This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer File: RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer (raw, json) Hash identifier: 2k5f8jMoCzydDk069Pb8tdbT1R6f+5Cddw4UwaUgDvM= Subject key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA4E6BCF28FE0BEB68E0DD4BA2F6BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213038 IP: 31.220.151.0/24 IP: 89.36.197.0/24 IP: 89.40.170.0/24 IP: 89.42.24.0/24 IP: 103.95.116.0/23 IP: 185.145.252.0/22 IP: 2a0e:9980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:4e:6b:cf:28:fe:0b:eb:68:e0:dd:4b:a2:f6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:e9:df:f7:ce:ef:14:80:b9:f1:6d:d9:73: 46:71:d0:3b:dc:01:a4:f3:31:3a:38:75:2a:54:c7: fe:86:62:d3:b7:bd:7f:9d:2c:86:5d:ce:05:47:d3: 8e:90:a6:bd:de:4f:52:b0:10:14:70:ae:91:d0:32: 32:51:65:7a:6b:e1:ff:7a:3b:ff:8d:63:75:c3:9a: ca:69:65:e6:35:2f:3e:d5:62:ec:be:bd:a9:d3:3d: 42:bf:97:1e:57:cb:bc:58:77:c9:fb:18:45:22:62: 1f:24:d9:fb:b1:5c:14:c7:c7:b8:92:4a:9e:98:85: 2d:5a:82:51:4e:a7:52:cc:15:a7:fe:a3:56:80:52: 34:12:ef:af:ad:5e:52:04:cf:68:4a:f6:6c:dc:52: 6c:94:ff:a9:a4:16:10:26:40:f4:bd:70:84:17:79: e3:da:b6:00:ef:5a:a7:ff:e9:c2:a4:0b:34:84:48: 0f:d8:06:b7:03:18:13:74:5a:2a:2f:ec:10:5c:3f: 35:6d:a6:b0:89:79:9b:13:60:28:ef:fb:e9:32:7d: 9c:0e:5d:91:f0:06:51:f9:1d:21:f2:d1:43:ea:3b: 17:58:7b:8a:f0:2c:07:d5:2d:70:8e:9e:af:4a:c7: bf:ae:fb:5d:8c:a4:0c:9d:18:d9:91:9a:13:4e:58: db:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.151.0/24 89.36.197.0/24 89.40.170.0/24 89.42.24.0/24 103.95.116.0/23 185.145.252.0/22 IPv6: 2a0e:9980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213038 Signature Algorithm: sha256WithRSAEncryption 26:0e:80:a6:17:8a:88:8f:12:42:88:f7:fa:46:95:d0:78:cc: a9:c8:ac:b3:84:f3:98:39:88:07:02:68:eb:fb:41:b2:aa:43: 60:c6:4e:94:04:4a:37:a1:e3:48:35:f2:a0:98:b6:7c:88:6e: 62:a4:84:ac:e1:92:43:e9:f7:b4:1b:8a:d3:0f:2c:14:c4:e0: 2c:64:7e:20:7c:04:25:ce:1e:17:66:6c:85:eb:ea:4e:34:9c: 4d:5a:c9:a6:5e:55:b0:8c:85:0d:34:4d:3e:9f:af:a1:52:ce: a1:7e:5a:92:85:b3:97:3a:fa:14:e4:f2:b9:81:0d:f7:bd:93: 09:a2:2b:c8:d0:64:fb:8f:84:82:e9:fb:0e:6b:1c:3e:dd:68: 52:91:79:f0:59:59:54:29:f3:f4:2b:88:20:0a:b6:70:57:4b: 7f:4b:59:be:63:79:8f:bc:5f:2a:ca:ed:5e:40:45:8b:95:3a: bd:74:d6:8f:04:1a:aa:80:94:51:ed:d5:58:8a:cd:1d:fa:9a: ae:c6:7f:10:fe:12:26:39:f7:b2:84:75:94:1c:bb:2a:99:51: bb:67:f6:e1:20:e7:32:a3:da:c4:c9:b1:4b:c9:66:f4:a8:60: dd:3f:f4:4d:93:5d:09:05:df:cf:7f:90:4e:eb:94:8a:bc:c5: bb:75:c7:82 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt9yk5rzyj+C+to4N1Lova8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmYwMTc3MWQxY2M4ZmQxMTRjNDZhNjE2MjA2YWE0YzU5ZGJkYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fPp3/fO7xSAufFt2XNGcdA73AGk 8zE6OHUqVMf+hmLTt71/nSyGXc4FR9OOkKa93k9SsBAUcK6R0DIyUWV6a+H/ejv/ jWN1w5rKaWXmNS8+1WLsvr2p0z1Cv5ceV8u8WHfJ+xhFImIfJNn7sVwUx8e4kkqe mIUtWoJRTqdSzBWn/qNWgFI0Eu+vrV5SBM9oSvZs3FJslP+ppBYQJkD0vXCEF3nj 2rYA71qn/+nCpAs0hEgP2Aa3AxgTdFoqL+wQXD81baawiXmbE2Ao7/vpMn2cDl2R 8AZR+R0h8tFD6jsXWHuK8CwH1S1wjp6vSse/rvtdjKQMnRjZkZoTTljbcwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFEbwF3HRzI/RFMRqYWIGqkxZ29wZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzdlNTdh My1hMTgxLTQ1ZGYtYjRhZS0zMTZmNmRhYmZmYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvN2U1N2Ez LWExODEtNDVkZi1iNGFlLTMxNmY2ZGFiZmZiZi8xL1J2QVhjZEhNajlFVXhHcGhZ Z2FxVEZuYjNCay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQAH9yXAwQAWSTFAwQAWSiqAwQAWSoYAwQBZ190 AwQCuZH8MA0EAgACMAcDBQMqDpmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNA LjANBgkqhkiG9w0BAQsFAAOCAQEAJg6ApheKiI8SQoj3+kaV0HjMqciss4TzmDmI BwJo6/tBsqpDYMZOlARKN6HjSDXyoJi2fIhuYqSErOGSQ+n3tBuK0w8sFMTgLGR+ IHwEJc4eF2ZshevqTjScTVrJpl5VsIyFDTRNPp+voVLOoX5akoWzlzr6FOTyuYEN 972TCaIryNBk+4+Egun7DmscPt1oUpF58FlZVCnz9CuIIAq2cFdLf0tZvmN5j7xf KsrtXkBFi5U6vXTWjwQaqoCUUe3VWIrNHfqarsZ/EP4SJjn3soR1lBy7KplRu2f2 4SDnMqPaxMmxS8lm9Khg3T/0TZNdCQXfz3+QTuuUirzFu3XHgg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:45 2026 by rpki-client