This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer (raw, json) Hash identifier: EsChb/nSMNAgw3nGjJSB0UIgcJSXJ6WQggLK7UBQ4Z4= Subject key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35E6CECC4E140CD021203DF2A1D76C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208198 IP: 45.10.148.0/22 IP: 45.133.36.0/22 IP: 45.143.96.0/22 IP: 185.148.240.0/22 IP: 185.169.180.0/22 IP: 185.174.20.0/22 IP: 2a07:6300::/29 IP: 2a0b:7d00::/29 IP: 2a0d:d800::/29 IP: 2a0e:3b00::/29 IP: 2a0e:79c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e6:ce:cc:4e:14:0c:d0:21:20:3d:f2:a1:d7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:83:5f:52:13:d2:5d:7f:2f:b1:78:f6:20:41: 95:dd:ff:2c:6b:2c:01:d0:12:5e:ad:55:9a:fa:f2: 8e:40:21:c0:31:7e:ed:6f:eb:31:71:7f:28:f8:d4: 41:ac:26:19:54:77:28:8c:03:37:6f:70:8a:1e:c0: 8e:13:6c:df:d2:4f:66:82:c2:69:5b:f6:2e:ab:1d: e6:2e:e0:fc:d9:97:29:ce:09:29:2f:4e:3b:bc:43: 09:62:3f:9a:98:b3:db:b3:8c:81:fb:a1:27:01:91: c4:ca:65:38:ee:a1:db:ad:8a:a0:1b:04:ff:74:14: ea:3f:5d:23:0d:b5:83:47:0e:b7:4b:55:65:a2:b8: e1:fb:2a:f8:f1:06:cc:62:6b:93:b8:c5:2a:5e:7e: 06:a8:8e:23:02:9d:7f:1c:57:78:18:c6:3e:a2:c2: c4:a7:4b:7f:0e:a7:e6:73:8a:44:0f:35:5f:8f:e6: 68:80:09:ce:0f:ec:0b:28:d0:fe:73:af:14:e4:1b: 09:4c:9d:7c:3d:d0:77:5e:3d:21:a7:5d:cd:f2:dd: 03:5e:9f:4e:53:e0:4b:d6:69:b4:49:cf:5c:11:03: fc:14:4f:dd:c0:82:c1:f2:da:0b:7d:5a:b9:cc:e4: fc:0f:77:30:1e:d0:39:58:04:4f:6e:49:6c:d7:19: b7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.148.0/22 45.133.36.0/22 45.143.96.0/22 185.148.240.0/22 185.169.180.0/22 185.174.20.0/22 IPv6: 2a07:6300::/29 2a0b:7d00::/29 2a0d:d800::/29 2a0e:3b00::/29 2a0e:79c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208198 Signature Algorithm: sha256WithRSAEncryption aa:31:32:a8:6b:58:d8:70:51:a9:ba:b8:c8:1f:79:31:ec:af: c4:3c:b1:32:b8:a3:9e:ae:79:88:ab:0e:1e:0a:64:91:7f:6a: e3:c9:61:9a:33:ed:54:ab:1b:8a:5f:f0:04:f6:00:c3:e5:5a: 2e:e1:79:1d:e7:c6:b7:3a:2e:82:8f:c0:0f:e5:80:ba:54:47: 43:84:a2:da:d4:05:b8:79:c7:17:cd:49:b3:ac:ef:c3:0d:dd: ce:2b:7c:7a:cf:fa:28:19:0c:f9:76:32:ed:a6:22:0b:81:5f: 08:4d:68:ed:7e:5b:2c:6a:8b:75:ce:47:7d:5c:bc:88:64:8d: c9:67:91:1c:b3:65:1b:66:7a:ae:0e:c9:2e:3b:cb:51:03:bc: 9c:9a:8f:86:7c:9c:2c:5d:55:f7:17:06:cd:31:bb:e7:08:50: df:83:09:98:89:46:d2:1b:68:85:a9:22:88:60:60:90:77:21: 5f:42:6f:0e:34:cf:52:bf:e4:2a:bc:18:48:09:5e:52:9b:76: e0:fc:d1:15:a4:44:c1:81:38:cf:bc:ee:41:9c:23:5d:78:b5: e5:bc:80:cc:65:76:d7:3f:04:cb:e7:12:18:17:b5:4f:db:40: d8:5c:b9:47:0f:d6:a1:89:b7:3a:92:11:0f:a7:da:df:55:70: 90:e9:bf:25 -----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgISAZt7NebOzE4UDNAhID3yoddsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDBkYTQzYjRhNWQzZGI3OGJhM2Y3NzRlNWIzMWI3NzAzNzIwMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINfUhPSXX8vsXj2IEGV3f8saywB 0BJerVWa+vKOQCHAMX7tb+sxcX8o+NRBrCYZVHcojAM3b3CKHsCOE2zf0k9mgsJp W/Yuqx3mLuD82ZcpzgkpL047vEMJYj+amLPbs4yB+6EnAZHEymU47qHbrYqgGwT/ dBTqP10jDbWDRw63S1Vlorjh+yr48QbMYmuTuMUqXn4GqI4jAp1/HFd4GMY+osLE p0t/Dqfmc4pEDzVfj+ZogAnOD+wLKND+c68U5BsJTJ18PdB3Xj0hp13N8t0DXp9O U+BL1mm0Sc9cEQP8FE/dwILB8toLfVq5zOT8D3cwHtA5WARPbkls1xm37QIDAQAB o4IC6TCCAuUwHQYDVR0OBBYEFK0NpDtKXT23i6P3dOWzG3cDcgLVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2RkODA5 Ni0xNGNjLTQ4OGQtOTI1Ny1jNTE1ZjM1NGNjNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvZGQ4MDk2 LTE0Y2MtNDg4ZC05MjU3LWM1MTVmMzU0Y2M1YS8xL3JRMmtPMHBkUGJlTG9fZDA1 Yk1iZHdOeUF0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGCCsGAQUF BwEHAQH/BFkwVzAqBAIAATAkAwQCLQqUAwQCLYUkAwQCLY9gAwQCuZTwAwQCuam0 AwQCua4UMCkEAgACMCMDBQMqB2MAAwUDKgt9AAMFAyoN2AADBQMqDjsAAwUDKg55 wDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDLUYwDQYJKoZIhvcNAQELBQADggEB AKoxMqhrWNhwUam6uMgfeTHsr8Q8sTK4o56ueYirDh4KZJF/auPJYZoz7VSrG4pf 8AT2AMPlWi7heR3nxrc6LoKPwA/lgLpUR0OEotrUBbh5xxfNSbOs78MN3c4rfHrP +igZDPl2Mu2mIguBXwhNaO1+Wyxqi3XOR31cvIhkjclnkRyzZRtmeq4OyS47y1ED vJyaj4Z8nCxdVfcXBs0xu+cIUN+DCZiJRtIbaIWpIohgYJB3IV9Cbw40z1K/5Cq8 GEgJXlKbduD80RWkRMGBOM+87kGcI114teW8gMxldtc/BMvnEhgXtU/bQNhcuUcP 1qGJtzqSEQ+n2t9VcJDpvyU= -----END CERTIFICATE-----Generated at Wed Jan 21 15:08:17 2026 by rpki-client