This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer File: 04V55MfaAd8EZRhiNumvJ-tzEu0.cer (raw, json) Hash identifier: VvU/uCtsSUEM4QeYJSBUEK48u/ocXpC9bWZoeYv1Z+U= Subject key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BEAF5CBAFB11F923AC9E1DF4DC245FBEB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 23 Jan 2026 13:05:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28773 AS: 29469 AS: 34840 AS: 61163 IP: 91.236.138.0/23 IP: 94.158.176.0/22 IP: 178.216.12.0/23 IP: 185.1.146.0/24 IP: 185.38.174.0/24 IP: 188.190.160.0/19 IP: 194.9.70.0/23 IP: 195.78.38.0/23 IP: 2001:67c:2ee4::/48 IP: 2001:7f8:e1::/48 IP: 2001:3840::/29 IP: 2a13:e780::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:f5:cb:af:b1:1f:92:3a:c9:e1:df:4d:c2:45:fb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 23 13:05:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d38579e4c7da01df0465186236e9af27eb7312ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:0d:36:46:7f:4a:e9:7f:9d:66:6c:9e:38: c4:b9:36:34:4f:0e:1f:5f:d1:c7:bb:0f:d3:f9:23: 18:bb:53:0f:04:06:8f:57:c7:3d:1c:27:71:3a:e0: ce:f1:fb:f2:3c:1f:6d:76:a6:84:cd:8d:80:1e:c6: ea:07:d1:e9:78:28:a5:66:c0:81:8a:95:91:5f:bb: 71:17:97:fa:d9:10:63:77:0b:1c:d2:7e:88:6a:79: e1:df:73:fe:9c:07:f3:cc:cb:74:f5:cf:3c:20:07: 4d:03:aa:5d:67:43:5c:38:fd:86:3b:e1:d1:7b:89: 4d:e3:8f:79:db:6b:f7:08:55:de:a4:6a:4d:46:cd: f5:d9:dc:d3:ac:1b:39:18:d1:b1:7d:73:2a:d4:e7: 1b:1f:c7:4e:7d:b4:a3:2b:4f:28:b2:54:ba:46:46: 47:a3:67:32:7c:e3:ea:f2:36:ad:b2:2c:a0:de:04: 0c:87:c3:36:2c:af:cc:f0:56:7f:0b:b6:bb:de:92: bc:b5:fb:f0:25:e5:74:47:3b:2e:50:ad:cf:72:79: 08:54:f5:97:44:b9:9e:60:51:1b:7e:f2:e0:ff:c0: 43:43:bf:d6:96:e6:08:78:ca:0a:61:af:7e:97:5a: 68:82:4d:14:3a:1c:c8:34:5f:2c:1a:f2:6c:8e:44: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.138.0/23 94.158.176.0/22 178.216.12.0/23 185.1.146.0/24 185.38.174.0/24 188.190.160.0/19 194.9.70.0/23 195.78.38.0/23 IPv6: 2001:67c:2ee4::/48 2001:7f8:e1::/48 2001:3840::/29 2a13:e780::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28773 29469 34840 61163 Signature Algorithm: sha256WithRSAEncryption 50:cd:fb:32:c4:8c:ab:bd:b2:ff:62:4b:9f:09:b9:28:dd:5b: e6:38:4e:af:6e:05:ca:41:8a:e1:60:e1:cc:1a:56:cd:97:8e: 1c:15:6a:f3:5d:d1:de:4a:a3:ee:93:9c:d0:28:c9:10:ac:d7: 