This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer File: H6eVFn0tn7QglB8XKHvfPF7tjfk.cer (raw, json) Hash identifier: BraMs41FU3gj/RnBnzimvwWZWZfRgf0aQ1fRzCTLjPU= Subject key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79110E90C92859114B0CFCA715FDD42B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31410 AS: 43571 AS: 44735 AS: 51829 AS: 60259 AS: 202868 IP: 46.182.184.0/21 IP: 78.40.248.0/21 IP: 91.220.138.0/24 IP: 149.126.80.0/21 IP: 153.92.128.0/19 IP: 157.97.0.0/19 IP: 178.19.48.0/20 IP: 185.40.120.0/22 IP: 185.111.36.0/22 IP: 185.152.116.0/22 IP: 213.181.96.0/19 IP: 2a00:9280::/32 IP: 2a01:6f00::/29 IP: 2a01:8280::/32 IP: 2a07:7f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0e:90:c9:28:59:11:4b:0c:fc:a7:15:fd:d4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:98:24:d5:4b:24:52:ed:90:4e:b5:00:fd: 0a:24:88:b8:63:8e:f7:fe:0e:95:dc:14:ae:9f:50: 5c:22:27:5f:be:fe:88:ea:9f:a6:8f:8a:30:48:72: 28:97:f9:f8:16:78:e1:4a:35:88:66:e4:cc:76:21: b0:f1:10:a3:da:32:67:53:0c:73:72:b0:ae:dd:21: 03:1f:cf:d7:33:46:10:a2:7b:a7:7e:44:3f:b4:d7: 17:62:83:24:23:95:f0:00:8e:93:c3:0b:23:d2:78: 08:1d:b8:62:fe:7e:a4:0f:f8:d3:9f:55:94:e0:74: 8d:82:b1:b3:38:36:44:8f:01:df:f1:df:a3:ee:37: 9f:37:30:99:9c:45:52:d1:55:de:c3:a3:aa:97:5b: 5c:a0:ee:14:7b:63:8b:e7:1b:02:44:47:20:7a:60: 7a:93:54:09:14:1b:65:7c:69:03:a3:45:14:d4:bd: ef:95:13:7a:5b:82:c1:9c:25:b5:cd:ff:b1:d4:9e: f1:cf:a9:02:c8:67:d8:3c:d0:00:2a:3b:be:00:9e: 07:59:c0:08:c7:85:a5:a1:77:76:c5:df:f0:ad:0f: 05:4a:67:f5:5e:ca:f3:e4:b1:84:57:15:9c:64:e9: e6:67:a5:20:52:9f:7f:1a:cb:83:f6:2a:a4:41:63: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.184.0/21 78.40.248.0/21 91.220.138.0/24 149.126.80.0/21 153.92.128.0/19 157.97.0.0/19 178.19.48.0/20 185.40.120.0/22 185.111.36.0/22 185.152.116.0/22 213.181.96.0/19 IPv6: 2a00:9280::/32 2a01:6f00::/29 2a01:8280::/32 2a07:7f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31410 43571 44735 51829 60259 202868 Signature Algorithm: sha256WithRSAEncryption 4b:09:55:bd:db:69:5c:b1:28:4c:c3:71:09:c9:76:64:6f:2a: f5:6f:ad:23:5b:f1:8d:15:39:68:95:fe:e5:41:06:7e:67:df: df:f9:58:55:b7:a4:87:f7:c9:f4:7a:15:fa:fa:c6:7f:9e:39: f8:16:72:4f:5e:96:61:4e:fa:53:55:79:4d:69:11:a5:2e:c6: 