This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer File: RBO99Nx0Nfr1G6k01lVw9xwhcxo.cer (raw, json) Hash identifier: A8VYyB2m+yzvSwY89+//a3tCDqVT87s6d1BNOQ+CGBM= Subject key identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F373A357158BE08532A4D3E62D9DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43648 AS: 208516 IP: 45.131.236.0/22 IP: 185.78.16.0/22 IP: 2a05:6680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:37:3a:35:71:58:be:08:53:2a:4d:3e:62:d9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4413bdf4dc7435faf51ba934d65570f71c21731a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:a8:d0:a6:5c:e4:86:cc:ed:91:67:b6:a1: 03:13:0a:14:0d:65:1e:41:67:58:6d:1a:ff:ed:04: f5:6b:64:f3:98:53:e2:2c:4b:aa:9c:46:6c:5a:64: 65:9f:5e:c5:43:05:d8:ae:6e:f1:08:d1:f0:11:17: 3e:1d:88:ff:3c:42:3a:7f:a5:ba:89:db:6e:54:85: 00:0d:3f:7a:82:77:bc:d9:c0:57:b6:20:dd:ab:d6: 95:d3:16:e3:a7:f7:65:8c:68:43:9e:9e:dd:1c:da: ca:20:88:43:f7:a6:c1:36:3e:33:9d:19:9a:4f:72: d0:19:d8:fb:3b:27:96:4b:e4:2b:51:91:49:f2:5e: 92:b8:42:eb:14:43:88:ec:af:9d:c4:c4:fa:09:a3: 4e:45:a8:2a:5a:7b:4a:73:63:87:5f:10:fb:6e:36: 73:5a:46:68:67:43:46:3f:0f:ce:0b:d9:54:2e:b0: 4f:c8:1d:e5:6c:9e:91:e5:71:af:4c:c4:6e:2f:79: 73:e8:74:e8:e8:20:44:d3:30:fe:53:aa:c0:4a:51: ac:d8:22:51:bf:d8:ba:67:3d:35:b5:6e:3b:47:b7: 38:a6:09:8b:3e:7d:af:09:15:bc:4e:d2:5f:04:66: 33:c4:af:86:d0:50:af:59:b7:c2:9b:8f:f7:c8:27: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:13:BD:F4:DC:74:35:FA:F5:1B:A9:34:D6:55:70:F7:1C:21:73:1A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/47aa2f-6b6f-4ef5-9b99-bc9ecc2adb43/1/RBO99Nx0Nfr1G6k01lVw9xwhcxo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.236.0/22 185.78.16.0/22 IPv6: 2a05:6680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43648 208516 Signature Algorithm: sha256WithRSAEncryption 18:b5:ea:92:20:37:14:84:56:f2:c9:a1:ad:f6:ba:a0:41:9b: 44:1b:d1:ed:e5:9e:a8:a7:e7:ac:52:c8:6b:bd:23:81:9c:d9: 99:34:83:d9:04:7e:76:5e:41:af:0b:c7:6d:6d:47:5b:48:9d: 23:08:06:3f:e3:e1:01:87:a0:c1:d6:c2:0a:49:84:5f:76:99: 6b:ec:65:4e:a0:91:4e:99:16:d5:97:6b:4e:a8:13:ac:14:d6: bf:10:15:6f:91:14:a7:18:6b:3e:0b:dc:e9:34:37:3b:ab:08: b8:71:7d:77:e1:27:6c:3a:d2:f2:7e:31:fd:03:81:a9:42:e5: ac:24:12:25:94:a0:45:54:6c:c2:13:94:d5:b0:d9:cd:af:6f: d1:6a:2a:d9:ec:b1:a7:f1:b5:61:e6:bb:18:c2:8c:38:a4:14: 45:41:85:a7:68:28:8e:3f:36:4f:8f:ac:ae:70:da:ec:66:62: 4c:69:60:5c:6b:2d:3d:3d:1a:b0:0b:5c:e6:34:ea:64:98:78: 6c:62:37:b2:d2:b1:34:53:74:f9:3f:ef:14:79:a3:79:4d:f1: 1b:c5:f2:f3:fd:c1:13:3c:b8:db:ab:75:45:0f:41:42:7c:a8: 62:22:88:b4:fc:b1:43:ac:92:94:7b:8a:96:57:a0:29:a5:eb: 44:7e:55:d5 -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt5fzc6NXFYvghTKk0+YtnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDEzYmRmNGRjNzQzNWZhZjUxYmE5MzRkNjU1NzBmNzFjMjE3MzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutuo0KZc5IbM7ZFntqEDEwoUDWUe QWdYbRr/7QT1a2TzmFPiLEuqnEZsWmRln17FQwXYrm7xCNHwERc+HYj/PEI6f6W6 idtuVIUADT96gne82cBXtiDdq9aV0xbjp/dljGhDnp7dHNrKIIhD96bBNj4znRma T3LQGdj7OyeWS+QrUZFJ8l6SuELrFEOI7K+dxMT6CaNORagqWntKc2OHXxD7bjZz WkZoZ0NGPw/OC9lULrBPyB3lbJ6R5XGvTMRuL3lz6HTo6CBE0zD+U6rASlGs2CJR v9i6Zz01tW47R7c4pgmLPn2vCRW8TtJfBGYzxK+G0FCvWbfCm4/3yCfKSQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFEQTvfTcdDX69RupNNZVcPccIXMaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzQ3YWEy Zi02YjZmLTRlZjUtOWI5OS1iYzllY2MyYWRiNDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvNDdhYTJm LTZiNmYtNGVmNS05Yjk5LWJjOWVjYzJhZGI0My8xL1JCTzk5TngwTmZyMUc2azAx bFZ3OXh3aGN4by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCLYPsAwQCuU4QMA0EAgACMAcDBQMqBWaAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCqgAIDAy6EMA0GCSqGSIb3DQEBCwUAA4IB AQAYteqSIDcUhFbyyaGt9rqgQZtEG9Ht5Z6op+esUshrvSOBnNmZNIPZBH52XkGv C8dtbUdbSJ0jCAY/4+EBh6DB1sIKSYRfdplr7GVOoJFOmRbVl2tOqBOsFNa/EBVv kRSnGGs+C9zpNDc7qwi4cX134SdsOtLyfjH9A4GpQuWsJBIllKBFVGzCE5TVsNnN r2/RairZ7LGn8bVh5rsYwow4pBRFQYWnaCiOPzZPj6yucNrsZmJMaWBcay09PRqw C1zmNOpkmHhsYjey0rE0U3T5P+8UeaN5TfEbxfLz/cETPLjbq3VFD0FCfKhiIoi0 /LFDrJKUe4qWV6AppetEflXV -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:36 2026 by rpki-client