This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer File: rSzwPkTaKLcxnqe3tbEQubjLenA.cer (raw, json) Hash identifier: NDq8Nic3nZao8IYGRrsW6t7xVHTEZa7lwOyj6fFaCWY= Subject key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9CF4DFF409895F5CCF763DB25C6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 2586 AS: 13272 IP: 62.65.192.0/18 IP: 81.90.112.0/20 IP: 82.131.0.0/17 IP: 85.253.0.0/16 IP: 87.119.160.0/19 IP: 91.213.43.0/24 IP: 94.246.216.0 -- 94.246.255.255 IP: 95.129.192.0/21 IP: 145.14.16.0 -- 145.14.47.255 IP: 146.255.176.0/21 IP: 178.23.112.0/21 IP: 185.13.16.0/22 IP: 185.34.36.0/22 IP: 185.72.28.0/22 IP: 185.125.136.0/22 IP: 194.55.8.0/22 IP: 194.150.64.0/22 IP: 194.204.0.0/18 IP: 2001:67c:32c::/48 IP: 2001:1530::/32 IP: 2001:1bf0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9c:f4:df:f4:09:89:5f:5c:cf:76:3d:b2:5c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:0b:80:bc:86:fd:30:6b:43:91:dc:5e:fd: 60:f0:c2:74:74:40:2b:37:51:a9:63:45:3d:d6:f9: b7:95:86:54:39:6d:e6:b9:cd:07:9c:ba:9a:e7:cd: 0e:a2:0d:0e:14:d6:f2:69:98:ab:22:14:23:50:ab: 26:8b:af:1b:f4:7e:34:15:87:fe:35:2a:2d:a7:07: 84:de:77:67:1d:a5:e6:7d:f1:2c:f6:7e:d4:0c:ec: 4d:97:19:d0:9d:3e:b3:c6:5f:d9:55:0a:9b:ff:98: 8a:97:70:07:d5:17:c0:c8:f5:e6:3b:ca:a9:42:76: 83:ed:9d:3e:10:38:1c:82:e8:3f:a4:7c:38:11:23: ea:94:0b:23:eb:72:37:a0:32:0a:be:08:52:f6:fa: 95:3f:1c:35:03:39:6c:0e:79:f8:02:ca:d2:80:bb: 9c:e3:94:a9:d8:33:ab:b4:2a:95:65:c3:a8:68:8e: 0d:65:f8:1d:4a:82:57:88:10:1c:42:57:4b:41:e3: 7a:8f:ae:bf:06:ab:6e:6b:f5:e0:a8:56:14:77:6c: 5b:5d:0b:7f:03:72:89:f4:ff:7e:5e:6d:91:97:e6: 81:2b:8b:c3:51:4f:5a:00:43:bb:1b:3c:37:ad:9a: be:75:36:d2:31:dc:78:43:de:80:c7:c2:a5:21:54: f0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.65.192.0/18 81.90.112.0/20 82.131.0.0/17 85.253.0.0/16 87.119.160.0/19 91.213.43.0/24 94.246.216.0-94.246.255.255 95.129.192.0/21 145.14.16.0-145.14.47.255 146.255.176.0/21 178.23.112.0/21 185.13.16.0/22 185.34.36.0/22 185.72.28.0/22 185.125.136.0/22 194.55.8.0/22 194.150.64.0/22 194.204.0.0/18 IPv6: 2001:67c:32c::/48 2001:1530::/32 2001:1bf0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2586 13272 Signature Algorithm: sha256WithRSAEncryption 62:00:d9:c1:b7:dd:56:01:be:7d:98:3a:d3:5b:2f:f2:56:05: 14:c5:86:72:3b:60:95:98:92:21:93:39:ff:9f:d0:7a:20:9b: 