This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer (raw, json) Hash identifier: C49XSEwqlTY2gGUfhHjMx6e+vUNC38gyDkZVrqA1sIY= Subject key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA4FBC0D8238D219895685E15176E06 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34427 IP: 77.87.160.0/21 IP: 185.38.232.0/22 IP: 193.84.9.0/24 IP: 195.80.226.0/24 IP: 2a02:720::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fb:c0:d8:23:8d:21:98:95:68:5e:15:17:6e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f8:9a:f7:db:f0:97:50:cc:43:63:7c:99:b4: 29:4f:e6:c9:b1:8e:af:45:66:24:30:27:0a:05:a6: fb:52:96:9e:69:dc:dc:a8:a3:7f:1b:e2:77:df:a6: 0a:8e:f4:7d:13:17:ec:97:36:d3:8f:32:b2:2b:17: fb:52:2d:73:65:ff:a3:75:bf:b8:89:2a:99:b8:74: 02:06:12:b2:4b:14:16:1e:c0:65:0a:0f:a7:03:31: 22:d1:17:81:75:ec:a6:4b:ea:64:90:f0:ba:f5:a6: 1d:4a:02:e5:1d:6f:5e:40:67:2f:48:ee:1f:81:6a: 22:49:9a:46:1f:e0:d7:c4:7e:76:63:bf:36:ff:32: ae:4b:f5:5b:ef:4d:18:82:a9:28:36:b7:28:51:05: 27:76:de:50:04:cc:91:b2:e9:0c:c5:e1:83:e5:45: b6:ad:78:78:78:03:f7:b4:9a:79:56:40:57:d6:9b: 7f:96:66:a4:de:4f:9c:83:ad:b1:55:85:04:25:5e: c0:da:81:46:e9:2e:9f:67:e7:fa:98:ec:36:34:fa: a5:6d:8d:d0:80:19:a7:4a:93:9d:bb:73:1d:f9:72: 2a:af:15:d2:4c:27:ff:8b:27:74:f1:2b:d6:7a:46: 08:9e:cf:de:ef:30:60:1d:a8:59:6c:fe:24:cd:0c: 08:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.87.160.0/21 185.38.232.0/22 193.84.9.0/24 195.80.226.0/24 IPv6: 2a02:720::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34427 Signature Algorithm: sha256WithRSAEncryption 0b:c2:07:53:71:33:3e:0a:4c:fe:c4:c1:6a:ba:ba:6d:5f:58: 2d:95:15:0f:a3:7b:8f:15:ec:8a:49:04:bd:36:1a:14:16:cf: 59:01:ef:64:fd:cb:d4:a8:62:96:e6:2f:52:a3:b5:43:78:8b: 48:aa:49:75:88:55:4b:14:39:8b:10:aa:ab:bb:70:b6:3b:b7: 74:98:9d:c5:34:bb:66:6b:f9:9c:99:b9:ac:68:c5:30:d0:8d: 65:ff:a8:4d:de:3f:78:fd:41:13:60:86:e6:71:e1:cd:0a:43: 3c:f9:47:a9:2c:34:28:b9:c1:0f:79:af:67:0d:58:fe:0a:23: 24:76:17:7e:59:93:aa:90:54:6f:06:67:3a:cb:0c:a5:d0:56: 3b:60:66:67:e1:e9:d6:0d:28:ec:9b:24:f1:15:f9:76:cb:e6: 03:5d:08:40:3f:fa:5f:7d:a4:9b:22:80:cd:3a:73:95:ab:4a: 4e:f7:40:82:0f:3d:3a:52:02:b0:72:4f:24:3b:5e:54:1e:1d: d7:0c:f0:d3:41:dd:9a:e1:ad:20:e6:6a:3a:69:49:84:72:06: 31:23:83:87:2d:1b:89:61:61:eb:ce:30:be:5d:00:f0:a3:93: 86:f1:49:17:c2:21:00:5d:f2:a6:14:cc:08:ab:41:cb:ec:b9: b1:26:3f:2b -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt7pPvA2CONIZiVaF4VF24GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzBiZTE4NjVmNTA3OWUyNGIxYTdhZGZkY2EyN2VlMmZlNWQxZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/ia99vwl1DMQ2N8mbQpT+bJsY6v RWYkMCcKBab7UpaeadzcqKN/G+J336YKjvR9ExfslzbTjzKyKxf7Ui1zZf+jdb+4 iSqZuHQCBhKySxQWHsBlCg+nAzEi0ReBdeymS+pkkPC69aYdSgLlHW9eQGcvSO4f gWoiSZpGH+DXxH52Y782/zKuS/Vb700YgqkoNrcoUQUndt5QBMyRsukMxeGD5UW2 rXh4eAP3tJp5VkBX1pt/lmak3k+cg62xVYUEJV7A2oFG6S6fZ+f6mOw2NPqlbY3Q gBmnSpOdu3Md+XIqrxXSTCf/iyd08SvWekYIns/e7zBgHahZbP4kzQwI4wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFEcL4YZfUHniSxp639yifuL+XR+JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzA4N2Y5 OS1jYjlkLTQwYTgtOTgzMC0xZTY5NWVmNDljMTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvMDg3Zjk5 LWNiOWQtNDBhOC05ODMwLTFlNjk1ZWY0OWMxMC8xL1J3dmhobDlRZWVKTEducmYz S0otNHY1ZEg0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDTVegAwQCuSboAwQAwVQJAwQAw1DiMA0EAgAC MAcDBQAqAgcgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCGezANBgkqhkiG9w0B AQsFAAOCAQEAC8IHU3EzPgpM/sTBarq6bV9YLZUVD6N7jxXsikkEvTYaFBbPWQHv ZP3L1KhiluYvUqO1Q3iLSKpJdYhVSxQ5ixCqq7twtju3dJidxTS7Zmv5nJm5rGjF MNCNZf+oTd4/eP1BE2CG5nHhzQpDPPlHqSw0KLnBD3mvZw1Y/gojJHYXflmTqpBU bwZnOssMpdBWO2BmZ+Hp1g0o7Jsk8RX5dsvmA10IQD/6X32kmyKAzTpzlatKTvdA gg89OlICsHJPJDteVB4d1wzw00HdmuGtIOZqOmlJhHIGMSODhy0biWFh684wvl0A 8KOThvFJF8IhAF3yphTMCKtBy+y5sSY/Kw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:08:53 2026 by rpki-client