This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer (raw, json) Hash identifier: HRYDfp2pkBp7qu7v1H37TWQtREjqs3CXdOvPb5M/3po= Subject key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AB976873397D259FEE392315CCC7F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.147.164.0/22 IP: 2a07:e680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b9:76:87:33:97:d2:59:fe:e3:92:31:5c:cc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:db:a6:c1:f5:95:2c:e8:23:ad:79:15:40: 8d:7a:75:3d:f5:93:ce:45:c3:80:1b:7e:e6:3e:38: 71:fa:6d:f4:cf:35:57:c2:47:0c:20:f9:15:3c:67: e1:b6:36:e5:07:c3:75:d6:00:e9:27:bd:46:3d:d2: d8:3b:cd:89:c7:af:d7:c1:98:b3:85:fb:b8:16:ac: ea:fa:91:44:cd:6e:78:b7:dc:7f:a6:d0:16:85:bc: c7:00:5d:45:c3:ac:bc:9b:e0:db:49:c5:46:8f:fb: 3a:2f:f9:59:08:0a:18:99:a5:20:44:01:7c:55:ab: da:bd:8c:ad:4f:70:bd:be:16:eb:28:0d:79:53:31: 5b:e6:52:c5:8d:a6:4a:05:d8:33:7b:fd:71:82:10: 5b:89:2b:63:f9:f7:c3:0f:7f:8b:a1:4d:28:74:f7: f2:e2:b6:96:ea:a7:40:5e:75:3c:cb:86:8e:01:91: f9:77:04:27:87:75:51:5e:78:da:e9:b5:d8:de:4a: 31:9d:56:31:ad:0c:ec:2a:75:06:02:8c:ae:e1:17: 68:f5:57:20:a8:71:92:cd:05:94:51:ab:1f:7a:fe: 77:5e:c7:db:e0:c6:19:9e:f8:47:ec:0b:8b:27:ea: 2a:0d:e2:9a:95:3d:fc:a9:77:76:dd:42:30:ea:b7: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.164.0/22 IPv6: 2a07:e680::/29 Signature Algorithm: sha256WithRSAEncryption 6e:28:d2:b3:9b:ba:7a:58:d7:70:b5:6b:1e:1e:48:03:5e:e2: d0:be:c8:03:b3:fa:31:62:51:7d:76:6e:5f:1a:0e:83:30:09: ca:71:e1:0f:c8:f7:62:70:3a:5a:05:b6:86:62:77:39:5d:6e: 0e:9d:40:5d:60:2c:9e:64:6f:cc:f8:e4:5d:a8:7d:fb:74:eb: f6:b5:ed:72:73:f4:79:9e:63:35:ea:b0:a1:a7:1d:60:42:b4: 98:27:84:bf:b9:2b:12:62:a1:c8:7b:54:1b:3a:c9:63:f7:c6: ca:4c:53:74:d4:89:f5:96:fa:e5:9f:a6:2c:27:49:d3:31:93: 11:e7:a1:c5:7b:3a:29:91:95:93:4d:56:e5:d0:df:67:c4:1a: 3a:55:9c:3e:fc:07:4d:e0:ba:49:96:6c:ef:45:9b:a9:03:44: 4e:81:f0:ba:1e:e0:99:b7:b6:34:a2:07:f3:f4:08:0d:ab:4e: 4a:69:fc:c3:35:0e:1a:23:92:26:55:71:16:04:cc:d5:a2:96: d2:b5:2f:6b:d5:d2:f9:2b:63:58:b8:6d:e7:34:a9:48:10:c0: ec:0f:e6:ca:00:67:8c:56:cc:79:a1:60:d6:c4:84:ff:a9:db: e7:10:05:fe:62:ae:4b:8e:e3:f1:c2:7e:fe:28:40:98:b0:cd: 61:87:c8:8f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6Wrl2hzOX0ln+45IxXMx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjEyNThmNWUzYjZiOTRlMzkxNmRkMmI1ZDE2ZTM0MmZkNjA1OTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YrbpsH1lSzoI615FUCNenU99ZPO RcOAG37mPjhx+m30zzVXwkcMIPkVPGfhtjblB8N11gDpJ71GPdLYO82Jx6/XwZiz hfu4Fqzq+pFEzW54t9x/ptAWhbzHAF1Fw6y8m+DbScVGj/s6L/lZCAoYmaUgRAF8 VavavYytT3C9vhbrKA15UzFb5lLFjaZKBdgze/1xghBbiStj+ffDD3+LoU0odPfy 4raW6qdAXnU8y4aOAZH5dwQnh3VRXnja6bXY3koxnVYxrQzsKnUGAoyu4Rdo9Vcg qHGSzQWUUasfev53Xsfb4MYZnvhH7AuLJ+oqDeKalT38qXd23UIw6rdrMwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEYSWPXjtrlOORbdK10W40L9YFlmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwL2U4MDU3 NS04YzhiLTQ5YTQtODVkZS01ODNiY2U2ZmI1NjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvZTgwNTc1 LThjOGItNDlhNC04NWRlLTU4M2JjZTZmYjU2Ny8xL1JoSlk5ZU8ydVU0NUZ0MHJY UmJqUXYxZ1dXWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwpOkMA0EAgACMAcDBQMqB+aAMA0GCSqGSIb3 DQEBCwUAA4IBAQBuKNKzm7p6WNdwtWseHkgDXuLQvsgDs/oxYlF9dm5fGg6DMAnK ceEPyPdicDpaBbaGYnc5XW4OnUBdYCyeZG/M+ORdqH37dOv2te1yc/R5nmM16rCh px1gQrSYJ4S/uSsSYqHIe1QbOslj98bKTFN01In1lvrln6YsJ0nTMZMR56HFezop kZWTTVbl0N9nxBo6VZw+/AdN4LpJlmzvRZupA0ROgfC6HuCZt7Y0ogfz9AgNq05K afzDNQ4aI5ImVXEWBMzVopbStS9r1dL5K2NYuG3nNKlIEMDsD+bKAGeMVsx5oWDW xIT/qdvnEAX+Yq5LjuPxwn7+KECYsM1hh8iP -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:11 2026 by rpki-client