10:c7:e4:f5:54:89:45:a5:98:8f:71:de:08:1c:af:2b:97:02: 91:19:5c:8c:d6:46:11:d4:8b:ba:47:8c:a5:8a:88:a9:e5:a5: f1:68:08:2c:39:5d:5d:eb:86:05:a4:65:07:a1:ac:df:6d:0c: 6b:2d:4d:a6:71:9f:72:99:08:ad:81:cb:1a:4f:7a:bc:4d:35: b2:99:68:9b:d8:09:e1:a9:d4:16:f5:77:e8:bb:e8:15:bb:a8: 2b:5a:3c:ec:f3:5a:f4:5b:0b:36:d7:61:a0:6b:ac:75:f9:be: 8d:26:23:63:d9:7d:36:e4:4b:05:f7:89:0e:ee:db:d1:3f:4d: 7f:15:91:c0:11:af:6f:50:f6:cf:2c:8d:72:78:72:67:fe:98: a9:f1:21:bf:4a:3e:32:b2:f5:56:6b:b6:de:eb:84:3a:81:0b: ea:19:bd:ea:d1:2a:5c:f3:c1:b2:dc:04:23:4a:1f:fc:a4:42: 2e:54:d6:d6:29:5e:20:40:e7:e2:e7:4a:30:61:e1:3e:83:f8: 88:17:9a:4b:18:f4:d2:58:90:3c:52:ce:8c:ae:57:96:36:60: bd:ff:4b:a9 -----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgISAZt6W5z03/QJiV9cz3Y9slxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDJjZjAzZTQ0ZGEyOGI3MzE5ZWE3YjdiNWIxMTBiOWI4Y2I3YTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv0LgLyG/TBrQ5HcXv1g8MJ0dEAr N1GpY0U91vm3lYZUOW3muc0HnLqa580Oog0OFNbyaZirIhQjUKsmi68b9H40FYf+ NSotpweE3ndnHaXmffEs9n7UDOxNlxnQnT6zxl/ZVQqb/5iKl3AH1RfAyPXmO8qp QnaD7Z0+EDgcgug/pHw4ESPqlAsj63I3oDIKvghS9vqVPxw1AzlsDnn4AsrSgLuc 45Sp2DOrtCqVZcOoaI4NZfgdSoJXiBAcQldLQeN6j66/Bqtua/XgqFYUd2xbXQt/ A3KJ9P9+Xm2Rl+aBK4vDUU9aAEO7Gzw3rZq+dTbSMdx4Q96Ax8KlIVTwDwIDAQAB o4IDOjCCAzYwHQYDVR0OBBYEFK0s8D5E2ii3MZ6nt7WxELm4y3pwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2NhZTMx OS01NTcxLTQ2ZjktYjU3ZC1iZTA2NWUxYWMwNjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvY2FlMzE5 LTU1NzEtNDZmOS1iNTdkLWJlMDY1ZTFhYzA2Ny8xL3JTendQa1RhS0xjeG5xZTN0 YkVRdWJqTGVuQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIG1BggrBgEF BQcBBwEB/wSBpTCBojCBgAQCAAEwegMEBj5BwAMEBFFacAMEB1KDAAMDAFX9AwQF V3egAwQAW9UrMAsDBANe9tgDAwBe9gMEA1+BwDAMAwQEkQ4QAwQEkQ4gAwQDkv+w AwQDshdwAwQCuQ0QAwQCuSIkAwQCuUgcAwQCuX2IAwQCwjcIAwQCwpZAAwQGwswA MB0EAgACMBcDBwAgAQZ8AywDBQAgARUwAwUDIAEb8DAdBggrBgEFBQcBCAEB/wQO MAygCjAIAgIKGgICM9gwDQYJKoZIhvcNAQELBQADggEBAGIA2cG33VYBvn2YOtNb L/JWBRTFhnI7YJWYkiGTOf+f0HogmxDH5PVUiUWlmI9x3ggcryuXApEZXIzWRhHU i7pHjKWKiKnlpfFoCCw5XV3rhgWkZQehrN9tDGstTaZxn3KZCK2ByxpPerxNNbKZ aJvYCeGp1Bb1d+i76BW7qCtaPOzzWvRbCzbXYaBrrHX5vo0mI2PZfTbkSwX3iQ7u 29E/TX8VkcARr29Q9s8sjXJ4cmf+mKnxIb9KPjKy9VZrtt7rhDqBC+oZverRKlzz wbLcBCNKH/ykQi5U1tYpXiBA5+LnSjBh4T6D+IgXmksY9NJYkDxSzoyuV5Y2YL3/ S6k= -----END CERTIFICATE-----Generated at Tue Jan 27 00:09:54 2026 by rpki-client