This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rARWSrE5dm8d7mSLNaChi702IQk.cer File: rARWSrE5dm8d7mSLNaChi702IQk.cer (raw, json) Hash identifier: HHIdf9PNbWR5bogQp+4U15uteaQa11oOSETS4KrIAbU= Subject key identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3540F91E6249FA7A44E9896447DB2C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.89.192.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:40:f9:1e:62:49:fa:7a:44:e9:89:64:47:db:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac04564ab139766f1dee648b35a0a18bbd362109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:48:05:97:8c:2e:53:f3:5c:bc:b0:7d:c5: aa:cb:51:59:53:90:33:5f:b0:bf:fc:e3:c7:4f:0c: 39:fb:3f:1b:a4:7f:9d:2b:33:49:e9:f3:35:36:28: ff:d1:03:bb:94:97:7d:da:b8:80:6a:b5:ef:b5:e9: 90:05:07:0e:3c:ac:a1:ce:52:aa:d5:ec:85:9e:6e: 17:7a:8a:cf:32:20:41:4b:21:72:5b:e5:49:8d:fa: 61:4a:8d:8a:d4:1e:4b:65:94:25:be:bf:72:58:14: 61:42:c0:6e:a0:c7:b7:ca:e3:45:bf:2b:b0:48:86: 43:70:e1:bc:73:5a:bd:21:76:1f:be:c0:4c:14:08: 41:df:3d:db:61:f1:8b:2c:38:ab:36:aa:18:0c:bc: 94:71:24:2c:39:13:c6:fd:ee:17:45:b3:87:f1:a0: 18:76:0b:cb:8e:be:1c:0c:03:9b:e2:4b:9a:c7:e5: ef:19:0a:04:f0:2a:6e:d7:10:b6:9e:20:48:43:eb: 66:cc:e0:2a:48:a9:6c:39:5f:ae:52:53:ed:b5:81: 9e:eb:0b:b8:53:f8:37:3e:ae:ed:4a:07:62:c1:8c: be:da:38:5b:45:03:30:e5:58:c6:ce:41:b5:4c:82: bc:6a:a5:d3:43:b6:9a:70:ae:12:55:35:b2:17:76: 1a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:56:4A:B1:39:76:6F:1D:EE:64:8B:35:A0:A1:8B:BD:36:21:09 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4668d1-22a4-432e-81fc-284e9bcf82c5/1/rARWSrE5dm8d7mSLNaChi702IQk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.192.0/22 Signature Algorithm: sha256WithRSAEncryption 60:2f:74:38:35:ff:87:07:30:30:1c:2a:a5:4a:72:38:da:ff: 38:3c:a4:39:4c:06:4d:59:a9:a7:37:18:60:c3:30:2b:e7:9d: 3d:4f:01:3f:e5:ab:83:54:66:bd:6a:1c:c2:e4:d6:c2:ad:ae: 1b:f8:a6:8d:cc:cb:fb:89:d3:ef:6b:ac:d9:eb:58:ce:5d:fe: 4c:e4:93:9d:21:cd:5a:eb:ac:4b:db:e6:95:a7:3b:ad:8b:c5: 4c:56:8d:94:ed:75:c8:a4:d9:71:47:60:74:05:2e:a9:99:d7: 2b:97:5a:6c:af:1a:3f:13:79:5e:33:db:26:47:68:c3:b4:41: cc:c0:42:b9:8b:fb:af:dd:be:84:8c:7a:db:dc:8c:c5:62:33: 28:a0:07:5b:1f:68:f8:45:fe:bb:c5:e5:88:3c:e2:15:03:a9: 42:d6:e9:c4:c0:d2:3e:9c:9a:5f:3e:0f:5a:50:cf:ba:bb:54: ea:ea:2c:a8:58:8d:a2:58:73:ea:44:2a:e5:4d:30:2c:7d:ae: 49:70:16:59:0c:4d:53:ed:d9:db:de:0a:e2:e1:31:e8:74:ca: 97:0b:84:c7:a1:25:52:52:d6:69:0d:90:3f:66:99:d5:df:81: 99:e5:b5:2e:36:5a:17:27:2c:5e:d8:5a:8c:85:1a:7e:79:25: 34:af:e1:da -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NUD5HmJJ+npE6YlkR9ssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzA0NTY0YWIxMzk3NjZmMWRlZTY0OGIzNWEwYTE4YmJkMzYyMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/1IBZeMLlPzXLywfcWqy1FZU5Az X7C//OPHTww5+z8bpH+dKzNJ6fM1Nij/0QO7lJd92riAarXvtemQBQcOPKyhzlKq 1eyFnm4XeorPMiBBSyFyW+VJjfphSo2K1B5LZZQlvr9yWBRhQsBuoMe3yuNFvyuw SIZDcOG8c1q9IXYfvsBMFAhB3z3bYfGLLDirNqoYDLyUcSQsORPG/e4XRbOH8aAY dgvLjr4cDAOb4kuax+XvGQoE8Cpu1xC2niBIQ+tmzOAqSKlsOV+uUlPttYGe6wu4 U/g3Pq7tSgdiwYy+2jhbRQMw5VjGzkG1TIK8aqXTQ7aacK4SVTWyF3YaZQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFKwEVkqxOXZvHe5kizWgoYu9NiEJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzQ2Njhk MS0yMmE0LTQzMmUtODFmYy0yODRlOWJjZjgyYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNDY2OGQx LTIyYTQtNDMyZS04MWZjLTI4NGU5YmNmODJjNS8xL3JBUldTckU1ZG04ZDdtU0xO YUNoaTcwMklRay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVnAMA0GCSqGSIb3DQEBCwUAA4IBAQBgL3Q4 Nf+HBzAwHCqlSnI42v84PKQ5TAZNWamnNxhgwzAr5509TwE/5auDVGa9ahzC5NbC ra4b+KaNzMv7idPva6zZ61jOXf5M5JOdIc1a66xL2+aVpzuti8VMVo2U7XXIpNlx R2B0BS6pmdcrl1psrxo/E3leM9smR2jDtEHMwEK5i/uv3b6EjHrb3IzFYjMooAdb H2j4Rf67xeWIPOIVA6lC1unEwNI+nJpfPg9aUM+6u1Tq6iyoWI2iWHPqRCrlTTAs fa5JcBZZDE1T7dnb3gri4THodMqXC4THoSVSUtZpDZA/ZpnV34GZ5bUuNloXJyxe 2FqMhRp+eSU0r+Ha -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:14 2026 by rpki-client