This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer File: ByZq37GLGJ89xNO-bcWWJUvlybE.cer (raw, json) Hash identifier: /EhLBS/GglxqqtFs7SR1sQzJ2HUlg9zTRC7SLIpcs6o= Subject key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC2C3C51932556EE6D1E4BF7C45D43 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204106 IP: 46.20.202.0/23 IP: 77.247.198.0/24 IP: 2a13:1b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2c:3c:51:93:25:56:ee:6d:1e:4b:f7:c4:5d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:0f:df:8f:71:31:84:24:66:39:3c:3b:37: 21:ad:ff:b2:bb:4c:1a:ad:6a:24:b2:0d:79:18:d8: cf:e6:2f:e1:75:57:b5:35:0e:50:a3:e8:a6:22:9a: c3:f3:a6:6d:84:f2:6c:a4:67:91:34:81:54:96:1f: ca:54:25:cf:67:88:61:ed:8f:b5:84:7e:a2:5c:84: 03:0a:0e:5f:12:25:53:4c:dd:44:ff:a0:ee:7e:a6: 6d:60:41:c9:d3:5a:3b:02:30:2d:00:b7:76:c0:95: d3:65:1a:73:3e:69:6a:20:87:46:89:2e:f5:af:aa: fe:41:7f:dc:92:3f:55:35:93:a6:4c:fe:64:87:43: 10:f7:4b:2d:b4:c6:4f:d7:dc:81:da:07:06:18:f2: a9:da:92:aa:96:a0:39:a9:73:d6:ff:41:46:d3:c2: a2:f5:33:86:55:86:0f:66:c1:7a:fe:ce:3c:65:b4: 6d:e9:eb:8c:5e:e7:e2:c2:16:f7:5d:43:db:4f:c5: 1e:0f:8a:72:84:29:e4:74:5e:f3:45:bc:20:51:f9: 02:73:3c:ac:76:80:a2:c2:8e:ae:0f:b1:0f:65:a9: 18:23:63:17:ad:99:e0:4e:c2:53:ec:5d:33:43:66: cf:1b:25:67:0a:58:b0:6d:18:52:d0:8e:eb:02:e8: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.202.0/23 77.247.198.0/24 IPv6: 2a13:1b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204106 Signature Algorithm: sha256WithRSAEncryption 2e:0e:be:48:8e:af:41:26:ed:38:04:8a:44:80:b7:45:4b:df: 31:7d:4e:ff:dc:37:88:94:0f:ef:56:cb:05:99:2e:c6:1f:62: 13:f9:80:62:7f:f0:ea:df:5d:68:98:95:ed:ec:45:61:43:65: a4:47:aa:16:fe:f9:e7:f7:f1:75:c5:5e:41:95:4d:2f:69:d7: 80:30:f3:bf:15:b7:4a:42:91:25:19:70:c3:6e:5f:c9:04:86: 16:30:fc:45:59:03:00:c0:4a:7d:ef:b4:c2:5a:72:ad:42:c9: 8e:e5:02:3d:0e:8e:20:a6:4c:05:a5:b2:09:d7:d1:d7:7b:9b: 73:1b:88:7b:db:40:7c:d8:0c:86:03:4c:d3:62:6c:4f:43:c2: 20:7b:68:6c:1c:e4:6e:c2:f5:e3:a8:8a:27:5c:fd:84:60:3c: a2:86:63:8a:66:bf:84:a6:ac:dc:b4:58:a8:c5:5b:67:63:a5: cd:e7:cc:85:f7:44:07:60:3d:93:00:42:85:d0:ea:2b:d7:a7: 4d:11:88:d9:03:a1:6d:44:cc:4d:f7:c7:a5:83:29:2b:41:8f: 22:6f:e0:23:8e:fd:c7:c2:b3:18:68:b3:5f:1d:5a:5d:53:d1: 2a:7e:0d:f2:52:3b:f2:5e:c1:1a:22:25:4d:dc:fd:b3:4b:67: 77:07:1d:ad -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57Cw8UZMlVu5tHkv3xF1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzI2NmFkZmIxOGIxODlmM2RjNGQzYmU2ZGM1OTYyNTRiZTVjOWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSEP349xMYQkZjk8Ozchrf+yu0wa rWoksg15GNjP5i/hdVe1NQ5Qo+imIprD86ZthPJspGeRNIFUlh/KVCXPZ4hh7Y+1 hH6iXIQDCg5fEiVTTN1E/6DufqZtYEHJ01o7AjAtALd2wJXTZRpzPmlqIIdGiS71 r6r+QX/ckj9VNZOmTP5kh0MQ90sttMZP19yB2gcGGPKp2pKqlqA5qXPW/0FG08Ki 9TOGVYYPZsF6/s48ZbRt6euMXufiwhb3XUPbT8UeD4pyhCnkdF7zRbwgUfkCczys doCiwo6uD7EPZakYI2MXrZngTsJT7F0zQ2bPGyVnCliwbRhS0I7rAujogQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFAcmat+xixifPcTTvm3FliVL5cmxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2Y1N2Nh My00ZmYxLTQwNjQtOWRmNy0zZGEwNTM4OGU5YWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvZjU3Y2Ez LTRmZjEtNDA2NC05ZGY3LTNkYTA1Mzg4ZTlhZS8xL0J5WnEzN0dMR0o4OXhOTy1i Y1dXSlV2bHliRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBLhTKAwQATffGMA0EAgACMAcDBQMqExsAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMdSjANBgkqhkiG9w0BAQsFAAOCAQEALg6+ SI6vQSbtOASKRIC3RUvfMX1O/9w3iJQP71bLBZkuxh9iE/mAYn/w6t9daJiV7exF YUNlpEeqFv755/fxdcVeQZVNL2nXgDDzvxW3SkKRJRlww25fyQSGFjD8RVkDAMBK fe+0wlpyrULJjuUCPQ6OIKZMBaWyCdfR13ubcxuIe9tAfNgMhgNM02JsT0PCIHto bBzkbsL146iKJ1z9hGA8ooZjima/hKas3LRYqMVbZ2OlzefMhfdEB2A9kwBChdDq K9enTRGI2QOhbUTMTffHpYMpK0GPIm/gI479x8KzGGizXx1aXVPRKn4N8lI78l7B GiIlTdz9s0tndwcdrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:47 2026 by rpki-client