This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer File: 10L6T7KPryihjordTBDJYzfDxMU.cer (raw, json) Hash identifier: fgBF2cgwMG1oZDNQq+i/CCGUXLHpB80ty/adOx+Ex5M= Subject key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37D33F4E178412B6C6557B7F6DF6D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39544 IP: 109.203.32.0/19 IP: 178.211.224.0/19 IP: 185.20.200.0/22 IP: 185.137.236.0/22 IP: 2a00:5360::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d3:3f:4e:17:84:12:b6:c6:55:7b:7f:6d:f6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1e:d1:17:70:68:48:09:be:40:0e:dc:e0:36: ba:bc:8a:25:e5:83:8f:8b:7c:d3:c4:58:69:00:13: ea:22:37:ab:55:ca:e5:73:b0:a4:d1:a2:f0:be:24: 34:f0:c1:ca:66:06:85:67:98:02:75:76:25:be:73: 70:2b:94:57:f7:05:dc:0c:cd:db:81:63:6c:32:ba: 8c:6a:ae:fa:dd:85:96:a6:66:07:f2:fa:73:46:4f: bb:a9:74:49:1d:d2:ab:79:65:fc:a0:04:fc:fa:f3: 45:82:73:2f:45:29:48:d3:be:84:d4:05:6a:18:48: 62:e8:d6:9c:fb:4c:44:75:34:2d:91:21:ab:0b:77: a0:cb:3f:65:cd:8d:67:58:e9:74:81:93:32:3c:e1: 1b:9f:ac:95:18:c2:70:61:e0:0d:e6:33:d3:75:db: ae:f6:48:50:66:72:8b:7b:29:fd:8d:0e:1b:f3:69: 2a:b6:5a:5c:31:15:32:be:41:ed:24:0d:b3:64:54: 15:fe:6c:8d:e3:26:47:bd:32:f2:cc:d2:e5:cb:d9: 58:1c:bd:49:fe:bb:3d:6e:d0:45:89:c3:b7:d3:77: df:c2:65:3e:19:2f:81:be:31:7b:f6:c1:c8:e1:31: 75:75:4d:a6:a6:f6:64:dd:e2:d9:60:8a:30:12:82: 4c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.203.32.0/19 178.211.224.0/19 185.20.200.0/22 185.137.236.0/22 IPv6: 2a00:5360::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39544 Signature Algorithm: sha256WithRSAEncryption 86:5c:24:5b:b3:01:df:b4:5e:16:2f:48:7e:08:8f:a2:fa:e7: 97:bb:ab:05:7c:93:05:0d:0b:e2:57:23:a8:ef:ad:3d:51:76: 37:72:7d:fe:fe:88:17:f2:b1:07:1d:b0:de:12:4d:e2:d5:a8: fc:c6:d2:28:60:f7:92:b9:37:71:d2:95:2b:af:03:04:fc:e9: 84:e2:14:07:65:7c:57:8f:e6:e4:f5:3d:6d:d4:89:a6:1c:c7: b4:15:86:33:d7:57:4e:7a:e0:2e:be:3b:c9:39:19:36:68:25: 3c:df:ca:b7:0d:f4:1f:0a:7b:b9:b5:80:c9:d7:0d:96:22:f3: 05:a8:4d:96:64:ee:72:5f:a9:5c:68:50:3a:88:3f:f8:ae:3b: 1f:9c:76:bf:b9:f0:30:a0:2f:bb:12:c1:76:4d:61:8a:7d:a3: 2f:8e:5b:d7:e6:b0:7c:a1:5e:f4:3e:0b:a4:be:a7:41:7c:d0: ea:05:d1:1f:1c:a5:22:23:69:61:90:05:88:b7:2a:77:80:cd: 95:99:9f:ef:5e:53:36:26:89:86:3d:0e:ae:d1:48:bc:e1:21: b1:a4:0c:d8:d0:d7:b2:8e:63:72:ef:3e:69:2f:3c:c9:2b:f3: 26:96:af:41:de:ae:8c:e1:f7:7a:91:53:b7:ce:13:ab:90:6d: cf:d1:64:c8 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt+N9M/TheEErbGVXt/bfbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzQyZmE0ZmIyOGZhZjI4YTE4ZThhZGQ0YzEwYzk2MzM3YzNjNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx7RF3BoSAm+QA7c4Da6vIol5YOP i3zTxFhpABPqIjerVcrlc7Ck0aLwviQ08MHKZgaFZ5gCdXYlvnNwK5RX9wXcDM3b gWNsMrqMaq763YWWpmYH8vpzRk+7qXRJHdKreWX8oAT8+vNFgnMvRSlI076E1AVq GEhi6Nac+0xEdTQtkSGrC3egyz9lzY1nWOl0gZMyPOEbn6yVGMJwYeAN5jPTdduu 9khQZnKLeyn9jQ4b82kqtlpcMRUyvkHtJA2zZFQV/myN4yZHvTLyzNLly9lYHL1J /rs9btBFicO303ffwmU+GS+BvjF79sHI4TF1dU2mpvZk3eLZYIowEoJMdQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFNdC+k+yj68ooY6K3UwQyWM3w8TFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzcwM2Jk Ni0xYjJmLTQwODMtYjFlNy03YTVmNjAxODljNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvNzAzYmQ2 LTFiMmYtNDA4My1iMWU3LTdhNWY2MDE4OWM1MS8xLzEwTDZUN0tQcnlpaGpvcmRU QkRKWXpmRHhNVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFbcsgAwQFstPgAwQCuRTIAwQCuYnsMA0EAgAC MAcDBQAqAFNgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCaeDANBgkqhkiG9w0B AQsFAAOCAQEAhlwkW7MB37ReFi9IfgiPovrnl7urBXyTBQ0L4lcjqO+tPVF2N3J9 /v6IF/KxBx2w3hJN4tWo/MbSKGD3krk3cdKVK68DBPzphOIUB2V8V4/m5PU9bdSJ phzHtBWGM9dXTnrgLr47yTkZNmglPN/Ktw30Hwp7ubWAydcNliLzBahNlmTucl+p XGhQOog/+K47H5x2v7nwMKAvuxLBdk1hin2jL45b1+awfKFe9D4LpL6nQXzQ6gXR HxylIiNpYZAFiLcqd4DNlZmf715TNiaJhj0OrtFIvOEhsaQM2NDXso5jcu8+aS88 ySvzJpavQd6ujOH3epFTt84Tq5Btz9FkyA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:54 2026 by rpki-client