This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer File: RFbBTNhyT5qQlie5TgBs9p0SMHs.cer (raw, json) Hash identifier: xJeupIODG5tZgcOUKXXhDq46M+0+bwiL9WNAhNrn77I= Subject key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EF7A0069BE462AE36BA3DDE671F71 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44654 IP: 37.252.208.0/21 IP: 93.93.96.0/21 IP: 109.205.8.0/21 IP: 185.36.124.0/22 IP: 2a02:d8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f7:a0:06:9b:e4:62:ae:36:ba:3d:de:67:1f:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4456c14cd8724f9a909627b94e006cf69d12307b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:60:f5:3b:c6:e8:44:48:f1:51:ed:d2:0d: b2:be:03:76:f9:c9:cf:51:30:e2:c3:3e:4c:a2:1f: 6f:82:68:ad:7c:98:19:03:29:80:10:bb:ad:a7:0f: ad:83:9a:df:6b:c1:12:3f:f0:57:f4:52:10:ab:92: 2c:08:b4:cd:f6:3b:29:39:8c:0f:96:73:c9:44:cf: 4d:a4:8a:cc:8f:e3:08:e7:45:b5:89:d0:48:6e:3f: b2:b6:f0:45:df:ca:de:7f:bf:93:9d:a9:cd:06:ef: d1:10:3d:65:20:36:25:ab:89:8a:95:8b:61:f5:72: 72:7c:1d:49:4b:39:55:4a:70:d3:51:c1:71:a5:45: ea:5b:79:29:25:cb:b9:05:53:e5:46:66:7b:7e:69: 4f:17:62:30:d3:58:b2:5f:56:aa:9b:5c:75:57:a1: 45:e4:ad:ed:e2:79:f3:5a:71:8d:a5:17:bc:79:37: b3:a3:5a:e3:c5:2b:1a:ea:38:04:96:7c:e6:0f:ea: 86:3e:73:b7:bf:c0:22:ca:7d:f3:a2:0b:f0:73:24: c5:1e:51:15:d8:e7:07:fd:7c:44:27:00:83:26:fd: 25:8d:b3:94:e7:ee:81:a8:ab:fe:64:36:5e:af:d7: d9:56:3e:8a:d4:01:c2:47:f3:54:f6:79:21:ab:b6: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.208.0/21 93.93.96.0/21 109.205.8.0/21 185.36.124.0/22 IPv6: 2a02:d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44654 Signature Algorithm: sha256WithRSAEncryption 21:9a:e9:c6:12:9c:f2:55:50:a2:87:94:ae:08:2b:b7:9a:94: 22:32:d7:35:8d:b2:f7:38:74:33:35:d8:9b:2a:ae:ac:3f:b3: 34:37:38:92:d3:66:98:e6:89:45:02:93:04:56:2b:49:55:e4: 83:f3:56:34:f2:6d:97:0d:87:a2:30:19:3d:1f:39:e9:22:e6: 37:67:49:f7:80:ab:9b:2b:91:70:2f:f3:e5:fb:b0:f3:8e:1d: 00:25:f3:d9:68:c9:62:16:a5:92:ec:4d:ce:0e:79:fe:7c:8b: 26:ce:f0:5c:e2:e7:97:15:ba:96:96:d0:b6:10:c6:bd:6d:df: 8c:47:0a:77:c1:2a:de:85:bc:eb:1e:41:96:b3:5d:fa:59:d6: 9a:ac:6c:a6:f9:ea:f5:b8:da:76:6f:b5:d3:9d:42:9e:92:9b: d5:cc:74:40:11:6f:2c:b9:07:60:63:56:df:d7:70:31:44:1c: d8:7c:cf:3c:d6:9d:4b:35:0e:11:ef:03:fa:df:48:18:4f:fc: 49:2d:9e:7f:d0:3b:de:91:7e:5d:54:b2:10:ee:0a:ff:e5:d0: 27:2c:83:05:02:76:0f:c7:de:f0:85:55:5b:3b:e0:1c:11:e0: c0:51:a9:4c:e6:4d:1b:59:71:8c:67:79:5f:e6:e7:b7:f7:1d: ce:33:bd:58 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5fvegBpvkYq42uj3eZx9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDU2YzE0Y2Q4NzI0ZjlhOTA5NjI3Yjk0ZTAwNmNmNjlkMTIzMDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpVg9TvG6ERI8VHt0g2yvgN2+cnP UTDiwz5Moh9vgmitfJgZAymAELutpw+tg5rfa8ESP/BX9FIQq5IsCLTN9jspOYwP lnPJRM9NpIrMj+MI50W1idBIbj+ytvBF38ref7+TnanNBu/RED1lIDYlq4mKlYth 9XJyfB1JSzlVSnDTUcFxpUXqW3kpJcu5BVPlRmZ7fmlPF2Iw01iyX1aqm1x1V6FF 5K3t4nnzWnGNpRe8eTezo1rjxSsa6jgElnzmD+qGPnO3v8Aiyn3zogvwcyTFHlEV 2OcH/XxEJwCDJv0ljbOU5+6BqKv+ZDZer9fZVj6K1AHCR/NU9nkhq7YXawIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFERWwUzYck+akJYnuU4AbPadEjB7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1LzVlY2Zj Mi1kYTcwLTQzMzMtOGY5Ni01Yjg3ODI1YzA3ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvNWVjZmMy LWRhNzAtNDMzMy04Zjk2LTViODc4MjVjMDdlZS8xL1JGYkJUTmh5VDVxUWxpZTVU Z0JzOXAwU01Icy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDJfzQAwQDXV1gAwQDbc0IAwQCuSR8MA0EAgAC MAcDBQAqAgDYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCubjANBgkqhkiG9w0B AQsFAAOCAQEAIZrpxhKc8lVQooeUrggrt5qUIjLXNY2y9zh0MzXYmyqurD+zNDc4 ktNmmOaJRQKTBFYrSVXkg/NWNPJtlw2HojAZPR856SLmN2dJ94CrmyuRcC/z5fuw 844dACXz2WjJYhalkuxNzg55/nyLJs7wXOLnlxW6lpbQthDGvW3fjEcKd8Eq3oW8 6x5BlrNd+lnWmqxspvnq9bjadm+1051CnpKb1cx0QBFvLLkHYGNW39dwMUQc2HzP PNadSzUOEe8D+t9IGE/8SS2ef9A73pF+XVSyEO4K/+XQJyyDBQJ2D8fe8IVVWzvg HBHgwFGpTOZNG1lxjGd5X+bnt/cdzjO9WA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:51:49 2026 by rpki-client