This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70QOE80mESzLWVF2D8-y1JFtcSc.cer File: 70QOE80mESzLWVF2D8-y1JFtcSc.cer (raw, json) Hash identifier: gPQRtfwt/zVdjvfWfg/Tk+ParZlZaCWE8YORtWEahj0= Subject key identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910E5A3238908F49E02B47F8A02B884 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208952 IP: 45.14.32.0/22 IP: 2a0e:a80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e5:a3:23:89:08:f4:9e:02:b4:7f:8a:02:b8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef440e13cd26112ccb5951760fcfb2d4916d7127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:1f:3e:10:d6:67:3c:09:18:64:cb:50:a7: 49:b1:88:7a:4e:92:ad:76:ff:9a:99:8e:73:f1:d1: f1:97:74:22:10:3c:82:42:46:a9:15:2c:b1:14:17: fd:89:97:8a:d5:24:7a:b8:cc:0d:86:cf:9e:d4:ab: d8:73:10:49:6b:bb:f8:75:e2:dd:6d:0e:4d:74:09: 08:5c:2b:f2:99:bb:f8:65:26:50:9d:b1:46:d9:e5: f5:38:db:56:6b:86:35:c7:91:ce:7d:e3:d7:94:0a: 4c:6a:f9:99:09:59:92:cd:91:e8:d3:c2:3e:87:e9: 64:09:75:bf:c3:36:7f:02:89:92:d7:2e:76:21:db: 33:f8:6d:0f:9b:d8:59:45:aa:6c:34:eb:75:7e:8c: 35:7c:ac:3c:c7:8e:93:ce:a7:c8:fb:8e:00:65:a8: c0:b4:b0:fe:43:e9:47:9b:07:d5:e1:40:86:52:96: c2:1a:c7:93:e3:94:ce:81:fb:ad:aa:fd:a7:23:04: 36:ec:9a:3e:89:b1:d8:b8:6f:97:db:b1:29:7d:d0: 95:4f:ec:89:07:35:a4:ed:bb:29:10:86:35:d1:c1: c1:06:c3:6a:9b:76:fe:3e:2c:ee:f4:e9:b3:83:8f: 30:63:3c:e3:57:57:36:9d:7c:47:d4:24:41:a5:03: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:0E:13:CD:26:11:2C:CB:59:51:76:0F:CF:B2:D4:91:6D:71:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/59831b-de8a-40ac-a949-7a836800e9f7/1/70QOE80mESzLWVF2D8-y1JFtcSc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.32.0/22 IPv6: 2a0e:a80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208952 Signature Algorithm: sha256WithRSAEncryption 97:16:d0:06:d5:c2:81:f5:0f:c1:d6:ae:83:93:b1:2d:e9:35: a3:a4:25:a7:a9:66:71:06:78:94:fb:0a:a0:68:bf:99:cb:de: f5:ef:a8:61:49:e7:8d:3f:3c:87:a2:7e:21:88:4d:24:b3:44: 54:ac:e6:0a:6e:74:fc:ef:b3:94:17:8e:d1:fb:de:c7:a3:1f: 1b:49:20:0e:3a:b1:60:9c:21:51:c7:a2:b4:c1:97:da:58:65: 72:16:01:28:34:5e:f2:49:f2:85:8a:4a:31:6d:41:aa:b3:51: 74:6b:bd:48:71:5b:eb:0e:66:26:8a:11:76:b7:2c:ac:93:f8: 6e:8a:10:64:31:cf:9d:b1:ee:63:bc:44:c3:79:b7:41:af:85: 02:d1:78:dd:53:0d:e8:c8:04:75:3a:ae:ac:17:6a:7e:7c:dc: cd:19:d3:bb:8b:d1:db:0f:25:1c:f3:65:04:eb:d3:df:9b:9c: 69:ba:9e:6c:34:c1:66:c8:aa:ea:c3:93:b1:92:b0:94:6e:3c: c9:16:c1:5a:55:75:87:cb:37:fc:36:2c:20:ce:2f:ec:35:a9: 02:ca:02:d4:ae:5e:ef:39:67:ee:ef:22:4a:e7:95:6b:fb:a2: 1c:99:9b:7d:d6:cd:88:0e:97:3f:b9:c1:33:0a:07:ff:73:2d: b7:4a:fe:7e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EOWjI4kI9J4CtH+KAriEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjQ0MGUxM2NkMjYxMTJjY2I1OTUxNzYwZmNmYjJkNDkxNmQ3MTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu0fPhDWZzwJGGTLUKdJsYh6TpKt dv+amY5z8dHxl3QiEDyCQkapFSyxFBf9iZeK1SR6uMwNhs+e1KvYcxBJa7v4deLd bQ5NdAkIXCvymbv4ZSZQnbFG2eX1ONtWa4Y1x5HOfePXlApMavmZCVmSzZHo08I+ h+lkCXW/wzZ/AomS1y52Idsz+G0Pm9hZRapsNOt1fow1fKw8x46TzqfI+44AZajA tLD+Q+lHmwfV4UCGUpbCGseT45TOgfutqv2nIwQ27Jo+ibHYuG+X27EpfdCVT+yJ BzWk7bspEIY10cHBBsNqm3b+Pizu9Omzg48wYzzjV1c2nXxH1CRBpQOKLwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFO9EDhPNJhEsy1lRdg/PstSRbXEnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE5LzU5ODMx Yi1kZThhLTQwYWMtYTk0OS03YTgzNjgwMGU5ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTkvNTk4MzFi LWRlOGEtNDBhYy1hOTQ5LTdhODM2ODAwZTlmNy8xLzcwUU9FODBtRVN6TFdWRjJE OC15MUpGdGNTYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQ4gMA0EAgACMAcDBQMqDgqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwODANBgkqhkiG9w0BAQsFAAOCAQEAlxbQBtXCgfUP wdaug5OxLek1o6Qlp6lmcQZ4lPsKoGi/mcve9e+oYUnnjT88h6J+IYhNJLNEVKzm Cm50/O+zlBeO0fvex6MfG0kgDjqxYJwhUceitMGX2lhlchYBKDRe8knyhYpKMW1B qrNRdGu9SHFb6w5mJooRdrcsrJP4booQZDHPnbHuY7xEw3m3Qa+FAtF43VMN6MgE dTqurBdqfnzczRnTu4vR2w8lHPNlBOvT35ucabqebDTBZsiq6sOTsZKwlG48yRbB WlV1h8s3/DYsIM4v7DWpAsoC1K5e7zln7u8iSueVa/uiHJmbfdbNiA6XP7nBMwoH /3Mtt0r+fg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:50 2026 by rpki-client