This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer (raw, json) Hash identifier: CoOqyL4XKsXVl9zglR43FchrWO90XADPEZt+bGv9jwU= Subject key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C9E0A3B986FF4C2699A5F7A2DCB51 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.217.244.0/22 IP: 2a0d:2000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9e:0a:3b:98:6f:f4:c2:69:9a:5f:7a:2d:cb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:04:81:cf:03:64:eb:e3:3b:6f:e7:cc:11: b4:74:2a:fe:97:1f:8c:5a:32:d5:66:d7:e4:c5:82: 05:9f:67:31:fc:19:76:36:5b:53:49:c0:c0:1d:5d: dc:b7:69:60:17:e8:66:e3:1e:0a:6b:07:b0:64:63: 83:dd:78:a5:28:94:cd:aa:39:73:bc:f9:12:9d:b4: f9:0a:09:e8:f1:fd:e5:b3:da:01:e0:ef:9e:dc:f0: ab:6a:d6:8c:a5:10:af:7d:e4:b0:b3:66:ae:4c:a8: 8f:48:ea:4a:f6:62:e3:d7:3f:54:77:da:73:e4:54: 45:8d:c3:4a:e8:f8:d8:3c:dc:5c:9c:57:09:80:3b: a9:ab:0f:b2:22:46:47:b0:9f:86:75:ad:5d:da:0a: c6:a7:a7:64:5a:3d:cc:7c:f7:4d:13:8d:f1:79:1a: 1b:5f:85:c4:1e:2b:9e:87:1a:43:e0:2c:5d:02:6f: 18:2f:dc:c2:c0:6c:c4:8a:5b:f8:5b:16:1d:d3:66: 58:69:8a:0e:03:1c:47:42:20:45:7b:d9:9b:0f:85: 01:73:b8:0f:97:50:c4:d1:6b:61:31:17:54:e4:18: 39:48:7e:ab:2a:42:f1:9d:64:aa:f6:dc:5a:36:f5: d0:09:cf:27:7a:4b:66:6c:09:2c:63:c0:6a:c4:36: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.244.0/22 IPv6: 2a0d:2000::/29 Signature Algorithm: sha256WithRSAEncryption 30:85:f5:6a:a5:dd:a5:b7:9c:9c:29:23:ed:e1:16:64:ab:57: f6:28:82:61:eb:5b:00:a4:5c:9b:cf:50:a6:1c:ee:b1:fa:fe: e2:b4:fc:ee:cd:18:72:58:49:17:5b:22:3d:9c:dc:d3:dc:56: 9c:56:66:01:e2:7b:b0:f9:62:86:2f:91:a1:5d:15:19:1d:79: d0:ae:3d:7f:54:d3:92:1d:e3:5e:a1:7e:eb:16:65:cd:3d:81: f6:fe:89:5e:66:c3:72:45:1c:98:71:e1:69:04:87:4f:8f:01: f6:02:c8:22:aa:19:52:b8:41:3f:ac:df:ac:07:9a:67:b6:44: 69:86:46:df:0c:b3:d7:98:c8:50:31:aa:6c:a6:e7:6f:00:64: 2c:fc:6c:45:79:35:37:63:e5:5c:3a:75:97:66:a9:52:12:c0: 64:13:41:db:5a:0d:81:47:8b:c3:a4:aa:a0:dd:03:a3:c8:33: 69:f5:1e:59:60:5a:79:3b:52:09:64:7b:39:3e:b3:7b:4f:0f: 1d:d1:9a:71:f2:15:00:7c:0e:32:a3:10:2b:e9:69:77:a4:24: 12:6c:8c:b4:82:6f:9a:57:f7:e5:88:34:d2:ac:03:60:d8:7d: e3:83:ed:47:c9:ac:07:17:31:c1:b8:68:e5:dc:98:dd:0f:da: 79:fb:b9:d6 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9XJ4KO5hv9MJpml96LctRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTEwYzY5YmVkMDM0NjViZmY4YWY5ZDcxYTZhZTliMTgzYjdjMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnscEgc8DZOvjO2/nzBG0dCr+lx+M WjLVZtfkxYIFn2cx/Bl2NltTScDAHV3ct2lgF+hm4x4KawewZGOD3XilKJTNqjlz vPkSnbT5Cgno8f3ls9oB4O+e3PCrataMpRCvfeSws2auTKiPSOpK9mLj1z9Ud9pz 5FRFjcNK6PjYPNxcnFcJgDupqw+yIkZHsJ+Gda1d2grGp6dkWj3MfPdNE43xeRob X4XEHiuehxpD4CxdAm8YL9zCwGzEilv4WxYd02ZYaYoOAxxHQiBFe9mbD4UBc7gP l1DE0WthMRdU5Bg5SH6rKkLxnWSq9txaNvXQCc8nektmbAksY8BqxDbFYwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEUQxpvtA0Zb/4r51xpq6bGDt8JNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzA5Yzg2 NS1hYzljLTQ5MTMtOWNjZS1lMWZkMGIxZjBlZmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDljODY1 LWFjOWMtNDkxMy05Y2NlLWUxZmQwYjFmMGVmZC8xL1JSREdtLTBEUmx2X2l2blhH bXJwc1lPM3drMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudn0MA0EAgACMAcDBQMqDSAAMA0GCSqGSIb3 DQEBCwUAA4IBAQAwhfVqpd2lt5ycKSPt4RZkq1f2KIJh61sApFybz1CmHO6x+v7i tPzuzRhyWEkXWyI9nNzT3FacVmYB4nuw+WKGL5GhXRUZHXnQrj1/VNOSHeNeoX7r FmXNPYH2/oleZsNyRRyYceFpBIdPjwH2AsgiqhlSuEE/rN+sB5pntkRphkbfDLPX mMhQMapspudvAGQs/GxFeTU3Y+VcOnWXZqlSEsBkE0HbWg2BR4vDpKqg3QOjyDNp 9R5ZYFp5O1IJZHs5PrN7Tw8d0Zpx8hUAfA4yoxAr6Wl3pCQSbIy0gm+aV/fliDTS rANg2H3jg+1HyawHFzHBuGjl3JjdD9p5+7nW -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:40 2026 by rpki-client