This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer (raw, json) Hash identifier: HzXkI8PPA3C39EVQzezc+SyDa5vUuaMrmSym8xwV7L0= Subject key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B89678EEECE81A63C02CC87D46C5D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213178 IP: 176.110.111.0/24 IP: 185.163.48.0/24 IP: 2a10:e140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:89:67:8e:ee:ce:81:a6:3c:02:cc:87:d4:6c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5c:8d:a4:8c:d0:74:ab:3b:fd:34:01:75:29: 6e:59:32:e1:38:a9:d0:5f:f1:fc:cd:34:d3:7c:c1: b0:fe:a9:22:cd:d9:8b:c8:80:c2:62:79:8f:88:13: d6:67:5a:78:e2:e6:43:38:ee:40:e5:6a:29:f9:b5: 9b:a0:88:24:ad:0c:ca:70:06:41:5c:ed:7e:3e:87: 22:b9:8c:13:5d:ae:ea:9b:25:8a:da:ba:51:5e:38: c0:9e:5d:a3:b6:e0:2e:bc:c6:0e:cc:11:0d:53:5f: 91:15:99:54:a1:6d:f6:26:dd:36:00:e8:73:35:1b: fe:69:f4:8c:e0:fc:01:3d:18:b4:4a:56:55:54:d3: 79:6b:ff:fa:aa:ec:ad:dc:6f:71:b2:4e:ee:23:b3: ed:12:b9:2c:44:23:fa:88:9d:b1:d7:20:32:fa:b3: 0b:31:ba:04:fd:a9:53:0b:5e:41:9b:e4:e2:9a:7b: f3:10:2d:a8:41:f3:2a:9f:aa:c5:7d:93:f3:9f:77: d9:b9:e8:a5:6c:79:eb:01:b4:13:30:1a:0f:4c:bf: 24:19:0c:e5:dc:a6:ed:16:e7:c3:ae:24:38:5c:28: 25:8a:53:c6:2e:44:3f:bf:7a:2c:9b:2f:af:65:5e: b3:49:e5:f9:55:bd:a3:73:ec:49:55:02:ef:48:66: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.111.0/24 185.163.48.0/24 IPv6: 2a10:e140::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213178 Signature Algorithm: sha256WithRSAEncryption 9d:a3:6d:9b:50:e9:43:cd:8f:b3:e2:13:68:3c:56:b5:b7:35: 9e:79:29:47:e4:44:b1:81:96:78:a2:eb:c0:b3:d7:55:13:18: 42:56:59:c1:0f:41:dd:b1:a4:37:0d:f6:35:21:86:07:fa:65: 54:d9:62:98:1d:d8:3e:94:eb:bb:c0:a9:c3:f2:2a:00:cd:cd: 25:8b:64:05:eb:74:ad:7c:15:c8:1c:e3:f6:fa:a2:b0:9e:6f: e7:fb:5c:09:10:f0:7f:f6:67:6b:8b:7f:53:1e:58:21:82:96: eb:84:68:83:b8:9d:83:d9:8c:53:68:75:23:b5:d1:c8:db:69: bc:9c:a1:45:25:2b:a5:0e:58:9a:a2:ec:82:7e:4e:7c:d0:16: 72:53:eb:a9:87:eb:c5:d0:2b:87:00:46:34:ac:21:4e:31:33: 1b:e8:33:e3:e1:48:1d:e1:c6:15:3d:d1:d1:e6:73:3d:80:5b: 68:cf:80:0b:00:59:07:29:5a:b5:30:45:68:60:05:dd:e7:fa: 7d:9c:9a:fd:0f:cf:a1:a5:02:f5:02:e3:d3:d7:5a:1f:c6:44: 8b:5e:b5:b3:2b:92:63:df:a0:a4:c3:e0:9b:ea:62:cd:15:14: d1:c2:87:1a:2e:72:82:1f:19:3d:a5:84:d2:f2:5f:e2:e9:b3: 2a:d8:b6:3a -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6W4lnju7OgaY8AsyH1GxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGNlM2MyYWFmYzc3ODNjY2U4MjM0NTUxZjNlOTY2MWQyN2VlZmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lyNpIzQdKs7/TQBdSluWTLhOKnQ X/H8zTTTfMGw/qkizdmLyIDCYnmPiBPWZ1p44uZDOO5A5Wop+bWboIgkrQzKcAZB XO1+PociuYwTXa7qmyWK2rpRXjjAnl2jtuAuvMYOzBENU1+RFZlUoW32Jt02AOhz NRv+afSM4PwBPRi0SlZVVNN5a//6quyt3G9xsk7uI7PtErksRCP6iJ2x1yAy+rML MboE/alTC15Bm+TimnvzEC2oQfMqn6rFfZPzn3fZueilbHnrAbQTMBoPTL8kGQzl 3KbtFufDriQ4XCglilPGLkQ/v3osmy+vZV6zSeX5Vb2jc+xJVQLvSGZinwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFK3OPCqvx3g8zoI0VR8+lmHSfu+8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzgyNGNj ZC1iYzliLTRhODItYmU5MS02MzEwNGRiNmE3YTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvODI0Y2Nk LWJjOWItNGE4Mi1iZTkxLTYzMTA0ZGI2YTdhNS8xL3JjNDhLcV9IZUR6T2dqUlZI ejZXWWRKLTc3dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAsG5vAwQAuaMwMA0EAgACMAcDBQAqEOFAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNAujANBgkqhkiG9w0BAQsFAAOCAQEAnaNt m1DpQ82Ps+ITaDxWtbc1nnkpR+REsYGWeKLrwLPXVRMYQlZZwQ9B3bGkNw32NSGG B/plVNlimB3YPpTru8Cpw/IqAM3NJYtkBet0rXwVyBzj9vqisJ5v5/tcCRDwf/Zn a4t/Ux5YIYKW64Rog7idg9mMU2h1I7XRyNtpvJyhRSUrpQ5YmqLsgn5OfNAWclPr qYfrxdArhwBGNKwhTjEzG+gz4+FIHeHGFT3R0eZzPYBbaM+ACwBZBylatTBFaGAF 3ef6fZya/Q/PoaUC9QLj09daH8ZEi161syuSY9+gpMPgm+pizRUU0cKHGi5ygh8Z PaWE0vJf4umzKti2Og== -----END CERTIFICATE-----Generated at Mon Feb 2 09:28:56 2026 by rpki-client