This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer File: Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer (raw, json) Hash identifier: xcjBIfo+vB61jz9hOQbeNXDS+hcDNmzcclYgrPDZjj4= Subject key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36AB38C08E894A9A6EEE6AD0C52768 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48029 AS: 59441 IP: 5.144.128.0/21 IP: 45.92.92.0/22 IP: 45.138.132.0/22 IP: 80.91.208.0/24 IP: 185.36.231.0/24 IP: 185.40.16.0/24 IP: 185.83.112.0/22 IP: 185.83.181.0/24 IP: 185.83.183.0/24 IP: 185.89.22.0/24 IP: 185.169.6.0/24 IP: 185.173.104.0/22 IP: 185.205.203.0/24 IP: 185.208.76.0/22 IP: 193.3.231.0/24 IP: 193.162.129.0/24 IP: 2a05:9a00::/29 IP: 2a07:7ec0::/29 IP: 2a07:e440::/29 IP: 2a10:4340::/29 IP: 2a10:5c40::/29 IP: 2a10:6140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ab:38:c0:8e:89:4a:9a:6e:ee:6a:d0:c5:27:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d3:a9:4f:af:d2:48:a0:1a:d0:0b:62:28:83: c5:3f:1f:26:0e:fe:df:e5:aa:e0:c4:01:a5:c9:ca: fa:26:23:c2:12:36:2a:8e:d6:4e:74:7e:79:87:6d: 44:e4:c1:9d:e9:75:da:14:e8:87:c9:1b:92:fa:0e: 22:21:68:64:4a:3a:1e:ed:31:97:a2:61:3c:4f:af: f5:f4:72:97:45:3c:ec:b1:30:67:8f:4e:84:78:c3: b5:47:32:95:b4:b3:62:7d:d2:05:14:e6:2d:1b:18: 0e:f1:29:e0:54:f8:c0:c9:f6:a7:26:8e:08:68:33: 90:62:41:62:76:78:df:cd:8f:e9:25:f2:f0:76:a1: 58:16:ae:f7:f2:df:0d:6e:b1:7a:78:fd:72:10:81: 6e:6f:99:75:70:9f:12:fe:bf:73:ac:0c:0d:b5:41: 9f:75:78:ab:31:bf:fb:b4:6c:52:06:d0:73:55:ad: f2:67:16:67:d4:4f:44:82:c9:6e:38:91:00:8b:32: fc:7a:b3:ab:3e:f1:15:2d:be:83:8d:b0:13:1c:99: fd:32:df:03:b4:4a:78:94:0e:84:fe:05:1e:e1:29: 31:f2:7a:1d:3b:0c:d4:2a:f9:1d:cd:e0:a9:78:5b: 49:f7:29:4d:7c:9b:29:50:bf:b6:58:28:d9:cb:d9: 15:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.128.0/21 45.92.92.0/22 45.138.132.0/22 80.91.208.0/24 185.36.231.0/24 185.40.16.0/24 185.83.112.0/22 185.83.181.0/24 185.83.183.0/24 185.89.22.0/24 185.169.6.0/24 185.173.104.0/22 185.205.203.0/24 185.208.76.0/22 193.3.231.0/24 193.162.129.0/24 IPv6: 2a05:9a00::/29 2a07:7ec0::/29 2a07:e440::/29 2a10:4340::/29 2a10:5c40::/29 2a10:6140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48029 59441 Signature Algorithm: sha256WithRSAEncryption 70:b2:d9:a4:09:54:e9:1f:98:eb:43:67:3f:25:17:02:8e:e0: c9:8b:f9:fd:72:a6:33:06:15:b0:af:4f:1e:d6:f0:b1:14:48: