This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RlDGwCqb3k4XGH8FsOypUEg7-S0.cer File: RlDGwCqb3k4XGH8FsOypUEg7-S0.cer (raw, json) Hash identifier: KR5tSTqhBNu4N26WoGgS0bniczckPXiXrvtxGohU6fk= Subject key identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C11B6972006BC25E67DDC4B1D4778A4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202743 IP: 185.155.20.0/22 IP: 188.211.28.0/23 IP: 2a0a:b080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b6:97:20:06:bc:25:e6:7d:dc:4b:1d:47:78:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4650c6c02a9bde4e17187f05b0eca950483bf92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:37:1c:d2:24:dc:57:ff:4c:30:d7:f1:1e: ac:bd:6a:a0:12:37:9a:52:55:2b:5a:5d:0c:c0:01: 64:d8:b9:38:d9:bc:f1:eb:ef:06:9d:e5:d2:83:64: b4:84:6c:6e:37:82:a5:69:d4:c5:3f:bb:54:9e:9c: 98:c6:72:e5:f2:53:f9:7f:6c:c7:a3:0f:a1:1b:52: 45:7d:9f:30:24:3c:37:54:21:54:fb:bc:2d:d9:a3: 25:95:ab:29:bf:5d:5b:48:14:9d:06:e8:72:b2:9c: fa:e3:0a:81:09:5a:68:90:36:fb:94:1a:c6:8e:9d: ad:da:84:4a:4c:44:d0:1d:bf:51:2d:a1:56:fb:38: bb:0e:2c:7a:14:b8:75:5e:77:c1:0a:a2:25:09:7b: 7e:4d:4e:9f:b7:d6:f5:4a:ca:da:81:9b:4f:64:5e: 04:a1:e4:c4:7d:e0:5a:a3:8e:bc:72:71:8e:e3:05: 9a:e3:04:10:5d:ad:00:85:4f:dd:d4:b7:b5:fd:8a: f6:26:12:d9:2e:12:76:9c:b2:84:0b:f6:76:4f:a9: db:ae:4f:73:0d:2b:74:16:21:f2:e0:b3:0b:49:75: 18:fe:9a:a3:41:54:b3:76:70:cb:54:31:b1:3c:e2: 25:0b:56:f2:79:27:31:b9:04:7e:b4:cf:50:a5:a7: fd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:50:C6:C0:2A:9B:DE:4E:17:18:7F:05:B0:EC:A9:50:48:3B:F9:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/373414-9ce4-46f5-940e-49c24292e9bd/1/RlDGwCqb3k4XGH8FsOypUEg7-S0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.20.0/22 188.211.28.0/23 IPv6: 2a0a:b080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202743 Signature Algorithm: sha256WithRSAEncryption 1b:d8:c8:96:3e:38:aa:40:d6:f3:fe:9f:c9:c1:70:0b:d9:c9: f1:6f:5c:f6:ed:e7:27:ad:9b:82:b5:f7:30:c6:6d:72:25:37: 07:4f:f5:0e:de:cb:64:74:52:7b:23:f9:af:a3:04:ee:9e:e7: 9c:71:8e:09:e3:5e:d3:37:ad:a6:b9:50:be:66:fa:d8:ef:8c: fc:34:7b:ec:4b:e1:99:19:e8:be:b8:df:a3:f0:fa:f0:3f:a5: 15:76:5b:ae:cd:e2:19:2a:85:36:ee:37:ac:c7:49:15:d9:80: 47:0a:ea:40:da:ee:27:3e:1f:ad:d1:72:c1:36:d9:13:f5:dd: 6c:f2:7a:73:a3:c1:47:17:cb:54:1b:be:4a:c3:26:0b:12:05: 5f:a9:1b:47:0b:9c:1c:06:77:3b:4f:d9:7d:50:2e:bf:3d:ed: ed:66:13:13:7d:27:f3:2a:87:92:23:ae:87:78:a7:db:e8:e3: b0:97:34:3a:13:c8:73:ec:a8:6f:ad:4e:eb:de:b9:70:5d:3a: 4c:6f:e5:20:a0:ce:1a:be:b7:ba:e9:0a:5a:a0:b7:53:ce:46: 66:8b:e0:27:2f:3c:e3:38:e1:bb:80:6f:2d:96:2e:30:a7:c1: a2:4e:c5:5a:8f:16:7f:c3:d0:ac:45:c8:58:51:26:6c:34:42: 5a:82:a4:94 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8EbaXIAa8JeZ93EsdR3ikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjUwYzZjMDJhOWJkZTRlMTcxODdmMDViMGVjYTk1MDQ4M2JmOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JI3HNIk3Ff/TDDX8R6svWqgEjea UlUrWl0MwAFk2Lk42bzx6+8GneXSg2S0hGxuN4KladTFP7tUnpyYxnLl8lP5f2zH ow+hG1JFfZ8wJDw3VCFU+7wt2aMllaspv11bSBSdBuhyspz64wqBCVpokDb7lBrG jp2t2oRKTETQHb9RLaFW+zi7Dix6FLh1XnfBCqIlCXt+TU6ft9b1SsragZtPZF4E oeTEfeBao468cnGO4wWa4wQQXa0AhU/d1Le1/Yr2JhLZLhJ2nLKEC/Z2T6nbrk9z DSt0FiHy4LMLSXUY/pqjQVSzdnDLVDGxPOIlC1byeScxuQR+tM9Qpaf9tQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEZQxsAqm95OFxh/BbDsqVBIO/ktMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzM3MzQx NC05Y2U0LTQ2ZjUtOTQwZS00OWMyNDI5MmU5YmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvMzczNDE0 LTljZTQtNDZmNS05NDBlLTQ5YzI0MjkyZTliZC8xL1JsREd3Q3FiM2s0WEdIOEZz T3lwVUVnNy1TMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuZsUAwQBvNMcMA0EAgACMAcDBQMqCrCAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMX9zANBgkqhkiG9w0BAQsFAAOCAQEAG9jI lj44qkDW8/6fycFwC9nJ8W9c9u3nJ62bgrX3MMZtciU3B0/1Dt7LZHRSeyP5r6ME 7p7nnHGOCeNe0zetprlQvmb62O+M/DR77EvhmRnovrjfo/D68D+lFXZbrs3iGSqF Nu43rMdJFdmARwrqQNruJz4frdFywTbZE/XdbPJ6c6PBRxfLVBu+SsMmCxIFX6kb RwucHAZ3O0/ZfVAuvz3t7WYTE30n8yqHkiOuh3in2+jjsJc0OhPIc+yob61O6965 cF06TG/lIKDOGr63uukKWqC3U85GZovgJy884zjhu4BvLZYuMKfBok7FWo8Wf8PQ rEXIWFEmbDRCWoKklA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:02 2026 by rpki-client