This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer File: 335xZknay_bqmGAjUU3-QN8afPA.cer (raw, json) Hash identifier: mOI4wOCLW6Q6dSiTAWbuImW1FuS67YueNZWJyoxv8vY= Subject key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA5450F08A1477F09999A725990BB25 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207399 AS: 209281 IP: 86.62.20.0/22 IP: 185.74.223.0/24 IP: 2a04:7480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:45:0f:08:a1:47:7f:09:99:9a:72:59:90:bb:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:47:0e:04:76:b5:bf:31:32:38:f0:19:6b: fb:d0:bc:84:7c:c6:d0:eb:67:70:d8:2c:e9:cd:b2: a9:fd:16:ec:2c:13:85:c2:39:ef:e8:ff:45:63:be: 90:4f:96:94:3e:65:98:04:68:fc:76:50:f8:77:cf: df:de:94:5f:40:7e:fe:fa:83:4a:70:18:79:73:08: c7:cb:81:75:d9:7f:e9:20:f2:b6:d4:23:61:47:6b: 42:ac:15:e3:ff:14:74:b7:ce:a0:39:6b:b4:41:87: 71:5f:c6:5d:e3:71:0b:4b:1e:07:ed:5c:b0:ef:a3: 67:ee:a3:c9:67:45:b6:1b:18:95:ba:85:97:13:4f: 78:96:9a:01:4f:f1:e3:fc:6b:cd:70:73:10:50:6c: 0a:8f:6e:86:5d:a6:a8:cc:07:dc:1f:e7:48:e1:ce: a9:7c:6c:d7:33:bc:c4:d8:2d:87:03:f7:4e:a4:17: c4:73:93:a3:cc:74:cf:75:9b:ec:0f:01:e1:6f:99: 44:86:f0:4c:02:40:60:bc:7f:82:a5:6f:7c:18:5e: 6f:1a:4e:10:d0:36:6d:53:bb:cd:a0:24:c2:54:0f: e3:43:b8:00:51:50:e8:47:33:37:d6:c3:e6:34:e9: fb:23:d7:72:66:18:c7:f0:57:f2:15:c7:42:a0:89: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.62.20.0/22 185.74.223.0/24 IPv6: 2a04:7480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207399 209281 Signature Algorithm: sha256WithRSAEncryption 12:04:92:7d:d4:45:c2:c9:3c:e1:e5:79:36:6f:d1:e3:20:e1: 00:1e:24:e3:99:6e:0f:ae:ea:6d:9d:33:78:9f:c7:6e:a8:b2: a8:3e:aa:09:8d:0f:ea:21:5a:4d:c4:3b:22:af:5b:e0:3e:43: 90:d2:e2:73:f5:07:e3:a5:35:90:86:e2:5f:5e:11:1a:04:97: 49:bd:df:81:36:67:c7:bf:91:e6:81:9e:4e:e3:d4:fe:94:83: 00:de:20:d0:24:bf:a9:05:34:af:3b:a9:7f:71:fd:d1:0d:b9: 86:fc:76:c4:7e:87:dd:5f:4b:7a:af:10:94:1c:95:93:e8:2a: d1:51:de:92:86:d6:da:72:97:10:cd:9b:1c:7e:3e:6f:3c:b6: ff:6d:c9:22:ed:7e:a5:31:4f:37:b7:1a:20:3a:4d:3a:4f:40: 8c:e9:48:2d:63:52:40:d0:14:72:93:f9:c5:5f:0d:8b:d7:66: 63:99:86:73:39:d2:e9:d7:1d:ed:54:bc:db:63:bc:29:aa:8c: 71:57:a8:8c:d1:a8:67:3a:fe:40:e7:23:d4:cd:ef:93:1f:68: 50:30:fa:05:86:2a:22:bb:72:2e:6d:53:93:42:d4:7c:91:d1: a5:5d:d5:af:85:c5:05:a3:9b:bf:4a:10:bb:fb:2a:7c:43:7f: 18:c3:dd:db -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt7pUUPCKFHfwmZmnJZkLslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjdlNzE2NjQ5ZGFjYmY2ZWE5ODYwMjM1MTRkZmU0MGRmMWE3Y2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh5HDgR2tb8xMjjwGWv70LyEfMbQ 62dw2CzpzbKp/RbsLBOFwjnv6P9FY76QT5aUPmWYBGj8dlD4d8/f3pRfQH7++oNK cBh5cwjHy4F12X/pIPK21CNhR2tCrBXj/xR0t86gOWu0QYdxX8Zd43ELSx4H7Vyw 76Nn7qPJZ0W2GxiVuoWXE094lpoBT/Hj/GvNcHMQUGwKj26GXaaozAfcH+dI4c6p fGzXM7zE2C2HA/dOpBfEc5OjzHTPdZvsDwHhb5lEhvBMAkBgvH+CpW98GF5vGk4Q 0DZtU7vNoCTCVA/jQ7gAUVDoRzM31sPmNOn7I9dyZhjH8FfyFcdCoIkBUQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFN9+cWZJ2sv26phgI1FN/kDfGnzwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyL2VlYjc1 Ny01MDQwLTRiZmItYTM1ZC1hNjYyODk4NTFjZDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvZWViNzU3 LTUwNDAtNGJmYi1hMzVkLWE2NjI4OTg1MWNkOS8xLzMzNXhaa25heV9icW1HQWpV VTMtUU44YWZQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCVj4UAwQAuUrfMA0EAgACMAcDBQMqBHSAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMqJwIDAzGBMA0GCSqGSIb3DQEBCwUAA4IB AQASBJJ91EXCyTzh5Xk2b9HjIOEAHiTjmW4PruptnTN4n8duqLKoPqoJjQ/qIVpN xDsir1vgPkOQ0uJz9QfjpTWQhuJfXhEaBJdJvd+BNmfHv5HmgZ5O49T+lIMA3iDQ JL+pBTSvO6l/cf3RDbmG/HbEfofdX0t6rxCUHJWT6CrRUd6ShtbacpcQzZscfj5v PLb/bcki7X6lMU83txogOk06T0CM6UgtY1JA0BRyk/nFXw2L12ZjmYZzOdLp1x3t VLzbY7wpqoxxV6iM0ahnOv5A5yPUze+TH2hQMPoFhioiu3IubVOTQtR8kdGlXdWv hcUFo5u/ShC7+yp8Q38Yw93b -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:36 2026 by rpki-client