This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer File: ruCNkzby5s0WXrcwKX_m0gyDw5o.cer (raw, json) Hash identifier: NVGSXNctkNSXJHs39AVXzqNLHjeqv1i1WqdlcN+V85k= Subject key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36D7AF0D6A9F0F5BB6FF73EFE363D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48980 AS: 59458 IP: 5.149.96.0/20 IP: 185.155.156.0/22 IP: 2a12:2340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d7:af:0d:6a:9f:0f:5b:b6:ff:73:ef:e3:63:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:89:dd:b8:58:52:e4:e1:bd:e8:cc:75:7a:f3: 4d:c8:13:9d:e7:63:0e:71:9a:19:d0:d7:9c:ff:4b: ff:c6:2b:51:12:32:ec:f5:31:70:ff:6d:01:e4:d7: f2:7d:92:8d:ae:d0:6b:b4:6a:08:35:68:3a:b0:af: e1:9e:67:17:a7:a3:c7:ef:ee:fc:f0:be:7f:1a:3c: 04:f8:ab:0a:0c:3e:03:8f:5a:5c:00:23:b4:64:7d: a4:3e:02:94:85:9b:c9:67:1b:30:c9:1d:7a:f7:f1: 7d:38:ff:86:f4:5e:2a:8d:42:c3:ef:5c:1c:23:00: 1a:5a:a8:07:60:e6:bc:f8:97:38:61:53:17:be:33: a2:42:c0:fe:23:e5:c0:30:a7:ef:64:24:a9:cf:b7: 4c:8f:59:e4:93:83:bb:0e:0b:6b:83:33:9c:b8:4c: ed:9f:1a:94:f8:45:7d:3c:2c:98:a4:a0:2d:ed:d2: 6f:d7:e0:89:f8:5d:48:af:a1:b9:3d:0c:03:fa:0e: 53:0c:72:3a:36:1c:81:78:81:14:c6:d2:40:e7:44: 06:2a:75:c9:45:11:80:c1:69:90:07:f9:0c:93:bd: 58:bc:32:e0:0a:79:ef:cc:87:d6:4c:03:8f:e0:75: de:ae:dc:4c:de:fe:a4:3f:da:13:28:c0:4c:b0:28: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.96.0/20 185.155.156.0/22 IPv6: 2a12:2340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48980 59458 Signature Algorithm: sha256WithRSAEncryption 2d:74:b0:6f:4a:21:1d:10:18:cc:7e:f3:81:49:00:b7:43:63: 62:e6:21:b6:dd:1b:d9:0f:90:10:9e:8a:a5:69:73:d6:67:45: 6c:0c:1e:7c:32:8c:18:68:52:81:1b:71:06:a5:66:c2:03:d1: 8e:8a:bb:45:91:94:4e:9e:65:f3:e9:02:4c:bc:14:0e:8a:7e: ee:f4:d5:8d:90:ca:fb:39:24:0b:e2:39:93:18:09:e1:d8:00: a0:cc:6f:4e:a6:82:c7:cd:64:8f:a3:65:eb:a5:b4:ec:54:17: 8f:e0:fa:f3:b5:18:f9:b2:5b:ef:43:c9:a9:b8:b5:be:e0:72: 2c:c1:19:68:cf:1b:25:59:01:c9:3c:6a:09:0a:6c:ae:9c:7c: 3d:96:50:73:57:8f:8e:39:33:b8:34:25:06:99:b8:6c:44:a1: 38:5c:50:3c:44:d5:49:c5:a0:f9:ba:14:70:64:e7:3d:a1:de: ee:5d:2b:20:7c:66:72:5e:26:f8:14:20:f1:af:24:45:e9:b3: 2b:c4:8c:43:06:f9:78:b5:5a:e0:1c:bb:f1:27:21:53:9a:aa: df:ec:5a:b2:58:9d:72:da:5c:c6:d7:09:da:fd:66:e5:dc:7b: 4f:9f:cc:90:10:09:4d:9f:70:92:78:86:97:94:14:1e:54:59: 88:28:ee:d4 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt7NtevDWqfD1u2/3Pv42PWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWUwOGQ5MzM2ZjJlNmNkMTY1ZWI3MzAyOTdmZTZkMjBjODNjMzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYnduFhS5OG96Mx1evNNyBOd52MO cZoZ0Nec/0v/xitREjLs9TFw/20B5NfyfZKNrtBrtGoINWg6sK/hnmcXp6PH7+78 8L5/GjwE+KsKDD4Dj1pcACO0ZH2kPgKUhZvJZxswyR169/F9OP+G9F4qjULD71wc IwAaWqgHYOa8+Jc4YVMXvjOiQsD+I+XAMKfvZCSpz7dMj1nkk4O7DgtrgzOcuEzt nxqU+EV9PCyYpKAt7dJv1+CJ+F1Ir6G5PQwD+g5TDHI6NhyBeIEUxtJA50QGKnXJ RRGAwWmQB/kMk71YvDLgCnnvzIfWTAOP4HXertxM3v6kP9oTKMBMsCjrnQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFK7gjZM28ubNFl63MCl/5tIMg8OaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2Y4NTNm OC0yMDcxLTQ5ZGUtYjZhMC00OTdiZWRkNzFlYjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvZjg1M2Y4 LTIwNzEtNDlkZS1iNmEwLTQ5N2JlZGQ3MWViOS8xL3J1Q05remJ5NXMwV1hyY3dL WF9tMGd5RHc1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEBZVgAwQCuZucMA0EAgACMAcDBQMqEiNAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwC/VAIDAOhCMA0GCSqGSIb3DQEBCwUAA4IB AQAtdLBvSiEdEBjMfvOBSQC3Q2Ni5iG23RvZD5AQnoqlaXPWZ0VsDB58MowYaFKB G3EGpWbCA9GOirtFkZROnmXz6QJMvBQOin7u9NWNkMr7OSQL4jmTGAnh2ACgzG9O poLHzWSPo2XrpbTsVBeP4PrztRj5slvvQ8mpuLW+4HIswRlozxslWQHJPGoJCmyu nHw9llBzV4+OOTO4NCUGmbhsRKE4XFA8RNVJxaD5uhRwZOc9od7uXSsgfGZyXib4 FCDxryRF6bMrxIxDBvl4tVrgHLvxJyFTmqrf7FqyWJ1y2lzG1wna/Wbl3HtPn8yQ EAlNn3CSeIaXlBQeVFmIKO7U -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:02 2026 by rpki-client