This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer File: ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer (raw, json) Hash identifier: xO+XrSRka9SqKQrRDxVjfjRye6KY34ODdzYu+scL3Qo= Subject key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Authority key identifier: 6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD Certificate issuer: /CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd Certificate serial: 01C8E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer Manifest: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft caRepository: rsync://krill.rg.net/repo/rpki-beacons-ca/0/ Notify URL: https://krill.rg.net/rrdp/notification.xml Certificate not before: Thu 01 Jan 2026 06:20:18 +0000 Certificate not after: Fri 01 Jan 2027 01:01:01 +0000 Subordinate resources: IP: 45.132.188.0/22 IP: 147.28.10.0/23 Validation: OK Signature path: rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 11:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116966 (0x1c8e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d6fbfa9753db8d846433db5351d9a9ec07c96bd Validity Not Before: Jan 1 06:20:18 2026 GMT Not After : Jan 1 01:01:01 2027 GMT Subject: CN=656E4422ABF129649200EB019A815F2B12236E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a4:ff:bc:05:cb:cc:5c:56:04:71:12:51:75: e0:47:5d:64:4b:29:02:1f:1f:56:b9:7f:83:45:70: db:37:95:d9:c0:6a:6a:f7:e7:f3:c9:e0:b3:b6:1d: e8:ad:78:c1:70:fd:fd:11:78:92:ab:57:d2:69:1f: 7e:b4:de:6f:cf:23:85:7e:52:5a:9c:a5:04:26:fd: 5f:60:22:8e:6c:db:b7:c2:a4:b9:18:8f:f3:45:d9: 33:c9:24:e1:fc:47:d5:fd:c8:1e:e1:a6:07:cf:fc: 3a:f6:24:6a:cd:6d:2f:f7:04:ac:66:cd:5f:95:f4: 51:e7:7c:b3:84:ca:9f:1b:1f:87:7a:5f:ad:ca:c9: 43:0d:cd:0b:e9:4a:a8:a4:7e:44:57:04:70:75:92: b7:98:20:5b:91:5c:5d:5f:03:b0:69:98:7c:8a:ac: 90:60:95:af:c2:95:9c:13:fc:61:69:04:db:2e:58: 72:54:d9:bb:11:9e:5d:51:7d:28:55:33:1f:87:10: aa:92:5c:b3:b6:9c:c0:cc:a4:65:86:fa:d0:15:21: 08:ca:d4:68:3c:4b:f1:86:b0:ac:72:82:a5:65:02: 7b:64:33:00:81:1c:6e:71:68:42:69:51:b7:6b:34: fa:3e:22:7f:ce:90:be:a4:15:a1:16:69:83:78:ce: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Authority Key Identifier: keyid:6D:6F:BF:A9:75:3D:B8:D8:46:43:3D:B5:35:1D:9A:9E:C0:7C:96:BD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/ RPKI Manifest - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft RPKI Notify - URI:https://krill.rg.net/rrdp/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.132.188.0/22 147.28.10.