This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer File: riCckmRq40LKpdRtwdNzWg0uexQ.cer (raw, json) Hash identifier: DR3/qqngv5D2AX66tkAaiBf0x35Pv9GNjaTBe4xvfyQ= Subject key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EACCA9C45A1E9F7844DE80F005F782 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58188 IP: 45.136.200.0/22 IP: 91.193.244.0/22 IP: 193.27.42.0/24 IP: 2a0e:9ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cc:a9:c4:5a:1e:9f:78:44:de:80:f0:05:f7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:82:e6:c4:72:b2:e0:bb:cc:d8:46:a9:05: 09:a5:1f:8c:5e:a8:38:a1:c3:2f:b3:3b:6c:db:e1: 00:5a:2f:3d:10:e5:8f:6e:f6:71:fe:19:be:51:af: c3:a1:3d:71:05:0a:e8:74:13:63:bb:56:c8:10:dd: 67:34:13:b4:3a:1c:8c:30:c9:aa:53:b5:7d:85:ca: 5e:9f:3f:ae:a2:26:be:75:f1:44:a0:b8:59:1b:89: 7e:c3:0c:93:e9:6e:ab:c0:03:ab:73:97:24:ff:67: 62:a8:86:39:e3:d3:7b:fd:3e:eb:f4:d0:01:2e:3c: 78:5e:84:79:2b:9c:88:02:0a:15:7d:3c:b8:7b:f0: 9e:9a:3d:d1:62:11:97:ae:ab:58:68:0a:6e:00:fe: 05:21:c1:99:60:a4:32:9d:74:cd:95:b2:1e:96:bc: fb:c1:7a:25:cf:1e:76:d1:64:36:78:08:ee:08:2d: d0:a9:c1:23:78:09:5f:d0:97:57:98:d0:d5:03:3b: 6c:12:2a:80:8d:5c:52:fe:d3:22:1a:d5:dd:81:d9: 1e:22:04:59:8c:f5:d3:ef:9c:8e:53:29:45:ad:ed: 27:19:f8:a2:03:64:b5:b6:1e:d4:20:05:77:4e:91: 7b:87:e0:12:b7:83:46:c6:6a:c0:72:e9:1a:b9:c0: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.200.0/22 91.193.244.0/22 193.27.42.0/24 IPv6: 2a0e:9ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58188 Signature Algorithm: sha256WithRSAEncryption 90:15:b4:24:c9:8b:3d:87:49:01:f2:1d:17:93:a3:39:72:aa: 2c:3d:cb:ca:6a:70:c4:70:c4:7d:6b:e9:af:d8:c2:ed:9d:f1: 54:99:45:d9:24:92:e5:a4:b9:ec:81:a2:f9:45:e5:7e:98:f1: e3:bd:23:9a:57:ad:18:05:90:99:0d:ca:78:b7:e5:bc:c3:3d: c9:a3:5e:fa:a8:96:e3:9c:24:f5:f2:c0:0a:f1:6d:59:7e:a8: 21:6f:5d:e6:e8:bf:57:b4:3c:84:ec:b9:f0:07:07:16:a0:fe: 5c:7c:42:b6:79:3e:43:03:8f:24:ee:ff:35:bd:12:d9:1a:87: 87:4d:80:5c:0b:89:a8:5a:35:b9:6d:97:4c:19:bb:91:67:b6: 89:55:53:5a:3d:a0:33:6b:09:81:28:89:ab:e1:6a:ab:41:c0: cd:5a:1b:5e:5e:19:84:11:4c:46:ee:80:ba:c7:3b:8c:c8:fb: bf:7d:5c:fd:2e:fb:8a:51:40:7f:94:51:16:71:c7:a9:b9:91: 8e:b7:0b:dd:7e:6c:a5:ab:db:c3:85:78:24:76:73:c1:18:4f: d3:70:14:d6:fa:02:da:40:0e:76:4e:7a:0d:1b:7e:9f:9c:2f: 97:39:b7:a9:5b:17:1b:1c:98:03:c8:c4:2d:2a:b4:c8:43:36: 92:c4:8a:24 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt26sypxFoen3hE3oDwBfeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTIwOWM5MjY0NmFlMzQyY2FhNWQ0NmRjMWQzNzM1YTBkMmU3YjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZOC5sRysuC7zNhGqQUJpR+MXqg4 ocMvszts2+EAWi89EOWPbvZx/hm+Ua/DoT1xBQrodBNju1bIEN1nNBO0OhyMMMmq U7V9hcpenz+uoia+dfFEoLhZG4l+wwyT6W6rwAOrc5ck/2diqIY549N7/T7r9NAB Ljx4XoR5K5yIAgoVfTy4e/Cemj3RYhGXrqtYaApuAP4FIcGZYKQynXTNlbIelrz7 wXolzx520WQ2eAjuCC3QqcEjeAlf0JdXmNDVAztsEiqAjVxS/tMiGtXdgdkeIgRZ jPXT75yOUylFre0nGfiiA2S1th7UIAV3TpF7h+ASt4NGxmrAcukaucA0OwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFK4gnJJkauNCyqXUbcHTc1oNLnsUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzNmM2Ez MC0zZTY0LTQzODAtYTE0OC1lMGEyM2RhNWU2MjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvM2YzYTMw LTNlNjQtNDM4MC1hMTQ4LWUwYTIzZGE1ZTYyOC8xL3JpQ2NrbVJxNDBMS3BkUnR3 ZE56V2cwdWV4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLYjIAwQCW8H0AwQAwRsqMA0EAgACMAcDBQAq DprAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDjTDANBgkqhkiG9w0BAQsFAAOC AQEAkBW0JMmLPYdJAfIdF5OjOXKqLD3LympwxHDEfWvpr9jC7Z3xVJlF2SSS5aS5 7IGi+UXlfpjx470jmletGAWQmQ3KeLflvMM9yaNe+qiW45wk9fLACvFtWX6oIW9d 5ui/V7Q8hOy58AcHFqD+XHxCtnk+QwOPJO7/Nb0S2RqHh02AXAuJqFo1uW2XTBm7 kWe2iVVTWj2gM2sJgSiJq+Fqq0HAzVobXl4ZhBFMRu6Ausc7jMj7v31c/S77ilFA f5RRFnHHqbmRjrcL3X5spavbw4V4JHZzwRhP03AU1voC2kAOdk56DRt+n5wvlzm3 qVsXGxyYA8jELSq0yEM2ksSKJA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:52 2026 by rpki-client