This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RlxixrzUz7iTO8tqYc97Pa0vsRg.cer File: RlxixrzUz7iTO8tqYc97Pa0vsRg.cer (raw, json) Hash identifier: E4ul9VcEJDcMDJt7fDW3cUmh/V1ihz/q4xwjXsLysIk= Subject key identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF1E7F0C131E78251E437BA49A7503A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 16303 IP: 77.95.112.0/24 IP: 77.95.114.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:e7:f0:c1:31:e7:82:51:e4:37:ba:49:a7:50:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=465c62c6bcd4cfb8933bcb6a61cf7b3dad2fb118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:89:52:53:97:13:33:63:3b:e2:8c:1e:d2:bd: 4e:60:e8:c0:5e:50:1a:c2:57:0d:8a:a7:b8:c0:b1: f1:ac:a3:4b:ca:c0:da:8b:71:5c:6a:00:cd:1e:9c: 2f:06:7c:b9:02:82:d1:d5:f7:ed:2e:7c:ab:17:4f: 7f:17:6b:32:a5:b8:29:15:5e:67:c9:4d:b7:0c:1e: 06:a1:40:8d:55:bd:5e:5c:31:05:b1:86:6c:b3:a7: 43:7e:89:f4:30:c8:81:f2:19:dd:8d:07:80:dc:6c: e5:9f:f7:b0:e7:ad:65:c8:8f:f3:3a:6f:35:e9:2d: 08:d1:65:5f:d6:dc:b8:49:ba:ea:5a:a8:b2:31:5e: 06:f1:06:c5:dc:c5:fa:c6:0a:69:19:b0:d8:6a:7b: 19:91:83:56:08:53:db:12:26:d8:bf:2c:a5:9e:d6: e4:69:e0:29:ec:ff:d0:cf:09:c6:c9:c4:65:29:ee: 81:d8:47:c6:88:71:0c:29:af:3e:f1:9c:3b:d1:5f: 2c:60:cd:a7:fa:09:f1:ec:3f:9f:dc:5b:74:7a:99: 4e:0e:38:1e:31:80:0f:dd:5d:ad:c0:bd:ff:bf:1d: 6a:1d:a9:8f:54:52:15:cb:3a:ec:28:62:50:5e:79: 32:ba:80:40:8b:eb:d0:09:c4:70:6f:b4:83:10:2c: 8f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:62:C6:BC:D4:CF:B8:93:3B:CB:6A:61:CF:7B:3D:AD:2F:B1:18 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/49a221-67f5-4edd-b00d-4d2c4c5ad14e/1/RlxixrzUz7iTO8tqYc97Pa0vsRg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.112.0/24 77.95.114.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16303 Signature Algorithm: sha256WithRSAEncryption 2e:d9:31:b0:4d:22:fe:b9:39:a5:63:d1:d5:11:b9:da:c9:30: 2d:f4:fd:0d:4c:5b:c1:6a:a9:08:c8:1b:41:47:d6:51:e6:d5: 55:5e:43:00:31:26:19:5b:0e:60:a4:8e:de:78:3c:44:ba:58: 73:9e:6e:eb:91:fa:a6:c2:51:c5:89:dc:d4:6b:9c:60:ee:91: e3:d2:cf:51:b6:4b:c9:43:61:d3:7e:d6:0d:0c:cc:f3:a8:31: 15:a2:12:63:e7:e0:7c:3e:4d:95:59:bd:4e:96:89:c0:76:e9: 7f:63:8a:17:bc:ca:cc:e4:f8:bf:94:75:c8:7e:55:3d:de:81: 59:4a:c7:1f:41:f8:50:04:e3:72:d5:6c:23:4d:58:62:05:0b: d4:e2:8d:a8:66:da:2e:38:d3:a5:c3:b8:a6:15:20:b4:6c:23: 8f:fe:55:cd:79:0f:17:36:f5:03:91:63:17:c5:32:db:6b:6b: 41:fa:fc:e2:fe:72:79:aa:62:ab:78:fb:c7:6b:35:25:62:ad: b6:a7:79:23:5e:2d:35:56:7f:af:d2:43:40:e2:1c:59:d1:5e: a3:7e:d9:6c:dd:a7:a7:fc:9d:c3:5e:4b:96:9a:21:a8:25:21: 45:e8:32:93:a0:5a:ac:67:09:d4:14:21:3e:66:ca:96:41:af: 57:5b:fe:d3 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt/8efwwTHnglHkN7pJp1A6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjVjNjJjNmJjZDRjZmI4OTMzYmNiNmE2MWNmN2IzZGFkMmZiMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYlSU5cTM2M74owe0r1OYOjAXlAa wlcNiqe4wLHxrKNLysDai3FcagDNHpwvBny5AoLR1fftLnyrF09/F2sypbgpFV5n yU23DB4GoUCNVb1eXDEFsYZss6dDfon0MMiB8hndjQeA3Gzln/ew561lyI/zOm81 6S0I0WVf1ty4SbrqWqiyMV4G8QbF3MX6xgppGbDYansZkYNWCFPbEibYvyylntbk aeAp7P/QzwnGycRlKe6B2EfGiHEMKa8+8Zw70V8sYM2n+gnx7D+f3Ft0eplODjge MYAP3V2twL3/vx1qHamPVFIVyzrsKGJQXnkyuoBAi+vQCcRwb7SDECyPMwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFEZcYsa81M+4kzvLamHPez2tL7EYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzQ5YTIy MS02N2Y1LTRlZGQtYjAwZC00ZDJjNGM1YWQxNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvNDlhMjIx LTY3ZjUtNGVkZC1iMDBkLTRkMmM0YzVhZDE0ZS8xL1JseGl4cnpVejdpVE84dHFZ Yzk3UGEwdnNSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQATV9wAwQATV9yMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAj+vMA0GCSqGSIb3DQEBCwUAA4IBAQAu2TGwTSL+uTmlY9HVEbnayTAt 9P0NTFvBaqkIyBtBR9ZR5tVVXkMAMSYZWw5gpI7eeDxEulhznm7rkfqmwlHFidzU a5xg7pHj0s9RtkvJQ2HTftYNDMzzqDEVohJj5+B8Pk2VWb1OlonAdul/Y4oXvMrM 5Pi/lHXIflU93oFZSscfQfhQBONy1WwjTVhiBQvU4o2oZtouONOlw7imFSC0bCOP /lXNeQ8XNvUDkWMXxTLba2tB+vzi/nJ5qmKrePvHazUlYq22p3kjXi01Vn+v0kNA 4hxZ0V6jftls3aen/J3DXkuWmiGoJSFF6DKToFqsZwnUFCE+ZsqWQa9XW/7T -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:09 2026 by rpki-client