This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer File: rnNsr92267jXx2lD9KJx4DhRCqk.cer (raw, json) Hash identifier: UTth/EO8t9EnUYlh3BCuy13KLVkFqxUHSIb4BLh/yLQ= Subject key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F849DF248980F2D639EFFA1A4A9C814 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201500 AS: 204303 AS: 209906 AS: 214636 AS: 216135 IP: 5.182.164.0/22 IP: 45.8.4.0/22 IP: 185.72.212.0/22 IP: 185.137.52.0 -- 185.137.59.255 IP: 185.137.68.0/22 IP: 185.137.104.0/22 IP: 185.143.0.0/22 IP: 185.143.140.0/22 IP: 185.174.212.0/22 IP: 185.232.172.0/22 IP: 185.234.156.0/22 IP: 185.236.12.0/22 IP: 185.238.144.0/22 IP: 2a07:d900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9d:f2:48:98:0f:2d:63:9e:ff:a1:a4:a9:c8:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:aa:89:ee:74:43:22:e6:21:b9:35:e8:c5:fc: 3c:f0:93:71:9f:1e:d2:36:52:0a:45:1c:ad:b0:45: 09:97:5b:9a:0c:98:e8:69:51:e1:f3:63:5d:89:3b: db:5e:12:5c:39:df:19:a6:69:99:ba:56:83:bd:58: 87:35:4d:2c:77:dc:d8:d2:50:5a:bc:10:c7:f0:4d: a8:57:76:a4:b9:df:f3:95:26:55:72:fb:2c:bc:1a: 72:9c:36:1b:f7:de:21:17:cd:12:d9:05:25:bb:78: c8:9c:61:e1:6b:ec:f4:b1:2d:8e:83:87:91:63:7c: 7c:47:36:39:a0:00:aa:83:1d:b4:8f:a0:be:86:bd: 6c:93:a8:31:3b:56:a9:04:e6:39:3f:f8:68:d6:76: 7e:62:b7:09:6b:90:ab:f9:d3:5a:e6:72:de:6c:1f: 29:6b:ef:40:b4:88:cb:54:a3:c3:80:26:4e:63:bd: af:64:bf:11:69:76:51:ed:c1:23:53:7d:dc:94:00: ea:d8:d1:cd:16:67:85:50:00:c8:a1:62:20:a7:d8: 3e:9d:64:df:34:b3:99:e1:d3:af:fd:7a:f6:58:05: 76:31:3a:22:8e:ad:e6:f2:7b:ab:03:a7:ba:50:48: b6:9e:82:54:27:88:0b:8d:56:f9:12:fc:c6:cd:60: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.164.0/22 45.8.4.0/22 185.72.212.0/22 185.137.52.0-185.137.59.255 185.137.68.0/22 185.137.104.0/22 185.143.0.0/22 185.143.140.0/22 185.174.212.0/22 185.232.172.0/22 185.234.156.0/22 185.236.12.0/22 185.238.144.0/22 IPv6: 2a07:d900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201500 204303 209906 214636 216135 Signature Algorithm: sha256WithRSAEncryption 0e:c3:2a:2c:be:09:aa:00:0d:dd:c4:44:1f:b6:d6:c4:78:d8: 50:87:f9:72:b9:47:ee:27:db:28:90:7a:d8:09:a7:15:ec:58: 73:d3:6b:74:64:54:dc:9c:58:9f:07:96:bf:37:0d:99:61:96: aa:37:d9:14:81:ee:20:3c:ed:29:24:c4:b0:56:76:7b:7f:48: db:bc:2e:bd:e6:cc:05:36:ca:14:0c:d1:52:cb:c2:5c:8d:e1: 45:b5:92:db:8b:46:11:25:c3:8b:ea:a0:b3:79:d2:36:62:8b: ef:f6:6e:f3:12:37:35:4e:66:ca:34:90:7c:f9:e4:cb:ff:50: 8c:b9:72:60:da:90:14:a9:89:19:b5:b6:f4:95:02:e7:e0:1f: f9:15:2d:0b:0f:5e:52:a5:61:2b:d5:9d:fb:cb:5e:6d:f3:e0: 4f:cf:32:c3:f9:c1:ed:48:65:98:06:4c:9d:0e:4c:8e:ab:b5: 4f:d8:43:31:67:bf:c2:3d:f6:f4:5a:fd:55:cf:82:78:dc:ac: ee:21:eb:7c:97:93:dd:0f:ca:a7:26:98:95:21:19:ca:c7:f3: b5:4f:93:67:cc:23:67:13:7e:c8:62:e0:a2:be:21:88:9c:36: d6:41:bf:2b:84:64:0c:8a:f8:30:c1:2e:20:15:bc:86:63:c2: 83:d8:1c:9e -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISAZt/hJ3ySJgPLWOe/6GkqcgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTczNmNhZmRkYjZlYmI4ZDdjNzY5NDNmNGEyNzFlMDM4NTEwYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaqJ7nRDIuYhuTXoxfw88JNxnx7S NlIKRRytsEUJl1uaDJjoaVHh82NdiTvbXhJcOd8ZpmmZulaDvViHNU0sd9zY0lBa vBDH8E2oV3akud/zlSZVcvssvBpynDYb994hF80S2QUlu3jInGHha+z0sS2Og4eR Y3x8RzY5oACqgx20j6C+hr1sk6gxO1apBOY5P/ho1nZ+YrcJa5Cr+dNa5nLebB8p a+9AtIjLVKPDgCZOY72vZL8RaXZR7cEjU33clADq2NHNFmeFUADIoWIgp9g+nWTf NLOZ4dOv/Xr2WAV2MToijq3m8nurA6e6UEi2noJUJ4gLjVb5EvzGzWAwzwIDAQAB o4IDEzCCAw8wHQYDVR0OBBYEFK5zbK/dtuu418dpQ/SiceA4UQqpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1Lzg2ZTMy Yi1mMDY3LTQ1MGYtYjY3Yy0zYWExNTBhOTJhYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvODZlMzJi LWYwNjctNDUwZi1iNjdjLTNhYTE1MGE5MmFiNy8xL3JuTnNyOTIyNjdqWHgybEQ5 S0p4NERoUkNxay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUF BwEHAQH/BG8wbTBcBAIAATBWAwQCBbakAwQCLQgEAwQCuUjUMAwDBAK5iTQDBAK5 iTgDBAK5iUQDBAK5iWgDBAK5jwADBAK5j4wDBAK5rtQDBAK56KwDBAK56pwDBAK5 7AwDBAK57pAwDQQCAAIwBwMFAyoH2QAwLgYIKwYBBQUHAQgBAf8EHzAdoBswGQID AxMcAgMDHg8CAwMz8gIDA0ZsAgMDTEcwDQYJKoZIhvcNAQELBQADggEBAA7DKiy+ CaoADd3ERB+21sR42FCH+XK5R+4n2yiQetgJpxXsWHPTa3RkVNycWJ8Hlr83DZlh lqo32RSB7iA87SkkxLBWdnt/SNu8Lr3mzAU2yhQM0VLLwlyN4UW1ktuLRhElw4vq oLN50jZii+/2bvMSNzVOZso0kHz55Mv/UIy5cmDakBSpiRm1tvSVAufgH/kVLQsP XlKlYSvVnfvLXm3z4E/PMsP5we1IZZgGTJ0OTI6rtU/YQzFnv8I99vRa/VXPgnjc rO4h63yXk90PyqcmmJUhGcrH87VPk2fMI2cTfshi4KK+IYicNtZBvyuEZAyK+DDB LiAVvIZjwoPYHJ4= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:35 2026 by rpki-client