This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer (raw, json) Hash identifier: Cbo8hNiH0Oi9swmxLpuf5plb8IL5YbazaeH6mZGAc0g= Subject key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783559630BAE91070D8E61DB59BFEC71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.159.140.0/22 IP: 80.70.192.0/20 IP: 147.75.224.0/20 IP: 185.94.16.0/22 IP: 185.114.76.0/22 IP: 185.152.128.0/22 IP: 212.59.80.0/20 IP: 2a09:6b80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:59:63:0b:ae:91:07:0d:8e:61:db:59:bf:ec:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4608d71b772a031740e1d412def6857cc4b1d45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:0b:0f:76:dd:bb:a0:6c:60:8f:7e:58:85: 59:16:15:9b:82:51:91:2d:14:1d:0d:40:f0:da:2c: 4d:23:67:60:25:65:82:db:05:1d:2d:44:2f:62:f3: 25:25:8a:27:49:d2:86:33:1f:33:de:e0:67:a0:d0: a5:98:f1:9b:68:c7:40:91:a2:28:e1:54:30:21:76: 59:c2:9c:6d:eb:01:0e:06:a9:20:c1:e0:94:83:0a: fc:9b:2c:44:81:6c:8d:db:9e:37:46:b2:95:2f:d4: 4e:4a:33:5c:58:87:1a:5c:7c:6b:86:8a:26:31:c6: cd:c0:95:58:9b:43:dd:aa:98:96:e9:ae:21:b5:ce: 5c:7e:32:ab:ff:04:4b:d1:9b:36:7c:80:f8:50:3f: de:42:aa:c1:8e:31:06:71:5f:76:75:cb:ec:ce:07: 8c:dc:ce:c9:b0:66:e5:ba:5b:b0:2f:49:4e:c3:62: 53:e4:e8:6f:25:26:90:0c:1a:fb:d6:0f:3c:1b:bf: f4:40:4b:45:9c:ec:6c:fa:0f:f3:5f:ff:e0:81:4d: 2f:28:05:f0:3a:3b:e1:67:8b:34:27:a5:9d:ce:73: 01:4b:43:89:91:e7:56:20:3e:7d:3e:aa:f4:91:a7: 98:c2:c2:f1:ee:e6:17:96:e4:32:45:7c:6b:e7:29: 07:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.140.0/22 80.70.192.0/20 147.75.224.0/20 185.94.16.0/22 185.114.76.0/22 185.152.128.0/22 212.59.80.0/20 IPv6: 2a09:6b80::/29 Signature Algorithm: sha256WithRSAEncryption 73:c9:e8:07:a6:ff:be:b2:34:2a:64:97:7f:db:c3:28:3d:3e: 3c:fa:59:1d:39:16:86:83:80:c4:63:1d:5e:a0:03:4f:2c:7b: 13:9a:91:b7:97:9b:f1:41:ce:92:1c:ef:8c:ad:8d:01:51:7a: 16:1f:a8:38:ee:35:ed:b0:e2:d1:c8:cf:74:1d:f3:56:99:39: bd:27:c8:9c:ef:af:d9:b7:a1:bc:11:60:74:4f:76:9f:bf:2b: 33:71:f4:ea:67:93:48:24:a7:b8:e6:1d:1d:eb:55:60:45:8b: 43:58:ff:30:80:7b:e8:9c:31:86:4e:83:ef:6c:3d:79:39:cc: 6d:b3:aa:8f:e8:eb:76:f4:c4:ad:f2:4c:ee:15:59:57:79:ca: 59:1a:f6:c3:1b:c7:c7:67:1d:eb:25:00:7c:87:fd:64:a0:c7: 03:38:2a:3d:54:40:0c:32:8f:3a:4e:67:04:36:e0:fa:82:35: 2c:ff:b0:d3:52:30:39:a8:10:85:68:39:f2:80:5d:b1:f8:58: 2d:ea:bd:6d:f7:11:cc:51:53:9e:51:6e:3e:d6:ce:08:25:1d: 41:65:08:7e:0a:06:46:8f:1b:0e:76:4e:b4:2e:48:2e:e2:b3: b6:40:21:ce:28:9f:76:a4:e6:2f:14:89:f4:b1:d5:1e:24:5f: 4a:d7:49:8e -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt4NVljC66RBw2OYdtZv+xxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjA4ZDcxYjc3MmEwMzE3NDBlMWQ0MTJkZWY2ODU3Y2M0YjFkNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOMLD3bdu6BsYI9+WIVZFhWbglGR LRQdDUDw2ixNI2dgJWWC2wUdLUQvYvMlJYonSdKGMx8z3uBnoNClmPGbaMdAkaIo 4VQwIXZZwpxt6wEOBqkgweCUgwr8myxEgWyN2543RrKVL9ROSjNcWIcaXHxrhoom McbNwJVYm0PdqpiW6a4htc5cfjKr/wRL0Zs2fID4UD/eQqrBjjEGcV92dcvszgeM 3M7JsGbluluwL0lOw2JT5OhvJSaQDBr71g88G7/0QEtFnOxs+g/zX//ggU0vKAXw OjvhZ4s0J6WdznMBS0OJkedWID59Pqr0kaeYwsLx7uYXluQyRXxr5ykHLQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFEYI1xt3KgMXQOHUEt72hXzEsdRaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzQ5NzY4 YS04ZDBiLTQ5MGYtOThiZS03NGUxMTY4YTExNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvNDk3Njhh LThkMGItNDkwZi05OGJlLTc0ZTExNjhhMTE2NC8xL1JnalhHM2NxQXhkQTRkUVMz dmFGZk1TeDFGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQCTp+MAwQEUEbAAwQEk0vgAwQCuV4QAwQCuXJM AwQCuZiAAwQE1DtQMA0EAgACMAcDBQMqCWuAMA0GCSqGSIb3DQEBCwUAA4IBAQBz yegHpv++sjQqZJd/28MoPT48+lkdORaGg4DEYx1eoANPLHsTmpG3l5vxQc6SHO+M rY0BUXoWH6g47jXtsOLRyM90HfNWmTm9J8ic76/Zt6G8EWB0T3afvyszcfTqZ5NI JKe45h0d61VgRYtDWP8wgHvonDGGToPvbD15Ocxts6qP6Ot29MSt8kzuFVlXecpZ GvbDG8fHZx3rJQB8h/1koMcDOCo9VEAMMo86TmcENuD6gjUs/7DTUjA5qBCFaDny gF2x+Fgt6r1t9xHMUVOeUW4+1s4IJR1BZQh+CgZGjxsOdk60Lkgu4rO2QCHOKJ92 pOYvFIn0sdUeJF9K10mO -----END CERTIFICATE-----Generated at Fri Jan 9 21:36:27 2026 by rpki-client