c2:36:d7:dc:23:c0:22:cb:13:1c:eb:e1:4d:17:de:92:3c:38: cf:9a:a8:4a:5f:7e:4c:91:db:5c:3e:a0:43:27:76:74:07:f6: f8:73:de:a0:28:d3:65:46:67:c9:f2:92:b7:de:97:30:f9:2c: 8d:14:e3:75:1a:b3:b7:28:4b:79:a0:5c:67:c9:37:f0:af:40: 15:93:a2:1e:ff:41:54:0d:7c:09:26:6c:dd:7a:31:b1:60:7b: e2:49:78:7b:d5:50:19:4e:2a:91:cb:c8:7c:0c:5e:97:3d:00: c4:7a:c6:2f:1e:64:57:2f:b2:64:71:c4:df:94:16:90:b4:d2: e5:4b:7e:ce:f5:38:98:dc:7b:17:ea:73:4e:3c:42:c5:e2:9d: 2f:8b:63:3f:3e:d0:d8:a3:cb:da:3e:60:5f:9e:2e:93:d5:10: 6b:0a:ed:38:80:c1:2c:fe:26:a8:e5:63:40:04:39:00:cc:b0: 8c:b8:cd:53:54:53:6a:c7:f0:0f:54:79:2c:04:21:59:dc:01: 13:a1:c4:a2:d7:4c:36:0c:ba:c4:da:4b:05:c4:12:1d:c8:28: 8b:84:fb:27 -----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgISAZt7Nqs4wI6JSppu7mrQxSdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWVlMTE5NGJkODFkMTk0NmMzOWYxMGY3ZmRmZGYyMmQxYTAzMTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytOpT6/SSKAa0AtiKIPFPx8mDv7f 5argxAGlycr6JiPCEjYqjtZOdH55h21E5MGd6XXaFOiHyRuS+g4iIWhkSjoe7TGX omE8T6/19HKXRTzssTBnj06EeMO1RzKVtLNifdIFFOYtGxgO8SngVPjAyfanJo4I aDOQYkFidnjfzY/pJfLwdqFYFq738t8NbrF6eP1yEIFub5l1cJ8S/r9zrAwNtUGf dXirMb/7tGxSBtBzVa3yZxZn1E9EgsluOJEAizL8erOrPvEVLb6DjbATHJn9Mt8D tEp4lA6E/gUe4Skx8nodOwzUKvkdzeCpeFtJ9ylNfJspUL+2WCjZy9kVQQIDAQAB o4IDNDCCAzAwHQYDVR0OBBYEFEnuEZS9gdGUbDnxD3/f3yLRoDESMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2EzMjRm NC05NzcwLTRhNTgtYTZlZi1kNjJmYTYzMTlmZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYTMyNGY0 LTk3NzAtNGE1OC1hNmVmLWQ2MmZhNjMxOWZkNC8xL1NlNFJsTDJCMFpSc09mRVBm OV9mSXRHZ01SSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGtBggrBgEF BQcBBwEB/wSBnTCBmjBmBAIAATBgAwQDBZCAAwQCLVxcAwQCLYqEAwQAUFvQAwQA uSTnAwQAuSgQAwQCuVNwAwQAuVO1AwQAuVO3AwQAuVkWAwQAuakGAwQCua1oAwQA uc3LAwQCudBMAwQAwQPnAwQAwaKBMDAEAgACMCoDBQMqBZoAAwUDKgd+wAMFAyoH 5EADBQMqEENAAwUDKhBcQAMFAyoQYUAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgID ALudAgMA6DEwDQYJKoZIhvcNAQELBQADggEBAHCy2aQJVOkfmOtDZz8lFwKO4MmL +f1ypjMGFbCvTx7W8LEUSMI219wjwCLLExzr4U0X3pI8OM+aqEpffkyR21w+oEMn dnQH9vhz3qAo02VGZ8nykrfelzD5LI0U43Uas7coS3mgXGfJN/CvQBWToh7/QVQN fAkmbN16MbFge+JJeHvVUBlOKpHLyHwMXpc9AMR6xi8eZFcvsmRxxN+UFpC00uVL fs71OJjcexfqc048QsXinS+LYz8+0Nijy9o+YF+eLpPVEGsK7TiAwSz+JqjlY0AE OQDMsIy4zVNUU2rH8A9UeSwEIVncAROhxKLXTDYMusTaSwXEEh3IKIuE+yc= -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:02 2026 by rpki-client