This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer File: rdbXV2zSgkXGefmvNXXANbiiLJ4.cer (raw, json) Hash identifier: NcEOBR0WVTrseIake/2rzy2rQNkKtC56lsc9kwh9jjw= Subject key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77592AEA04019B1B9199F651E9D0C23C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.9.220.0/22 IP: 2a0e:1500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2a:ea:04:01:9b:1b:91:99:f6:51:e9:d0:c2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=add6d7576cd28245c679f9af3575c035b8a22c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:61:d7:5b:41:4d:9b:7f:17:d0:4b:64:5b:c1: f1:02:19:7f:c8:de:dc:3d:37:14:38:fc:1b:08:d2: 22:87:b7:1b:9a:2b:62:9a:97:ad:1d:c2:f3:7e:b3: 93:45:b2:a2:30:3f:e0:22:b7:3a:e6:3f:c8:ca:8c: 28:7d:ec:66:fa:ec:aa:8e:9e:fa:aa:7e:56:2b:1a: 1c:7e:25:8b:ae:d4:33:bc:40:dd:fa:e2:0d:f4:38: 11:7e:bb:a3:c6:35:9a:8a:1b:07:dd:8e:4f:38:57: b4:fd:9e:62:02:bb:c1:4c:97:ac:a9:31:71:8e:3e: b1:d6:fe:8c:51:74:fc:34:65:8b:59:e6:09:c6:0f: 1e:e6:8d:68:59:e0:5f:25:3c:95:de:b6:2e:1a:8f: 5b:13:9b:c9:4f:5c:86:ec:27:6d:bf:6e:4f:03:43: 70:94:74:8b:f7:36:1e:0d:51:16:b1:e7:c8:4f:00: 83:34:52:ff:fc:c9:60:e2:0e:5a:a4:bf:d3:60:ea: f6:c9:3c:28:61:5d:ba:9e:21:1b:d4:75:c6:4e:93: 30:b7:75:4c:df:94:b4:64:3a:b5:38:f5:09:f5:85: d0:2f:40:a2:f2:ac:09:c3:bf:c2:62:1d:52:09:bd: 70:10:97:26:42:07:f6:06:05:af:e0:11:d3:60:cc: 29:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.220.0/22 IPv6: 2a0e:1500::/29 Signature Algorithm: sha256WithRSAEncryption 67:8b:2c:06:d8:9a:77:8d:c7:4a:99:22:0e:d8:b1:6c:7c:c3: 02:f3:4e:ca:12:b8:27:e4:31:12:c3:3e:1a:84:f0:66:7a:91: aa:e6:d8:e4:89:56:b8:f6:58:47:af:ec:b4:33:c9:60:1e:65: 71:e8:a8:c0:f0:91:df:dc:44:5e:75:19:cd:8d:f5:a9:af:21: a2:45:25:ce:56:35:56:87:db:7c:35:13:7d:48:5a:0d:4a:12: db:94:31:48:1f:76:07:f8:88:59:1c:9e:3e:df:52:0f:e5:61: b1:21:30:db:e9:ad:6b:65:78:02:58:c7:33:4a:f7:5c:60:2d: 26:5e:bc:fb:8f:8a:98:0c:6b:17:07:12:ea:12:50:17:88:49: 9f:ab:0b:17:11:d9:9f:55:e1:02:df:3c:fc:d1:08:7e:b3:b0: ef:de:d7:29:41:5c:70:78:3d:c8:3c:e2:17:b7:38:34:88:5d: d6:68:53:b0:60:51:1e:d3:35:15:2f:ed:13:c8:76:e5:6a:1a: b9:f9:0d:0d:03:57:30:be:b2:72:e5:18:52:33:a1:1e:35:7d: 1b:18:4b:ae:12:29:26:23:82:fa:cb:75:84:f6:6c:33:04:0b: 83:f2:e4:c9:4c:df:09:7b:d3:eb:ab:f7:31:31:e8:c9:44:6d: bc:13:2d:aa -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WSrqBAGbG5GZ9lHp0MI8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGQ2ZDc1NzZjZDI4MjQ1YzY3OWY5YWYzNTc1YzAzNWI4YTIyYzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWHXW0FNm38X0EtkW8HxAhl/yN7c PTcUOPwbCNIih7cbmitimpetHcLzfrOTRbKiMD/gIrc65j/Iyowofexm+uyqjp76 qn5WKxocfiWLrtQzvEDd+uIN9DgRfrujxjWaihsH3Y5POFe0/Z5iArvBTJesqTFx jj6x1v6MUXT8NGWLWeYJxg8e5o1oWeBfJTyV3rYuGo9bE5vJT1yG7Cdtv25PA0Nw lHSL9zYeDVEWsefITwCDNFL//Mlg4g5apL/TYOr2yTwoYV26niEb1HXGTpMwt3VM 35S0ZDq1OPUJ9YXQL0Ci8qwJw7/CYh1SCb1wEJcmQgf2BgWv4BHTYMwpnQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFK3W11ds0oJFxnn5rzV1wDW4oiyeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzAzYzBh YS03Zjk0LTQwYzEtOTc0Mi1kZGIwNDg0YTZkYTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvMDNjMGFh LTdmOTQtNDBjMS05NzQyLWRkYjA0ODRhNmRhMi8xL3JkYlhWMnpTZ2tYR2VmbXZO WFhBTmJpaUxKNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQncMA0EAgACMAcDBQMqDhUAMA0GCSqGSIb3 DQEBCwUAA4IBAQBniywG2Jp3jcdKmSIO2LFsfMMC807KErgn5DESwz4ahPBmepGq 5tjkiVa49lhHr+y0M8lgHmVx6KjA8JHf3ERedRnNjfWpryGiRSXOVjVWh9t8NRN9 SFoNShLblDFIH3YH+IhZHJ4+31IP5WGxITDb6a1rZXgCWMczSvdcYC0mXrz7j4qY DGsXBxLqElAXiEmfqwsXEdmfVeEC3zz80Qh+s7Dv3tcpQVxweD3IPOIXtzg0iF3W aFOwYFEe0zUVL+0TyHblahq5+Q0NA1cwvrJy5RhSM6EeNX0bGEuuEikmI4L6y3WE 9mwzBAuD8uTJTN8Je9Prq/cxMejJRG28Ey2q -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:21 2026 by rpki-client