This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer File: _rhNn4-eMxVliaXr9yIgOomeClE.cer (raw, json) Hash identifier: LYf/fTS1IrGu7i9v/NwbR/ckARGFBvGn/VghxLC2fAs= Subject key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3631C8616141E787197D4DC66E8716 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207088 IP: 195.210.96.0/19 IP: 2a0a:a200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:31:c8:61:61:41:e7:87:19:7d:4d:c6:6e:87:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:54:23:6f:c8:dd:7e:29:c8:e6:d0:1f:98:61: 86:29:14:95:8a:d9:dd:c0:30:7b:51:60:99:bb:40: 6d:99:c1:ea:d9:e5:a6:13:23:a4:7f:a8:45:6b:e2: 0e:1b:43:7d:ae:dd:ce:34:d4:f8:a5:e6:d7:1a:f5: a4:fa:bc:17:6f:5f:80:2d:2b:43:80:18:85:26:ed: 6c:97:3c:4d:d4:9b:84:ea:da:9a:13:be:a0:be:96: 16:c1:75:d1:e3:cf:23:fc:86:ef:69:ca:9d:42:82: c7:b9:1b:b3:f6:0f:a4:20:ad:6f:f0:f6:f8:01:91: 7a:25:fa:b2:95:0c:68:3d:56:d5:52:1c:33:53:2f: b3:f9:cd:a4:1c:fe:61:12:94:eb:2a:53:2c:57:8d: 5e:a2:3d:46:e8:cb:e8:fb:b9:5c:0f:80:ea:b2:47: 42:1a:53:9c:d2:9b:c8:c8:ff:f4:52:86:dd:fb:c8: 42:e4:c3:18:4c:54:d7:c8:c0:60:51:53:4c:4a:7b: 84:25:84:c2:ed:21:6f:02:da:8b:bd:5e:cc:62:bd: f8:cf:4d:05:e0:d0:26:16:ef:f1:25:78:9e:27:bd: 7d:45:ea:0e:a8:45:af:11:bc:7e:af:22:35:bd:ad: d2:79:c6:f7:ae:02:19:14:de:1c:8b:7c:f2:fc:3d: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.210.96.0/19 IPv6: 2a0a:a200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207088 Signature Algorithm: sha256WithRSAEncryption 2d:11:71:29:35:f0:c8:ed:c7:29:ba:68:54:7b:00:b7:6c:9c: 34:b9:1c:f5:91:59:64:b7:89:b0:d0:c1:d8:78:8e:0a:ec:2d: 5f:7c:a6:bb:55:07:b6:66:32:12:54:1a:83:e5:0b:65:eb:77: ea:ae:4b:1f:9a:98:4b:f5:0c:99:69:fc:79:3b:85:1e:d9:43: 41:67:55:26:dc:b0:f9:b0:f3:e5:30:b7:8a:41:04:e3:b9:71: d8:97:9f:75:ee:38:d7:7c:92:4d:17:83:87:b1:12:a3:a4:80: f0:22:1b:3e:6d:72:2d:38:eb:8f:cc:76:c5:9c:19:9f:48:cb: 1b:fe:e4:e1:37:bb:52:24:58:b9:78:e8:35:56:9f:06:4e:05: 55:e1:92:f1:9c:d9:47:2d:36:d2:fe:9b:dc:89:4b:06:c8:be: af:ce:60:a4:8b:8f:c2:28:28:13:ae:d1:c9:8e:a7:17:aa:d3: 88:99:e3:56:af:45:e3:a6:3a:30:c5:38:99:48:f6:a7:51:a4: 8d:07:f1:bc:de:52:81:e1:d3:5d:8c:30:75:16:2b:f3:7c:c1: a1:f7:d1:20:e8:de:a6:b7:4d:37:8a:8b:5b:20:a4:bf:91:86: 62:e1:87:63:8f:35:bd:f5:ee:33:3a:d8:57:71:8f:50:aa:10: cd:9b:44:bb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NjHIYWFB54cZfU3GbocWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWI4NGQ5ZjhmOWUzMzE1NjU4OWE1ZWJmNzIyMjAzYTg5OWUwYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VQjb8jdfinI5tAfmGGGKRSVitnd wDB7UWCZu0BtmcHq2eWmEyOkf6hFa+IOG0N9rt3ONNT4pebXGvWk+rwXb1+ALStD gBiFJu1slzxN1JuE6tqaE76gvpYWwXXR488j/IbvacqdQoLHuRuz9g+kIK1v8Pb4 AZF6JfqylQxoPVbVUhwzUy+z+c2kHP5hEpTrKlMsV41eoj1G6Mvo+7lcD4DqskdC GlOc0pvIyP/0Uobd+8hC5MMYTFTXyMBgUVNMSnuEJYTC7SFvAtqLvV7MYr34z00F 4NAmFu/xJXieJ719ReoOqEWvEbx+ryI1va3Secb3rgIZFN4ci3zy/D0N5wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFP64TZ+PnjMVZYml6/ciIDqJngpRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzYxNGU1 Yy0yOTliLTRmZDQtYTBiYy1hZjFjYzIzMTdlMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvNjE0ZTVj LTI5OWItNGZkNC1hMGJjLWFmMWNjMjMxN2UzOS8xL19yaE5uNC1lTXhWbGlhWHI5 eUlnT29tZUNsRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFw9JgMA0EAgACMAcDBQMqCqIAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMo8DANBgkqhkiG9w0BAQsFAAOCAQEALRFxKTXwyO3H KbpoVHsAt2ycNLkc9ZFZZLeJsNDB2HiOCuwtX3ymu1UHtmYyElQag+ULZet36q5L H5qYS/UMmWn8eTuFHtlDQWdVJtyw+bDz5TC3ikEE47lx2Jefde4413ySTReDh7ES o6SA8CIbPm1yLTjrj8x2xZwZn0jLG/7k4Te7UiRYuXjoNVafBk4FVeGS8ZzZRy02 0v6b3IlLBsi+r85gpIuPwigoE67RyY6nF6rTiJnjVq9F46Y6MMU4mUj2p1GkjQfx vN5SgeHTXYwwdRYr83zBoffRIOjeprdNN4qLWyCkv5GGYuGHY481vfXuMzrYV3GP UKoQzZtEuw== -----END CERTIFICATE-----Generated at Tue Jan 20 14:15:12 2026 by rpki-client