This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer File: grE25oINlPA7HF1x7uPUsiGRUo8.cer (raw, json) Hash identifier: cS3NbybQEyUFr3FhlM+EwxXtqEt/bt5mOgdDZlbbtLU= Subject key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2BC47319FB6F82CA794C9E871ED20 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20670 IP: 5.63.190.0/24 IP: 31.131.168.0/21 IP: 45.93.228.0/22 IP: 91.210.76.0/22 IP: 185.37.32.0/22 IP: 193.56.62.0/23 IP: 193.56.104.0/23 IP: 2a0c:ea80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bc:47:31:9f:b6:f8:2c:a7:94:c9:e8:71:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7c:23:9c:05:c9:46:6a:0f:fc:ef:64:be:2d: 5a:17:17:66:92:46:e0:46:b0:00:6a:1e:51:0f:45: 55:4c:df:a2:a3:55:13:af:66:f5:3d:8b:8b:2c:fd: 29:1e:bc:fb:37:3e:2f:10:99:4b:05:f0:d9:3c:8d: 05:a9:5b:fd:3d:e9:fe:a5:68:bd:2f:81:ad:70:f2: 61:8c:2a:36:75:6a:07:6f:83:a2:e1:17:48:e6:48: d5:0d:f9:a8:2b:a1:f5:9c:64:61:f5:c3:2a:64:79: cc:b1:e8:5d:e5:f7:b6:9a:0d:a6:53:9d:e9:20:0a: c1:97:3a:5b:e7:43:a4:b1:c2:4b:c4:3b:a2:e8:2c: 51:e6:a5:d8:db:85:34:12:f2:b5:26:63:2c:0f:66: 03:2b:ae:af:f2:4e:da:c1:ee:fe:1b:89:94:b9:e1: 72:ff:ff:37:ff:50:b9:c4:01:53:0c:43:91:3c:51: 68:4d:66:29:21:5f:b4:87:31:26:7d:6c:28:f0:41: 03:de:de:d8:79:bf:b1:26:f7:b7:ba:a2:5f:f5:ae: c6:3a:27:9e:b2:30:08:e1:43:7e:99:0d:5e:72:a3: 4b:0d:f4:a1:e0:11:be:82:cd:00:13:ec:95:5a:4f: 23:51:d6:c0:79:e6:ea:e2:ca:26:43:bf:d4:b9:bf: 41:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.190.0/24 31.131.168.0/21 45.93.228.0/22 91.210.76.0/22 185.37.32.0/22 193.56.62.0/23 193.56.104.0/23 IPv6: 2a0c:ea80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20670 Signature Algorithm: sha256WithRSAEncryption 7e:8f:b4:ce:17:ac:54:18:9f:28:4e:64:2d:f2:3f:e0:91:0c: 46:3e:5f:37:15:af:34:e3:d4:5c:e3:6a:02:a0:85:f8:ad:69: e0:53:8f:dc:dc:e0:8b:81:5d:fd:14:37:27:99:ef:a1:cf:99: 1f:e4:c6:53:a6:64:09:23:2c:73:c8:cb:dd:0f:64:42:a4:4a: 7f:4e:41:9f:7b:b9:36:c4:9f:18:56:b7:cd:0c:e3:25:df:e0: 45:02:4e:58:69:c9:c8:68:b4:00:1c:13:04:7d:b1:5d:fc:fe: 88:8d:7c:a0:46:28:8a:ac:c7:d9:80:e9:20:45:35:38:a5:29: b0:aa:76:14:c5:a6:58:c9:38:20:46:93:7b:e9:8c:49:1c:8c: c3:5c:f8:3d:80:aa:3a:4c:66:e2:88:18:ae:3c:8a:11:56:81: d1:e8:8a:ea:f4:06:39:d8:c8:b0:19:bf:a4:b7:76:8d:71:e3: 51:c5:2d:fb:38:43:15:ba:ba:b1:2b:ab:5d:98:e9:05:1d:a4: 18:4a:4f:e2:1e:f8:68:13:2f:cb:89:1d:aa:cf:ec:2b:94:6c: b0:ad:47:0d:99:30:58:76:07:cd:95:91:9c:e7:d4:21:fc:4b: ab:2b:b9:2e:a9:0d:b0:5b:a1:43:eb:18:9f:4e:de:bf:36:5a: 25:5b:39:d2 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgISAZt4orxHMZ+2+CynlMnoce0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmIxMzZlNjgyMGQ5NGYwM2IxYzVkNzFlZWUzZDRiMjIxOTE1MjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03wjnAXJRmoP/O9kvi1aFxdmkkbg RrAAah5RD0VVTN+io1UTr2b1PYuLLP0pHrz7Nz4vEJlLBfDZPI0FqVv9Pen+pWi9 L4GtcPJhjCo2dWoHb4Oi4RdI5kjVDfmoK6H1nGRh9cMqZHnMsehd5fe2mg2mU53p IArBlzpb50OkscJLxDui6CxR5qXY24U0EvK1JmMsD2YDK66v8k7awe7+G4mUueFy //83/1C5xAFTDEORPFFoTWYpIV+0hzEmfWwo8EED3t7Yeb+xJve3uqJf9a7GOiee sjAI4UN+mQ1ecqNLDfSh4BG+gs0AE+yVWk8jUdbAeebq4somQ7/Uub9B/wIDAQAB o4IC0jCCAs4wHQYDVR0OBBYEFIKxNuaCDZTwOxxdce7j1LIhkVKPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzIyMTEy ZS00ZTEzLTQzZDAtOWViMS0wZGEzY2FhOTE0MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvMjIxMTJl LTRlMTMtNDNkMC05ZWIxLTBkYTNjYWE5MTQyOS8xL2dyRTI1b0lObFBBN0hGMXg3 dVBVc2lHUlVvOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQABT++AwQDH4OoAwQCLV3kAwQCW9JMAwQCuSUg AwQBwTg+AwQBwThoMA0EAgACMAcDBQMqDOqAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAlC+MA0GCSqGSIb3DQEBCwUAA4IBAQB+j7TOF6xUGJ8oTmQt8j/gkQxGPl83 Fa8049Rc42oCoIX4rWngU4/c3OCLgV39FDcnme+hz5kf5MZTpmQJIyxzyMvdD2RC pEp/TkGfe7k2xJ8YVrfNDOMl3+BFAk5YacnIaLQAHBMEfbFd/P6IjXygRiiKrMfZ gOkgRTU4pSmwqnYUxaZYyTggRpN76YxJHIzDXPg9gKo6TGbiiBiuPIoRVoHR6Irq 9AY52MiwGb+kt3aNceNRxS37OEMVurqxK6tdmOkFHaQYSk/iHvhoEy/LiR2qz+wr lGywrUcNmTBYdgfNlZGc59Qh/EurK7kuqQ2wW6FD6xifTt6/NlolWznS -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:18 2026 by rpki-client