This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer File: F2YCXZOeDHsc9GwCGez6JaGVOCU.cer (raw, json) Hash identifier: yAbQMCE8f+dzahRUC5DVIE9gCHUWEmEqsgXO4RuYAkA= Subject key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758BDFDA96FC5574D7FC03BE068197D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204490 IP: 185.154.20.0/22 IP: 185.186.140.0/22 IP: 185.247.140.0 -- 185.247.142.255 IP: 2a0d:c580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bd:fd:a9:6f:c5:57:4d:7f:c0:3b:e0:68:19:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:84:94:c9:91:a7:1f:1a:7d:57:0c:0a:9e: 1f:df:5e:e1:c4:f8:e9:6d:00:10:33:d1:c2:e0:c9: 75:41:25:e0:4e:c2:f3:06:98:fa:f0:98:8d:51:59: 1d:f9:74:9e:bc:7f:33:24:c9:18:88:77:e3:8a:5f: 38:89:7b:a9:8a:2b:46:46:9d:d2:6f:75:7e:bc:43: 20:f5:cc:16:30:4c:dd:58:17:56:c4:3c:2c:ec:57: b2:dc:63:3c:81:9c:3d:3a:0a:58:4d:c6:f2:ff:05: 2f:05:bb:ff:53:3b:26:b6:f7:1f:5b:2b:0e:c4:a7: 44:c7:41:e8:35:83:a7:70:a2:11:da:42:88:0a:ec: ed:45:b0:46:7f:8b:c1:5f:78:ff:8f:41:60:ef:7d: ed:5d:27:7d:dc:02:cd:5c:ea:09:23:fd:93:54:b1: e5:ff:58:ef:e9:5a:49:1b:6b:f4:65:2a:d0:66:c9: e4:f2:de:97:11:7e:73:22:2a:37:0c:9e:d2:70:a3: 5b:6d:69:0d:a6:c5:6d:12:2f:ca:73:a5:a9:a8:34: 0e:88:07:81:11:1e:77:42:50:8a:4b:b0:5e:6a:51: 36:e8:a7:e9:0b:1d:1f:32:11:58:27:34:07:f4:22: be:00:fc:6a:59:6d:74:0b:9e:e5:65:78:14:a8:02: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.20.0/22 185.186.140.0/22 185.247.140.0-185.247.142.255 IPv6: 2a0d:c580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204490 Signature Algorithm: sha256WithRSAEncryption 6d:5a:45:cc:24:a5:90:53:23:89:41:c9:30:9a:92:3d:9a:f6: 91:33:df:7f:35:2f:92:7c:95:81:1f:1f:ec:65:84:fd:93:30: 84:eb:2c:01:11:c2:e2:5a:49:7d:79:ff:2e:80:34:01:15:ff: b5:5b:69:96:a4:d5:c1:cc:29:62:86:3f:3d:14:99:28:49:9d: af:4f:d8:04:b1:d0:b2:81:7b:a7:1a:bc:0f:ed:2e:ba:76:7c: 87:25:20:f4:48:91:e0:ca:38:22:f1:79:56:82:a0:eb:a2:34: fb:24:7b:60:1f:e9:aa:1a:b8:7f:e8:2d:b7:a4:83:8b:c1:84: d0:dd:cb:7d:a8:a0:19:af:36:ff:3e:ca:76:7c:71:77:31:5a: d8:90:4e:c6:6e:87:9b:40:5f:4c:da:ff:f2:a0:e2:72:69:e9: da:9e:b1:7a:87:58:10:33:a8:cb:ec:4b:dc:b1:30:97:60:b0: 0e:45:ed:1a:a7:4d:e5:72:bf:e3:a6:4c:c1:c6:de:90:7f:c8: 3d:16:f4:5b:72:16:1e:06:0f:df:bd:fe:0e:51:31:28:a0:2a: 0e:7b:e3:16:1c:05:42:cb:c2:3e:29:d9:d9:3b:64:d8:9f:e9: 9b:2e:a9:50:f9:ed:a8:96:b5:dd:d8:65:37:6d:72:4c:05:20: 7b:b7:d5:7e -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgISAZt3WL39qW/FV01/wDvgaBl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzY2MDI1ZDkzOWUwYzdiMWNmNDZjMDIxOWVjZmEyNWExOTUzODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgmElMmRpx8afVcMCp4f317hxPjp bQAQM9HC4Ml1QSXgTsLzBpj68JiNUVkd+XSevH8zJMkYiHfjil84iXupiitGRp3S b3V+vEMg9cwWMEzdWBdWxDws7Fey3GM8gZw9OgpYTcby/wUvBbv/UzsmtvcfWysO xKdEx0HoNYOncKIR2kKICuztRbBGf4vBX3j/j0Fg733tXSd93ALNXOoJI/2TVLHl /1jv6VpJG2v0ZSrQZsnk8t6XEX5zIio3DJ7ScKNbbWkNpsVtEi/Kc6WpqDQOiAeB ER53QlCKS7BealE26KfpCx0fMhFYJzQH9CK+APxqWW10C57lZXgUqAIwKwIDAQAB o4ICwzCCAr8wHQYDVR0OBBYEFBdmAl2Tngx7HPRsAhns+iWhlTglMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzRmMTQx OS02ZTVjLTRkMDUtYTViNy1lMjgzNTJlNzlmN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvNGYxNDE5 LTZlNWMtNGQwNS1hNWI3LWUyODM1MmU3OWY3ZC8xL0YyWUNYWk9lREhzYzlHd0NH ZXo2SmFHVk9DVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTAgBAIAATAaAwQCuZoUAwQCubqMMAwDBAK594wDBAC5944wDQQC AAIwBwMFAyoNxYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAx7KMA0GCSqGSIb3 DQEBCwUAA4IBAQBtWkXMJKWQUyOJQckwmpI9mvaRM99/NS+SfJWBHx/sZYT9kzCE 6ywBEcLiWkl9ef8ugDQBFf+1W2mWpNXBzClihj89FJkoSZ2vT9gEsdCygXunGrwP 7S66dnyHJSD0SJHgyjgi8XlWgqDrojT7JHtgH+mqGrh/6C23pIOLwYTQ3ct9qKAZ rzb/Psp2fHF3MVrYkE7GboebQF9M2v/yoOJyaenanrF6h1gQM6jL7EvcsTCXYLAO Re0ap03lcr/jpkzBxt6Qf8g9FvRbchYeBg/fvf4OUTEooCoOe+MWHAVCy8I+KdnZ O2TYn+mbLqlQ+e2olrXd2GU3bXJMBSB7t9V+ -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:45 2026 by rpki-client