This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer (raw, json) Hash identifier: FuamdCsge/xf9UC4MbGP81paJznIgJovjD7f1C9eJLA= Subject key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37EC89C8EB5722F483AA8525061379 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208928 IP: 45.15.0.0/22 IP: 45.147.128.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ec:89:c8:eb:57:22:f4:83:aa:85:25:06:13:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2c:1d:ab:c1:c0:3b:11:4c:fb:be:a7:02:41: e9:4e:aa:ef:04:5a:ee:79:66:71:c8:47:5f:a9:b8: 5c:3d:df:1a:51:46:49:06:40:63:62:73:f5:4c:27: 0a:fd:5a:aa:44:98:f5:9d:ef:02:38:15:82:bd:38: 05:dd:24:03:19:9a:c2:44:ad:ea:74:be:af:49:67: d7:1a:5e:8b:97:e1:6d:23:09:db:05:7b:4e:a4:d7: a6:14:6d:1b:6a:02:6c:bc:c7:11:a7:51:a0:c4:10: b6:f7:96:ce:83:27:83:2b:84:e9:56:03:96:7d:01: 7c:dc:63:2d:27:00:fb:19:93:4f:a0:f5:2e:aa:37: 8d:7b:0d:93:b2:cc:64:b3:3e:10:75:bf:2a:8c:98: 17:e7:26:a0:f6:a5:3f:85:d0:21:d8:a7:01:0e:d5: c2:7c:92:05:90:1e:9b:d4:5d:43:70:40:42:eb:fd: 54:e8:90:31:4b:bd:71:f3:54:3b:ac:45:d6:78:36: 19:7a:1b:ce:9f:23:06:21:5b:9e:ad:b6:fb:6e:c6: 82:c2:1a:41:f6:3a:d6:18:73:72:3b:8c:24:f4:6d: 42:5d:52:31:09:d8:09:ef:cb:42:9c:7f:01:81:3c: 11:ec:3f:03:ba:27:0f:9b:5c:b0:41:9c:71:eb:ce: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.0.0/22 45.147.128.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208928 Signature Algorithm: sha256WithRSAEncryption 1d:76:6f:f9:d7:21:41:9b:78:84:c0:94:f8:64:47:50:03:e4: 93:48:76:4b:22:74:f5:93:71:36:b7:1b:bd:bb:bf:f9:1a:09: 77:db:dd:bd:18:66:03:f2:57:92:d9:aa:b3:fc:4b:69:64:ff: ad:8f:65:38:79:71:5c:5f:45:b6:25:a0:87:e9:58:63:87:13: d1:f3:b8:36:11:c6:a6:58:d9:92:35:97:d2:2a:c1:a0:7e:23: b4:12:46:d3:6e:bb:c9:90:4e:6a:5d:45:91:4b:74:72:97:0a: 66:28:1f:c3:24:f7:59:9f:0a:17:fa:1f:0f:3e:d4:43:48:83: f5:a2:54:ee:46:8f:72:09:e6:ea:e7:df:8a:11:c1:d6:15:c6: 86:a6:bf:64:a3:de:e2:af:44:98:40:00:b3:8d:43:e6:a5:8b: a7:d1:07:df:1c:4b:f5:06:04:e7:38:e5:c4:83:14:f5:8f:ef: 14:72:9e:9d:3d:72:38:93:c0:e1:20:b4:f1:a0:13:f5:58:bf: a4:d0:49:fc:58:ae:f7:c4:5b:1b:8d:5d:76:a0:cd:f4:90:93: d4:65:0f:70:dd:4e:66:9f:ce:3e:f6:e8:b5:07:5e:8c:f3:77: 6a:63:82:70:84:76:33:fd:8d:43:27:0b:19:89:a4:3e:80:75: 4e:01:b2:c2 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt+N+yJyOtXIvSDqoUlBhN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJmZjExZGQwYzY2Y2U2N2ZlMGYxZDc0OWMwOTA5ZWYzNDE4ZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ywdq8HAOxFM+76nAkHpTqrvBFru eWZxyEdfqbhcPd8aUUZJBkBjYnP1TCcK/VqqRJj1ne8COBWCvTgF3SQDGZrCRK3q dL6vSWfXGl6Ll+FtIwnbBXtOpNemFG0bagJsvMcRp1GgxBC295bOgyeDK4TpVgOW fQF83GMtJwD7GZNPoPUuqjeNew2Tssxksz4Qdb8qjJgX5yag9qU/hdAh2KcBDtXC fJIFkB6b1F1DcEBC6/1U6JAxS71x81Q7rEXWeDYZehvOnyMGIVuerbb7bsaCwhpB 9jrWGHNyO4wk9G1CXVIxCdgJ78tCnH8BgTwR7D8DuicPm1ywQZxx6844+QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFHEv8R3Qxmzmf+Dx10nAkJ7zQY0pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2Q5Y2M4 ZC05NWFjLTQ4NDgtYjA5Ny05ZDYzYjA0NzZlMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvZDljYzhk LTk1YWMtNDg0OC1iMDk3LTlkNjNiMDQ3NmUyNC8xL2NTX3hIZERHYk9aXzRQSFhT Y0NRbnZOQmpTay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCLQ8AAwQCLZOAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMwIDANBgkqhkiG9w0BAQsFAAOCAQEAHXZv+dchQZt4hMCU+GRHUAPk k0h2SyJ09ZNxNrcbvbu/+RoJd9vdvRhmA/JXktmqs/xLaWT/rY9lOHlxXF9FtiWg h+lYY4cT0fO4NhHGpljZkjWX0irBoH4jtBJG0267yZBOal1FkUt0cpcKZigfwyT3 WZ8KF/ofDz7UQ0iD9aJU7kaPcgnm6uffihHB1hXGhqa/ZKPe4q9EmEAAs41D5qWL p9EH3xxL9QYE5zjlxIMU9Y/vFHKenT1yOJPA4SC08aAT9Vi/pNBJ/Fiu98RbG41d dqDN9JCT1GUPcN1OZp/OPvbotQdejPN3amOCcIR2M/2NQycLGYmkPoB1TgGywg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:19 2026 by rpki-client