This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rENzvP5MWzcCARWd-W2xNzaYur0.cer File: rENzvP5MWzcCARWd-W2xNzaYur0.cer (raw, json) Hash identifier: ljkyGm4mzKnbvtMXmY5YFxmskthYIFrF8BdEYup7J9g= Subject key identifier: AC:43:73:BC:FE:4C:5B:37:02:01:15:9D:F9:6D:B1:37:36:98:BA:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE25E9B999DED4B69FD2ED9B55252A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44411 IP: 91.201.188.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:25:e9:b9:99:de:d4:b6:9f:d2:ed:9b:55:25:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac4373bcfe4c5b370201159df96db1373698babd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1d:3f:ee:cb:9d:9f:0c:5f:cd:c6:6b:bf:1b: 6e:fb:02:80:06:26:14:ed:3d:10:fd:6c:ee:ef:61: 26:2d:28:ca:74:65:93:c5:c5:d0:2f:16:ae:c2:f0: 7d:0e:63:0e:03:75:be:fc:c9:ad:e5:11:b6:bb:24: 5e:17:62:34:56:87:5f:35:6f:74:d3:0b:28:fa:fd: 42:3d:80:14:d4:e0:a3:82:bb:0c:c8:8e:df:8e:97: 73:18:a5:50:a4:01:92:fe:6f:bc:68:ce:e7:c9:86: a3:a7:93:eb:3d:96:87:9f:03:1d:4e:45:88:4f:2f: 42:66:20:72:5d:f4:9f:c9:9d:6d:b0:56:81:9f:b4: 1d:4b:1a:59:1a:a8:fb:b9:3f:2f:80:f8:dc:21:2e: 21:73:23:4f:fa:68:97:4f:ec:a4:98:be:49:82:59: f2:92:33:65:86:97:aa:ee:d2:4a:d9:b5:bc:9f:eb: 57:c3:1d:0d:81:98:f0:7a:65:20:90:91:7f:1a:96: 61:5f:25:e4:3a:b2:ed:25:14:bf:49:a3:5e:2c:0c: 12:50:b3:48:e7:c0:a2:b4:8a:eb:c3:40:cb:89:74: 88:30:3e:63:bf:8b:89:96:9b:22:16:17:46:ac:dc: 39:05:09:da:28:24:16:e0:30:83:0e:df:e8:f7:0f: a6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:43:73:BC:FE:4C:5B:37:02:01:15:9D:F9:6D:B1:37:36:98:BA:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44411 Signature Algorithm: sha256WithRSAEncryption 98:d7:70:f5:31:b1:2f:5e:64:c0:5e:81:5c:31:59:29:26:0a: 7f:88:a4:4e:50:53:a5:b3:b3:8e:c6:ef:e3:21:ab:76:68:43: 8d:1e:db:af:9d:aa:c6:ba:e0:d4:e4:1b:02:02:75:10:95:66: a4:d3:4e:38:fd:de:4f:7c:46:42:32:11:3e:c1:17:c1:81:c8: 57:6f:92:7d:97:fe:11:89:86:f5:16:95:95:c8:1c:f3:8a:15: 6a:f3:1d:63:15:02:98:b7:70:a7:45:8b:df:a1:2b:cd:75:43: 09:7d:78:b9:9f:1d:f8:11:48:99:f7:c8:12:85:7e:a7:dd:e0: c4:cb:fa:1d:0a:b0:40:9d:91:1e:3d:81:03:0f:2c:68:bd:e8: a5:ce:a1:fa:35:f0:e7:fe:32:6c:71:fa:ab:8f:88:44:12:4f: ff:ae:64:73:9d:c6:18:7c:a3:77:b8:11:97:d8:29:50:37:ba: 66:e8:0e:02:5b:a9:c9:68:c7:c1:7a:2d:c8:e7:9b:6f:57:62: a4:33:cc:a7:e0:8d:fb:90:88:28:4c:a4:c9:a7:47:34:f8:76: a3:7b:0d:3a:ac:a1:6e:ef:2f:23:00:83:b8:47:34:ba:0c:b9: f4:dc:7e:9f:35:3b:8b:1b:86:3d:2f:9a:2b:04:59:f9:7d:de: c7:3a:4c:46 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87iXpuZne1Laf0u2bVSUqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQzNzNiY2ZlNGM1YjM3MDIwMTE1OWRmOTZkYjEzNzM2OThiYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx0/7sudnwxfzcZrvxtu+wKABiYU 7T0Q/Wzu72EmLSjKdGWTxcXQLxauwvB9DmMOA3W+/Mmt5RG2uyReF2I0VodfNW90 0wso+v1CPYAU1OCjgrsMyI7fjpdzGKVQpAGS/m+8aM7nyYajp5PrPZaHnwMdTkWI Ty9CZiByXfSfyZ1tsFaBn7QdSxpZGqj7uT8vgPjcIS4hcyNP+miXT+ykmL5Jglny kjNlhpeq7tJK2bW8n+tXwx0NgZjwemUgkJF/GpZhXyXkOrLtJRS/SaNeLAwSULNI 58CitIrrw0DLiXSIMD5jv4uJlpsiFhdGrNw5BQnaKCQW4DCDDt/o9w+mmwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKxDc7z+TFs3AgEVnfltsTc2mLq9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0LzU1OTIw MC1jNTAxLTRhYzAtYTVmNS1lNWEzNWE4NDcyNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvNTU5MjAw LWM1MDEtNGFjMC1hNWY1LWU1YTM1YTg0NzI3My8xL3JFTnp2UDVNV3pjQ0FSV2Qt VzJ4TnphWXVyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW8m8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCtezANBgkqhkiG9w0BAQsFAAOCAQEAmNdw9TGxL15kwF6BXDFZKSYKf4ikTlBT pbOzjsbv4yGrdmhDjR7br52qxrrg1OQbAgJ1EJVmpNNOOP3eT3xGQjIRPsEXwYHI V2+SfZf+EYmG9RaVlcgc84oVavMdYxUCmLdwp0WL36ErzXVDCX14uZ8d+BFImffI EoV+p93gxMv6HQqwQJ2RHj2BAw8saL3opc6h+jXw5/4ybHH6q4+IRBJP/65kc53G GHyjd7gRl9gpUDe6ZugOAlupyWjHwXotyOebb1dipDPMp+CN+5CIKEykyadHNPh2 o3sNOqyhbu8vIwCDuEc0ugy59Nx+nzU7ixuGPS+aKwRZ+X3exzpMRg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:52 2026 by rpki-client