This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer File: T51fuq92qApl4OksAgYeiVsrgRc.cer (raw, json) Hash identifier: b/P6kT0AVhP2DRLZvW+smqBamHVOPVHxW63RRXinmYo= Subject key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C72228013B3B27E2A18E7951DC9C11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205832 IP: 185.204.32.0/22 IP: 2a0d:cc00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:28:01:3b:3b:27:e2:a1:8e:79:51:dc:9c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:27:7d:aa:4b:0d:96:31:69:4c:aa:8d:fb:50: 99:87:b5:3c:b1:d7:0d:2e:cf:3f:77:23:4c:4b:36: 2a:5d:6a:2c:18:74:1e:36:d3:62:98:ba:8a:32:d6: b7:dd:1a:aa:b3:fa:1f:0e:68:25:a6:54:b9:e6:63: 4f:21:96:96:fe:14:94:29:ad:1e:e0:b5:60:ee:f6: 69:a1:a2:61:47:f7:dc:7a:26:ec:d6:5a:3a:ad:49: 5c:7e:6d:6c:38:57:19:81:e1:f8:a5:62:1f:35:4c: bb:0c:96:94:43:59:17:71:b3:23:d0:c8:9e:9b:da: a7:98:b6:df:60:34:40:0c:04:9c:bf:12:8d:e9:fc: 6c:ec:7a:1c:3e:48:b6:b6:bd:35:28:49:39:cb:a6: db:aa:13:fb:1b:b3:56:dd:db:18:4b:05:78:94:49: ef:b0:94:8d:ac:0c:db:22:7b:db:3a:0e:de:ef:3d: cd:55:86:dd:86:1b:2e:20:8e:5c:f9:2b:fd:c4:50: 22:42:1e:02:8a:22:7c:b6:e3:ce:cf:5e:30:32:eb: d6:1a:80:d2:31:00:13:7b:0a:46:56:ae:48:71:43: 7a:92:47:3f:91:a8:f6:27:a2:0a:a6:8a:fe:4e:35: 3f:f5:50:ef:a3:77:90:29:e6:4d:2f:a5:86:ac:95: e4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.32.0/22 IPv6: 2a0d:cc00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205832 Signature Algorithm: sha256WithRSAEncryption 7b:f4:0a:0a:85:f1:9a:a4:af:30:b1:c4:54:e2:25:bb:a5:cc: c9:d0:1b:dc:1b:c0:bb:40:11:fe:80:3e:f3:55:30:d1:c5:83: f3:b8:89:98:ba:b8:fb:32:13:05:17:a7:b3:19:fd:0f:7d:08: ec:56:55:cf:54:18:de:f0:1c:69:65:d6:83:cd:1c:52:4b:a7: 7d:0f:70:e7:fb:89:0c:51:57:9d:f1:57:03:e9:b3:dc:46:72: b1:6c:b5:62:11:dc:23:f9:1a:af:20:20:65:b1:b8:b8:f3:41: 51:2a:67:cd:32:55:2b:a3:9f:ed:07:5e:bb:de:14:ef:a4:50: 9a:91:26:db:93:1b:6e:d0:1d:9a:6a:5f:69:30:27:5b:d8:ae: b3:17:d7:31:4b:f0:40:26:a8:8c:75:44:1d:f6:dd:96:b3:30: cf:6a:03:7e:ad:00:7d:7d:72:0d:d7:a1:78:a3:f7:e1:26:d7: 72:b6:62:f4:1b:ab:c3:6e:57:0c:17:5d:e3:9e:a5:5b:f8:b3: 7f:ee:e0:eb:f6:91:90:58:e6:c2:60:17:f6:aa:24:0b:ae:9f: 91:9d:65:4b:a6:17:be:5e:8b:46:df:fe:a4:48:47:05:39:67: 34:81:bf:0c:4e:6a:5a:49:c0:bc:c3:7d:45:05:98:60:c3:7a: 2a:c8:60:90 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xyIoATs7J+KhjnlR3JwRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjlkNWZiYWFmNzZhODBhNjVlMGU5MmMwMjA2MWU4OTViMmI4MTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cd9qksNljFpTKqN+1CZh7U8sdcN Ls8/dyNMSzYqXWosGHQeNtNimLqKMta33Rqqs/ofDmglplS55mNPIZaW/hSUKa0e 4LVg7vZpoaJhR/fceibs1lo6rUlcfm1sOFcZgeH4pWIfNUy7DJaUQ1kXcbMj0Mie m9qnmLbfYDRADAScvxKN6fxs7HocPki2tr01KEk5y6bbqhP7G7NW3dsYSwV4lEnv sJSNrAzbInvbOg7e7z3NVYbdhhsuII5c+Sv9xFAiQh4CiiJ8tuPOz14wMuvWGoDS MQATewpGVq5IcUN6kkc/kaj2J6IKpor+TjU/9VDvo3eQKeZNL6WGrJXkpwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFE+dX7qvdqgKZeDpLAIGHolbK4EXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2M3MDky OC1jZWRlLTRiNjItODlhNy02MGY2ZmE5MTEwZTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvYzcwOTI4 LWNlZGUtNGI2Mi04OWE3LTYwZjZmYTkxMTBlMi8xL1Q1MWZ1cTkycUFwbDRPa3NB Z1llaVZzcmdSYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCucwgMA0EAgACMAcDBQMqDcwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMkCDANBgkqhkiG9w0BAQsFAAOCAQEAe/QKCoXxmqSv MLHEVOIlu6XMydAb3BvAu0AR/oA+81Uw0cWD87iJmLq4+zITBRensxn9D30I7FZV z1QY3vAcaWXWg80cUkunfQ9w5/uJDFFXnfFXA+mz3EZysWy1YhHcI/karyAgZbG4 uPNBUSpnzTJVK6Of7Qdeu94U76RQmpEm25MbbtAdmmpfaTAnW9iusxfXMUvwQCao jHVEHfbdlrMwz2oDfq0AfX1yDdeheKP34SbXcrZi9Burw25XDBdd456lW/izf+7g 6/aRkFjmwmAX9qokC66fkZ1lS6YXvl6LRt/+pEhHBTlnNIG/DE5qWknAvMN9RQWY YMN6KshgkA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:43 2026 by rpki-client