This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RgxXERGq_A1R5f3ggjC_eLieSkg.cer File: RgxXERGq_A1R5f3ggjC_eLieSkg.cer (raw, json) Hash identifier: aqMNFlQfNLYwOFgNfSOZWSO28wg+KwqMnd2R6XSBQjw= Subject key identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37DA0CFAE84368404FD36304BF882A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42463 IP: 77.242.32.0/20 IP: 2a05:c900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:da:0c:fa:e8:43:68:40:4f:d3:63:04:bf:88:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=460c571111aafc0d51e5fde08230bf78b89e4a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:e4:f6:dd:57:3e:92:91:95:6f:63:ed:8a: cb:c8:80:a2:62:c5:e5:b2:5c:68:92:d7:37:39:64: 9c:2e:69:83:77:ca:6b:b6:6b:38:f0:02:a8:29:8e: 3f:51:68:7c:d6:41:29:e1:4d:74:b5:59:86:17:e2: 68:9f:2e:a3:1e:36:6f:c2:80:df:9c:e5:30:28:2c: 56:1b:00:1f:ac:2c:a6:3f:7e:ea:65:14:9d:7e:7e: 28:8b:78:ff:83:29:93:88:c8:ed:c1:11:8b:ad:13: d3:be:a5:9c:6f:22:d1:22:8f:d3:10:a5:d6:bd:01: 15:97:a2:e2:4d:6d:1a:0a:9f:48:26:4e:a1:1d:92: 1d:8f:dc:60:3c:45:24:a9:89:9c:aa:b7:97:39:c1: 50:77:02:0a:1f:e0:87:98:69:ee:9f:7b:a3:76:60: 0b:40:96:15:cc:00:51:68:41:1e:28:55:e6:bc:58: 09:66:a3:e2:51:98:84:62:68:fe:ef:49:2a:dd:64: ac:9b:d2:ec:17:ab:d9:24:4b:51:b6:8d:23:e8:57: 72:6c:57:39:97:a1:f9:1c:4f:23:2e:75:7a:ed:dc: 4f:ef:a4:5f:03:fc:10:60:a1:9d:19:57:9b:cc:1a: b2:33:4c:6e:b6:60:6e:dd:46:2c:bb:ea:48:93:95: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0C:57:11:11:AA:FC:0D:51:E5:FD:E0:82:30:BF:78:B8:9E:4A:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/069e95-0ac2-4c27-82b4-bd2fff5b8849/1/RgxXERGq_A1R5f3ggjC_eLieSkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.242.32.0/20 IPv6: 2a05:c900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42463 Signature Algorithm: sha256WithRSAEncryption 7f:66:1e:f2:c9:31:20:9e:67:de:82:ad:b3:7b:4e:4f:74:d9: 98:be:ca:ee:40:a8:48:7a:81:cd:c5:bf:f3:08:60:d6:db:ba: 08:85:ca:f3:c7:7f:fc:f7:3b:91:10:29:3e:65:83:1e:ee:99: 37:42:74:a0:85:50:5a:5d:66:9d:1f:97:cf:aa:15:2e:aa:d4: 06:0d:76:0b:04:21:9b:8c:45:2d:48:0b:ad:7a:64:66:f4:f5: 28:9b:54:cf:21:11:4b:65:c2:d4:b3:cb:b5:0b:95:15:56:b0: dc:85:09:63:dd:a0:9a:f6:08:a4:a3:69:47:85:b3:fc:24:6b: 24:03:db:4f:42:6c:d8:8c:8f:8a:24:3b:a6:f1:a4:1b:ef:19: 3d:f2:dc:41:dd:a8:64:be:f2:2a:89:62:75:58:db:a0:53:e0: 92:82:18:fd:75:80:e3:82:a9:03:2e:32:bc:5a:42:77:b7:37: a2:6c:e3:66:6f:84:de:23:f1:ce:04:f2:b2:43:e0:6b:09:f0: 80:df:bc:72:b1:90:2b:66:ce:ae:ea:f0:fc:b4:75:d5:e1:9a: e7:0e:c6:3e:ac:7d:77:2f:d7:5b:34:db:b7:84:c5:33:bd:e8: 5f:47:93:bd:c1:d8:6f:19:c1:61:81:53:e5:52:41:48:d5:98: 74:80:6f:b7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+N9oM+uhDaEBP02MEv4gqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjBjNTcxMTExYWFmYzBkNTFlNWZkZTA4MjMwYmY3OGI4OWU0YTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9jk9t1XPpKRlW9j7YrLyICiYsXl slxoktc3OWScLmmDd8prtms48AKoKY4/UWh81kEp4U10tVmGF+Jony6jHjZvwoDf nOUwKCxWGwAfrCymP37qZRSdfn4oi3j/gymTiMjtwRGLrRPTvqWcbyLRIo/TEKXW vQEVl6LiTW0aCp9IJk6hHZIdj9xgPEUkqYmcqreXOcFQdwIKH+CHmGnun3ujdmAL QJYVzABRaEEeKFXmvFgJZqPiUZiEYmj+70kq3WSsm9LsF6vZJEtRto0j6FdybFc5 l6H5HE8jLnV67dxP76RfA/wQYKGdGVebzBqyM0xutmBu3UYsu+pIk5WcZQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFEYMVxERqvwNUeX94IIwv3i4nkpIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzA2OWU5 NS0wYWMyLTRjMjctODJiNC1iZDJmZmY1Yjg4NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvMDY5ZTk1 LTBhYzItNGMyNy04MmI0LWJkMmZmZjViODg0OS8xL1JneFhFUkdxX0ExUjVmM2dn akNfZUxpZVNrZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQETfIgMA0EAgACMAcDBQMqBckAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCl3zANBgkqhkiG9w0BAQsFAAOCAQEAf2Ye8skxIJ5n 3oKts3tOT3TZmL7K7kCoSHqBzcW/8whg1tu6CIXK88d//Pc7kRApPmWDHu6ZN0J0 oIVQWl1mnR+Xz6oVLqrUBg12CwQhm4xFLUgLrXpkZvT1KJtUzyERS2XC1LPLtQuV FVaw3IUJY92gmvYIpKNpR4Wz/CRrJAPbT0Js2IyPiiQ7pvGkG+8ZPfLcQd2oZL7y KolidVjboFPgkoIY/XWA44KpAy4yvFpCd7c3omzjZm+E3iPxzgTyskPgawnwgN+8 crGQK2bOrurw/LR11eGa5w7GPqx9dy/XWzTbt4TFM73oX0eTvcHYbxnBYYFT5VJB SNWYdIBvtw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:31 2026 by rpki-client