This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer File: 758eOCZUELPCqSLTFpxPKZUUGi0.cer (raw, json) Hash identifier: t5rqBJVkATsDnH+CYHWXi/9MfJ+EyXyN4HI3IzbrCgM= Subject key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA47BE4F8237261856BDFB9C28D7B65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:55 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42929 AS: 44606 IP: 2.56.80.0/22 IP: 45.156.244.0/22 IP: 185.142.136.0/22 IP: 193.33.222.0/23 IP: 193.36.182.0/24 IP: 193.104.36.0/24 IP: 195.8.62.0/24 IP: 2a07:2d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:7b:e4:f8:23:72:61:85:6b:df:b9:c2:8d:7b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7f:82:b2:1a:2b:01:d0:45:a0:5b:a5:32:0f: b7:ae:66:65:17:92:24:c6:e8:96:2e:19:c4:3f:00: 58:39:0a:6b:2d:89:e6:cc:aa:f7:2a:0c:39:f2:48: bb:ad:fa:76:2e:56:d6:0d:de:c6:37:ad:5e:ee:85: 84:fd:91:3c:a0:8e:94:b7:04:fb:16:8c:ec:18:bd: a7:e4:d1:b8:40:80:ca:23:1c:bb:b5:fa:1c:0c:21: 22:8f:f6:1c:32:7b:4a:72:66:ef:de:ce:4f:94:a5: 2e:5a:f9:0f:d2:19:e0:c0:0e:24:20:75:5f:24:c3: 4d:80:d6:c3:d7:87:c1:f6:65:30:d0:b1:ac:1c:79: f0:66:d5:13:bc:2a:81:52:49:30:e7:1a:f2:c0:d1: 00:3b:5d:2d:c6:51:90:32:ef:6c:50:e5:f5:b5:0a: d6:21:4a:27:d4:f4:1e:37:e8:13:99:0b:b9:e3:1a: 2e:d6:20:5b:18:ae:99:fe:ad:5d:04:75:bf:3e:c4: fc:51:c6:b9:d4:c3:fb:26:e9:fb:00:8c:21:f3:79: 30:ab:ad:09:b9:52:67:b0:93:10:72:7a:12:a0:e2: 68:28:2a:c0:11:02:75:ff:d0:02:6a:96:51:cf:e4: 44:d4:a2:00:d7:0e:1f:87:ad:8c:9f:07:2e:37:0b: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.80.0/22 45.156.244.0/22 185.142.136.0/22 193.33.222.0/23 193.36.182.0/24 193.104.36.0/24 195.8.62.0/24 IPv6: 2a07:2d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42929 44606 Signature Algorithm: sha256WithRSAEncryption a9:2d:6e:0d:27:6e:7f:4c:ef:e9:20:ec:0e:df:55:5e:0e:50: a3:ff:b3:95:1e:da:72:f2:03:e0:da:64:8d:e8:71:c9:a4:90: 41:d0:16:47:3d:5e:56:24:b3:2c:db:53:b2:13:13:4b:54:c4: 1c:7f:f2:f5:9f:8c:85:5f:64:a7:5a:3f:d1:9e:ea:4c:8d:f5: be:88:db:20:ea:29:26:05:c5:da:83:3f:d7:28:9c:f7:94:6f: 63:96:1a:0c:f2:ef:71:70:dc:15:68:90:12:ae:3b:06:e7:0f: a7:88:9a:b0:45:60:2a:79:2a:f7:c7:26:00:e3:e5:9c:67:fc: e5:70:54:93:59:7a:45:7b:7c:f4:e5:2e:dc:ac:cb:0c:2f:b3: f0:bd:b4:84:ad:1f:71:a1:42:91:29:19:d3:ee:6f:15:50:28: dd:ef:7b:51:3e:cf:7d:ff:1c:69:40:3c:33:95:63:51:07:71: 8b:d0:df:fd:eb:2a:a5:94:b8:82:e4:8a:6f:10:92:33:d1:e4: 3b:f4:b1:2b:30:3d:2e:4b:50:ae:16:43:1f:b1:90:43:c6:58: 1a:05:87:38:43:b2:1f:3f:6d:55:0c:b8:05:cc:99:07:73:2d: 7c:58:ed:c9:ce:e8:19:0a:99:0f:c4:24:7e:de:1c:2b:d1:1c: 85:9a:c1:db -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgISAZt7pHvk+CNyYYVr37nCjXtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjlmMWUzODI2NTQxMGIzYzJhOTIyZDMxNjljNGYyOTk1MTQxYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33+CshorAdBFoFulMg+3rmZlF5Ik xuiWLhnEPwBYOQprLYnmzKr3Kgw58ki7rfp2LlbWDd7GN61e7oWE/ZE8oI6UtwT7 FozsGL2n5NG4QIDKIxy7tfocDCEij/YcMntKcmbv3s5PlKUuWvkP0hngwA4kIHVf JMNNgNbD14fB9mUw0LGsHHnwZtUTvCqBUkkw5xrywNEAO10txlGQMu9sUOX1tQrW IUon1PQeN+gTmQu54xou1iBbGK6Z/q1dBHW/PsT8Uca51MP7Jun7AIwh83kwq60J uVJnsJMQcnoSoOJoKCrAEQJ1/9ACapZRz+RE1KIA1w4fh62MnwcuNwsg6wIDAQAB o4IC2DCCAtQwHQYDVR0OBBYEFO+fHjgmVBCzwqki0xacTymVFBotMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2Q2ZmIx Yy05NWMzLTRiZmYtODU1Ni04MDU3ZGE3NTQ0NTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvZDZmYjFj LTk1YzMtNGJmZi04NTU2LTgwNTdkYTc1NDQ1Mi8xLzc1OGVPQ1pVRUxQQ3FTTFRG cHhQS1pVVUdpMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQCAjhQAwQCLZz0AwQCuY6IAwQBwSHeAwQAwSS2 AwQAwWgkAwQAwwg+MA0EAgACMAcDBQMqBy2AMB8GCCsGAQUFBwEIAQH/BBAwDqAM MAoCAwCnsQIDAK4+MA0GCSqGSIb3DQEBCwUAA4IBAQCpLW4NJ25/TO/pIOwO31Ve DlCj/7OVHtpy8gPg2mSN6HHJpJBB0BZHPV5WJLMs21OyExNLVMQcf/L1n4yFX2Sn Wj/RnupMjfW+iNsg6ikmBcXagz/XKJz3lG9jlhoM8u9xcNwVaJASrjsG5w+niJqw RWAqeSr3xyYA4+WcZ/zlcFSTWXpFe3z05S7crMsML7PwvbSErR9xoUKRKRnT7m8V UCjd73tRPs99/xxpQDwzlWNRB3GL0N/96yqllLiC5IpvEJIz0eQ79LErMD0uS1Cu FkMfsZBDxlgaBYc4Q7IfP21VDLgFzJkHcy18WO3JzugZCpkPxCR+3hwr0RyFmsHb -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:22 2026 by rpki-client