This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rrlJQmajhxkETYKaSgqPF6QHBOg.cer File: rrlJQmajhxkETYKaSgqPF6QHBOg.cer (raw, json) Hash identifier: wWptg8HFAJuPgRoHPFJnZjVIKwCNR06LGNn6+9+GMNQ= Subject key identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC94683309BF6718D384FA876CED6F5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49641 IP: 185.10.0.0/22 IP: 188.64.128.0/21 IP: 2a03:2980::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:46:83:30:9b:f6:71:8d:38:4f:a8:76:ce:d6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aeb9494266a38719044d829a4a0a8f17a40704e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:94:60:5f:7e:e1:b8:aa:74:aa:30:4e:f6: f6:41:a5:16:f9:9e:67:c2:4e:a3:8b:25:08:9b:cc: cc:fe:0a:4e:57:d9:00:67:c3:b9:aa:8d:c5:71:25: b6:92:27:48:ad:9a:0e:71:a4:8d:df:dc:76:e3:a7: e7:e5:a1:01:ab:20:f7:f3:5a:02:ee:34:00:1a:68: 57:cc:86:13:31:b0:56:f3:12:c0:5b:2e:e9:03:d5: 7d:88:f6:be:8d:7d:42:69:85:b7:ea:32:30:76:f6: 80:92:d9:8a:24:91:0c:f5:d1:2d:26:19:cf:8b:b1: 33:aa:32:8e:25:e5:d2:1a:e8:65:c9:6c:5d:3b:6b: b1:ff:b2:06:07:da:86:cd:56:dc:f4:20:11:41:bf: 64:14:c5:a1:ce:e4:0d:ca:a9:97:4c:6a:83:81:52: 93:c1:7b:b6:d5:13:8e:01:5b:a0:53:b0:f9:fd:1c: 85:0f:8c:70:7e:7c:82:44:ea:af:07:84:46:e3:38: 73:43:43:1c:03:e8:4c:74:c7:d7:9e:79:e5:9d:a0: c5:c4:83:e9:5c:8d:b4:0c:ff:37:70:42:22:b2:3b: 75:0f:25:a3:72:d3:3b:70:0e:72:7b:57:ab:92:1d: e5:25:40:21:cd:99:aa:5c:e9:9d:4a:57:bd:68:b6: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:49:42:66:A3:87:19:04:4D:82:9A:4A:0A:8F:17:A4:07:04:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7adab-8055-4785-8df5-2a7b58bdf945/1/rrlJQmajhxkETYKaSgqPF6QHBOg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.0.0/22 188.64.128.0/21 IPv6: 2a03:2980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49641 Signature Algorithm: sha256WithRSAEncryption 9a:a1:19:8a:b2:7d:96:ba:80:fe:2a:7c:69:49:72:4d:93:0e: 0f:06:1f:cc:92:71:97:41:6a:c7:89:a4:e6:84:50:ec:fb:ed: 08:1f:8b:50:42:85:b6:a4:5c:b3:c0:7d:79:19:1a:1e:8c:ea: 54:79:f5:a0:ef:33:a6:8c:30:d4:6d:ec:b5:e1:83:f1:d0:df: 1e:cf:d0:1a:95:6b:cf:d3:e5:82:b1:7a:ac:a7:77:b8:0f:52: 3c:1c:f9:22:ed:ee:4b:42:a8:2e:ea:12:32:c3:59:a5:ef:7a: 50:4e:38:0b:7b:d7:50:ec:ee:c3:ba:c7:23:e0:d3:32:5d:a9: 94:e8:4b:5b:7e:9c:74:ce:e1:14:85:50:43:77:b2:18:06:de: 97:49:cc:53:11:a0:26:7d:e4:02:a3:42:a9:f3:6e:fd:50:07: c6:b1:b8:8f:6b:c4:f1:31:a7:df:62:c0:8d:28:35:f1:e6:6f: dc:1b:47:5e:6f:46:54:a1:9b:48:68:d8:d4:02:ff:2d:f7:64: 8d:ea:58:e3:66:49:a1:84:11:65:e9:b3:a6:99:cd:5f:9b:fd: 0e:d0:2d:ac:b3:19:e1:ec:87:c0:ff:20:ac:ae:7e:b7:41:c7: 96:8e:d7:9f:8f:d0:bf:f4:95:d4:14:e7:8b:ca:14:d8:10:19: 51:ee:78:ef -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt9yUaDMJv2cY04T6h2ztb1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWI5NDk0MjY2YTM4NzE5MDQ0ZDgyOWE0YTBhOGYxN2E0MDcwNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApemUYF9+4biqdKowTvb2QaUW+Z5n wk6jiyUIm8zM/gpOV9kAZ8O5qo3FcSW2kidIrZoOcaSN39x246fn5aEBqyD381oC 7jQAGmhXzIYTMbBW8xLAWy7pA9V9iPa+jX1CaYW36jIwdvaAktmKJJEM9dEtJhnP i7EzqjKOJeXSGuhlyWxdO2ux/7IGB9qGzVbc9CARQb9kFMWhzuQNyqmXTGqDgVKT wXu21ROOAVugU7D5/RyFD4xwfnyCROqvB4RG4zhzQ0McA+hMdMfXnnnlnaDFxIPp XI20DP83cEIisjt1DyWjctM7cA5ye1erkh3lJUAhzZmqXOmdSle9aLY+XwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFK65SUJmo4cZBE2CmkoKjxekBwToMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2U3YWRh Yi04MDU1LTQ3ODUtOGRmNS0yYTdiNThiZGY5NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvZTdhZGFi LTgwNTUtNDc4NS04ZGY1LTJhN2I1OGJkZjk0NS8xL3JybEpRbWFqaHhrRVRZS2FT Z3FQRjZRSEJPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuQoAAwQDvECAMA0EAgACMAcDBQAqAymAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDB6TANBgkqhkiG9w0BAQsFAAOCAQEAmqEZ irJ9lrqA/ip8aUlyTZMODwYfzJJxl0Fqx4mk5oRQ7PvtCB+LUEKFtqRcs8B9eRka HozqVHn1oO8zpoww1G3steGD8dDfHs/QGpVrz9PlgrF6rKd3uA9SPBz5Iu3uS0Ko LuoSMsNZpe96UE44C3vXUOzuw7rHI+DTMl2plOhLW36cdM7hFIVQQ3eyGAbel0nM UxGgJn3kAqNCqfNu/VAHxrG4j2vE8TGn32LAjSg18eZv3BtHXm9GVKGbSGjY1AL/ LfdkjepY42ZJoYQRZemzppnNX5v9DtAtrLMZ4eyHwP8grK5+t0HHlo7Xn4/Qv/SV 1BTni8oU2BAZUe547w== -----END CERTIFICATE-----Generated at Sun Jan 11 19:54:11 2026 by rpki-client