08:c9:3c:70:18:59:d9:33:09:56:f7:19:24:4c:7c:f1:77:be: 1f:3e:e7:20:a0:3a:91:8e:82:e6:5c:13:e5:be:98:76:d3:6a: 7c:b1:29:5f:7d:37:89:82:50:3e:9f:c9:13:dc:94:a9:10:9e: 48:9c:e0:88:c1:4d:e3:b5:6b:88:6b:fc:d8:ca:79:63:a2:1a: e0:8e:1b:76:71:6d:ec:7c:a8:f4:a9:eb:07:4c:33:22:8d:fd: 85:fe:ba:b4:45:7d:2d:2e:a7:6c:da:82:2f:4d:84:e9:67:9b: fa:3c:ba:4f:f9:b2:60:c0:05:e3:b3:ee:da:65:a8:74:c7:cc: 8d:8c:c3:26:b7:74:e3:48:4b:d4:0c:27:e1:87:4d:45:4a:b8: f9:2c:bb:45:94:7e:f8:9c:82:28:4b:36:a2:19:d8:b3:3c:83: 5b:96:f6:0f:b1:07:c1:0e:7b:22:2f:f7:76:62:0b:2e:fc:53: 08:bf:da:83:eb:8f:71:5c:3e:70:80:af:5d:61:10:27:8e:00: 49:91:b0:c9 -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgISAZvq9cuvsR+SOsnh303CRfvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTIzMTMwNTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzg1NzllNGM3ZGEwMWRmMDQ2NTE4NjIzNmU5YWYyN2ViNzMxMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquwNNkZ/Sul/nWZsnjjEuTY0Tw4f X9HHuw/T+SMYu1MPBAaPV8c9HCdxOuDO8fvyPB9tdqaEzY2AHsbqB9HpeCilZsCB ipWRX7txF5f62RBjdwsc0n6Iannh33P+nAfzzMt09c88IAdNA6pdZ0NcOP2GO+HR e4lN449522v3CFXepGpNRs312dzTrBs5GNGxfXMq1OcbH8dOfbSjK08oslS6RkZH o2cyfOPq8jatsiyg3gQMh8M2LK/M8FZ/C7a73pK8tfvwJeV0RzsuUK3PcnkIVPWX RLmeYFEbfvLg/8BDQ7/WluYIeMoKYa9+l1pogk0UOhzINF8sGvJsjkQsZwIDAQAB o4IC/zCCAvswHQYDVR0OBBYEFNOFeeTH2gHfBGUYYjbpryfrcxLtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzk0NjIy ZC1jMjZkLTQzNzYtYjA1OS1iZDQwNTQxOWIwMGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvOTQ2MjJk LWMyNmQtNDM3Ni1iMDU5LWJkNDA1NDE5YjAwZC8xLzA0VjU1TWZhQWQ4RVpSaGlO dW12Si10ekV1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHEGCCsGAQUF BwEHAQH/BGIwYDA2BAIAATAwAwQBW+yKAwQCXp6wAwQBstgMAwQAuQGSAwQAuSau AwQFvL6gAwQBwglGAwQBw04mMCYEAgACMCADBwAgAQZ8LuQDBwAgAQf4AOEDBQMg AThAAwUDKhPngDAnBggrBgEFBQcBCAEB/wQYMBagFDASAgJwZQICcx0CAwCIGAID AO7rMA0GCSqGSIb3DQEBCwUAA4IBAQBQzfsyxIyrvbL/YkufCbko3VvmOE6vbgXK QYrhYOHMGlbNl44cFWrzXdHeSqPuk5zQKMkQrNcIyTxwGFnZMwlW9xkkTHzxd74f PucgoDqRjoLmXBPlvph202p8sSlffTeJglA+n8kT3JSpEJ5InOCIwU3jtWuIa/zY ynljohrgjht2cW3sfKj0qesHTDMijf2F/rq0RX0tLqds2oIvTYTpZ5v6PLpP+bJg wAXjs+7aZah0x8yNjMMmt3TjSEvUDCfhh01FSrj5LLtFlH74nIIoSzaiGdizPINb lvYPsQfBDnsiL/d2Ygsu/FMIv9qD649xXD5wgK9dYRAnjgBJkbDJ -----END CERTIFICATE-----Generated at Mon Jan 26 05:10:07 2026 by rpki-client