This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/roNVKZN0KXkz0oH1HrdLpcLJHME.cer File: roNVKZN0KXkz0oH1HrdLpcLJHME.cer (raw, json) Hash identifier: 4Sy+XmSZcqh8WFBR2c6zOYK1AEcf8PpbGo8bnf8RzB8= Subject key identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C75811D2B9C919130F6B858100DE6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209118 IP: 185.81.116.0/22 IP: 2a05:8840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:58:11:d2:b9:c9:19:13:0f:6b:85:81:00:de:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae8355299374297933d281f51eb74ba5c2c91cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:0e:55:15:76:e1:90:8e:40:1b:38:aa:1a: 0c:15:7a:af:a4:2f:0d:81:33:2e:ad:bf:71:0f:b1: d5:e6:14:c7:1e:ea:3f:b8:b3:d0:63:24:35:e9:1e: be:5e:37:a6:73:e3:a8:77:76:77:60:6a:8a:2f:d7: bd:77:b3:cf:ef:44:48:a6:c2:21:1d:c6:60:c3:6c: 2c:cf:a1:09:25:a7:3a:89:0a:bf:ca:2e:af:4c:3a: 28:8e:b2:dc:30:c7:0d:29:9d:54:d5:a3:cf:13:e7: f5:c3:cf:b5:fa:27:81:b0:cb:89:d3:d3:80:4e:1a: 9f:74:73:60:9c:c3:52:26:9c:9f:cb:56:94:c1:04: a5:eb:80:48:ef:04:aa:9e:40:45:23:e6:dc:53:3b: 71:48:40:cb:1d:14:c2:71:db:d0:7d:f0:d6:35:3f: 50:cd:92:0a:b6:06:01:23:09:bf:cb:22:80:dc:58: af:8f:7e:e5:41:34:71:46:66:90:7f:a3:2f:4c:c8: 82:3a:ee:84:c6:e7:9e:0b:1d:3f:c3:16:90:8b:dd: 4a:a4:e1:1b:b6:64:b4:2a:cb:2e:34:2d:64:b0:02: e9:ef:7a:bc:6f:3a:de:26:4f:11:9f:07:5b:d1:2a: ad:a5:35:d8:70:6b:a3:00:5a:82:e6:dc:ec:1c:1d: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:83:55:29:93:74:29:79:33:D2:81:F5:1E:B7:4B:A5:C2:C9:1C:C1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f2eb8-9800-4621-b674-3b4d02a61ec2/1/roNVKZN0KXkz0oH1HrdLpcLJHME.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.81.116.0/22 IPv6: 2a05:8840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209118 Signature Algorithm: sha256WithRSAEncryption 6c:14:56:f6:1e:63:d9:b4:18:f0:e3:c1:a2:a5:09:44:eb:a1: 00:e3:a5:43:44:bb:04:10:db:5b:ce:17:72:a5:96:cb:02:10: 36:66:18:80:68:f7:23:72:57:61:6a:d7:b1:82:a3:a0:73:de: fa:15:bf:ab:64:6b:70:80:e4:af:6e:81:3c:ca:c2:15:e0:4f: ea:d2:ad:78:41:c0:bf:b6:a2:ed:14:23:19:d6:18:2d:de:24: dd:72:16:c4:dd:c3:9b:b0:89:a1:08:2a:fd:63:04:51:a7:5f: 54:77:e7:9b:4b:49:3f:f4:78:d7:2a:63:59:fa:ec:28:f8:42: db:89:b9:f8:65:b1:3e:56:b2:79:26:87:c9:38:fb:77:04:1d: 68:53:1b:11:30:e3:d2:08:1d:95:04:1f:b5:4e:bc:8e:b6:9e: ca:f4:d4:20:d6:68:e1:54:9c:ab:23:c6:45:53:44:8e:21:c7: 4d:56:8a:74:47:c4:43:5b:e8:f4:44:96:94:4d:3e:9d:76:cf: 94:98:47:47:80:f4:fd:0c:e5:1c:f0:f6:32:97:68:d8:17:12: 11:de:45:a7:db:a6:84:3a:41:07:62:b2:53:ac:d2:cc:39:ab: 9b:6e:3e:d9:ef:77:80:e8:69:03:2c:7b:8f:e7:21:f9:f1:d6: 48:d2:28:98 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3x1gR0rnJGRMPa4WBAN5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTgzNTUyOTkzNzQyOTc5MzNkMjgxZjUxZWI3NGJhNWMyYzkxY2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq8OVRV24ZCOQBs4qhoMFXqvpC8N gTMurb9xD7HV5hTHHuo/uLPQYyQ16R6+Xjemc+Ood3Z3YGqKL9e9d7PP70RIpsIh HcZgw2wsz6EJJac6iQq/yi6vTDoojrLcMMcNKZ1U1aPPE+f1w8+1+ieBsMuJ09OA ThqfdHNgnMNSJpyfy1aUwQSl64BI7wSqnkBFI+bcUztxSEDLHRTCcdvQffDWNT9Q zZIKtgYBIwm/yyKA3Fivj37lQTRxRmaQf6MvTMiCOu6ExueeCx0/wxaQi91KpOEb tmS0KssuNC1ksALp73q8bzreJk8Rnwdb0SqtpTXYcGujAFqC5tzsHB1z4wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK6DVSmTdCl5M9KB9R63S6XCyRzBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiLzBmMmVi OC05ODAwLTQ2MjEtYjY3NC0zYjRkMDJhNjFlYzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvMGYyZWI4 LTk4MDAtNDYyMS1iNjc0LTNiNGQwMmE2MWVjMi8xL3JvTlZLWk4wS1hrejBvSDFI cmRMcGNMSkhNRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVF0MA0EAgACMAcDBQMqBYhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMw3jANBgkqhkiG9w0BAQsFAAOCAQEAbBRW9h5j2bQY 8OPBoqUJROuhAOOlQ0S7BBDbW84XcqWWywIQNmYYgGj3I3JXYWrXsYKjoHPe+hW/ q2RrcIDkr26BPMrCFeBP6tKteEHAv7ai7RQjGdYYLd4k3XIWxN3Dm7CJoQgq/WME UadfVHfnm0tJP/R41ypjWfrsKPhC24m5+GWxPlayeSaHyTj7dwQdaFMbETDj0ggd lQQftU68jraeyvTUINZo4VScqyPGRVNEjiHHTVaKdEfEQ1vo9ESWlE0+nXbPlJhH R4D0/QzlHPD2Mpdo2BcSEd5Fp9umhDpBB2KyU6zSzDmrm24+2e93gOhpAyx7j+ch +fHWSNIomA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:36 2026 by rpki-client