This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer File: A4uZY8lywdegPflvrSX2jr1PoUk.cer (raw, json) Hash identifier: 4UWhFGfgfTTJ/6wTQOLaRq54XeKYFKtdZ5ccUsKcgSk= Subject key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834507D25180A1DED8BD585318F9B0B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31662 IP: 94.228.144.0/20 IP: 185.27.4.0/22 IP: 185.251.56.0/22 IP: 217.151.112.0/20 IP: 2a00:d28::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:50:7d:25:18:0a:1d:ed:8b:d5:85:31:8f:9b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:f3:0e:8a:e9:d6:ca:88:7b:1b:b7:7f:ea: fc:e5:45:1f:47:a8:b2:ce:9d:cb:02:b0:0a:69:84: a6:e8:10:63:ec:5f:74:45:ab:4d:56:6f:72:08:97: d5:0e:e6:77:dd:86:b4:37:d2:95:96:57:6b:1e:1c: 28:f1:c5:8d:49:10:3d:6f:83:d1:f5:a6:85:10:73: 21:69:df:6b:55:46:f1:9d:87:e4:fe:c1:33:aa:f0: 34:be:9c:24:5d:61:a4:e6:9d:c5:cf:0a:e3:e5:de: 6d:0e:ef:ab:ef:11:e1:e1:f1:dd:73:39:9c:0f:8b: 5f:d5:b2:7b:82:01:65:0b:30:68:7d:49:4c:f2:b9: 9c:c5:5c:77:20:c6:a5:84:39:9b:52:de:2f:92:9e: 00:13:6c:80:3d:78:01:54:bc:d0:cb:4a:0d:d2:00: 2f:35:bc:bf:4b:c4:50:30:db:27:32:70:0e:28:3d: 3e:ab:1f:0a:f5:2d:e2:8f:34:16:2b:53:90:5a:8e: 8d:19:d1:e5:b7:39:bd:e0:cb:8c:db:8e:1e:cb:e6: ab:de:f6:cb:10:9b:fb:21:f6:5e:65:54:c0:f5:0b: 0e:03:c3:8e:8f:3e:10:dd:fc:4c:e8:d7:b9:6f:f8: 69:c7:55:c1:9a:6d:8a:b7:0a:50:e7:ad:7a:88:60: d7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.144.0/20 185.27.4.0/22 185.251.56.0/22 217.151.112.0/20 IPv6: 2a00:d28::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31662 Signature Algorithm: sha256WithRSAEncryption 13:e8:b4:23:6c:bd:b0:e5:de:89:62:fc:6e:60:f7:be:77:4c: 53:d2:f4:ed:f5:b6:73:0f:61:c3:0a:7f:6d:f2:87:8a:cc:f6: c0:21:cf:14:54:3e:21:84:e9:0e:19:2e:0f:3e:c3:aa:f4:0c: 73:43:eb:e9:41:93:ce:d3:36:b5:9d:38:23:05:4f:ee:10:21: 65:8b:b8:a0:85:d7:b2:30:a0:d6:32:f1:aa:22:3a:53:e2:4d: 33:5c:de:54:35:e0:63:21:e4:56:ae:23:de:2f:73:a4:6e:a3: e4:f4:5c:aa:1f:9b:26:3c:45:c2:24:dc:9e:7b:37:48:d8:7c: f5:ca:0c:94:b9:46:31:5d:57:da:d2:63:2a:8f:18:4d:81:10: 4c:e7:2b:84:b6:fc:e7:58:37:f5:73:ff:8f:c6:92:ea:d7:21: ec:a2:f4:d0:d7:07:fd:18:ed:81:7e:a9:42:cd:a7:79:d2:87: 02:12:11:cf:49:9b:1d:08:a2:1b:d2:73:8a:75:31:6e:b8:14: a5:e8:42:c0:be:92:d0:bb:26:da:de:05:c7:7b:9e:b0:6e:3c: 11:01:f8:bf:61:9a:78:b5:51:d7:3b:e8:b7:a0:19:71:80:3a: 86:b7:6b:34:47:06:f3:d0:a9:39:4a:9c:57:90:46:98:ec:5e: 83:5a:9c:52 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt4NFB9JRgKHe2L1YUxj5sLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzhiOTk2M2M5NzJjMWQ3YTAzZGY5NmZhZDI1ZjY4ZWJkNGZhMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqHzDorp1sqIexu3f+r85UUfR6iy zp3LArAKaYSm6BBj7F90RatNVm9yCJfVDuZ33Ya0N9KVlldrHhwo8cWNSRA9b4PR 9aaFEHMhad9rVUbxnYfk/sEzqvA0vpwkXWGk5p3Fzwrj5d5tDu+r7xHh4fHdczmc D4tf1bJ7ggFlCzBofUlM8rmcxVx3IMalhDmbUt4vkp4AE2yAPXgBVLzQy0oN0gAv Nby/S8RQMNsnMnAOKD0+qx8K9S3ijzQWK1OQWo6NGdHltzm94MuM244ey+ar3vbL EJv7IfZeZVTA9QsOA8OOjz4Q3fxM6Ne5b/hpx1XBmm2KtwpQ5616iGDXgQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFAOLmWPJcsHXoD35b60l9o69T6FJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1LzUwNjgw MS1iOTRkLTRiNWQtOTRhYi02MTYzYjk5N2I2NDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvNTA2ODAx LWI5NGQtNGI1ZC05NGFiLTYxNjNiOTk3YjY0Mi8xL0E0dVpZOGx5d2RlZ1BmbHZy U1gyanIxUG9Vay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQEXuSQAwQCuRsEAwQCufs4AwQE2ZdwMA0EAgAC MAcDBQAqAA0oMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAnuuMA0GCSqGSIb3DQEB CwUAA4IBAQAT6LQjbL2w5d6JYvxuYPe+d0xT0vTt9bZzD2HDCn9t8oeKzPbAIc8U VD4hhOkOGS4PPsOq9AxzQ+vpQZPO0za1nTgjBU/uECFli7ighdeyMKDWMvGqIjpT 4k0zXN5UNeBjIeRWriPeL3OkbqPk9FyqH5smPEXCJNyeezdI2Hz1ygyUuUYxXVfa 0mMqjxhNgRBM5yuEtvznWDf1c/+PxpLq1yHsovTQ1wf9GO2BfqlCzad50ocCEhHP SZsdCKIb0nOKdTFuuBSl6ELAvpLQuyba3gXHe56wbjwRAfi/YZp4tVHXO+i3oBlx gDqGt2s0Rwbz0Kk5SpxXkEaY7F6DWpxS -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:58 2026 by rpki-client