This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer File: 25uTnXvKE7bYzPTY54Z284B6Ds4.cer (raw, json) Hash identifier: j7hDRMlILGrW82uH0Tr6xJysQqLLr8jJ3+BQ0KGOTSY= Subject key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EBA4C24BD00A7182C20DF94FAF221F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34447 IP: 185.97.92.0/22 IP: 2a06:240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:c2:4b:d0:0a:71:82:c2:0d:f9:4f:af:22:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:0f:33:4a:ea:2a:96:3a:11:59:0d:25:de: 36:b5:6c:54:d8:38:29:3c:e6:de:7f:ac:08:0c:2b: 83:45:57:24:d9:4d:bf:0e:d4:4f:e1:98:ed:7c:d7: f8:a5:a1:0f:54:b8:29:dd:23:fe:e6:50:ad:a4:b6: d4:bc:11:69:ca:5f:4e:81:a3:17:93:ff:e3:eb:82: c1:4f:54:2e:52:c2:38:d2:65:26:55:47:cb:03:7e: fd:28:32:62:87:d1:f1:bb:8a:4a:1e:93:62:59:94: c3:88:14:20:10:e6:c2:7d:87:ef:ac:ca:f1:37:0d: 86:fe:55:14:b6:8e:50:cc:fa:9d:c5:0e:61:c4:ac: fc:b2:34:29:b4:47:2f:2f:b6:38:03:f2:29:16:ac: f8:a9:48:c6:5e:c3:48:06:54:16:41:01:8e:e6:7a: 65:42:59:c0:ab:51:fc:d4:6c:b5:87:87:0c:03:e2: 90:9e:e8:29:cc:55:67:a5:d6:b7:d4:bc:40:e8:c7: a4:42:0d:59:9a:16:4c:43:e6:65:d2:34:9f:7e:b7: e3:9c:c6:8b:99:0a:e8:2a:c3:33:19:85:16:97:3f: f7:6c:b5:1d:48:cc:10:3f:bb:9e:b9:2f:e8:a0:50: ad:79:db:ab:06:d3:5b:b3:59:ae:84:ff:c0:52:c3: c2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.92.0/22 IPv6: 2a06:240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34447 Signature Algorithm: sha256WithRSAEncryption 04:7d:ee:cc:e4:16:54:66:36:a8:46:56:27:36:4a:78:5c:1e: e5:2e:7e:87:ba:c3:e2:e2:56:b3:1a:a5:6c:96:e9:af:bd:15: ea:a1:95:9f:19:2c:f7:ae:df:7b:1a:4e:40:1b:ad:84:85:08: d7:3c:8a:f6:16:af:8d:d9:e1:9e:e4:17:a0:83:6d:35:e0:9b: 3b:34:f9:4a:76:ae:91:20:ac:6f:b8:42:96:c3:df:24:2e:73: fb:a7:35:5e:9a:89:3c:f6:d9:c1:9f:65:25:b0:a3:40:d4:57: b2:98:26:ea:d9:26:3e:81:dc:ae:d5:bb:d9:4c:bc:32:6a:f2: 64:55:9b:97:95:cc:43:c2:79:5c:83:f7:6f:1c:c9:cd:fb:cb: 45:88:98:fc:86:49:6f:57:e6:6a:78:df:60:ab:7f:d6:c1:c6: de:34:f5:7a:df:1a:c4:db:45:ff:3d:83:83:79:47:35:26:b9: e5:05:79:45:4b:69:08:c5:7b:a0:82:92:83:5f:3e:7b:29:d2: b4:ed:40:67:04:ad:f5:35:97:d1:b1:0c:b6:c2:d7:4d:8b:b4: a2:56:e2:b3:de:92:0b:6b:4b:33:24:38:80:a7:e8:8a:81:75: 64:ac:0f:3d:08:f9:9b:e7:b7:82:3e:c6:89:c8:a5:b1:7c:38: 89:45:d8:8c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt266TCS9AKcYLCDflPryIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjliOTM5ZDdiY2ExM2I2ZDhjY2Y0ZDhlNzg2NzZmMzgwN2EwZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3wPM0rqKpY6EVkNJd42tWxU2Dgp PObef6wIDCuDRVck2U2/DtRP4ZjtfNf4paEPVLgp3SP+5lCtpLbUvBFpyl9OgaMX k//j64LBT1QuUsI40mUmVUfLA379KDJih9Hxu4pKHpNiWZTDiBQgEObCfYfvrMrx Nw2G/lUUto5QzPqdxQ5hxKz8sjQptEcvL7Y4A/IpFqz4qUjGXsNIBlQWQQGO5npl QlnAq1H81Gy1h4cMA+KQnugpzFVnpda31LxA6MekQg1ZmhZMQ+Zl0jSffrfjnMaL mQroKsMzGYUWlz/3bLUdSMwQP7ueuS/ooFCtedurBtNbs1muhP/AUsPCBwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNubk517yhO22Mz02OeGdvOAeg7OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5LzkzODMz MC1jY2Q4LTRlN2EtODIxYy1hNjljNWJjN2VkNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvOTM4MzMw LWNjZDgtNGU3YS04MjFjLWE2OWM1YmM3ZWQ1Ny8xLzI1dVRuWHZLRTdiWXpQVFk1 NFoyODRCNkRzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuWFcMA0EAgACMAcDBQMqBgJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCGjzANBgkqhkiG9w0BAQsFAAOCAQEABH3uzOQWVGY2 qEZWJzZKeFwe5S5+h7rD4uJWsxqlbJbpr70V6qGVnxks967fexpOQButhIUI1zyK 9havjdnhnuQXoINtNeCbOzT5SnaukSCsb7hClsPfJC5z+6c1XpqJPPbZwZ9lJbCj QNRXspgm6tkmPoHcrtW72Uy8MmryZFWbl5XMQ8J5XIP3bxzJzfvLRYiY/IZJb1fm anjfYKt/1sHG3jT1et8axNtF/z2Dg3lHNSa55QV5RUtpCMV7oIKSg18+eynStO1A ZwSt9TWX0bEMtsLXTYu0olbis96SC2tLMyQ4gKfoioF1ZKwPPQj5m+e3gj7Gicil sXw4iUXYjA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:28 2026 by rpki-client