This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer File: RfwKpabDOR7__6g0JbI7JkxxCF8.cer (raw, json) Hash identifier: TCyTffR21nsNS+AauCAw+f4kq8ALuEQbyVAQDuCprf4= Subject key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80B85DD04B3CE1F8B91B13AFDBE43E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59471 IP: 185.99.192.0/22 IP: 194.153.107.0/24 IP: 195.74.64.0/24 IP: 2a06:1340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b8:5d:d0:4b:3c:e1:f8:b9:1b:13:af:db:e4:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45fc0aa5a6c3391effffa83425b23b264c71085f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e6:da:ee:fa:41:d7:7c:1b:31:74:ec:0a:dc: ef:8b:7a:5b:54:51:b1:68:19:03:d8:fb:c0:0d:1c: 02:9d:a2:ad:6d:7b:21:6c:58:e6:71:2a:83:f1:e9: 74:41:60:c2:0d:15:d4:ad:9a:19:7d:af:47:03:0d: 81:3f:50:ed:db:7d:63:46:46:0a:53:26:61:7c:a9: 4c:3d:79:20:d0:67:8c:e3:86:66:b4:1d:8c:db:d0: ec:67:d9:df:dc:57:15:fe:05:77:48:1c:64:f6:71: 2a:0f:ed:bc:b4:72:29:11:94:64:57:1f:09:18:61: 9c:a7:0e:d2:bc:09:d9:47:98:6b:5d:b7:ca:b5:5b: e3:33:6b:78:79:27:ec:21:3c:1a:53:00:19:39:51: c9:1b:21:40:f3:88:3c:b5:85:2f:10:3e:4f:f3:ee: c8:e8:8d:01:05:e1:b3:a0:e8:40:47:5d:c8:b6:08: 05:9e:63:7a:90:b5:8d:e5:00:a1:aa:95:26:bf:ca: fe:dc:e6:4c:f9:c4:51:f7:ba:0c:8d:02:54:2a:5a: be:1e:39:ca:9a:6c:b3:2a:a4:d8:4e:d6:f8:bb:f4: 91:75:fe:e1:ea:e1:39:d0:dc:8e:07:b8:51:40:b0: 61:08:f7:d1:76:ae:f0:c8:db:03:81:44:40:c2:c5: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.192.0/22 194.153.107.0/24 195.74.64.0/24 IPv6: 2a06:1340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59471 Signature Algorithm: sha256WithRSAEncryption af:39:42:fd:12:6c:8c:ec:19:09:85:3c:08:23:57:f7:5f:08: 78:77:05:b3:a9:26:16:da:28:e0:69:21:db:df:ac:06:7d:f4: 18:43:b5:64:1a:85:98:01:1c:2d:f5:9f:38:68:dc:bd:1e:38: 7c:ac:a8:24:72:23:fd:af:76:04:bf:87:9c:09:e9:23:c5:1a: d8:1f:51:c4:72:7a:dc:25:86:93:b9:e6:89:1a:8a:07:7c:d2: 34:f3:5b:bb:cc:ad:07:d6:75:7e:98:32:7a:f6:a2:ce:8d:61: b5:a3:3a:7b:e2:5a:ce:69:79:a2:06:75:98:61:7a:35:9d:e2: 8a:d5:28:8c:a0:f5:1c:c7:7b:7b:4d:9d:e4:6a:80:66:6c:b8: da:34:cb:77:1f:8a:5b:c9:58:3d:75:f6:36:46:ad:03:59:24: cc:31:09:e7:36:14:5e:b6:3f:b0:be:8a:bc:0a:a6:77:77:93: 4e:a9:f7:c0:b5:04:61:67:5f:c7:b7:02:9e:a2:31:bd:5a:f2: d8:21:d9:5b:c2:50:78:6d:c3:36:3b:d0:84:4c:f6:b2:04:ee: d0:44:83:98:e3:5a:0f:25:df:52:6b:e3:03:0f:c7:4e:94:56: b6:88:d5:67:58:e8:7f:71:cb:25:8a:96:66:35:ce:11:f4:54: 69:1e:4f:d0 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/gLhd0Es84fi5GxOv2+Q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWZjMGFhNWE2YzMzOTFlZmZmZmE4MzQyNWIyM2IyNjRjNzEwODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquba7vpB13wbMXTsCtzvi3pbVFGx aBkD2PvADRwCnaKtbXshbFjmcSqD8el0QWDCDRXUrZoZfa9HAw2BP1Dt231jRkYK UyZhfKlMPXkg0GeM44ZmtB2M29DsZ9nf3FcV/gV3SBxk9nEqD+28tHIpEZRkVx8J GGGcpw7SvAnZR5hrXbfKtVvjM2t4eSfsITwaUwAZOVHJGyFA84g8tYUvED5P8+7I 6I0BBeGzoOhAR13ItggFnmN6kLWN5QChqpUmv8r+3OZM+cRR97oMjQJUKlq+HjnK mmyzKqTYTtb4u/SRdf7h6uE50NyOB7hRQLBhCPfRdq7wyNsDgURAwsVGPwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFEX8CqWmwzke//+oNCWyOyZMcQhfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1LzczYzYw Yi0xOGNkLTQyNWItOGU2Zi05MjcxOWIwMGJiZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNzNjNjBi LTE4Y2QtNDI1Yi04ZTZmLTkyNzE5YjAwYmJkNC8xL1Jmd0twYWJET1I3X182ZzBK Ykk3Smt4eENGOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuWPAAwQAwplrAwQAw0pAMA0EAgACMAcDBQMq BhNAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDoTzANBgkqhkiG9w0BAQsFAAOC AQEArzlC/RJsjOwZCYU8CCNX918IeHcFs6kmFtoo4Gkh29+sBn30GEO1ZBqFmAEc LfWfOGjcvR44fKyoJHIj/a92BL+HnAnpI8Ua2B9RxHJ63CWGk7nmiRqKB3zSNPNb u8ytB9Z1fpgyevaizo1htaM6e+Jazml5ogZ1mGF6NZ3iitUojKD1HMd7e02d5GqA Zmy42jTLdx+KW8lYPXX2NkatA1kkzDEJ5zYUXrY/sL6KvAqmd3eTTqn3wLUEYWdf x7cCnqIxvVry2CHZW8JQeG3DNjvQhEz2sgTu0ESDmONaDyXfUmvjAw/HTpRWtojV Z1jof3HLJYqWZjXOEfRUaR5P0A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:10 2026 by rpki-client