This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer File: RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer (raw, json) Hash identifier: Es9kFQrywPsslCo1vlQCM+ReDfLYEDxwoEK+/RQYuUY= Subject key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED58FDA75F251B8C8F7D252884C2D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42192 AS: 210919 IP: 45.151.180.0/22 IP: 85.208.212.0/22 IP: 185.227.152.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:58:fd:a7:5f:25:1b:8c:8f:7d:25:28:84:c2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e0:54:33:74:e2:9f:73:85:49:22:fc:56:47: 2f:e6:cb:1d:58:a8:31:6c:c1:8b:64:5d:c6:4c:42: 79:80:c5:19:f7:bb:48:b2:6e:03:74:1e:8e:c5:a5: f4:bc:b3:7f:a2:28:f9:88:34:fd:6e:57:b5:48:6a: 11:82:42:61:89:22:e7:5b:ed:02:83:96:55:2a:be: 18:9e:b6:57:6b:ff:b0:1e:50:9f:4f:53:09:98:91: fa:da:68:a6:2a:97:8d:4d:68:6c:36:43:07:90:ea: 5b:32:f0:48:8b:3b:d1:5c:a6:c9:29:51:01:c2:1f: 87:56:d0:54:4d:a1:88:6d:d1:98:50:52:5b:24:aa: 71:aa:4f:04:8a:17:53:51:de:a3:89:9c:38:d1:23: 0b:98:d3:df:3c:a0:6a:6a:b6:95:0c:df:b7:77:5f: 93:22:7f:cc:a9:97:ea:46:6a:73:b2:59:ae:e9:60: ec:47:7c:7a:51:90:da:8f:fc:3f:c4:be:0e:df:5c: 47:bf:03:fe:ee:43:48:f8:e5:16:53:cd:5b:b2:14: c8:10:af:8e:77:b9:6a:12:15:61:27:b1:04:75:c2: 45:25:af:c6:21:f2:8a:12:d0:d4:14:52:e1:f8:9b: 66:7a:85:48:ad:57:25:7e:e4:6e:ec:d8:ce:06:aa: c1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.180.0/22 85.208.212.0/22 185.227.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42192 210919 Signature Algorithm: sha256WithRSAEncryption 49:92:31:59:15:2f:60:66:ab:11:4b:92:b8:07:58:41:f4:97: 1c:f0:58:39:b6:7f:52:b2:f3:fc:f6:4d:e3:c6:e6:55:24:1e: 3c:1d:ce:9f:1a:64:b9:9b:d2:39:d8:41:5d:a6:c8:3c:3e:b1: b3:37:47:eb:bc:8f:37:56:aa:62:bf:ec:9b:e4:cb:6a:5d:9a: 89:82:5d:1d:b6:72:14:5a:fb:bf:60:95:e9:26:15:a0:81:2f: 3a:a3:11:2a:69:0b:9e:21:33:43:37:0f:c8:55:ce:17:9a:a1: a4:9d:e6:d8:b4:3c:8d:ff:ff:d9:c0:51:d5:1b:09:14:b2:f9: e1:ff:05:10:4e:86:99:15:10:02:9e:f2:60:30:3c:eb:6d:0e: a7:df:60:1b:cc:42:0d:6a:98:0e:a2:fe:fe:35:04:c2:b8:2f: a9:a2:ea:13:b3:e9:11:83:b9:14:a3:e5:12:17:3c:e8:b3:1c: a0:36:cc:1e:d8:64:7e:33:c4:8c:4f:0b:d0:10:73:60:e6:a8: 3c:82:7d:af:bb:d9:84:15:d7:db:8e:90:99:93:f1:cb:da:b4: 22:7b:37:b8:4b:0c:6c:9e:40:92:93:7e:37:a9:44:c3:2a:3a: 9e:2a:81:45:08:ef:e5:79:d1:62:28:1b:56:9f:e5:57:4a:c7: 20:79:ee:94 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt57Vj9p18lG4yPfSUohMLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzA1ZDNjNmE1YjA1MTI2ODJjZGZkZjM2M2IxOWE5YzU2N2YxZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uBUM3Tin3OFSSL8Vkcv5ssdWKgx bMGLZF3GTEJ5gMUZ97tIsm4DdB6OxaX0vLN/oij5iDT9ble1SGoRgkJhiSLnW+0C g5ZVKr4YnrZXa/+wHlCfT1MJmJH62mimKpeNTWhsNkMHkOpbMvBIizvRXKbJKVEB wh+HVtBUTaGIbdGYUFJbJKpxqk8EihdTUd6jiZw40SMLmNPfPKBqaraVDN+3d1+T In/MqZfqRmpzslmu6WDsR3x6UZDaj/w/xL4O31xHvwP+7kNI+OUWU81bshTIEK+O d7lqEhVhJ7EEdcJFJa/GIfKKEtDUFFLh+JtmeoVIrVclfuRu7NjOBqrBsQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFEcF08alsFEmgs3982OxmpxWfx9sMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzU2YWVl OS05OTZjLTQzOGYtYmIwMC0wZGZhNmIyMmVmZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvNTZhZWU5 LTk5NmMtNDM4Zi1iYjAwLTBkZmE2YjIyZWZmMi8xL1J3WFR4cVd3VVNhQ3pmM3pZ N0dhbkZaX0gydy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCLZe0AwQCVdDUAwQCueOYMB8GCCsGAQUFBwEI AQH/BBAwDqAMMAoCAwCk0AIDAzfnMA0GCSqGSIb3DQEBCwUAA4IBAQBJkjFZFS9g ZqsRS5K4B1hB9Jcc8Fg5tn9SsvP89k3jxuZVJB48Hc6fGmS5m9I52EFdpsg8PrGz N0frvI83Vqpiv+yb5MtqXZqJgl0dtnIUWvu/YJXpJhWggS86oxEqaQueITNDNw/I Vc4XmqGknebYtDyN///ZwFHVGwkUsvnh/wUQToaZFRACnvJgMDzrbQ6n32AbzEIN apgOov7+NQTCuC+pouoTs+kRg7kUo+USFzzosxygNswe2GR+M8SMTwvQEHNg5qg8 gn2vu9mEFdfbjpCZk/HL2rQieze4SwxsnkCSk343qUTDKjqeKoFFCO/ledFiKBtW n+VXSscgee6U -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:42 2026 by rpki-client