This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer File: h19M6ROWIYHPfJN236taIl1uWuo.cer (raw, json) Hash identifier: it6frZ/LyKxYYqvaE9vE49hKMAyKsSxPDidt77578pY= Subject key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1528B35AB83F4C3CAA4674BDA1C65A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 212.18.101.0/24 IP: 2a12:5c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:28:b3:5a:b8:3f:4c:3c:aa:46:74:bd:a1:c6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:11:0c:20:75:95:98:0f:db:7f:0f:8d:e7:98: ff:47:06:0b:48:6d:22:0b:f9:54:a9:21:01:ca:58: 9d:29:86:ae:37:34:af:b8:d0:bd:0c:11:bc:3a:92: 08:4e:db:38:36:af:f9:c0:ff:6a:f4:c3:b7:da:2c: 1a:72:c6:32:3a:3a:b4:77:6e:36:1d:c0:8d:43:5f: 5f:c1:c9:2a:f0:f8:bb:94:a4:af:17:a8:14:50:c4: 6c:70:d6:7f:b7:28:b1:ed:99:e7:92:dc:ad:2a:8d: 69:a1:57:78:f7:1f:9a:80:86:9e:31:9d:40:66:de: 48:66:b1:fb:7d:dc:f7:a3:dc:2a:bf:bb:ab:40:22: b7:a1:b2:14:2a:11:92:5d:4c:39:b6:28:ee:cf:68: 58:89:d0:be:f3:5a:f3:64:5f:e6:51:fa:19:09:d2: a0:14:07:a7:c8:29:a8:43:33:20:47:4a:81:84:85: 23:57:e4:52:46:4e:e1:38:e0:51:c6:f7:81:68:1a: cc:e6:36:cb:02:a7:1d:43:ec:d0:46:85:73:1a:5f: bb:a9:d1:1b:7b:7e:4e:52:1d:a4:4a:fd:cc:f5:cd: 80:0d:76:27:7e:00:39:9e:f2:da:b2:69:c7:c1:20: 2f:b5:8c:73:54:49:c7:d5:eb:21:1d:dc:87:f7:47: 7c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.18.101.0/24 IPv6: 2a12:5c00::/29 Signature Algorithm: sha256WithRSAEncryption 49:04:22:ea:70:b3:51:a5:c7:73:95:dc:93:a0:e9:ee:03:9a: 81:7d:32:ad:68:05:22:88:c3:2f:96:19:59:17:7f:5b:70:90: f4:18:5d:28:ca:dc:75:60:e4:e8:ac:30:7a:0a:3f:ea:6e:31: ae:63:56:10:0c:91:68:24:a7:c4:2e:d3:0e:73:01:f7:a9:74: 17:8d:27:48:2a:0a:1d:f6:61:28:8c:f3:55:17:cd:2a:8b:5c: 3a:ef:1b:35:4a:1b:1c:73:2b:af:82:32:6f:c1:83:df:4b:3b: 1c:fe:04:e6:a1:b3:43:9d:0a:71:a1:02:f1:56:a5:6e:60:a7: 5c:9b:57:a0:2a:2c:c7:e7:9e:4a:dc:2b:c4:44:0d:56:c3:5e: ca:e0:b9:93:cc:f4:fc:45:fe:bc:93:7f:e4:6f:72:5e:6f:c9: be:cb:d5:1f:54:d5:b4:95:09:3f:68:89:db:26:2f:ad:d0:a6: 78:ae:10:71:2a:f9:f9:40:4e:fc:1a:85:1a:c7:7a:bd:31:b5: 19:f6:71:43:28:19:e0:2d:09:0e:57:84:80:fa:d8:36:14:0e: 9a:92:19:46:6b:3b:1a:d6:9b:d2:44:d5:d1:c9:c3:69:42:75: 87:36:47:52:1c:47:f3:31:f3:8a:3f:55:90:84:a1:08:69:92: d3:39:44:03 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/FSizWrg/TDyqRnS9ocZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzVmNGNlOTEzOTYyMTgxY2Y3YzkzNzZkZmFiNWEyMjVkNmU1YWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBEMIHWVmA/bfw+N55j/RwYLSG0i C/lUqSEBylidKYauNzSvuNC9DBG8OpIITts4Nq/5wP9q9MO32iwacsYyOjq0d242 HcCNQ19fwckq8Pi7lKSvF6gUUMRscNZ/tyix7ZnnktytKo1poVd49x+agIaeMZ1A Zt5IZrH7fdz3o9wqv7urQCK3obIUKhGSXUw5tijuz2hYidC+81rzZF/mUfoZCdKg FAenyCmoQzMgR0qBhIUjV+RSRk7hOOBRxveBaBrM5jbLAqcdQ+zQRoVzGl+7qdEb e35OUh2kSv3M9c2ADXYnfgA5nvLasmnHwSAvtYxzVEnH1eshHdyH90d86wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFIdfTOkTliGBz3yTdt+rWiJdblrqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzg3NjA3 ZS01YzlhLTQzYTYtOGQ4YS0zOGRmZWFmMmI3MTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvODc2MDdl LTVjOWEtNDNhNi04ZDhhLTM4ZGZlYWYyYjcxMC8xL2gxOU02Uk9XSVlIUGZKTjIz NnRhSWwxdVd1by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1BJlMA0EAgACMAcDBQMqElwAMA0GCSqGSIb3 DQEBCwUAA4IBAQBJBCLqcLNRpcdzldyToOnuA5qBfTKtaAUiiMMvlhlZF39bcJD0 GF0oytx1YOTorDB6Cj/qbjGuY1YQDJFoJKfELtMOcwH3qXQXjSdIKgod9mEojPNV F80qi1w67xs1ShsccyuvgjJvwYPfSzsc/gTmobNDnQpxoQLxVqVuYKdcm1egKizH 555K3CvERA1Ww17K4LmTzPT8Rf68k3/kb3Jeb8m+y9UfVNW0lQk/aInbJi+t0KZ4 rhBxKvn5QE78GoUax3q9MbUZ9nFDKBngLQkOV4SA+tg2FA6akhlGazsa1pvSRNXR ycNpQnWHNkdSHEfzMfOKP1WQhKEIaZLTOUQD -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:24 2026 by rpki-client