This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer File: x-nHqlNLEwC_ck__DwwbBRnVBbs.cer (raw, json) Hash identifier: LraEvLss6WO9BBhoFfBI7nobMQMWHw5Ghn+HKh3R1ww= Subject key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C742532CFFBCDF70432D21C1002D53 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208816 IP: 45.84.28.0/22 IP: 185.73.220.0/22 IP: 185.149.132.0/22 IP: 185.213.88.0/22 IP: 2a05:44c0::/29 IP: 2a07:68c0::/29 IP: 2a0b:85c0::/29 IP: 2a0e:9480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:42:53:2c:ff:bc:df:70:43:2d:21:c1:00:2d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:ab:b3:09:52:5d:44:26:a4:bb:27:a7:9c: 8a:c2:29:51:9a:f1:bc:23:66:2c:af:96:39:02:8e: 4f:e0:3f:e5:d3:4d:b8:e0:ea:e2:80:39:0b:c5:17: 1f:80:d7:65:e2:cc:fa:4d:86:fb:c8:52:46:d5:f0: 47:e8:6a:cc:66:55:55:5d:9c:e8:8b:cf:19:52:94: 18:4e:c3:6e:17:85:b3:a6:65:e2:e8:2e:02:a6:bd: be:30:03:17:ce:68:03:46:ca:ee:4a:fa:9a:1b:95: 29:5c:5c:84:5f:7e:1a:05:55:d5:11:ac:d0:72:d8: e9:06:dd:d9:0d:11:af:0b:37:18:a6:8f:43:d2:41: 3e:ca:50:4a:69:d0:89:c6:78:ee:6a:48:e9:98:b4: 6a:a8:f2:2e:f8:09:5d:48:4e:4c:ba:3d:99:45:93: 26:53:93:20:49:fe:48:c5:42:ed:98:38:f4:b3:c3: 7e:91:a7:ee:5f:c3:08:cc:ba:64:f0:52:ae:de:13: e6:e4:d4:88:4c:86:d0:9f:78:16:9d:90:d7:4e:e8: 54:76:80:67:b9:65:20:d5:e3:1e:4a:59:0e:6b:b8: 37:ea:7f:7f:9d:55:d1:b7:2e:32:34:98:c2:92:24: 63:48:62:54:a9:a6:4b:db:4a:12:8a:a6:94:87:68: 84:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.28.0/22 185.73.220.0/22 185.149.132.0/22 185.213.88.0/22 IPv6: 2a05:44c0::/29 2a07:68c0::/29 2a0b:85c0::/29 2a0e:9480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208816 Signature Algorithm: sha256WithRSAEncryption 34:bc:52:d9:d3:bb:c8:06:f7:62:e4:ee:b7:53:39:57:86:cb: 72:b7:22:6b:7b:c5:57:17:ae:ea:26:2e:16:ef:f0:c0:09:8f: a0:53:1f:c0:ce:6a:71:3a:f6:58:42:6f:1e:45:fb:a4:f2:bf: 09:c5:92:c8:dc:96:bc:8b:93:36:67:29:f1:95:cd:81:88:3e: 9b:77:ba:14:69:83:a4:be:11:60:3f:9f:7f:a6:4f:7d:0d:24: 5c:17:03:56:96:20:4e:aa:ed:2b:ce:75:af:ff:2d:a6:5a:40: a5:ad:ae:c4:fd:9a:4f:fe:a4:25:94:e0:34:d8:fe:f7:8c:9f: a8:75:52:65:b3:28:06:20:27:4a:2b:5e:0f:75:e9:5f:44:47: 06:87:47:1a:7e:bd:94:1c:e0:9a:a3:f3:0f:60:99:10:d9:0d: 6f:a3:b9:8f:b5:5c:8f:a7:da:1d:8f:70:81:7e:97:4a:6d:91: 54:55:f7:8c:c6:be:55:23:b0:6d:d8:b7:7e:5a:1d:12:60:d1: d4:b4:63:fa:24:1f:42:45:5d:0f:5a:10:d3:fc:f5:b7:d1:5c: de:a8:18:8a:40:01:23:b8:23:0c:24:20:c4:5d:e2:c6:eb:22: b0:1c:4d:15:bc:c0:7a:ff:d9:8f:84:bf:ad:53:65:74:78:15: 90:e2:5c:8d -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgISAZt3x0JTLP+833BDLSHBAC1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2U5YzdhYTUzNGIxMzAwYmY3MjRmZmYwZjBjMWIwNTE5ZDUwNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FqrswlSXUQmpLsnp5yKwilRmvG8 I2Ysr5Y5Ao5P4D/l00244OrigDkLxRcfgNdl4sz6TYb7yFJG1fBH6GrMZlVVXZzo i88ZUpQYTsNuF4WzpmXi6C4Cpr2+MAMXzmgDRsruSvqaG5UpXFyEX34aBVXVEazQ ctjpBt3ZDRGvCzcYpo9D0kE+ylBKadCJxnjuakjpmLRqqPIu+AldSE5Muj2ZRZMm U5MgSf5IxULtmDj0s8N+kafuX8MIzLpk8FKu3hPm5NSITIbQn3gWnZDXTuhUdoBn uWUg1eMeSlkOa7g36n9/nVXRty4yNJjCkiRjSGJUqaZL20oSiqaUh2iEhwIDAQAB o4IC1jCCAtIwHQYDVR0OBBYEFMfpx6pTSxMAv3JP/w8MGwUZ1QW7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk4LzUwYWJl Zi0zNzRjLTRlYTYtYjdkNC1jZTUwMDgyN2ZmN2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvNTBhYmVm LTM3NGMtNGVhNi1iN2Q0LWNlNTAwODI3ZmY3Zi8xL3gtbkhxbE5MRXdDX2NrX19E d3diQlJuVkJicy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAeBAIAATAYAwQCLVQcAwQCuUncAwQCuZWEAwQCudVYMCIEAgAC MBwDBQMqBUTAAwUDKgdowAMFAyoLhcADBQMqDpSAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwMvsDANBgkqhkiG9w0BAQsFAAOCAQEANLxS2dO7yAb3YuTut1M5V4bL crcia3vFVxeu6iYuFu/wwAmPoFMfwM5qcTr2WEJvHkX7pPK/CcWSyNyWvIuTNmcp 8ZXNgYg+m3e6FGmDpL4RYD+ff6ZPfQ0kXBcDVpYgTqrtK851r/8tplpApa2uxP2a T/6kJZTgNNj+94yfqHVSZbMoBiAnSiteD3XpX0RHBodHGn69lBzgmqPzD2CZENkN b6O5j7Vcj6faHY9wgX6XSm2RVFX3jMa+VSOwbdi3flodEmDR1LRj+iQfQkVdD1oQ 0/z1t9Fc3qgYikABI7gjDCQgxF3ixusisBxNFbzAev/Zj4S/rVNldHgVkOJcjQ== -----END CERTIFICATE-----Generated at Sun Jan 18 12:07:51 2026 by rpki-client