This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer File: Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer (raw, json) Hash identifier: PPQHLxOD5zFlMJnaT2fSlxgStcUJ8g3Wpp499HOaOvU= Subject key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA338DE9E061D04D3688B4237864CF3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.82.13.0 -- 45.82.15.255 IP: 45.91.67.0/24 IP: 91.200.148.0/24 IP: 91.200.150.0/23 IP: 185.142.99.0/24 IP: 194.187.120.0 -- 194.187.122.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:38:de:9e:06:1d:04:d3:68:8b:42:37:86:4c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=465eba5c1a80f86a4589278edd9304b3f5169f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:fc:07:d9:a6:c9:51:62:85:17:e1:4c:9b: 75:08:18:81:59:d1:4e:73:2e:28:76:b1:d8:26:71: ee:ac:82:42:11:b5:dd:9f:f9:b4:bb:35:fe:02:6f: b3:87:c5:86:40:8a:9c:93:b2:6b:16:4a:d4:47:ff: fe:c5:8a:e6:14:cf:0e:43:e0:72:51:2b:ae:ae:ff: 3d:d1:e8:f6:e3:5f:5e:8a:d7:be:ea:3c:4d:94:63: 59:db:77:51:31:90:c3:dc:ea:0b:ef:13:e5:ca:44: f6:70:3d:eb:84:07:60:99:fe:0c:f9:10:de:8e:a5: 8f:cd:01:58:17:d2:6a:91:a7:22:9e:72:02:5e:44: 07:54:01:6e:d1:01:56:6c:ca:1f:6b:44:b6:3c:ef: 3e:2c:94:50:a6:5c:03:7a:c8:1b:e9:97:3e:55:ab: 42:5f:ef:05:b9:28:f0:d2:1d:ee:24:c8:04:c8:60: c5:7e:f3:1b:20:99:69:96:8e:a4:96:ae:d4:a9:27: d7:78:6c:49:d5:99:17:b1:f8:94:84:76:9f:c3:a2: 7d:fc:04:97:34:01:71:c9:f9:fa:12:9e:4d:01:a7: a4:a3:7d:8b:c4:b3:27:11:24:1a:f8:6a:e8:4b:8a: 99:89:b7:76:2d:b6:bb:46:9c:30:6a:4f:55:c9:a8: f7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.13.0-45.82.15.255 45.91.67.0/24 91.200.148.0/24 91.200.150.0/23 185.142.99.0/24 194.187.120.0-194.187.122.255 Signature Algorithm: sha256WithRSAEncryption 97:68:e5:1f:7b:ee:d0:a7:9e:73:8b:0c:98:96:29:bc:02:c0: 79:34:a8:13:1d:f7:0c:2e:ca:f5:0a:43:76:b7:01:71:a4:f1: 42:3f:85:5e:3e:93:d5:44:c2:69:3f:e0:93:7f:33:a8:a7:05: 41:5b:98:bf:94:53:37:c0:80:4e:e0:96:05:00:e2:3f:51:5c: 38:df:92:fa:fe:6b:fb:54:71:86:2f:a5:3d:e6:18:8e:4a:83: 89:8f:7e:b0:1f:29:69:9a:00:6f:33:c3:ff:b2:3b:fa:2b:8a: 0f:c8:63:3e:29:98:3f:8e:db:ae:bb:5d:51:61:7c:8f:d0:be: e0:50:d6:a6:29:d1:19:9e:a5:a1:25:33:3f:4a:a5:33:11:b1: f1:b9:81:97:12:37:c2:53:c2:e0:8f:95:7d:7b:ac:33:c9:0d: 32:16:8b:78:6d:91:c9:18:8a:b1:c1:e5:40:57:e9:01:aa:9b: a6:c8:84:ab:69:59:39:68:f6:dc:0c:2c:61:7d:66:c0:42:69: ff:4a:11:9b:f9:3f:61:16:0b:96:b4:9d:dc:6d:10:e2:1a:a9: 2e:c5:80:0f:e1:25:7d:3f:18:4d:92:ae:30:84:cd:cf:42:50: e8:b0:e0:6c:ec:0c:9a:c0:a9:76:ef:d1:cb:8e:76:ee:3a:b4: b1:3f:d6:da -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt7ozjengYdBNNoi0I3hkzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjVlYmE1YzFhODBmODZhNDU4OTI3OGVkZDkzMDRiM2Y1MTY5ZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJL8B9mmyVFihRfhTJt1CBiBWdFO cy4odrHYJnHurIJCEbXdn/m0uzX+Am+zh8WGQIqck7JrFkrUR//+xYrmFM8OQ+By USuurv890ej2419eite+6jxNlGNZ23dRMZDD3OoL7xPlykT2cD3rhAdgmf4M+RDe jqWPzQFYF9JqkacinnICXkQHVAFu0QFWbMofa0S2PO8+LJRQplwDesgb6Zc+VatC X+8FuSjw0h3uJMgEyGDFfvMbIJlplo6klq7UqSfXeGxJ1ZkXsfiUhHafw6J9/ASX NAFxyfn6Ep5NAaeko32LxLMnESQa+GroS4qZibd2Lba7Rpwwak9Vyaj3UwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFEZeulwagPhqRYknjt2TBLP1Fp+DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2MxMmE3 Yi01Y2FmLTRlN2MtOTcwZC01YzQ3NmUzMzI1ZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvYzEyYTdi LTVjYWYtNGU3Yy05NzBkLTVjNDc2ZTMzMjVmNS8xL1JsNjZYQnFBLUdwRmlTZU8z Wk1Fc19VV240TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDA6BAIAATA0MAwDBAAtUg0DBAQtUgADBAAtW0MDBABbyJQDBAFb yJYDBAC5jmMwDAMEA8K7eAMEAMK7ejANBgkqhkiG9w0BAQsFAAOCAQEAl2jlH3vu 0Keec4sMmJYpvALAeTSoEx33DC7K9QpDdrcBcaTxQj+FXj6T1UTCaT/gk38zqKcF QVuYv5RTN8CATuCWBQDiP1FcON+S+v5r+1Rxhi+lPeYYjkqDiY9+sB8paZoAbzPD /7I7+iuKD8hjPimYP47brrtdUWF8j9C+4FDWpinRGZ6loSUzP0qlMxGx8bmBlxI3 wlPC4I+VfXusM8kNMhaLeG2RyRiKscHlQFfpAaqbpsiEq2lZOWj23AwsYX1mwEJp /0oRm/k/YRYLlrSd3G0Q4hqpLsWAD+ElfT8YTZKuMITNz0JQ6LDgbOwMmsCpdu/R y4527jq0sT/W2g== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:49 2026 by rpki-client