This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer File: Rro_gAObnnhM-yS_LH3bJOGQCnY.cer (raw, json) Hash identifier: QAL9kUKF/FgUPL5rR3muXt11TzMR/rTkwl4NoSK/9lA= Subject key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6E88FBA0026EE3EB60D9D5A2C1D2C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49053 AS: 57073 AS: 201512 -- 201513 AS: 211517 AS: 213105 AS: 215070 IP: 85.198.76.0/22 IP: 90.156.244.0/22 IP: 91.230.107.0/24 IP: 94.141.112.0/22 IP: 176.101.88.0/21 IP: 176.120.80.0/22 IP: 185.62.200.0/22 IP: 185.138.252.0/22 IP: 194.1.214.0/24 IP: 213.184.154.0 -- 213.184.159.255 IP: 2a03:720::/32 IP: 2a07:1140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e8:8f:ba:00:26:ee:3e:b6:0d:9d:5a:2c:1d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:4b:4c:ea:17:b7:6c:8c:19:0a:ef:08:87: b5:8a:49:1c:c3:0a:02:5d:58:c2:b3:57:52:d3:ff: 68:7a:09:2b:6c:a5:a8:e9:a8:ae:4c:d7:17:ab:61: d2:d6:6f:9a:a0:21:f1:32:15:ff:57:af:ec:7b:de: 33:de:81:6a:07:39:ae:39:89:a2:cb:49:a5:f5:ba: bd:22:a0:72:de:6d:a1:e4:6c:4d:ff:c8:92:1c:1d: b5:dd:d1:4a:a5:12:0c:c6:ec:ea:16:8d:f6:88:1d: 9d:92:f7:24:77:81:dd:af:2f:b2:e5:14:67:19:39: f1:da:9b:33:62:62:70:92:84:a8:2c:0f:9f:03:32: 0a:c4:9c:b0:b8:17:e5:e1:a4:9c:64:ad:ca:e7:54: 7d:55:62:de:26:6a:a8:19:f2:27:e8:3a:28:79:94: 50:f6:48:d6:6e:8f:35:97:2f:75:ba:3d:57:0b:a9: f7:b7:4e:64:38:c6:e0:3a:39:9d:df:39:a9:3c:a2: b2:ad:97:b2:02:75:b9:e9:f0:ef:e2:62:46:c5:06: 37:e5:9e:91:ad:1d:ea:3c:02:90:d6:27:e9:50:b6: 59:a5:ec:85:3a:a9:35:2b:b5:1d:a1:0e:97:d1:0d: bb:a9:bc:90:cd:9e:45:cf:36:99:32:88:95:4f:51: 12:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.198.76.0/22 90.156.244.0/22 91.230.107.0/24 94.141.112.0/22 176.101.88.0/21 176.120.80.0/22 185.62.200.0/22 185.138.252.0/22 194.1.214.0/24 213.184.154.0-213.184.159.255 IPv6: 2a03:720::/32 2a07:1140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49053 57073 201512-201513 211517 213105 215070 Signature Algorithm: sha256WithRSAEncryption 1b:e3:60:28:36:aa:80:a5:1d:be:13:44:97:ec:4a:f1:4a:e6: 87:fa:f0:fc:db:dd:6b:79:aa:15:f7:42:dd:f7:40:94:d6:aa: 1c:e4:92:72:4c:34:b1:8f:31:93:00:3c:6b:d2:38:82:21:9d: 49:9b:f5:d5:5e:77:5d:69:31:30:f0:d5:bb:76:88:8b:8f:e1: 07:5b:ef:2f:89:ab:75:f1:2f:26:7f:25:ce:10:6a:ad:09:dd: 81:49:c2:5d:18:03:03:02:65:1d:15:84:98:3c:bf:07:82:ce: af:bc:55:00:4c:3a:55:f8:02:79:07:6e:82:71:ab:33:5b:52: 6f:d4:cd:9c:cf:1a:3c:9e:0f:8d:ca:22:e3:43:80:2a:f6:bc: e2:cd:1d:4b:ed:e2:13:10:c4:6e:53:ea:71:c0:fd:ca:d1:92: 51:09:88:da:03:9e:2c:1b:df:fc:fd:49:2b:23:3e:1e:af:bf: 3d:b6:92:0e:ca:5b:85:28:f5:9a:13:2e:22:8e:2d:4e:a2:54: e0:d4:d5:3c:b9:f0:94:04:fb:1c:61:97:d4:e0:2b:86:15:c3: 93:80:d5:05:c9:6e:81:ec:25:d1:da:fe:0c:0e:08:b2:41:40: 2b:ed:27:95:4f:7a:d8:54:82:91:45:0a:6e:6f:88:c0:10:a3: 9b:a7:0c:69 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgISAZt3xuiPugAm7j62DZ1aLB0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmJhM2Y4MDAzOWI5ZTc4NGNmYjI0YmYyYzdkZGIyNGUxOTAwYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkdLTOoXt2yMGQrvCIe1ikkcwwoC XVjCs1dS0/9oegkrbKWo6aiuTNcXq2HS1m+aoCHxMhX/V6/se94z3oFqBzmuOYmi y0ml9bq9IqBy3m2h5GxN/8iSHB213dFKpRIMxuzqFo32iB2dkvckd4Hdry+y5RRn GTnx2pszYmJwkoSoLA+fAzIKxJywuBfl4aScZK3K51R9VWLeJmqoGfIn6DooeZRQ 9kjWbo81ly91uj1XC6n3t05kOMbgOjmd3zmpPKKyrZeyAnW56fDv4mJGxQY35Z6R rR3qPAKQ1ifpULZZpeyFOqk1K7UdoQ6X0Q27qbyQzZ5FzzaZMoiVT1ESEQIDAQAB o4IDFDCCAxAwHQYDVR0OBBYEFEa6P4ADm554TPskvyx92yThkAp2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1L2NmYTJh ZS1lNTI0LTRiZDAtODc1Yi04OWFjZTM4MjIwZmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvY2ZhMmFl LWU1MjQtNGJkMC04NzViLTg5YWNlMzgyMjBmYi8xL1Jyb19nQU9ibm5oTS15U19M SDNiSk9HUUNuWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHMGCCsGAQUF BwEHAQH/BGQwYjBKBAIAATBEAwQCVcZMAwQCWpz0AwQAW+ZrAwQCXo1wAwQDsGVY AwQCsHhQAwQCuT7IAwQCuYr8AwQAwgHWMAwDBAHVuJoDBAXVuIAwFAQCAAIwDgMF ACoDByADBQMqBxFAMDoGCCsGAQUFBwEIAQH/BCswKaAnMCUCAwC/nQIDAN7xMAoC AwMTKAIDAxMpAgMDOj0CAwNAcQIDA0geMA0GCSqGSIb3DQEBCwUAA4IBAQAb42Ao NqqApR2+E0SX7ErxSuaH+vD8291reaoV90Ld90CU1qoc5JJyTDSxjzGTADxr0jiC IZ1Jm/XVXnddaTEw8NW7doiLj+EHW+8viat18S8mfyXOEGqtCd2BScJdGAMDAmUd FYSYPL8Hgs6vvFUATDpV+AJ5B26CcaszW1Jv1M2czxo8ng+NyiLjQ4Aq9rzizR1L 7eITEMRuU+pxwP3K0ZJRCYjaA54sG9/8/UkrIz4er789tpIOyluFKPWaEy4iji1O olTg1NU8ufCUBPscYZfU4CuGFcOTgNUFyW6B7CXR2v4MDgiyQUAr7SeVT3rYVIKR RQpub4jAEKObpwxp -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:46 2026 by rpki-client