This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ArVih4aW5ig8TfgUo4tzXFAMr4s.cer File: ArVih4aW5ig8TfgUo4tzXFAMr4s.cer (raw, json) Hash identifier: l2CKk+G70bsVgZ3oSTRILSF9ujq2swIjT/eozW6eI7k= Subject key identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834A3CEDD70E51C18615259F10C2546 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.177.241.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a3:ce:dd:70:e5:1c:18:61:52:59:f1:0c:25:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02b562878696e6283c4df814a38b735c500caf8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:5c:ab:c8:83:25:0c:9d:29:7a:be:d4:be: 8d:b9:ff:ea:98:49:b2:96:e4:34:f8:55:08:76:58: 48:f1:af:f2:74:83:da:a9:e4:64:06:14:77:78:9a: 9d:47:cb:d1:a4:5b:4f:1d:23:d0:99:db:56:05:51: f9:8e:66:0a:45:e1:1c:ed:02:b5:91:25:cf:2f:05: 40:37:b6:a4:8e:b9:d2:5e:cc:1d:68:2b:71:60:d5: e4:a9:64:3c:32:d7:a2:18:52:a3:6c:67:f8:3f:79: 22:8c:47:13:70:89:6f:13:25:74:38:96:21:95:4c: 6b:c8:9c:08:b9:a7:88:5a:6c:36:b8:2e:58:6b:de: 3f:f7:1f:de:e1:9c:e1:42:64:83:82:b1:59:5c:92: 10:5b:08:92:0a:19:ce:d0:0f:d8:bf:da:56:ab:2e: 3b:65:35:ee:4b:2d:d8:b8:07:44:68:24:0e:40:f5: db:c4:b5:33:a8:1c:80:40:30:3c:a9:83:51:3d:ea: a5:04:87:a5:c6:04:92:22:1a:4b:92:25:d6:83:68: 35:1f:c2:fa:b2:28:82:b3:21:9d:fa:7e:3f:c4:75: 7b:56:7b:42:7d:e7:68:98:23:af:08:05:1d:4d:fb: e8:3e:6a:bf:45:cc:9f:97:62:12:e3:a5:2a:34:30: 5b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B5:62:87:86:96:E6:28:3C:4D:F8:14:A3:8B:73:5C:50:0C:AF:8B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f9c840-9615-4b50-8952-92d3aad32f49/1/ArVih4aW5ig8TfgUo4tzXFAMr4s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.241.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:4e:b3:7e:73:fc:6c:92:4b:cb:5b:eb:b5:47:6d:86:33:80: 3f:fb:29:09:cc:55:3a:e1:dc:ee:20:64:94:b7:80:90:8b:71: 23:e1:bb:e9:e0:4e:48:2f:e9:92:f6:0b:a6:00:27:7c:ea:ca: 23:d5:6f:85:d9:af:06:fd:ea:f0:4b:1e:6e:9d:9e:f7:45:39: 86:6b:52:cf:10:b4:f4:d1:fd:aa:a1:5d:06:29:9d:eb:f9:7e: a1:86:a7:6c:fc:f9:b0:32:bc:76:ba:1e:87:e6:aa:a3:01:45: 87:13:6e:0c:72:d4:cb:dc:d0:20:df:5b:63:98:db:b7:05:b2: f3:59:40:e1:45:50:0c:29:f0:a1:98:24:ee:a8:de:ee:6e:e5: ef:8c:cf:5e:ef:92:d6:a9:7d:ce:b5:e4:d5:62:a9:28:5f:eb: f2:9a:52:b8:54:79:73:25:99:2e:0c:71:f1:86:22:56:6d:e3: 57:de:10:50:e1:2f:bf:36:4b:e1:13:16:48:1b:b0:8f:bd:19: fc:fc:92:89:4a:d7:7a:32:a1:c7:d3:45:5b:6f:a6:5d:94:5b: 94:c6:f4:35:92:58:e8:35:e9:b7:37:e2:b7:c5:3a:b2:00:61: 49:fc:31:a1:01:51:6d:de:87:65:9a:28:64:66:eb:f8:e9:a6: b2:07:2d:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NKPO3XDlHBhhUlnxDCVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmI1NjI4Nzg2OTZlNjI4M2M0ZGY4MTRhMzhiNzM1YzUwMGNhZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q9cq8iDJQydKXq+1L6Nuf/qmEmy luQ0+FUIdlhI8a/ydIPaqeRkBhR3eJqdR8vRpFtPHSPQmdtWBVH5jmYKReEc7QK1 kSXPLwVAN7akjrnSXswdaCtxYNXkqWQ8MteiGFKjbGf4P3kijEcTcIlvEyV0OJYh lUxryJwIuaeIWmw2uC5Ya94/9x/e4ZzhQmSDgrFZXJIQWwiSChnO0A/Yv9pWqy47 ZTXuSy3YuAdEaCQOQPXbxLUzqByAQDA8qYNRPeqlBIelxgSSIhpLkiXWg2g1H8L6 siiCsyGd+n4/xHV7VntCfedomCOvCAUdTfvoPmq/Rcyfl2IS46UqNDBbQwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAK1YoeGluYoPE34FKOLc1xQDK+LMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2Y5Yzg0 MC05NjE1LTRiNTAtODk1Mi05MmQzYWFkMzJmNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvZjljODQw LTk2MTUtNGI1MC04OTUyLTkyZDNhYWQzMmY0OS8xL0FyVmloNGFXNWlnOFRmZ1Vv NHR6WEZBTXI0cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwbHxMA0GCSqGSIb3DQEBCwUAA4IBAQArTrN+ c/xskkvLW+u1R22GM4A/+ykJzFU64dzuIGSUt4CQi3Ej4bvp4E5IL+mS9gumACd8 6soj1W+F2a8G/erwSx5unZ73RTmGa1LPELT00f2qoV0GKZ3r+X6hhqds/PmwMrx2 uh6H5qqjAUWHE24MctTL3NAg31tjmNu3BbLzWUDhRVAMKfChmCTuqN7ubuXvjM9e 75LWqX3OteTVYqkoX+vymlK4VHlzJZkuDHHxhiJWbeNX3hBQ4S+/NkvhExZIG7CP vRn8/JKJStd6MqHH00Vbb6ZdlFuUxvQ1kljoNem3N+K3xTqyAGFJ/DGhAVFt3odl mihkZuv46aayBy0N -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:33 2026 by rpki-client