This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer File: ArqdsmdPc0Vl8JUzk_ClaWHKV8g.cer (raw, json) Hash identifier: JYtX3IaD4mL9dImQ9fy2r1eCwuywEB1WD6BYtIxR2ug= Subject key identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E391D656F8E4E1C932AA23A234983AB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201284 IP: 185.79.216.0/22 IP: 2a05:75c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1d:65:6f:8e:4e:1c:93:2a:a2:3a:23:49:83:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02ba9db2674f734565f0953393f0a56961ca57c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:d6:ec:55:be:a5:60:e2:87:33:68:32:69: 29:40:af:99:a0:98:e8:3b:f6:fa:f9:18:46:79:85: f1:b3:63:a5:0c:9b:81:d5:56:91:6b:f6:da:e0:6b: cc:60:74:d3:3d:1e:66:2b:3b:a1:df:50:0e:d4:c7: 49:cc:89:11:67:6d:91:9f:44:58:f1:69:c7:c9:32: ce:0a:c2:4a:c9:74:19:16:b0:ed:b0:55:b0:db:e4: 92:2a:1f:e3:b7:03:3b:42:f2:8a:a5:be:7e:72:1d: 19:05:8f:96:85:bc:5c:d1:8d:86:26:ef:a5:d3:4d: 0f:55:50:14:7c:84:70:b7:3d:3e:4b:90:52:28:0c: eb:ef:d3:97:ec:a7:8f:3b:69:3d:9b:ac:d9:29:68: 3c:1e:8a:30:95:77:40:5b:56:8b:76:5e:0c:03:37: 77:8e:e5:27:b3:a8:13:60:c9:68:2c:5e:09:e6:84: a3:4b:92:e2:28:38:42:e5:db:8d:24:97:8c:97:d6: fb:fe:28:fd:dd:b4:f9:41:0b:57:eb:d8:78:53:7a: a4:3f:d6:12:4e:12:0d:cd:b9:3b:97:2f:93:05:39: 58:6f:66:25:af:b6:2f:93:87:fc:d1:8d:5f:de:84: ce:4f:53:50:03:4a:a7:b9:26:48:a0:c3:a7:e8:49: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BA:9D:B2:67:4F:73:45:65:F0:95:33:93:F0:A5:69:61:CA:57:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c5dab-e01e-4546-8c38-ff86146f8cc8/1/ArqdsmdPc0Vl8JUzk_ClaWHKV8g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.216.0/22 IPv6: 2a05:75c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201284 Signature Algorithm: sha256WithRSAEncryption 19:b5:cc:0d:25:22:dd:c1:2a:59:ce:22:2d:9d:40:a6:4c:06: 2d:0e:29:3f:8e:8f:a0:ac:bf:95:4b:e9:39:a4:d9:cf:74:be: 04:28:4f:ed:a6:75:e2:58:0e:6e:38:d0:b6:a3:e0:06:dc:8f: 81:d0:df:0e:ec:3d:76:51:f1:db:f6:87:d3:7d:a5:3f:7a:ce: f4:5c:56:95:68:70:69:40:95:60:d1:ee:c7:d7:b9:db:dd:5d: fe:12:85:89:9e:40:a7:a2:33:3c:01:6f:ba:58:5b:61:6d:b6: d2:3e:4b:62:c1:a4:15:6a:c7:cc:43:a1:c4:ed:5c:d4:e8:a6: 8e:47:f1:c6:a3:1a:05:97:fd:c5:0e:76:44:88:12:3c:a9:ee: e2:43:0b:62:e2:27:ed:b1:84:1d:2f:d3:12:4d:a2:54:54:3c: 44:ad:13:7e:65:a5:f4:56:c2:b4:66:9d:1d:c4:5a:07:bf:bc: 2b:88:04:42:96:78:2c:c9:e8:a1:98:ea:81:ea:11:14:cc:cb: b9:17:a5:08:31:fe:be:03:a6:aa:57:e6:7e:1e:f6:c3:d3:25: 6a:2c:18:46:86:1b:f6:25:14:04:d4:9b:4c:40:35:38:74:2a: 95:fd:90:54:f4:93:28:6e:f9:72:36:ee:b7:0a:7a:9e:ea:8f: 50:99:b5:54 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OR1lb45OHJMqojojSYOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmJhOWRiMjY3NGY3MzQ1NjVmMDk1MzM5M2YwYTU2OTYxY2E1N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhjW7FW+pWDihzNoMmkpQK+ZoJjo O/b6+RhGeYXxs2OlDJuB1VaRa/ba4GvMYHTTPR5mKzuh31AO1MdJzIkRZ22Rn0RY 8WnHyTLOCsJKyXQZFrDtsFWw2+SSKh/jtwM7QvKKpb5+ch0ZBY+Whbxc0Y2GJu+l 000PVVAUfIRwtz0+S5BSKAzr79OX7KePO2k9m6zZKWg8HoowlXdAW1aLdl4MAzd3 juUns6gTYMloLF4J5oSjS5LiKDhC5duNJJeMl9b7/ij93bT5QQtX69h4U3qkP9YS ThINzbk7ly+TBTlYb2Ylr7Yvk4f80Y1f3oTOT1NQA0qnuSZIoMOn6EnDuQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAK6nbJnT3NFZfCVM5PwpWlhylfIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzljNWRh Yi1lMDFlLTQ1NDYtOGMzOC1mZjg2MTQ2ZjhjYzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvOWM1ZGFi LWUwMWUtNDU0Ni04YzM4LWZmODYxNDZmOGNjOC8xL0FycWRzbWRQYzBWbDhKVXpr X0NsYVdIS1Y4Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuU/YMA0EAgACMAcDBQMqBXXAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMSRDANBgkqhkiG9w0BAQsFAAOCAQEAGbXMDSUi3cEq Wc4iLZ1ApkwGLQ4pP46PoKy/lUvpOaTZz3S+BChP7aZ14lgObjjQtqPgBtyPgdDf Duw9dlHx2/aH032lP3rO9FxWlWhwaUCVYNHux9e5291d/hKFiZ5Ap6IzPAFvulhb YW220j5LYsGkFWrHzEOhxO1c1OimjkfxxqMaBZf9xQ52RIgSPKnu4kMLYuIn7bGE HS/TEk2iVFQ8RK0TfmWl9FbCtGadHcRaB7+8K4gEQpZ4LMnooZjqgeoRFMzLuRel CDH+vgOmqlfmfh72w9MlaiwYRoYb9iUUBNSbTEA1OHQqlf2QVPSTKG75cjbutwp6 nuqPUJm1VA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:15 2026 by rpki-client