This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer File: T02gn7vpD7efDwiyB_g18PDaKf4.cer (raw, json) Hash identifier: Ldb/vl5PhI7c4c7bffFKXez0tvtOScWVHMdiLjenEgs= Subject key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783554419537171F3EB141CB90C05BED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197066 IP: 185.75.152.0/22 IP: 193.104.116.0/24 IP: 2a03:4ae0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:54:41:95:37:17:1f:3e:b1:41:cb:90:c0:5b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:e0:70:2f:68:61:17:91:29:01:6a:e2:12: ca:5c:e0:a6:9d:33:b8:16:f2:18:9d:93:b4:72:3d: 96:4a:24:73:23:6e:28:67:13:8d:6d:14:d0:30:00: 8f:f8:54:37:e0:a5:9c:78:05:b1:c2:52:29:10:05: 6f:68:74:e8:b7:2d:4c:81:8e:02:31:61:ea:98:ee: a9:1f:80:96:e6:47:b6:6b:0d:9f:5e:91:e0:5c:a3: c8:80:04:61:c9:bf:d5:21:7e:ef:fc:f0:61:ec:31: d1:d1:69:82:b6:8d:ea:4c:0c:d1:2f:b4:cc:a6:7b: ca:84:b6:2c:a5:bf:dd:65:7a:60:96:9e:96:0a:3f: 52:2b:0d:53:14:5d:e9:44:73:b3:44:59:65:04:3e: ff:f6:bd:c7:82:76:4d:2b:0a:a1:cb:0d:3a:75:db: 1c:6e:bb:64:b6:ad:a1:a4:84:72:52:20:ed:33:5d: 32:da:dc:3d:f5:c2:09:68:31:28:de:01:85:93:e7: 41:1d:7a:4a:23:f8:71:2c:a9:f1:e6:7d:24:b8:78: f7:44:7f:e6:01:a2:6c:73:08:bd:8e:b2:56:e8:65: 0f:10:35:77:48:43:47:36:6c:d1:04:16:a4:d7:a2: 34:fe:aa:a3:be:e2:25:a2:21:06:e0:34:e4:48:33: a5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.152.0/22 193.104.116.0/24 IPv6: 2a03:4ae0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197066 Signature Algorithm: sha256WithRSAEncryption ac:7b:92:bf:d0:11:82:31:ee:30:a2:55:53:79:38:c5:f3:86: a4:6e:85:ea:3c:f1:42:c0:d1:aa:d0:4c:c5:5a:cf:84:c3:52: a6:bc:34:58:4b:b0:5c:e4:32:49:97:db:b4:a0:aa:8e:57:00: 79:06:55:37:dd:81:97:46:08:b1:27:a1:e6:98:db:d0:60:0d: 5c:8f:3a:df:23:a6:3f:b0:a3:d6:f0:e4:73:c9:d9:6a:a8:b4: 51:d0:c3:19:90:17:8b:7e:87:b5:d2:03:e0:e9:4a:30:99:ad: 35:43:17:d8:3c:c1:ca:2a:36:89:b5:01:e7:da:13:b3:93:5c: 4e:26:92:22:fb:04:f7:8d:1a:78:ac:39:9c:6f:57:03:0b:da: 96:54:de:67:78:1f:04:df:d8:8b:2c:fa:8e:21:ec:2c:1b:15: 8f:82:ad:4e:32:cd:f5:81:1a:32:7f:fb:f6:5d:6c:1b:ea:24: 16:1b:fe:6c:2b:66:df:27:fd:be:b5:c9:fa:e2:fb:b0:3b:c6: 0b:83:ff:5c:9e:82:0e:f8:c2:5c:6f:8c:07:40:0e:cf:92:87: 60:4e:b2:00:e0:2d:68:77:4f:d6:6a:c6:07:fa:47:ea:53:fc: ca:3d:de:86:19:0a:39:cf:7d:29:bd:ad:88:a1:04:3e:18:63: 7f:15:1d:9c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt4NVRBlTcXHz6xQcuQwFvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjRkYTA5ZmJiZTkwZmI3OWYwZjA4YjIwN2Y4MzVmMGYwZGEyOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA253gcC9oYReRKQFq4hLKXOCmnTO4 FvIYnZO0cj2WSiRzI24oZxONbRTQMACP+FQ34KWceAWxwlIpEAVvaHToty1MgY4C MWHqmO6pH4CW5ke2aw2fXpHgXKPIgARhyb/VIX7v/PBh7DHR0WmCto3qTAzRL7TM pnvKhLYspb/dZXpglp6WCj9SKw1TFF3pRHOzRFllBD7/9r3HgnZNKwqhyw06ddsc brtktq2hpIRyUiDtM10y2tw99cIJaDEo3gGFk+dBHXpKI/hxLKnx5n0kuHj3RH/m AaJscwi9jrJW6GUPEDV3SENHNmzRBBak16I0/qqjvuIloiEG4DTkSDOl5QIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFE9NoJ+76Q+3nw8Isgf4NfDw2in+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzY2YmQz YS01MTIxLTQ5MGQtOGM5Mi02ZWE5NGE5NjFkNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNjZiZDNh LTUxMjEtNDkwZC04YzkyLTZlYTk0YTk2MWQ0Yy8xL1QwMmduN3ZwRDdlZkR3aXlC X2cxOFBEYUtmNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuUuYAwQAwWh0MA0EAgACMAcDBQAqA0rgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMByjANBgkqhkiG9w0BAQsFAAOCAQEArHuS v9ARgjHuMKJVU3k4xfOGpG6F6jzxQsDRqtBMxVrPhMNSprw0WEuwXOQySZfbtKCq jlcAeQZVN92Bl0YIsSeh5pjb0GANXI863yOmP7Cj1vDkc8nZaqi0UdDDGZAXi36H tdID4OlKMJmtNUMX2DzByio2ibUB59oTs5NcTiaSIvsE940aeKw5nG9XAwvallTe Z3gfBN/Yiyz6jiHsLBsVj4KtTjLN9YEaMn/79l1sG+okFhv+bCtm3yf9vrXJ+uL7 sDvGC4P/XJ6CDvjCXG+MB0AOz5KHYE6yAOAtaHdP1mrGB/pH6lP8yj3ehhkKOc99 Kb2tiKEEPhhjfxUdnA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:53:27 2026 by rpki-client