This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56q82sOtn7MtJK1gyKJsueq41YU.cer File: 56q82sOtn7MtJK1gyKJsueq41YU.cer (raw, json) Hash identifier: zkOqjg/9BLFChydlH7up4Ykcec/BGT1774d3mf0yixg= Subject key identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E387FBEA57AC83C114AC67C4ABE5447 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201393 IP: 185.76.112.0/22 IP: 2a05:58c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7f:be:a5:7a:c8:3c:11:4a:c6:7c:4a:be:54:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7aabcdac3ad9fb32d24ad60c8a26cb9eab8d585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:48:8d:bb:8e:3b:34:8d:d9:a9:90:a1:04: ef:35:64:a0:80:d6:e8:c8:56:99:24:aa:18:be:31: 08:19:fe:a3:51:05:21:4e:73:a5:39:20:a5:b5:32: 51:33:30:2f:49:56:1b:fd:62:c9:0c:17:e5:32:70: 27:88:d4:f7:85:e8:cf:41:97:8b:88:02:94:47:6a: ea:79:1c:73:1b:d6:5a:4d:10:99:a6:d4:93:ea:15: 6d:2c:ca:9d:d3:58:3d:3b:24:db:86:74:c1:e5:7a: 61:0c:6b:de:ec:4f:ec:ed:03:3e:e4:19:69:49:45: ba:d7:36:51:0a:2c:4f:25:6c:f5:bc:3f:85:1b:ac: 7c:9c:9a:9e:a6:c4:d5:b1:33:ff:9c:13:22:1a:e9: 71:a7:e8:b8:63:78:7d:1f:09:75:38:1c:e2:91:75: db:a7:e7:08:ac:3e:21:83:1e:d2:54:82:0d:7e:91: e1:bb:08:de:78:70:a5:37:d3:a4:97:62:23:d8:a0: eb:f1:0a:6c:27:51:d8:5b:8a:5c:df:ba:3d:89:c5: b8:57:3e:71:3d:19:e2:b1:ef:d0:13:04:19:30:37: 85:6c:3a:fc:71:c5:49:8e:8d:1e:e4:1f:0d:b7:d9: e2:f9:7b:16:2a:00:73:01:95:55:26:20:1a:05:58: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AA:BC:DA:C3:AD:9F:B3:2D:24:AD:60:C8:A2:6C:B9:EA:B8:D5:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5d93ba-bf59-4e78-a4a2-e36d0b9b645d/1/56q82sOtn7MtJK1gyKJsueq41YU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.76.112.0/22 IPv6: 2a05:58c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201393 Signature Algorithm: sha256WithRSAEncryption 9f:bf:af:29:b3:c7:3c:bd:09:0f:37:21:a7:8a:3e:18:27:2a: 7a:3b:d0:19:c9:34:60:3b:35:14:9e:e1:7a:f3:c3:c1:48:db: a9:9d:4d:9f:fd:98:53:03:94:a6:83:e8:f4:06:8c:0d:a6:1f: 99:a6:c9:0b:f9:ac:7d:d6:f4:e7:dc:67:7f:3f:6d:d3:62:33: 08:3b:5e:ac:36:82:7c:f9:5e:61:4d:03:10:4e:c6:2b:c2:84: 73:c9:d4:7c:e0:b8:ae:0e:79:ff:b4:2c:34:90:c6:67:29:ec: dd:0d:44:b6:db:7f:3e:d5:2e:0f:d5:93:a0:8e:85:2e:1b:ad: fc:78:a9:67:1c:a9:62:15:73:aa:d5:9c:03:1a:cc:83:97:59: bf:cb:59:d9:43:83:af:d4:11:98:83:70:bb:e1:b9:e6:8d:e2: 32:2a:cb:49:bc:92:e2:a2:96:73:45:8c:a5:eb:57:b1:21:ea: b9:8a:80:ec:16:24:97:3c:1d:eb:0c:08:5b:a7:6c:77:09:cd: 94:27:59:08:b3:69:72:63:0b:1e:c9:c4:1e:14:87:c9:d5:e4: ba:96:89:d2:27:0e:67:14:8a:2f:83:3f:f0:6e:95:03:ec:1d: 8d:a0:e6:4a:6d:61:e7:68:3e:d6:da:5b:ba:8b:22:ce:75:eb: 41:3a:6a:9a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OH++pXrIPBFKxnxKvlRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2FhYmNkYWMzYWQ5ZmIzMmQyNGFkNjBjOGEyNmNiOWVhYjhkNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJhIjbuOOzSN2amQoQTvNWSggNbo yFaZJKoYvjEIGf6jUQUhTnOlOSCltTJRMzAvSVYb/WLJDBflMnAniNT3hejPQZeL iAKUR2rqeRxzG9ZaTRCZptST6hVtLMqd01g9OyTbhnTB5XphDGve7E/s7QM+5Blp SUW61zZRCixPJWz1vD+FG6x8nJqepsTVsTP/nBMiGulxp+i4Y3h9Hwl1OBzikXXb p+cIrD4hgx7SVIINfpHhuwjeeHClN9Okl2Ij2KDr8QpsJ1HYW4pc37o9icW4Vz5x PRnise/QEwQZMDeFbDr8ccVJjo0e5B8Nt9ni+XsWKgBzAZVVJiAaBVhzAwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOeqvNrDrZ+zLSStYMiibLnquNWFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzVkOTNi YS1iZjU5LTRlNzgtYTRhMi1lMzZkMGI5YjY0NWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvNWQ5M2Jh LWJmNTktNGU3OC1hNGEyLWUzNmQwYjliNjQ1ZC8xLzU2cTgyc090bjdNdEpLMWd5 S0pzdWVxNDFZVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUxwMA0EAgACMAcDBQMqBVjAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMSsTANBgkqhkiG9w0BAQsFAAOCAQEAn7+vKbPHPL0J Dzchp4o+GCcqejvQGck0YDs1FJ7hevPDwUjbqZ1Nn/2YUwOUpoPo9AaMDaYfmabJ C/msfdb059xnfz9t02IzCDterDaCfPleYU0DEE7GK8KEc8nUfOC4rg55/7QsNJDG Zyns3Q1Ettt/PtUuD9WToI6FLhut/HipZxypYhVzqtWcAxrMg5dZv8tZ2UODr9QR mINwu+G55o3iMirLSbyS4qKWc0WMpetXsSHquYqA7BYklzwd6wwIW6dsdwnNlCdZ CLNpcmMLHsnEHhSHydXkupaJ0icOZxSKL4M/8G6VA+wdjaDmSm1h52g+1tpbuosi znXrQTpqmg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:50 2026 by rpki-client