This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer File: exSNtC-Q6WRHvX9j7dinzL7qqEI.cer (raw, json) Hash identifier: FSoFLxx2+GSIYKnPT7P3gJ/1KWEqLi/qdqF3DQrnGbY= Subject key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B8F5A72A3D02CA0B4D3FB1680946C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60501 IP: 46.30.216.0/24 IP: 46.30.219.0 -- 46.30.221.255 IP: 185.30.64.0/22 IP: 185.109.24.0/22 IP: 185.187.62.0/24 IP: 185.253.53.0/24 IP: 193.43.208.0/24 IP: 194.156.180.0/22 IP: 2a00:ae20::/32 IP: 2a04:f440::/29 IP: 2a06:4dc0::/29 IP: 2a0d:cc0::/29 IP: 2a0f:ccc0::/29 IP: 2a10:b740::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:5a:72:a3:d0:2c:a0:b4:d3:fb:16:80:94:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:20:a8:26:ab:e7:1b:8c:2f:74:31:7a:cb: 0c:14:46:51:d1:c3:2f:7a:43:06:2d:e2:fe:e7:9a: 8d:1b:fb:7e:1c:69:9a:ba:29:19:80:2c:bd:f1:68: e7:4d:77:22:0f:bc:50:16:65:c5:a8:86:4f:e5:3a: d5:b2:4d:fa:fd:86:4b:59:1d:b1:88:59:86:b7:f3: 0b:af:ce:ef:81:35:d4:a2:77:8d:13:bc:57:92:0d: dd:0d:92:39:74:01:d3:ff:27:6f:ee:14:09:f0:ff: 07:90:ae:4a:75:5d:98:a2:f8:55:fa:30:bc:50:38: 41:71:09:be:f2:49:ff:2f:23:e2:d0:3f:d3:bd:07: 8c:59:64:dd:be:70:b2:ff:9c:9b:c6:c0:72:85:6d: ee:5f:e8:b4:97:7c:fd:88:05:5c:ac:04:f3:4a:ee: a9:f2:d3:21:44:54:25:b6:40:3d:1e:8d:1f:ae:e7: f8:e0:19:83:0a:d0:ee:4b:18:6a:09:81:52:f6:7d: d8:13:61:09:13:0e:9d:b5:8e:ef:75:92:01:cb:40: e7:0f:21:24:49:f4:67:98:25:a3:84:d3:66:aa:9e: d3:ca:c2:d0:b8:ac:b0:c5:c0:7b:b8:dc:15:08:6e: 5b:64:47:67:76:10:40:48:9d:d9:c4:1b:e6:20:e9: b0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.216.0/24 46.30.219.0-46.30.221.255 185.30.64.0/22 185.109.24.0/22 185.187.62.0/24 185.253.53.0/24 193.43.208.0/24 194.156.180.0/22 IPv6: 2a00:ae20::/32 2a04:f440::/29 2a06:4dc0::/29 2a0d:cc0::/29 2a0f:ccc0::/29 2a10:b740::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60501 Signature Algorithm: sha256WithRSAEncryption 4a:2d:2b:30:0d:6d:51:e1:e7:0e:94:04:91:ce:fe:3f:9d:cc: c1:2e:ae:39:4d:f1:e1:e1:88:66:6d:95:ca:ec:e8:c6:b4:c2: 39:cf:09:a3:ee:4d:20:f2:54:ac:be:86:91:bf:ea:2f:13:41: e7:5e:7f:a8:5f:d7:a7:7b:00:d1:8c:97:c3:da:f7:43:e5:70: 99:43:bc:ac:61:8f:72:ea:07:4c:0d:67:56:f1:d8:48:74:bc: 31:4d:6e:f2:3a:b6:e4:d0:3c:6c:02:85:87:70:ec:53:2e:db: 87:bd:86:55:63:af:c5:0a:bd:f2:6c:b0:14:7d:f0:3a:fc:46: d1:20:ec:55:dd:71:ad:40:2d:91:32:6e:36:e1:d4:ab:0b:78: 85:cc:45:38:d8:3d:ea:60:80:01:9e:dc:c8:46:99:e8:40:f5: bf:b2:04:3d:3d:5a:44:2b:af:aa:b1:a6:75:5c:63:93:38:72: ad:93:d3:b3:b0:42:01:d4:7b:5a:8c:71:40:7c:48:62:f6:41: 23:b9:59:b5:37:ab:95:8e:de:7f:77:09:25:ad:aa:6a:c6:39: 7a:14:8a:31:65:49:eb:dc:66:ba:ab:4d:fc:80:4d:34:ac:c5: d2:97:d3:ae:db:91:ed:16:bc:ae:7d:22:20:4a:29:61:73:68: 9c:56:33:b6 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISAZt6W49acqPQLKC00/sWgJRsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjE0OGRiNDJmOTBlOTY0NDdiZDdmNjNlZGQ4YTdjY2JlZWFhODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuwgqCar5xuML3QxessMFEZR0cMv ekMGLeL+55qNG/t+HGmauikZgCy98WjnTXciD7xQFmXFqIZP5TrVsk36/YZLWR2x iFmGt/MLr87vgTXUoneNE7xXkg3dDZI5dAHT/ydv7hQJ8P8HkK5KdV2YovhV+jC8 UDhBcQm+8kn/LyPi0D/TvQeMWWTdvnCy/5ybxsByhW3uX+i0l3z9iAVcrATzSu6p 8tMhRFQltkA9Ho0fruf44BmDCtDuSxhqCYFS9n3YE2EJEw6dtY7vdZIBy0DnDyEk SfRnmCWjhNNmqp7TysLQuKywxcB7uNwVCG5bZEdndhBASJ3ZxBvmIOmwowIDAQAB o4IDBTCCAwEwHQYDVR0OBBYEFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2YyNDg4 NS1hNGRiLTRmYTEtYTcyZC04NmQ2YzEzMDUzNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZjI0ODg1 LWE0ZGItNGZhMS1hNzJkLTg2ZDZjMTMwNTM1Ny8xL2V4U050Qy1RNldSSHZYOWo3 ZGluekw3cXFFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGDBggrBgEF BQcBBwEB/wR0MHIwPgQCAAEwOAMEAC4e2DAMAwQALh7bAwQBLh7cAwQCuR5AAwQC uW0YAwQAubs+AwQAuf01AwQAwSvQAwQCwpy0MDAEAgACMCoDBQAqAK4gAwUDKgT0 QAMFAyoGTcADBQMqDQzAAwUDKg/MwAMFAyoQt0AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAOxVMA0GCSqGSIb3DQEBCwUAA4IBAQBKLSswDW1R4ecOlASRzv4/nczB Lq45TfHh4YhmbZXK7OjGtMI5zwmj7k0g8lSsvoaRv+ovE0HnXn+oX9enewDRjJfD 2vdD5XCZQ7ysYY9y6gdMDWdW8dhIdLwxTW7yOrbk0DxsAoWHcOxTLtuHvYZVY6/F Cr3ybLAUffA6/EbRIOxV3XGtQC2RMm424dSrC3iFzEU42D3qYIABntzIRpnoQPW/ sgQ9PVpEK6+qsaZ1XGOTOHKtk9OzsEIB1HtajHFAfEhi9kEjuVm1N6uVjt5/dwkl rapqxjl6FIoxZUnr3Ga6q038gE00rMXSl9Ou25HtFryufSIgSilhc2icVjO2 -----END CERTIFICATE-----Generated at Mon Jan 26 17:29:48 2026 by rpki-client