This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer (raw, json) Hash identifier: ff488DJd3+PRUCfAQ2yydldU+eR9FfLClcyKSOirJtQ= Subject key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED123A1C1419D324FE089C417BB349 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207851 IP: 193.105.208.0/24 IP: 193.105.217.0/24 IP: 193.105.250.0/24 IP: 193.106.239.0/24 IP: 2a0f:8b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:12:3a:1c:14:19:d3:24:fe:08:9c:41:7b:b3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c6:7e:8b:d2:86:e7:f9:53:64:04:0c:f5:4d: 85:7a:03:47:35:ac:19:80:ae:5b:ce:f6:4c:87:4c: b3:3e:f4:85:67:e7:e1:c8:35:4d:bd:14:7e:4b:ad: 6e:5a:14:16:1f:84:da:9f:2c:f7:ec:a6:bf:28:ec: d3:48:d0:d0:32:f6:96:62:21:31:bb:6e:af:50:6b: 19:b5:5c:38:a1:7d:fb:c5:d9:3b:f8:72:aa:4f:48: f9:d4:77:88:fa:d1:ea:10:d5:db:3e:7d:38:46:a2: f2:6a:c5:53:f9:25:cf:9d:08:d1:4f:cf:17:5c:fe: 13:fb:c8:af:59:35:45:27:3e:ea:3d:f2:c3:30:fe: b7:7a:f9:f4:9d:a9:21:c0:05:2c:60:17:a1:b5:b3: 89:0b:2a:6d:5e:3e:31:7c:51:a6:0c:2f:b3:4d:00: 4d:07:62:bc:8e:d2:91:db:d2:6d:1d:2f:a4:5d:39: 59:c4:f2:de:ad:5f:6e:54:7b:11:a7:f7:b4:f1:6c: d0:f7:1b:5f:b1:5b:78:02:24:fc:2f:5f:67:af:fb: 42:0d:fb:b9:0b:63:30:69:98:c4:58:4a:f3:02:1c: 96:dc:b3:3e:39:03:78:43:c7:32:f0:90:92:70:b8: 0f:70:01:ab:e9:7d:69:85:16:81:87:d4:b2:dc:db: 06:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.208.0/24 193.105.217.0/24 193.105.250.0/24 193.106.239.0/24 IPv6: 2a0f:8b40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207851 Signature Algorithm: sha256WithRSAEncryption 90:f5:44:3b:a9:bb:34:db:0e:dc:89:f3:0b:89:7d:ea:fb:6b: ab:0e:75:be:fa:26:d0:2f:12:1b:7d:e4:92:03:e8:07:38:77: 58:f6:6b:2d:3e:63:43:69:dc:0f:8a:97:af:35:f9:3d:74:11: dc:b6:51:55:bb:c2:8d:ea:bc:d9:46:ea:70:02:0e:b4:e3:3f: 95:b4:a2:1f:90:58:e2:aa:f7:70:ee:c8:b3:d5:7e:70:c9:69: 7f:b2:d2:84:42:ff:1e:4b:52:a5:b6:2e:a1:a0:61:28:e9:01: 8a:f0:84:a2:75:1e:b7:74:c5:c0:a1:2d:5c:64:96:7a:0f:51: d1:94:8d:05:12:47:cb:a1:5b:d4:c4:29:f0:53:ec:c8:6b:5a: 37:44:d0:b4:69:0f:fb:1c:ec:f6:70:df:4b:5c:cc:5e:e0:52: ea:71:f1:5d:60:51:cd:c8:dd:b8:02:72:7a:db:2e:93:40:ed: d1:5b:14:27:c8:05:f3:68:21:7f:ef:b8:6e:4f:5b:e4:92:18: 31:d1:ab:da:18:59:0c:0e:e8:16:d4:11:c5:9b:9f:96:99:d3: 76:2e:cf:e3:3a:37:49:a0:80:ff:a3:60:c7:bd:f4:69:0a:c4: 5a:60:49:68:cd:07:c8:2f:df:81:19:03:3a:44:9a:a5:57:d5: cd:f2:ec:9c -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt87RI6HBQZ0yT+CJxBe7NJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjEyMDdhM2VlZjJiNDRmOGUyNzMxYjdiMGFjN2QxNzE2ZTM1NWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sZ+i9KG5/lTZAQM9U2FegNHNawZ gK5bzvZMh0yzPvSFZ+fhyDVNvRR+S61uWhQWH4Tanyz37Ka/KOzTSNDQMvaWYiEx u26vUGsZtVw4oX37xdk7+HKqT0j51HeI+tHqENXbPn04RqLyasVT+SXPnQjRT88X XP4T+8ivWTVFJz7qPfLDMP63evn0nakhwAUsYBehtbOJCyptXj4xfFGmDC+zTQBN B2K8jtKR29JtHS+kXTlZxPLerV9uVHsRp/e08WzQ9xtfsVt4AiT8L19nr/tCDfu5 C2MwaZjEWErzAhyW3LM+OQN4Q8cy8JCScLgPcAGr6X1phRaBh9Sy3NsGOQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFEYSB6Pu8rRPjicxt7CsfRcW41XFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzM4YzE5 OC0wZjFiLTRjNTktODFmZS0xYzhjZTdjMzNhYzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMzhjMTk4 LTBmMWItNGM1OS04MWZlLTFjOGNlN2MzM2FjMC8xL1JoSUhvLTd5dEUtT0p6RzNz S3g5RnhialZjVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAwWnQAwQAwWnZAwQAwWn6AwQAwWrvMA0EAgAC MAcDBQMqD4tAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMr6zANBgkqhkiG9w0B AQsFAAOCAQEAkPVEO6m7NNsO3InzC4l96vtrqw51vvom0C8SG33kkgPoBzh3WPZr LT5jQ2ncD4qXrzX5PXQR3LZRVbvCjeq82UbqcAIOtOM/lbSiH5BY4qr3cO7Is9V+ cMlpf7LShEL/HktSpbYuoaBhKOkBivCEonUet3TFwKEtXGSWeg9R0ZSNBRJHy6Fb 1MQp8FPsyGtaN0TQtGkP+xzs9nDfS1zMXuBS6nHxXWBRzcjduAJyetsuk0Dt0VsU J8gF82ghf++4bk9b5JIYMdGr2hhZDA7oFtQRxZuflpnTdi7P4zo3SaCA/6Ngx730 aQrEWmBJaM0HyC/fgRkDOkSapVfVzfLsnA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:20 2026 by rpki-client