28:a7:93:75:d5:35:5e:8e:e0:4f:f8:cd:66:c8:fe:8d:8c:61: 84:78:a3:b6:28:8a:5e:7c:cc:4e:02:a3:34:8d:67:ec:7b:71: 60:88:10:a6:8d:9d:3a:30:2f:ab:b0:8b:85:5e:23:79:3c:9f: 63:db:16:b1:be:3b:5b:dc:79:87:88:ef:50:ac:b1:40:91:7e: be:f6:a5:61:29:cf:d3:2b:09:2c:8d:d3:23:e2:cb:48:fb:ea: bb:4a:cc:91:14:1d:74:ef:f6:79:ed:60:66:b0:60:f5:c2:f7: da:9c:33:89:67:af:23:a7:45:31:63:03:b1:c4:fa:89:79:be: 30:2f:19:0c:df:d9:23:e9:df:fb:ee:b9:90:29:5b:e9:ec:a8: cd:c1:cb:da:0c:40:5e:e3:32:f1:78:d7:8d:d5:bc:80:86:2a: 1a:4d:25:a0:07:1d:f8:71:2d:0c:f6:67:3a:f2:23:22:6a:85: 0b:61:3c:f5 -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgISAZt5EQ6QyShZEUsM/KcV/dQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmE3OTUxNjdkMmQ5ZmI0MjA5NDFmMTcyODdiZGYzYzVlZWQ4ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SCYJNVLJFLtkE61AP0KJIi4Y473 /g6V3BSun1BcIidfvv6I6p+mj4owSHIol/n4FnjhSjWIZuTMdiGw8RCj2jJnUwxz crCu3SEDH8/XM0YQonunfkQ/tNcXYoMkI5XwAI6Twwsj0ngIHbhi/n6kD/jTn1WU 4HSNgrGzODZEjwHf8d+j7jefNzCZnEVS0VXew6Oql1tcoO4Ue2OL5xsCREcgemB6 k1QJFBtlfGkDo0UU1L3vlRN6W4LBnCW1zf+x1J7xz6kCyGfYPNAAKju+AJ4HWcAI x4WloXd2xd/wrQ8FSmf1Xsrz5LGEVxWcZOnmZ6UgUp9/GsuD9iqkQWPjhQIDAQAB o4IDGDCCAxQwHQYDVR0OBBYEFB+nlRZ9LZ+0IJQfFyh73zxe7Y35MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzgzNTM1 YS1lMWJkLTRmYjctOWYwOS03YjdlOTc2Yzg0MTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvODM1MzVh LWUxYmQtNGZiNy05ZjA5LTdiN2U5NzZjODQxMi8xL0g2ZVZGbjB0bjdRZ2xCOFhL SHZmUEY3dGpmay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUF BwEHAQH/BHAwbjBIBAIAATBCAwQDLra4AwQDTij4AwQAW9yKAwQDlX5QAwQFmVyA AwQFnWEAAwQEshMwAwQCuSh4AwQCuW8kAwQCuZh0AwQF1bVgMCIEAgACMBwDBQAq AJKAAwUDKgFvAAMFACoBgoADBQMqB3+AMDIGCCsGAQUFBwEIAQH/BCMwIaAfMB0C AnqyAgMAqjMCAwCuvwIDAMp1AgMA62MCAwMYdDANBgkqhkiG9w0BAQsFAAOCAQEA SwlVvdtpXLEoTMNxCcl2ZG8q9W+tI1vxjRU5aJX+5UEGfmff3/lYVbekh/fJ9HoV +vrGf545+BZyT16WYU76U1V5TWkRpS7GKKeTddU1Xo7gT/jNZsj+jYxhhHijtiiK XnzMTgKjNI1n7HtxYIgQpo2dOjAvq7CLhV4jeTyfY9sWsb47W9x5h4jvUKyxQJF+ vvalYSnP0ysJLI3TI+LLSPvqu0rMkRQddO/2ee1gZrBg9cL32pwziWevI6dFMWMD scT6iXm+MC8ZDN/ZI+nf++65kClb6eyozcHL2gxAXuMy8XjXjdW8gIYqGk0loAcd +HEtDPZnOvIjImqFC2E89Q== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:29 2026 by rpki-client