This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer File: RS59h5IhKd-QxIcNoqdzhARySFg.cer (raw, json) Hash identifier: 2eSut6h6k2Uq9Ynt9LvDEK/EI+d141VrlgSUqx9tnOk= Subject key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB8F3D8644529B99090C21794FD406 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200583 IP: 81.173.36.0/22 IP: 185.34.248.0/22 IP: 185.102.40.0/22 IP: 2a06:1f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8f:3d:86:44:52:9b:99:09:0c:21:79:4f:d4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=452e7d87922129df90c4870da2a7738404724858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:42:53:2a:21:f7:a8:f7:81:e9:c1:b6:78: fb:70:65:05:86:e0:4a:f9:28:0a:9d:8c:c8:89:1a: 43:a3:53:f4:d3:02:3d:f6:a5:f6:68:aa:8e:a2:c4: b3:11:f5:ae:68:8c:97:55:b9:af:3a:a4:b1:94:11: 74:c2:55:a2:4d:77:55:38:b2:db:a7:fb:68:27:44: 86:00:77:47:97:43:aa:eb:41:33:29:c0:7a:79:90: 8b:93:f0:87:06:e9:3c:c1:f1:6a:14:63:28:fb:6a: c3:27:6f:5c:34:0d:b0:7f:84:7d:37:c0:5a:b8:6f: 25:3d:24:60:bf:59:71:8c:5e:01:47:21:cf:8b:39: 5b:df:23:95:47:d8:8f:7f:a9:31:8f:3f:05:71:80: 1c:ca:c8:66:91:a1:52:be:95:a1:2b:07:1a:15:37: bc:53:51:58:44:69:15:69:59:33:7a:d5:fb:6b:2a: 8e:8a:98:69:2b:ae:5f:77:43:18:37:f1:41:26:ed: 33:e8:35:40:8c:fe:7e:f9:4b:fd:c8:18:b1:0f:89: 57:08:7d:0f:c2:99:2f:49:6e:60:b9:b3:97:d5:b0: da:86:81:bd:a2:8c:c0:ee:bf:fa:4b:ce:11:32:5c: 80:d3:60:5e:d5:26:08:13:d3:16:a5:b4:00:e5:f1: 45:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.173.36.0/22 185.34.248.0/22 185.102.40.0/22 IPv6: 2a06:1f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200583 Signature Algorithm: sha256WithRSAEncryption 7e:8a:d2:a5:87:52:7e:52:c2:53:5a:70:fb:a0:15:47:49:14: 99:fd:0e:0f:ba:19:c2:35:c6:10:ca:b9:42:cf:d2:48:f4:ee: cd:b2:ac:6e:3d:c1:e6:15:3f:2d:2f:33:b5:b4:09:4b:8d:b4: b8:d4:d3:0f:07:54:4b:c4:98:d5:e4:3f:6a:a2:4b:49:ea:fe: ee:bf:ab:9f:67:5c:da:43:21:76:f5:8a:4f:4c:ba:fb:ba:40: 58:60:23:41:a2:a9:df:f0:90:56:b2:8b:83:b8:e2:d2:4c:a6: 60:1c:3e:94:6f:88:c5:52:f4:85:9e:40:cf:27:70:f3:76:c7: 0b:18:a0:db:de:a9:2b:6a:27:6b:22:6d:53:cf:cb:ad:e1:74: 76:0d:19:23:bc:e0:45:bd:7e:9b:6b:ac:5d:fe:4b:b7:b0:6d: ed:4b:fc:b7:63:bd:0b:3f:a5:dd:8f:99:3b:b9:54:22:9b:99: 09:8c:8f:2e:af:8d:bd:c6:2d:74:34:f4:ce:2c:f4:f4:97:f7: 7b:db:81:75:58:fc:1a:69:28:06:5e:27:6c:f1:88:fe:c4:0e: a8:92:c7:18:91:79:2f:ba:83:c7:8e:f0:53:49:02:cf:d1:54: 28:98:ce:69:81:f0:c0:92:04:c2:32:4d:36:b2:2b:ac:52:78: 1e:5b:3d:b2 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt26489hkRSm5kJDCF5T9QGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTJlN2Q4NzkyMjEyOWRmOTBjNDg3MGRhMmE3NzM4NDA0NzI0ODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ5CUyoh96j3genBtnj7cGUFhuBK +SgKnYzIiRpDo1P00wI99qX2aKqOosSzEfWuaIyXVbmvOqSxlBF0wlWiTXdVOLLb p/toJ0SGAHdHl0Oq60EzKcB6eZCLk/CHBuk8wfFqFGMo+2rDJ29cNA2wf4R9N8Ba uG8lPSRgv1lxjF4BRyHPizlb3yOVR9iPf6kxjz8FcYAcyshmkaFSvpWhKwcaFTe8 U1FYRGkVaVkzetX7ayqOiphpK65fd0MYN/FBJu0z6DVAjP5++Uv9yBixD4lXCH0P wpkvSW5gubOX1bDahoG9oozA7r/6S84RMlyA02Be1SYIE9MWpbQA5fFFXwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFEUufYeSISnfkMSHDaKnc4QEckhYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzQ4Nzk2 Mi04NTg4LTRmMGEtYmI3ZC1hYWE4ZDNhOTQwYWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvNDg3OTYy LTg1ODgtNGYwYS1iYjdkLWFhYThkM2E5NDBhYy8xL1JTNTloNUloS2QtUXhJY05v cWR6aEFSeVNGZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCUa0kAwQCuSL4AwQCuWYoMA0EAgACMAcDBQMq Bh8AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMPhzANBgkqhkiG9w0BAQsFAAOC AQEAforSpYdSflLCU1pw+6AVR0kUmf0OD7oZwjXGEMq5Qs/SSPTuzbKsbj3B5hU/ LS8ztbQJS420uNTTDwdUS8SY1eQ/aqJLSer+7r+rn2dc2kMhdvWKT0y6+7pAWGAj QaKp3/CQVrKLg7ji0kymYBw+lG+IxVL0hZ5Azydw83bHCxig296pK2onayJtU8/L reF0dg0ZI7zgRb1+m2usXf5Lt7Bt7Uv8t2O9Cz+l3Y+ZO7lUIpuZCYyPLq+NvcYt dDT0ziz09Jf3e9uBdVj8GmkoBl4nbPGI/sQOqJLHGJF5L7qDx47wU0kCz9FUKJjO aYHwwJIEwjJNNrIrrFJ4Hls9sg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:00 2026 by rpki-client