This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer File: RbvSGTZCUwoBf08cvlYuIXCz370.cer (raw, json) Hash identifier: SMC1E4Gy3X6mChd8NjaKRGKDcEKbT5Uw/2F6J3EQJfY= Subject key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF18A2E66E2DE07ADAC0DC8D5F2C50D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:21:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212785 IP: 45.157.138.0/24 IP: 178.211.154.0/24 IP: 185.225.188.0/24 IP: 193.56.112.0/23 IP: 193.56.116.0/23 IP: 212.46.43.0/24 IP: 2a07:bdc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:8a:2e:66:e2:de:07:ad:ac:0d:c8:d5:f2:c5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:89:b6:d2:1d:fd:44:e4:6b:dd:f6:eb:59: 0a:d6:df:1e:3e:4e:4a:7d:00:df:86:d9:66:7e:50: 4f:7a:25:a8:59:43:5b:93:2b:10:09:31:be:8e:53: 41:30:ca:a9:3b:67:67:c7:75:36:18:23:f4:4a:7f: 7f:70:26:8e:8f:b2:c6:91:55:bb:46:e2:ab:f1:23: 16:06:c9:c0:de:b2:e3:a0:61:4f:bc:c9:cb:2e:47: bd:c7:85:92:2f:c1:df:db:f7:65:34:aa:da:bd:76: ce:a4:af:95:f4:e8:67:a3:66:5f:95:82:30:04:c1: 1b:6d:4a:6b:53:18:d5:81:74:52:e5:16:cf:3e:0f: 6e:55:91:50:d1:98:af:98:38:14:ab:89:1b:65:e1: 51:5d:2f:e4:0f:82:1d:4a:8a:5e:47:3c:2b:43:58: b4:ed:96:dc:e5:b0:c5:95:2b:f4:29:72:1c:fd:09: 9d:98:32:6f:fb:74:17:0c:87:0a:ed:94:6c:14:59: a0:49:2b:99:ed:fa:80:73:9f:2e:42:78:18:d4:d1: be:b6:e4:29:b5:50:b2:60:c5:47:38:74:55:92:79: 9f:de:1f:0b:c7:e7:0c:8a:28:18:35:67:97:ee:94: 87:04:09:59:e3:bb:17:86:53:45:b4:00:76:70:31: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.138.0/24 178.211.154.0/24 185.225.188.0/24 193.56.112.0/23 193.56.116.0/23 212.46.43.0/24 IPv6: 2a07:bdc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212785 Signature Algorithm: sha256WithRSAEncryption 90:20:a3:76:a9:e2:ad:05:e6:a7:0a:7a:39:eb:bc:a0:76:3d: 96:a3:f0:3b:51:9b:6d:fb:6e:20:4b:8b:f6:45:bb:65:b2:2f: db:da:79:ed:45:ba:57:41:53:cb:d6:e3:2b:40:79:b3:16:4e: 6f:99:28:8c:bd:61:98:a0:1b:52:fa:0f:14:fc:b2:76:84:29: 3b:76:9c:7f:bb:e6:64:f7:eb:02:87:b6:0b:d0:01:98:d6:72: d8:59:5d:09:ad:cc:b8:8b:34:a1:93:7d:68:68:b9:5b:a7:96: 61:9b:1c:89:0b:25:71:16:e8:42:56:73:76:b3:7b:87:23:e4: 26:08:0c:66:cc:3e:72:9d:b2:05:32:2f:f2:b4:e3:47:37:73: c4:ed:a7:6c:a4:68:e6:c3:d2:7d:af:f2:1b:b0:fc:f2:f6:27: 15:53:5c:75:9a:04:f2:79:38:6f:df:c5:3b:90:74:5b:90:60: 66:6f:b2:92:fb:56:96:81:df:3e:e5:d3:3a:81:fe:58:81:82: 7d:e6:34:7f:79:dd:a9:53:9f:9e:9a:56:6e:42:f6:b1:57:a0: f2:6f:4d:b1:5a:ff:99:dd:10:03:cd:05:22:d6:32:1a:91:46: 8c:4b:50:68:b1:9d:17:31:e1:2d:33:d9:90:7a:ca:e5:e7:1f: 60:cd:c8:ef -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt/8YouZuLeB62sDcjV8sUNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWJiZDIxOTM2NDI1MzBhMDE3ZjRmMWNiZTU2MmUyMTcwYjNkZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJaJttId/UTka93261kK1t8ePk5K fQDfhtlmflBPeiWoWUNbkysQCTG+jlNBMMqpO2dnx3U2GCP0Sn9/cCaOj7LGkVW7 RuKr8SMWBsnA3rLjoGFPvMnLLke9x4WSL8Hf2/dlNKravXbOpK+V9Ohno2ZflYIw BMEbbUprUxjVgXRS5RbPPg9uVZFQ0ZivmDgUq4kbZeFRXS/kD4IdSopeRzwrQ1i0 7Zbc5bDFlSv0KXIc/QmdmDJv+3QXDIcK7ZRsFFmgSSuZ7fqAc58uQngY1NG+tuQp tVCyYMVHOHRVknmf3h8Lx+cMiigYNWeX7pSHBAlZ47sXhlNFtAB2cDF+QQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFEW70hk2QlMKAX9PHL5WLiFws9+9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2NmZmZm OC0zNTMwLTRlNWItYTVlMi1jNzc5MDVmYmJhN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvY2ZmZmY4 LTM1MzAtNGU1Yi1hNWUyLWM3NzkwNWZiYmE3Yi8xL1JidlNHVFpDVXdvQmYwOGN2 bFl1SVhDejM3MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQALZ2KAwQAstOaAwQAueG8AwQBwThwAwQBwTh0 AwQA1C4rMA0EAgACMAcDBQMqB73AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM/ MTANBgkqhkiG9w0BAQsFAAOCAQEAkCCjdqnirQXmpwp6Oeu8oHY9lqPwO1Gbbftu IEuL9kW7ZbIv29p57UW6V0FTy9bjK0B5sxZOb5kojL1hmKAbUvoPFPyydoQpO3ac f7vmZPfrAoe2C9ABmNZy2FldCa3MuIs0oZN9aGi5W6eWYZsciQslcRboQlZzdrN7 hyPkJggMZsw+cp2yBTIv8rTjRzdzxO2nbKRo5sPSfa/yG7D88vYnFVNcdZoE8nk4 b9/FO5B0W5BgZm+ykvtWloHfPuXTOoH+WIGCfeY0f3ndqVOfnppWbkL2sVeg8m9N sVr/md0QA80FItYyGpFGjEtQaLGdFzHhLTPZkHrK5ecfYM3I7w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:59 2026 by rpki-client