This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer File: RsmLLko-Bg3vRavGLA40X6qAtew.cer (raw, json) Hash identifier: bKhqKd5zN7SjjK+xnp5Jy0nOp2bDreVRXUFMUQU5LLE= Subject key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A59DA5D25EC17908D9C80394EE8D568 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.61.136.0/22 IP: 2a02:7a60::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:da:5d:25:ec:17:90:8d:9c:80:39:4e:e8:d5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a8:9d:72:04:7f:f4:5c:1e:56:22:40:98:51: 49:77:c1:d5:db:d6:ae:8d:c8:db:05:17:79:e2:ab: a4:9d:1f:65:e0:f8:cc:a8:82:79:cf:d0:cb:16:03: 34:38:84:49:43:22:87:98:ac:68:d8:c6:83:1e:6a: c0:e6:6c:9e:01:da:ac:2f:90:53:59:5e:14:ac:a8: 20:56:57:4b:ef:b8:ec:6a:5d:61:33:6c:f6:b6:38: 4b:f8:00:cf:24:30:67:42:35:e4:64:35:ce:09:ad: 53:01:cd:3b:8d:f1:83:46:1d:f1:fc:8d:58:fb:90: 08:da:ba:c9:db:7f:78:82:94:32:42:0f:09:46:73: 88:03:c4:da:63:df:41:82:fe:f0:97:c9:0e:f7:43: 29:ca:c5:45:fb:ee:c6:6c:8b:d1:42:b1:d1:f9:6e: ba:0b:31:84:20:f1:38:7b:62:72:dd:83:46:75:ac: c7:40:31:06:69:3e:46:61:ca:65:f4:a0:ed:ff:9d: 42:c2:41:71:6a:5c:16:6f:cf:12:93:bb:b3:bc:86: 39:e7:91:28:ed:ba:ab:52:6a:f9:8e:13:87:de:bb: 16:a1:cb:d0:c2:be:34:15:25:85:e8:3a:19:7b:ed: a5:30:1c:64:43:94:4e:12:c2:a6:dd:65:52:38:76: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.61.136.0/22 IPv6: 2a02:7a60::/32 Signature Algorithm: sha256WithRSAEncryption 12:0e:de:ca:7b:1f:b6:65:42:fc:84:cf:e8:e7:73:9a:d7:8c: b8:4a:86:29:b1:c2:09:0c:4c:96:45:d8:f9:39:8c:b8:86:d8: 03:0d:c4:26:6c:2e:27:bb:67:e1:ed:84:dd:d2:b7:d2:c1:b4: f3:92:d7:0b:0d:f6:33:f2:8f:96:66:c7:11:fd:fb:d9:b5:b8: 7e:ec:88:e5:ed:a5:e9:4d:d3:23:23:29:2b:c1:af:ba:2d:e1: 31:4c:74:32:6a:c9:f8:82:52:48:15:9a:0d:af:63:91:a9:a0: 24:b6:bf:dd:30:44:7c:a2:9a:d8:b1:6f:7e:59:86:64:9d:34: ec:8b:71:34:25:40:81:f8:84:a1:51:08:23:24:57:57:98:78: d9:82:92:ff:f3:ad:15:f8:27:72:03:7e:3c:1c:8e:a5:56:62: a7:7c:ae:75:17:d7:9e:8e:99:b1:83:b5:3f:c0:72:43:2b:1e: 07:79:c6:be:8f:0d:14:ca:cc:70:d9:f3:ad:a2:47:40:2f:4f: 38:55:42:95:ce:62:c0:8c:6b:c9:a6:d7:e4:b3:73:fd:83:b8: 97:e8:97:68:83:0b:00:ac:b0:d6:f3:84:c0:60:0f:a5:2c:ba: d0:9b:5c:8b:ab:3a:de:d0:b1:09:9b:b4:22:da:7c:25:de:5f: a3:7a:1e:c1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WdpdJewXkI2cgDlO6NVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmM5OGIyZTRhM2UwNjBkZWY0NWFiYzYyYzBlMzQ1ZmFhODBiNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6idcgR/9FweViJAmFFJd8HV29au jcjbBRd54quknR9l4PjMqIJ5z9DLFgM0OIRJQyKHmKxo2MaDHmrA5myeAdqsL5BT WV4UrKggVldL77jsal1hM2z2tjhL+ADPJDBnQjXkZDXOCa1TAc07jfGDRh3x/I1Y +5AI2rrJ2394gpQyQg8JRnOIA8TaY99Bgv7wl8kO90MpysVF++7GbIvRQrHR+W66 CzGEIPE4e2Jy3YNGdazHQDEGaT5GYcpl9KDt/51CwkFxalwWb88Sk7uzvIY555Eo 7bqrUmr5jhOH3rsWocvQwr40FSWF6DoZe+2lMBxkQ5ROEsKm3WVSOHYLWwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFEbJiy5KPgYN70WrxiwONF+qgLXsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzJhYThk MS1jYjcxLTQ5MDQtYTU5MS0zNDQ5NTIyNzEwZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMmFhOGQx LWNiNzEtNDkwNC1hNTkxLTM0NDk1MjI3MTBlNy8xL1JzbUxMa28tQmczdlJhdkdM QTQwWDZxQXRldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuT2IMA0EAgACMAcDBQAqAnpgMA0GCSqGSIb3 DQEBCwUAA4IBAQASDt7Kex+2ZUL8hM/o53Oa14y4SoYpscIJDEyWRdj5OYy4htgD DcQmbC4nu2fh7YTd0rfSwbTzktcLDfYz8o+WZscR/fvZtbh+7Ijl7aXpTdMjIykr wa+6LeExTHQyasn4glJIFZoNr2ORqaAktr/dMER8oprYsW9+WYZknTTsi3E0JUCB +IShUQgjJFdXmHjZgpL/860V+CdyA348HI6lVmKnfK51F9eejpmxg7U/wHJDKx4H eca+jw0Uysxw2fOtokdAL084VUKVzmLAjGvJptfks3P9g7iX6JdogwsArLDW84TA YA+lLLrQm1yLqzre0LEJm7Qi2nwl3l+jeh7B -----END CERTIFICATE-----Generated at Mon Jan 26 02:45:59 2026 by rpki-client