This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer File: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer (raw, json) Hash identifier: MWhI24UhvEu5Thfm/4cssT/P9c/i2Yc+OeDXweZD9EE= Subject key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8500FCE05AFCFB246D38DBF5D0B0C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200052 IP: 185.21.216.0/22 IP: 193.28.252.0/23 IP: 193.29.6.0/23 IP: 2a04:1980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:00:fc:e0:5a:fc:fb:24:6d:38:db:f5:d0:b0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3de21b0636c614ebf43664798012afd56c5ee86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:18:94:67:62:49:47:d9:1b:fb:70:3e:78: 93:ad:87:53:5f:5f:c2:42:3c:18:74:49:c0:38:d1: 79:9c:37:50:a2:59:38:cf:00:8f:cb:04:2c:71:e7: c2:1c:21:21:bd:3d:e8:32:79:83:55:2d:36:02:69: 46:23:11:88:4d:3f:a9:6a:63:8f:0b:3b:17:bb:07: 5c:de:36:fd:18:8c:2b:97:c6:a0:e7:06:7b:d1:61: d2:6a:8c:2d:d5:f5:fb:da:58:88:06:a6:dd:5f:ec: 15:5a:19:98:83:20:67:5a:45:6b:d8:45:61:38:59: 2e:58:43:bd:f4:d0:c7:0e:44:7c:a1:98:c2:c5:56: 6c:7d:b2:f3:29:23:c5:e9:67:9b:3b:fe:0e:f2:e1: 99:f2:a1:08:db:cb:20:29:95:4e:11:0d:67:d3:78: 6a:57:f8:b9:48:6d:ad:bf:dc:b8:da:37:1c:f7:56: a9:ef:59:02:d5:c3:f5:a5:c2:fb:c1:af:3f:79:f7: 2e:a1:3a:c8:2f:70:36:41:9f:34:2d:81:6d:a5:f8: 8c:2b:4f:0c:66:20:06:fc:63:f8:19:55:d0:b8:31: 81:f6:ce:bf:1d:d6:2f:ad:44:d4:b0:71:90:1d:b7: f4:5a:74:4e:e5:24:6b:78:f8:6e:2d:e2:20:8c:44: db:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.216.0/22 193.28.252.0/23 193.29.6.0/23 IPv6: 2a04:1980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200052 Signature Algorithm: sha256WithRSAEncryption 82:c8:7c:c7:e2:c4:de:b3:12:43:af:19:6e:da:44:23:57:cb: 34:23:86:00:f0:59:1b:e2:60:5c:0d:be:9c:21:c8:60:76:3c: 3c:12:8e:0c:52:fb:6a:7b:cd:3c:70:5b:6e:36:16:df:81:2b: 96:62:7d:56:0d:58:70:92:7d:45:50:27:be:65:5e:4c:4f:ea: 89:0c:81:54:d6:25:88:1d:54:4d:b0:29:99:65:61:89:27:bd: 85:df:53:da:92:5d:eb:60:97:ae:ad:04:4a:31:ae:6c:19:b0: 08:06:2b:9c:01:9a:38:8b:03:7e:b8:b8:37:df:f6:a5:25:76: 21:fb:ee:42:93:7f:ae:45:49:ed:9a:26:c8:47:cf:e4:8f:43: 18:f2:41:b5:7c:85:a2:de:8e:39:0a:1d:90:9f:72:50:cd:18: 16:f8:90:38:c7:4d:a9:41:02:3d:71:ac:5c:2b:15:f8:cc:e1: d4:ca:cc:25:0e:0d:37:13:aa:77:0c:d2:f8:a3:e5:40:11:bb: bd:eb:14:b0:5f:fb:f2:fc:07:88:ec:60:1e:68:58:26:ec:12: 78:70:98:66:8f:f2:06:a4:ed:7f:27:d0:86:d2:ad:23:11:e4: b3:c8:c9:95:cd:4a:a3:bf:c5:67:25:e2:58:ad:cb:76:be:e0: 7f:cd:06:ee -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/hQD84Fr8+yRtONv10LDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2RlMjFiMDYzNmM2MTRlYmY0MzY2NDc5ODAxMmFmZDU2YzVlZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+wYlGdiSUfZG/twPniTrYdTX1/C QjwYdEnAONF5nDdQolk4zwCPywQscefCHCEhvT3oMnmDVS02AmlGIxGITT+pamOP CzsXuwdc3jb9GIwrl8ag5wZ70WHSaowt1fX72liIBqbdX+wVWhmYgyBnWkVr2EVh OFkuWEO99NDHDkR8oZjCxVZsfbLzKSPF6WebO/4O8uGZ8qEI28sgKZVOEQ1n03hq V/i5SG2tv9y42jcc91ap71kC1cP1pcL7wa8/efcuoTrIL3A2QZ80LYFtpfiMK08M ZiAG/GP4GVXQuDGB9s6/HdYvrUTUsHGQHbf0WnRO5SRrePhuLeIgjETbjwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFOPeIbBjbGFOv0NmR5gBKv1Wxe6GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlLzM5Yzll My1mN2MyLTQyOTgtOTY2Ni1iODI1OTY3YTc1N2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvMzljOWUz LWY3YzItNDI5OC05NjY2LWI4MjU5NjdhNzU3YS8xLzQ5NGhzR05zWVU2X1EyWkht QUVxX1ZiRjdvWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuRXYAwQBwRz8AwQBwR0GMA0EAgACMAcDBQMq BBmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMNdDANBgkqhkiG9w0BAQsFAAOC AQEAgsh8x+LE3rMSQ68ZbtpEI1fLNCOGAPBZG+JgXA2+nCHIYHY8PBKODFL7anvN PHBbbjYW34ErlmJ9Vg1YcJJ9RVAnvmVeTE/qiQyBVNYliB1UTbApmWVhiSe9hd9T 2pJd62CXrq0ESjGubBmwCAYrnAGaOIsDfri4N9/2pSV2IfvuQpN/rkVJ7ZomyEfP 5I9DGPJBtXyFot6OOQodkJ9yUM0YFviQOMdNqUECPXGsXCsV+Mzh1MrMJQ4NNxOq dwzS+KPlQBG7vesUsF/78vwHiOxgHmhYJuwSeHCYZo/yBqTtfyfQhtKtIxHks8jJ lc1Ko7/FZyXiWK3Ldr7gf80G7g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:13 2026 by rpki-client