This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer (raw, json) Hash identifier: M8fvFonAnHPMpnopCk1JoLpvBmIlWsV0QFrWqrHIlZg= Subject key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA4DEA9E96CE4F8EC409590D076A514 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2.56.144.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:de:a9:e9:6c:e4:f8:ec:40:95:90:d0:76:a5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:69:91:03:cb:e1:00:49:24:bb:4e:52:4b: b7:2a:a8:e8:3d:bc:cc:01:0d:92:30:90:85:66:6e: 77:ac:f8:1f:d5:59:2c:51:12:3f:ac:f9:f1:59:2b: 63:d2:4e:d0:54:58:26:3a:58:c9:88:b3:12:33:14: 71:d4:8e:fd:8b:72:c5:8a:af:ca:54:fa:e5:5c:71: 86:5b:ed:0e:fc:00:03:ff:fc:c9:7f:4b:eb:e4:cb: f5:30:1b:98:b2:e2:71:51:53:e8:78:ed:84:ca:8a: ee:6a:06:58:24:d1:23:f7:05:98:95:a2:14:c6:75: 0b:9e:3d:7a:16:ce:1f:d7:b9:cf:9c:14:5e:c9:f6: 8b:77:8c:48:51:61:a0:06:6a:e5:7a:e5:51:71:0e: d8:04:ec:19:6c:7f:82:7a:64:20:a2:6b:b3:a1:08: f2:a9:a5:f6:1c:07:51:c6:90:4d:c7:7b:6f:9e:84: bc:d2:38:7e:2e:94:16:a7:6f:29:32:39:34:88:4d: cb:d2:08:ef:d3:b1:d4:a6:6a:d5:53:8e:51:69:18: 1a:96:e5:52:aa:68:12:0b:d6:db:38:f5:71:db:34: 6a:a4:f4:ca:17:5f:23:c1:67:cf:7f:b5:df:79:eb: 01:52:c8:5e:58:3f:23:5d:84:44:6c:e1:5c:75:0d: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.144.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:08:5e:de:95:37:da:80:e6:5b:4b:65:8b:74:68:bf:e1:97: 5d:d2:06:8a:2c:86:2b:0b:5b:2a:89:b5:4b:1f:6f:ca:fe:99: 50:0c:b6:db:b3:af:62:e3:ae:49:7b:d8:97:76:28:ab:43:a5: 34:e6:6c:b4:19:da:0a:5e:81:b6:df:70:23:d0:57:7d:80:d9: a4:b5:29:40:64:3d:e3:ea:e9:a3:0c:3a:85:17:db:1f:67:e0: 06:97:a0:91:87:ae:29:b1:84:a3:6b:01:65:d3:e5:4f:fa:d1: 2e:fd:16:39:49:28:41:bd:9a:22:7c:4d:50:8d:7d:76:f1:06: 84:3a:65:55:3f:a0:48:03:b6:7e:6b:5a:8a:c2:4c:2c:0c:74: 5a:73:7f:50:d7:dd:36:d0:aa:a5:f5:1f:e0:57:bf:c1:d5:37: 28:a3:0c:ea:90:39:ec:36:8b:79:35:6b:56:88:73:8a:73:23: be:21:41:7b:a7:4d:59:4f:d2:6c:77:e2:b4:59:80:bf:51:61: 38:a2:45:cd:e7:da:a3:10:63:83:03:f9:1b:6e:e2:07:1b:8b: ab:1c:0a:83:0b:6b:5a:51:aa:0d:01:15:64:8a:99:e8:a6:bd: 1d:28:2d:23:c6:5e:15:7d:f4:63:65:db:89:4b:97:c1:98:04: 5c:59:b1:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pN6p6Wzk+OxAlZDQdqUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTFlZjNkNjI2YTc1NGU0M2QwN2M3MDBkMDUxM2MxMTRiNjYwZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVNpkQPL4QBJJLtOUku3KqjoPbzM AQ2SMJCFZm53rPgf1VksURI/rPnxWStj0k7QVFgmOljJiLMSMxRx1I79i3LFiq/K VPrlXHGGW+0O/AAD//zJf0vr5Mv1MBuYsuJxUVPoeO2EyoruagZYJNEj9wWYlaIU xnULnj16Fs4f17nPnBReyfaLd4xIUWGgBmrleuVRcQ7YBOwZbH+CemQgomuzoQjy qaX2HAdRxpBNx3tvnoS80jh+LpQWp28pMjk0iE3L0gjv07HUpmrVU45RaRgaluVS qmgSC9bbOPVx2zRqpPTKF18jwWfPf7XfeesBUsheWD8jXYREbOFcdQ1apQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFK4e89Ymp1TkPQfHANBRPBFLZg71MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2FmZTli OC1lODgxLTQ0NjItYTFlZS04ZTgxZDEzNTA3MzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvYWZlOWI4 LWU4ODEtNDQ2Mi1hMWVlLThlODFkMTM1MDczNi8xL3JoN3oxaWFuVk9ROUI4Y0Ew RkU4RVV0bUR2VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCAjiQMA0GCSqGSIb3DQEBCwUAA4IBAQAfCF7e lTfagOZbS2WLdGi/4Zdd0gaKLIYrC1sqibVLH2/K/plQDLbbs69i465Je9iXdiir Q6U05my0GdoKXoG233Aj0Fd9gNmktSlAZD3j6umjDDqFF9sfZ+AGl6CRh64psYSj awFl0+VP+tEu/RY5SShBvZoifE1QjX128QaEOmVVP6BIA7Z+a1qKwkwsDHRac39Q 19020Kql9R/gV7/B1TcoowzqkDnsNot5NWtWiHOKcyO+IUF7p01ZT9Jsd+K0WYC/ UWE4okXN59qjEGODA/kbbuIHG4urHAqDC2taUaoNARVkipnopr0dKC0jxl4VffRj ZduJS5fBmARcWbGI -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:30 2026 by rpki-client