This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer File: G87kBAWu-22hejQO7xWc6cTRgyI.cer (raw, json) Hash identifier: AJ98HGermKWovmjHCk1B4EkbMhRwQ+Gwmtb6cqHZDu8= Subject key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14F1280FB790C1E10FE0AA4077E479 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62105 IP: 82.163.40.0/21 IP: 185.47.132.0/22 IP: 2a01:90a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f1:28:0f:b7:90:c1:e1:0f:e0:aa:40:77:e4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bcee40405aefb6da17a340eef159ce9c4d18322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3d:05:d5:d9:1c:49:98:6b:3f:fb:00:51:66: 8d:23:c2:cb:db:18:7a:d4:d1:01:9c:67:f8:c3:f8: 49:df:11:c1:ea:08:c2:02:00:7c:3b:5b:1e:49:01: 0b:31:ab:b3:27:f4:aa:2f:8d:18:2f:fd:74:5d:06: 37:d4:63:77:2e:c3:dc:ce:a4:e2:ba:eb:77:55:cc: 58:9f:c7:1e:29:5a:3c:83:83:ea:54:b1:64:c8:3f: cc:92:1a:19:c6:4c:13:c0:ed:51:e0:57:23:29:be: 99:07:b8:96:62:f0:d4:64:05:6e:b3:a5:c4:80:15: 14:b5:ea:a4:99:93:fc:ee:21:47:c4:e5:20:16:8a: 23:2e:49:08:1c:f5:3a:d5:c6:63:ce:27:5a:30:e4: d9:64:08:f5:c8:2d:0c:4d:39:e4:0a:ac:ee:b5:a3: bc:4a:78:8e:af:1b:71:b3:9d:1b:32:7a:21:24:68: dd:a9:6a:ad:f2:d6:70:17:ed:4b:72:07:4a:88:ac: fd:17:62:b6:74:c5:fb:a2:59:95:c5:c8:c0:e5:e9: 82:e7:58:80:70:0d:b1:30:8f:8a:f8:8d:26:3a:78: d7:d4:f4:62:0c:d0:af:11:a3:ec:a9:7d:0c:07:96: 98:73:8d:9f:df:0f:09:85:37:f9:57:d4:b4:17:24: 8a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.40.0/21 185.47.132.0/22 IPv6: 2a01:90a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62105 Signature Algorithm: sha256WithRSAEncryption a4:e5:c4:5d:e2:cd:ec:9c:33:49:59:19:fd:b1:dc:92:7d:52: 43:30:d3:77:1a:79:c9:1a:c4:bf:ef:cc:24:03:b4:4e:4a:60: 5b:3e:01:ce:02:53:d8:64:34:1d:0a:f7:8a:97:f4:ff:12:9c: 48:ce:ae:12:42:81:c6:ee:70:d9:c4:fc:36:5f:51:6e:81:5f: e6:5c:43:41:19:6c:fb:7d:2c:22:cd:1a:57:a5:f9:b8:fd:cf: bd:59:27:30:f1:ae:e6:dc:67:1f:63:f0:1d:8c:1f:15:de:9c: 3f:3b:01:04:46:16:e7:38:f4:24:b3:e6:8f:eb:8d:f9:49:9a: 96:0d:33:78:5c:5c:27:1b:a3:c3:c1:65:aa:4b:e5:65:a5:9e: a3:4b:7c:b5:28:7b:fa:2e:14:9d:d1:d9:c0:47:09:f7:31:7d: 64:ab:fe:be:04:19:1f:8d:b2:fb:de:ec:63:0c:e9:92:0f:3e: 10:95:22:d9:fa:30:5b:78:a6:8b:86:48:99:ff:1d:7a:bb:ff: 5e:2d:f4:f4:e2:db:ea:84:db:92:41:b4:ec:59:e8:c0:5e:50: d8:a6:6e:da:22:46:2d:e6:53:6f:74:2f:06:ff:c0:83:c0:66: 88:77:fe:3d:73:66:5b:fa:de:4d:62:7f:8a:b7:ae:fa:58:e2: 8a:d7:0d:a2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FPEoD7eQweEP4KpAd+R5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmNlZTQwNDA1YWVmYjZkYTE3YTM0MGVlZjE1OWNlOWM0ZDE4MzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD0F1dkcSZhrP/sAUWaNI8LL2xh6 1NEBnGf4w/hJ3xHB6gjCAgB8O1seSQELMauzJ/SqL40YL/10XQY31GN3LsPczqTi uut3VcxYn8ceKVo8g4PqVLFkyD/MkhoZxkwTwO1R4FcjKb6ZB7iWYvDUZAVus6XE gBUUteqkmZP87iFHxOUgFoojLkkIHPU61cZjzidaMOTZZAj1yC0MTTnkCqzutaO8 SniOrxtxs50bMnohJGjdqWqt8tZwF+1LcgdKiKz9F2K2dMX7olmVxcjA5emC51iA cA2xMI+K+I0mOnjX1PRiDNCvEaPsqX0MB5aYc42f3w8JhTf5V9S0FySKrwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFBvO5AQFrvttoXo0Du8VnOnE0YMiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjL2FmODlk OC04YzM1LTRjOGMtYjE1ZC03ZTQ2YWQ3NDg0ODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvYWY4OWQ4 LThjMzUtNGM4Yy1iMTVkLTdlNDZhZDc0ODQ4NC8xL0c4N2tCQVd1LTIyaGVqUU83 eFdjNmNUUmd5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDUqMoAwQCuS+EMA0EAgACMAcDBQAqAZCgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDymTANBgkqhkiG9w0BAQsFAAOCAQEApOXE XeLN7JwzSVkZ/bHckn1SQzDTdxp5yRrEv+/MJAO0TkpgWz4BzgJT2GQ0HQr3ipf0 /xKcSM6uEkKBxu5w2cT8Nl9RboFf5lxDQRls+30sIs0aV6X5uP3PvVknMPGu5txn H2PwHYwfFd6cPzsBBEYW5zj0JLPmj+uN+Umalg0zeFxcJxujw8FlqkvlZaWeo0t8 tSh7+i4UndHZwEcJ9zF9ZKv+vgQZH42y+97sYwzpkg8+EJUi2fowW3imi4ZImf8d erv/Xi309OLb6oTbkkG07FnowF5Q2KZu2iJGLeZTb3QvBv/Ag8BmiHf+PXNmW/re TWJ/ireu+ljiitcNog== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:52 2026 by rpki-client