This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer File: RENP2YwR2Nct84DKg-33n8wAhZ8.cer (raw, json) Hash identifier: ibZiVNoI4nqDFKPc9Oa7IYWaAqE+H6r5XnxkKMflNhU= Subject key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E826AA69A6B8456FE25404443F62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.75.244.0/22 IP: 2a03:4e20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e8:26:aa:69:a6:b8:45:6f:e2:54:04:44:3f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44434fd98c11d8d72df380ca83edf79fcc00859f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:2b:7b:97:c4:b2:f5:b0:7c:f3:7b:92:61: 2d:bb:92:1c:68:c5:4a:61:da:14:c1:9c:8f:db:e8: be:73:74:b1:6d:2e:bf:39:58:e0:af:90:46:4a:b3: 85:c8:d6:e7:78:52:3b:2f:83:d6:ea:7e:27:ea:a0: c2:fd:a4:61:37:8e:ce:a8:a6:c0:92:d0:39:81:be: 55:f2:3a:16:d9:85:59:d4:2f:dd:1b:5f:02:26:5f: 4c:58:73:b1:73:0e:2e:25:0b:3f:b7:6a:43:82:bd: 59:c8:d5:61:17:cd:f2:07:42:42:97:65:81:2c:a9: d1:15:93:97:74:e3:ae:8f:ca:98:d0:b7:5f:d4:4e: 03:1d:27:f1:79:4a:6e:db:e1:5c:ac:a4:6c:81:a4: 02:0d:11:75:e6:2f:21:ee:c2:e2:56:84:e0:64:78: c4:4c:b8:ae:fc:ef:40:99:99:cc:ba:8b:23:38:cf: 60:a0:71:d2:f6:33:04:83:cb:f2:63:2f:03:04:2b: db:83:61:35:6d:1c:8a:22:26:65:83:56:46:4e:df: 57:7a:97:a2:ae:2d:ea:ab:c0:7f:8c:aa:a3:e2:0c: c9:60:b1:ce:70:90:13:9e:4f:9d:43:13:cc:b9:3d: a9:5c:69:60:68:f6:64:9b:8b:25:23:45:a5:6c:e7: 9c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.244.0/22 IPv6: 2a03:4e20::/32 Signature Algorithm: sha256WithRSAEncryption 63:9a:a3:13:b8:62:fd:02:2e:42:7e:fe:79:79:3f:2f:75:5a: 64:ff:65:ba:67:7e:5f:58:07:df:be:57:d6:d9:fc:8c:fe:07: e4:70:91:47:b7:95:a2:35:00:8b:e9:a5:4b:31:c8:fb:96:38: 53:54:a6:20:5f:6f:97:75:ed:da:69:85:e3:1e:43:21:93:f9: 88:9a:71:96:bd:e9:72:6b:a5:80:73:c3:2b:aa:7c:6d:2b:38: 2b:54:97:26:06:b1:40:dc:99:9c:66:26:68:77:d1:be:91:73: c1:11:56:ea:4a:4b:fb:cf:77:a8:e2:a7:40:d5:d7:90:cf:2b: fe:ef:80:9f:78:27:3b:d4:9f:b6:0f:e6:31:c5:75:75:5b:a0: b8:26:4b:af:f8:48:fe:a2:bb:91:19:dc:04:22:8a:ed:83:ee: 6b:d9:3b:6d:b9:99:e7:a8:5f:c8:14:40:03:b9:1a:41:39:7d: 23:1c:bd:9b:bc:e7:b9:bd:a5:26:6a:d1:ca:e5:d9:bb:67:7e: 34:4f:a1:e2:cf:8e:34:bd:b6:4d:94:91:9b:22:98:ab:16:59: 17:6a:29:e7:a5:43:73:88:af:9a:b4:fc:1f:9b:43:05:f9:55: 05:a2:15:8b:3a:5e:e6:f7:a4:22:8d:df:1a:c8:3b:30:be:55: 3b:7e:92:dd -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5EOgmqmmmuEVv4lQERD9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDQzNGZkOThjMTFkOGQ3MmRmMzgwY2E4M2VkZjc5ZmNjMDA4NTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno0re5fEsvWwfPN7kmEtu5IcaMVK YdoUwZyP2+i+c3SxbS6/OVjgr5BGSrOFyNbneFI7L4PW6n4n6qDC/aRhN47OqKbA ktA5gb5V8joW2YVZ1C/dG18CJl9MWHOxcw4uJQs/t2pDgr1ZyNVhF83yB0JCl2WB LKnRFZOXdOOuj8qY0Ldf1E4DHSfxeUpu2+FcrKRsgaQCDRF15i8h7sLiVoTgZHjE TLiu/O9AmZnMuosjOM9goHHS9jMEg8vyYy8DBCvbg2E1bRyKIiZlg1ZGTt9Xepei ri3qq8B/jKqj4gzJYLHOcJATnk+dQxPMuT2pXGlgaPZkm4slI0WlbOec7QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFERDT9mMEdjXLfOAyoPt95/MAIWfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2NmNTIw Yy0yODkzLTQyYmYtYTgwZi0yMzdiYjMwZDczMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvY2Y1MjBj LTI4OTMtNDJiZi1hODBmLTIzN2JiMzBkNzMwNS8xL1JFTlAyWXdSMk5jdDg0REtn LTMzbjh3QWhaOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUv0MA0EAgACMAcDBQAqA04gMA0GCSqGSIb3 DQEBCwUAA4IBAQBjmqMTuGL9Ai5Cfv55eT8vdVpk/2W6Z35fWAffvlfW2fyM/gfk cJFHt5WiNQCL6aVLMcj7ljhTVKYgX2+Xde3aaYXjHkMhk/mImnGWvelya6WAc8Mr qnxtKzgrVJcmBrFA3JmcZiZod9G+kXPBEVbqSkv7z3eo4qdA1deQzyv+74CfeCc7 1J+2D+YxxXV1W6C4Jkuv+Ej+oruRGdwEIortg+5r2TttuZnnqF/IFEADuRpBOX0j HL2bvOe5vaUmatHK5dm7Z340T6Hiz440vbZNlJGbIpirFlkXainnpUNziK+atPwf m0MF+VUFohWLOl7m96Qijd8ayDswvlU7fpLd -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:24 2026 by rpki-client