This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer File: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer (raw, json) Hash identifier: klOQwV6ELqmI6DSaOQKOmSBj3C5FmxFGg+lzTO9ojD8= Subject key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA55064A2894010B5CDE31A61B2DCC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209082 IP: 185.128.220.0/22 IP: 2a03:9ba0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:50:64:a2:89:40:10:b5:cd:e3:1a:61:b2:dc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:63:42:71:cc:4a:20:88:79:b7:87:e0:43:a3: d3:5d:71:00:4d:d4:ff:5b:81:9d:df:50:0d:64:34: d9:8e:9a:fc:85:63:f5:fb:61:fd:1d:9a:1f:9b:3d: 97:a1:e5:76:2f:f7:1d:2f:3d:6b:42:19:c2:2f:12: 09:67:6a:a5:a4:34:38:b1:22:db:e5:96:33:ec:fa: ae:2a:16:fb:05:18:76:e6:2b:9f:21:2e:cd:04:2f: 35:1a:7b:14:36:3e:ae:f4:3d:a2:7c:e8:1a:1c:8c: 4e:f8:f5:6d:10:56:6c:6e:51:bb:2f:c5:d9:72:b9: 0c:93:e4:72:08:f8:48:52:4f:9a:39:21:b4:a9:e4: 2b:b4:fd:48:9e:f1:b5:3f:43:6c:65:8d:e9:ba:c3: 60:61:e7:fa:9a:f1:a7:5d:10:e6:5d:bd:59:77:db: a1:95:18:16:79:5e:c5:02:3c:44:b1:a6:15:ad:98: 01:90:25:cb:e7:0d:4e:9a:96:da:2f:28:56:5d:46: 75:47:8b:93:fa:4e:d8:a5:32:cc:a9:00:e2:99:b6: 44:c9:40:2e:14:7f:25:fc:ae:8e:f0:ba:9c:77:e9: 83:4b:3a:c2:8c:7a:c4:62:15:b1:1f:b3:39:fd:b4: 78:71:a5:f9:1b:42:c7:86:26:0f:f4:78:b1:03:58: 9e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.220.0/22 IPv6: 2a03:9ba0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209082 Signature Algorithm: sha256WithRSAEncryption 0f:f9:6d:4f:c1:e1:07:67:5b:ca:00:29:9a:92:e5:c0:35:20: 73:21:c7:79:cf:a2:56:42:f3:8f:23:ea:4f:bc:b9:2e:98:f7: a0:cf:a8:6f:18:dc:89:9a:46:be:07:8b:67:b7:45:8f:30:d4: b0:98:87:a2:f3:f2:94:db:5c:f4:e3:b6:9b:75:01:3e:2f:4b: 2c:ae:a2:9a:77:56:ec:8d:6d:d3:3d:00:11:5d:f0:0f:2c:67: 43:85:6b:86:93:42:92:28:26:17:49:cd:50:4c:24:4d:18:a6: 01:13:9c:2c:f5:94:31:63:43:9d:e9:ad:dd:bf:8e:90:6f:2a: 3b:e4:90:36:d3:b6:a3:92:91:c1:15:ff:4b:63:3c:44:b6:a0: ab:84:27:c9:23:b6:0d:30:ba:b4:6f:56:77:20:14:c2:a6:e7: 87:9d:53:fb:4e:94:1d:22:f7:29:5f:ae:06:12:de:cc:b2:50: 46:1f:1e:e6:ab:1d:c3:a8:06:9e:59:f9:1a:60:84:93:f0:f9: 12:5d:99:94:2b:00:05:ca:20:23:38:fc:99:74:5f:78:9a:a6: 1e:8b:f8:55:f9:39:fc:ba:05:ca:e2:b1:fe:f9:c9:38:91:ab: 83:bf:b4:1a:e4:9d:7e:ce:da:a2:bb:a7:d5:50:dc:7e:af:20: 18:9c:fd:3a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pVBkoolAELXN4xphstzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjg2NjllNzBjZWE5NDk3M2FmZDM0ZmIwOGViNTllOWQ4NmI1N2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmNCccxKIIh5t4fgQ6PTXXEATdT/ W4Gd31ANZDTZjpr8hWP1+2H9HZofmz2XoeV2L/cdLz1rQhnCLxIJZ2qlpDQ4sSLb 5ZYz7PquKhb7BRh25iufIS7NBC81GnsUNj6u9D2ifOgaHIxO+PVtEFZsblG7L8XZ crkMk+RyCPhIUk+aOSG0qeQrtP1InvG1P0NsZY3pusNgYef6mvGnXRDmXb1Zd9uh lRgWeV7FAjxEsaYVrZgBkCXL5w1OmpbaLyhWXUZ1R4uT+k7YpTLMqQDimbZEyUAu FH8l/K6O8Lqcd+mDSzrCjHrEYhWxH7M5/bR4caX5G0LHhiYP9HixA1iehQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFO+GaecM6pSXOv00+wjrWenYa1f8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhLzM5N2Mx ZS01MWE3LTQxNmYtYTQ1Yy0yYTAyMTMxNzljMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvMzk3YzFl LTUxYTctNDE2Zi1hNDVjLTJhMDIxMzE3OWMwNy8xLzc0WnA1d3pxbEpjNl9UVDdD T3RaNmRoclZfdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYDcMA0EAgACMAcDBQAqA5ugMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwujANBgkqhkiG9w0BAQsFAAOCAQEAD/ltT8HhB2db ygApmpLlwDUgcyHHec+iVkLzjyPqT7y5Lpj3oM+obxjciZpGvgeLZ7dFjzDUsJiH ovPylNtc9OO2m3UBPi9LLK6imndW7I1t0z0AEV3wDyxnQ4VrhpNCkigmF0nNUEwk TRimAROcLPWUMWNDnemt3b+OkG8qO+SQNtO2o5KRwRX/S2M8RLagq4QnySO2DTC6 tG9WdyAUwqbnh51T+06UHSL3KV+uBhLezLJQRh8e5qsdw6gGnln5GmCEk/D5El2Z lCsABcogIzj8mXRfeJqmHov4Vfk5/LoFyuKx/vnJOJGrg7+0GuSdfs7aorun1VDc fq8gGJz9Og== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:24 2026 by rpki-client