bf:16:c0:43:98:01:45:40:47:fa:62:7c: eb:10:47:2c:f4:b5:39:62:8b:6b:00:c6:e3:36:5d:6a:dd:38: aa:19:b6:ef:b6:8b:98:8e:ef:4c:92:28:40:d0:a2:a3:7a:76: d5:d7:c8:55:25:ff:c3:da:ab:6e:41:d7:b4:50:99:f2:5a:49: ad:39:5c:f4:e0:f9:c6:fc:f4:42:cc:c6:e8:8f:5a:8c:ff:b5: 21:03:d6:9e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9W+DZw2K6X4fAJADMEeCkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWUzYTBjMWYxZDgxZWUwNjk2NDNiNDBjMzIzOTk5YmI1NTg0NjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1uunxaT6t00eXgLb/vEgOpD0wOX SBf+3kCyL96uRo4YNfHWZNvty1pp/Mog5iJXb9Kc9AYEvPpvY4UeOO2geg2WX7XN RE7rzWYKc/2rgRKdj6Ib+wDVltinR5whxWHnHkJoUDjdgJe2eBVkjsr0Qs0VVp8H rS3JuRhiT+AGza8aXII7qX/o8QvCmjgcBToTMWlC4xuBsOgtka0eTBfeejyC51m3 BPPAyksy+vHwF+P5u5E3VZScVw1gvqrGs4b8PDFaigEpf2csZ+eWA9CsDH1hC9G8 F1jrl3kfV41UAKjOY0VAU9n134UC+eufyx5pyZ4bMa8bHS0ZlwXU6hjGLwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEXjoMHx2B7gaWQ7QMMjmZu1WEYxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3L2NiMzFk YS00NDkxLTRmM2UtYmFlNS0zZDU3YjY2YjIxMzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvY2IzMWRh LTQ0OTEtNGYzZS1iYWU1LTNkNTdiNjZiMjEzNC8xL1JlT2d3ZkhZSHVCcFpEdEF3 eU9abTdWWVJqRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXDoMA0EAgACMAcDBQMqDqSAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMdeDANBgkqhkiG9w0BAQsFAAOCAQEAI6vEfib9L7ba ZXkOAspnntUSzTSaS5BTbn3Udr1MCisWQIi3TXOZDu6gee+Ns1ce5uMGXUGVpml8 aIZ68yGZda82iAd7x3bQlDM7HJNA8c653sdxD2sa4oorV7VZHHiVFYz4Lpk287i6 AmcxWqSuEzGQ8AzbcPbZDkse/XkriCNNEl6oM2wXBq8/X7L0KdfLNNuFUi96Clhj ufdyfjlxHcapZINHIstFvxbAQ5gBRUBH+mJ86xBHLPS1OWKLawDG4zZdat04qhm2 77aLmI7vTJIoQNCio3p21dfIVSX/w9qrbkHXtFCZ8lpJrTlc9OD5xvz0QszG6I9a jP+1IQPWng== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:42 2026 by rpki-client