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:d9:1b:bb:d6:85:b4:da:12:82:7e:01:b2:12:e6:8d:40:9e: 89:aa:19:c1:57:6f:85:a0:c1:cc:9c:e8:f2:36:3a:4e:1d:fa: e6:ac:94:94:09:9b:cd:eb:54:c6:14:ec:6c:2d:d8:a1:da:18: d9:52:61:ad:77:45:3f:ba:ae:6e:7c:66:58:0e:11:32:f2:3c: 27:d5:29:99:e9:a4:9f:32:b7:9b:95:4c:29:48:2f:8d:fa:38: 61:77:7e:ab:c4:02:a9:33:0f:7f:64:ad:40:8e:da:40:5e:8a: c7:90:41:0c:a4:f3:ff:85:04:fb:d2:09:81:45:83:d4:3b:90: 49:ee:39:cb:c2:a7:c7:5f:79:12:38:51:63:eb:1b:9c:ac:30: b2:8e:71:50:32:fd:c0:56:e6:1f:2b:05:36:4f:cb:cd:0b:c0: 55:41:43:39:55:66:e1:6d:43:97:4d:7e:dd:c2:1a:fa:e8:f8: 58:3c:7a:94:32:b4:b2:80:cd:c9:b9:17:b9:dd:f6:bb:4e:a8: 18:14:19:37:e3:06:f1:e3:12:a4:c6:94:41:3a:29:6c:9e:c2: 04:df:05:fc:6f:32:c5:73:63:8d:fa:1a:7e:e0:69:0e:e6:aa: fe:29:d9:45:a7:36:94:2c:eb:5c:14:c0:84:32:6a:b3:2f:96: 89:7e:79:f4 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgIDAcjmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk NmZiZmE5NzUzZGI4ZDg0NjQzM2RiNTM1MWQ5YTllYzA3Yzk2YmQwHhcNMjYwMTAx MDYyMDE4WhcNMjcwMTAxMDEwMTAxWjAzMTEwLwYDVQQDEyg2NTZFNDQyMkFCRjEy OTY0OTIwMEVCMDE5QTgxNUYyQjEyMjM2RTkyMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA5KT/vAXLzFxWBHESUXXgR11kSykCHx9WuX+DRXDbN5XZwGpq 9+fzyeCzth3orXjBcP39EXiSq1fSaR9+tN5vzyOFflJanKUEJv1fYCKObNu3wqS5 GI/zRdkzySTh/EfV/cge4aYHz/w69iRqzW0v9wSsZs1flfRR53yzhMqfGx+Hel+t yslDDc0L6UqopH5EVwRwdZK3mCBbkVxdXwOwaZh8iqyQYJWvwpWcE/xhaQTbLlhy VNm7EZ5dUX0oVTMfhxCqklyztpzAzKRlhvrQFSEIytRoPEvxhrCscoKlZQJ7ZDMA gRxucWhCaVG3azT6PiJ/zpC+pBWhFmmDeM5UdwIDAQABo4ICSTCCAkUwHQYDVR0O BBYEFGVuRCKr8SlkkgDrAZqBXysSI26SMB8GA1UdIwQYMBaAFG1vv6l1PbjYRkM9 tTUdmp7AfJa9MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUAYDVR0fBEkwRzBF oEOgQYY/cnN5bmM6Ly9jYS5yZy5uZXQvcnBraS9SR25ldC1PVS9iVy1fcVhVOXVO aEdRejIxTlIyYW5zQjhscjAuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcw AoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iVy1f cVhVOXVOaEdRejIxTlIyYW5zQjhscjAuY2VyMA8GA1UdEwEB/wQFMAMBAf8wDgYD VR0PAQH/BAQDAgEGMIHoBggrBgEFBQcBCwSB2zCB2DA4BggrBgEFBQcwBYYscnN5 bmM6Ly9rcmlsbC5yZy5uZXQvcmVwby9ycGtpLWJlYWNvbnMtY2EvMC8wZAYIKwYB BQUHMAqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFjb25zLWNh LzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5Mi5tZnQw NgYIKwYBBQUHMA2GKmh0dHBzOi8va3JpbGwucmcubmV0L3JyZHAvbm90aWZpY2F0 aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAi2EvAMEAZMcCjAN BgkqhkiG9w0BAQsFAAOCAQEAT9kbu9aFtNoSgn4BshLmjUCeiaoZwVdvhaDBzJzo 8jY6Th365qyUlAmbzetUxhTsbC3YodoY2VJhrXdFP7qubnxmWA4RMvI8J9Upmemk nzK3m5VMKUgvjfo4YXd+q8QCqTMPf2StQI7aQF6Kx5BBDKTz/4UE+9IJgUWD1DuQ Se45y8Knx195EjhRY+sbnKwwso5xUDL9wFbmHysFNk/LzQvAVUFDOVVm4W1Dl01+ 3cIa+uj4WDx6lDK0soDNybkXud32u06oGBQZN+MG8eMSpMaUQTopbJ7CBN8F/G8y xXNjjfoafuBpDuaq/inZRac2lCzrXBTAhDJqsy+WiX559A== -----END CERTIFICATE-----Generated at Sun Jan 25 09:20:44 2026 by rpki-client