This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer File: RsyrdHmk4NikF3NQoAppvYg7BI0.cer (raw, json) Hash identifier: O3u/MlaGfEx9TbzJY30Mkd/1xBSbgP1vcb4ajswwPHc= Subject key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3684C263FA09ECC986FCB0CDD93CF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.8.80.0/22 IP: 185.102.44.0/22 IP: 185.191.100.0/22 IP: 185.212.232.0/22 IP: 185.234.155.0/24 IP: 2a00:d220::/32 IP: 2a0a:17c0::/29 IP: 2a0b:7e40::/32 IP: 2a0e:1a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:84:c2:63:fa:09:ec:c9:86:fc:b0:cd:d9:3c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:34:0e:61:51:32:e1:40:43:cd:a1:ad:ef: 8c:f4:77:2e:57:ef:02:ee:59:c4:33:41:a3:88:61: fa:5d:44:76:84:6c:85:be:1a:0b:d5:03:6a:9f:70: 4e:3c:3b:01:1a:65:32:39:31:44:4f:a5:fa:5b:6f: e7:73:fe:47:69:78:2b:41:ee:14:ac:da:48:f1:1a: 35:49:5e:2b:82:78:d2:f2:ae:c8:4a:5e:0f:4e:6c: f4:64:60:93:60:6e:f4:60:2d:51:22:98:e0:b9:2b: 4a:c3:8e:65:fd:e9:32:b4:d3:cd:85:00:da:34:f9: c6:4d:b1:59:48:a4:4f:e8:63:a5:12:70:7a:a4:68: 11:2b:f9:28:31:da:72:56:53:f4:bc:71:38:a4:06: 9f:1b:48:69:f7:1c:d3:7a:5c:c9:9c:4e:87:e0:45: e0:d8:86:6d:e3:00:71:bf:16:d1:d4:ef:5b:10:71: 82:94:52:94:e6:1a:dc:9d:45:0d:5f:f2:c2:2e:aa: 6f:ae:c7:e0:86:39:32:c3:0e:01:eb:3a:35:f0:bc: a2:72:80:d1:20:f9:09:42:84:13:fd:ba:3c:de:27: 21:c3:88:da:da:34:fd:0f:ec:f5:8b:bc:4e:4c:d8: 30:e3:12:06:ff:c9:c4:5d:95:13:f5:93:a2:5b:a6: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.80.0/22 185.102.44.0/22 185.191.100.0/22 185.212.232.0/22 185.234.155.0/24 IPv6: 2a00:d220::/32 2a0a:17c0::/29 2a0b:7e40::/32 2a0e:1a00::/29 Signature Algorithm: sha256WithRSAEncryption a8:1c:d3:b8:c6:5d:16:32:48:7a:71:0a:09:91:94:d9:d1:27: e0:59:17:48:e6:65:e3:54:66:3b:41:da:1b:8e:7c:43:c4:10: 3b:01:7d:82:4d:2e:88:01:b8:2f:ce:b0:c8:90:9d:e6:13:f1: 95:5e:d8:e3:4f:a6:a5:cc:a5:e9:87:e4:a8:fb:9f:de:8f:d3: 72:5a:65:92:89:d5:72:cf:3b:03:6f:c0:58:9b:e2:b2:ab:8b: d6:b1:04:77:4a:48:9e:32:78:db:82:80:26:76:25:7b:2a:0b: 3e:02:ac:13:4c:c9:26:f7:d7:8a:ed:ad:22:11:9a:ee:80:1f: 15:b2:f3:98:30:ca:84:9d:4e:c5:b9:4c:fe:f6:92:37:0b:1e: cd:93:31:de:63:92:eb:5d:a5:db:5d:86:8c:46:af:50:69:f1: 57:f1:3e:18:4f:66:14:2a:31:0c:96:5c:82:f9:39:ae:80:94: 0f:0c:b0:7c:d4:0b:9a:51:d9:d6:58:c7:65:fe:b4:e8:fb:b7: f5:fc:1b:f0:2b:21:af:76:40:18:e8:09:1d:96:68:7f:69:65: f9:13:05:58:47:fd:15:d3:28:3d:6a:24:68:f0:a3:ef:cf:7e: 60:52:73:1f:89:7c:71:4e:3d:2c:1c:dd:75:bf:0c:75:59:54: e6:86:de:07 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt7NoTCY/oJ7MmG/LDN2Tz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmNjYWI3NDc5YTRlMGQ4YTQxNzczNTBhMDBhNjliZDg4M2IwNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlY0DmFRMuFAQ82hre+M9HcuV+8C 7lnEM0GjiGH6XUR2hGyFvhoL1QNqn3BOPDsBGmUyOTFET6X6W2/nc/5HaXgrQe4U rNpI8Ro1SV4rgnjS8q7ISl4PTmz0ZGCTYG70YC1RIpjguStKw45l/ekytNPNhQDa NPnGTbFZSKRP6GOlEnB6pGgRK/koMdpyVlP0vHE4pAafG0hp9xzTelzJnE6H4EXg 2IZt4wBxvxbR1O9bEHGClFKU5hrcnUUNX/LCLqpvrsfghjkyww4B6zo18LyicoDR IPkJQoQT/bo83ichw4ja2jT9D+z1i7xOTNgw4xIG/8nEXZUT9ZOiW6ZptQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFEbMq3R5pODYpBdzUKAKab2IOwSNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2RjNTI0 My1iYmE0LTRhY2YtYTIxOC0yZjMwMjUyZWI0NDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvZGM1MjQz LWJiYTQtNGFjZi1hMjE4LTJmMzAyNTJlYjQ0Mi8xL1JzeXJkSG1rNE5pa0YzTlFv QXBwdllnN0JJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGCCsGAQUF BwEHAQH/BEwwSjAkBAIAATAeAwQCLQhQAwQCuWYsAwQCub9kAwQCudToAwQAueqb MCIEAgACMBwDBQAqANIgAwUDKgoXwAMFACoLfkADBQMqDhoAMA0GCSqGSIb3DQEB CwUAA4IBAQCoHNO4xl0WMkh6cQoJkZTZ0SfgWRdI5mXjVGY7QdobjnxDxBA7AX2C TS6IAbgvzrDIkJ3mE/GVXtjjT6alzKXph+So+5/ej9NyWmWSidVyzzsDb8BYm+Ky q4vWsQR3SkieMnjbgoAmdiV7Kgs+AqwTTMkm99eK7a0iEZrugB8VsvOYMMqEnU7F uUz+9pI3Cx7NkzHeY5LrXaXbXYaMRq9QafFX8T4YT2YUKjEMllyC+TmugJQPDLB8 1AuaUdnWWMdl/rTo+7f1/BvwKyGvdkAY6Akdlmh/aWX5EwVYR/0V0yg9aiRo8KPv z35gUnMfiXxxTj0sHN11vwx1WVTmht4H -----END CERTIFICATE-----Generated at Tue Jan 27 01:38:19 2026 by rpki-client