This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer File: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer (raw, json) Hash identifier: /9BGZjFAwTElixCnVtTNHm/p0jz49/NSou7xi5upbSI= Subject key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35674DD70CCF5C3C548BD78FFAB620 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15681 AS: 33945 AS: 48702 IP: 83.137.240.0/21 IP: 194.29.97.0 -- 194.29.98.255 IP: 2a00:4640::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:67:4d:d7:0c:cf:5c:3c:54:8b:d7:8f:fa:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:03:cd:23:18:e8:75:af:e1:d0:7c:0b:33:d2: 04:f9:7b:c9:80:8c:8f:ff:21:6a:93:c1:87:93:19: 48:83:2c:65:5a:73:22:2d:4f:3c:d8:45:82:88:4e: 12:46:1d:a8:05:4c:4e:54:89:92:1b:34:fe:69:de: 02:21:18:fe:4c:7b:85:7a:55:98:19:06:57:2a:72: b8:10:dc:19:c7:78:8b:42:3b:c5:a7:1a:b9:42:99: a1:60:96:8e:05:4c:c4:bb:3f:25:90:ec:60:f2:07: b2:6f:63:e8:5d:44:3c:41:54:8e:2e:1c:8c:5f:06: 23:c6:e5:44:8d:12:be:7b:94:fc:29:09:f1:84:0a: 99:4a:99:14:e4:49:43:c0:75:d3:fa:03:22:c9:d2: c6:2a:9a:d8:e3:47:4c:1d:71:9f:14:be:52:4d:4a: 21:a6:40:e6:d5:86:d9:ab:3a:ab:9b:f3:65:1a:9b: 6a:c5:f6:4e:67:ba:95:47:35:ed:16:26:77:ff:1f: ac:d7:a2:9a:27:36:a6:fc:3a:87:3e:a6:10:89:4b: 77:91:cb:0a:d8:4c:0d:6e:ee:95:c2:bb:32:3d:b2: 13:c2:16:f1:ae:4c:18:0a:21:a0:7c:4a:f4:27:b9: 69:b7:2f:a4:dc:52:73:29:3c:64:a6:c4:46:4b:cf: 61:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.240.0/21 194.29.97.0-194.29.98.255 IPv6: 2a00:4640::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15681 33945 48702 Signature Algorithm: sha256WithRSAEncryption 74:de:6f:51:d6:1c:7b:a9:c8:45:e9:a4:be:44:45:53:d7:8e: 0f:db:26:12:b8:7e:f3:bb:1c:ee:c5:77:8f:b6:fd:e4:ea:93: f3:28:76:2a:8a:10:cb:57:4d:71:30:e4:6e:c3:e5:35:41:f6: 48:a7:58:14:c8:b2:c9:80:3c:83:0e:22:19:c1:34:f7:70:a0: 82:00:8e:a3:5e:42:e7:60:7e:8e:16:0d:e7:7d:1c:3d:a0:ed: 24:5e:7a:e9:ea:0c:7b:a0:12:54:10:78:df:16:03:14:61:f1: 80:92:3d:02:7e:b3:0d:ab:42:03:12:0a:a8:60:a1:78:60:b9: c8:23:c7:7a:00:15:fc:35:66:4b:2a:7c:72:06:30:f8:20:d7: 28:25:8f:07:d3:09:57:e4:10:0d:44:78:cb:88:98:c3:df:17: 25:47:f7:95:e5:3e:85:11:c0:60:0b:b1:fe:14:49:50:6f:16: cf:02:8c:f3:ef:54:04:41:78:98:e7:1a:4d:0f:19:c1:7d:fb: bb:43:e3:f0:5c:02:fa:7b:89:4c:b5:58:dc:58:c9:d0:79:ce: cd:da:4e:b9:70:18:e5:60:e8:a1:7c:fe:47:1c:e4:98:f9:07: 90:52:89:2a:eb:13:24:07:d9:da:70:dd:86:b7:4d:fd:e9:3f: d1:5f:a1:da -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt7NWdN1wzPXDxUi9eP+rYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmQ5YTBhNGI1N2EwZWVjN2M0ZTUyYTExOWRiNGIxYzY1NmY0ZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQPNIxjoda/h0HwLM9IE+XvJgIyP /yFqk8GHkxlIgyxlWnMiLU882EWCiE4SRh2oBUxOVImSGzT+ad4CIRj+THuFelWY GQZXKnK4ENwZx3iLQjvFpxq5QpmhYJaOBUzEuz8lkOxg8geyb2PoXUQ8QVSOLhyM XwYjxuVEjRK+e5T8KQnxhAqZSpkU5ElDwHXT+gMiydLGKprY40dMHXGfFL5STUoh pkDm1YbZqzqrm/NlGptqxfZOZ7qVRzXtFiZ3/x+s16KaJzam/DqHPqYQiUt3kcsK 2EwNbu6VwrsyPbITwhbxrkwYCiGgfEr0J7lpty+k3FJzKTxkpsRGS89hEwIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFEbZoKS1eg7sfE5SoRnbSxxlb020MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQxLzY3M2Ix ZC02ZDE0LTRkZjUtOTlhZC0yZWUyYjcyOTVkZmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNjczYjFk LTZkMTQtNGRmNS05OWFkLTJlZTJiNzI5NWRmZi8xL1J0bWdwTFY2RHV4OFRsS2hH ZHRMSEdWdlRiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUAwQDU4nwMAwDBADCHWEDBADCHWIwDQQCAAIwBwMF AyoARkAwIwYIKwYBBQUHAQgBAf8EFDASoBAwDgICPUECAwCEmQIDAL4+MA0GCSqG SIb3DQEBCwUAA4IBAQB03m9R1hx7qchF6aS+REVT144P2yYSuH7zuxzuxXePtv3k 6pPzKHYqihDLV01xMORuw+U1QfZIp1gUyLLJgDyDDiIZwTT3cKCCAI6jXkLnYH6O Fg3nfRw9oO0kXnrp6gx7oBJUEHjfFgMUYfGAkj0CfrMNq0IDEgqoYKF4YLnII8d6 ABX8NWZLKnxyBjD4INcoJY8H0wlX5BANRHjLiJjD3xclR/eV5T6FEcBgC7H+FElQ bxbPAozz71QEQXiY5xpNDxnBffu7Q+PwXAL6e4lMtVjcWMnQec7N2k65cBjlYOih fP5HHOSY+QeQUokq6xMkB9nacN2Gt0396T/RX6Ha -----END CERTIFICATE-----Generated at Sun Jan 25 06:06:22 2026 by rpki-client