This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer File: T893EF-VB1zlhdQn6XdU6PAHqLk.cer (raw, json) Hash identifier: g6DX6TYd4uiID6rnATBaKp3c2RRH0l5HrR7ADaNc0VY= Subject key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79111DC0091DE7E81702B08EFACA1393 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199805 IP: 185.45.144.0/22 IP: 2a01:7e20::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1d:c0:09:1d:e7:e8:17:02:b0:8e:fa:ca:13:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fcf77105f95075ce585d427e97754e8f007a8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:bb:29:e7:02:27:a0:d4:3b:42:be:e9:aa: f6:03:4a:c9:21:93:4a:ba:73:0d:67:c7:2c:84:5d: 01:5d:92:fe:84:ce:46:43:4a:56:c1:8f:a0:88:02: 22:20:fe:cc:f4:4b:55:f0:c5:84:07:eb:d3:93:1f: 74:93:81:98:3c:fa:9f:43:8c:a6:cb:b1:cd:b5:c4: 4c:83:81:c2:36:ec:a2:04:16:bc:36:5d:e7:a1:d1: 47:14:1d:45:44:39:2f:96:e9:e0:08:ad:24:06:86: 21:19:2c:e1:53:6f:09:37:52:e0:7d:2b:de:aa:33: f1:41:4b:dc:ed:09:80:6a:1b:56:ff:38:c0:7c:da: e6:65:da:e8:89:95:c2:ee:0d:48:fe:4e:39:51:4a: 48:b9:a7:77:49:c4:52:fa:ec:dd:a2:e7:d2:97:11: 48:d1:c5:ef:da:60:38:a6:cf:37:07:1a:e0:ff:16: 53:a8:cc:5e:ac:56:8b:17:d8:4c:45:a8:b1:6c:50: db:cd:5e:bb:8e:ea:42:5e:3c:5f:6a:7a:78:a3:e5: 2e:27:e3:10:f2:9c:26:9d:c1:b3:de:93:ec:f5:31: a5:26:fb:2c:db:4a:e2:ea:bf:70:93:b3:0d:d8:4b: 0e:39:7a:86:c2:5a:21:eb:69:7f:6c:e3:5d:ea:43: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.144.0/22 IPv6: 2a01:7e20::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199805 Signature Algorithm: sha256WithRSAEncryption 34:b8:37:aa:76:6f:76:bd:51:44:03:98:b8:29:25:e0:29:36: 3d:3e:55:77:c7:60:8b:6a:96:68:dd:31:4d:db:f0:7a:de:cf: b4:ad:45:70:eb:58:1b:51:75:db:2f:4a:79:2d:c3:9e:12:66: 81:ae:b4:3c:1b:6c:84:31:e3:ac:ed:1a:f9:5a:03:0a:bb:aa: 3b:77:70:be:57:c3:c3:32:f9:42:10:c4:01:0e:84:8b:ab:45: 6d:29:65:61:db:df:b5:ed:88:12:0b:23:71:a3:39:e9:40:5c: 3b:c0:e1:56:44:9a:73:18:fe:4f:b4:42:cf:d6:9b:05:4a:d3: 67:36:b3:77:96:6a:61:0c:cf:a9:ec:06:56:34:21:ec:49:a3: 0d:7d:b9:7b:be:04:98:25:41:05:5e:b7:4b:99:e8:b2:45:58: 66:db:78:31:36:a2:35:c7:46:e4:bb:a7:2d:fd:fa:d6:56:e4: 70:c4:f3:5c:79:43:2f:55:78:ea:2b:e8:d6:0d:da:80:01:57: 66:70:cc:ec:23:09:dc:49:69:e2:8b:41:1a:ca:37:32:43:8e: fe:ea:01:1f:33:c9:f6:fc:64:b1:1e:bf:0c:1e:53:78:b2:61: a6:e6:3e:00:15:eb:6e:45:58:fa:c1:a5:89:c6:12:04:88:76: 54:f9:b0:8d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ER3ACR3n6BcCsI76yhOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmNmNzcxMDVmOTUwNzVjZTU4NWQ0MjdlOTc3NTRlOGYwMDdhOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYG7KecCJ6DUO0K+6ar2A0rJIZNK unMNZ8cshF0BXZL+hM5GQ0pWwY+giAIiIP7M9EtV8MWEB+vTkx90k4GYPPqfQ4ym y7HNtcRMg4HCNuyiBBa8Nl3nodFHFB1FRDkvlungCK0kBoYhGSzhU28JN1LgfSve qjPxQUvc7QmAahtW/zjAfNrmZdroiZXC7g1I/k45UUpIuad3ScRS+uzdoufSlxFI 0cXv2mA4ps83Bxrg/xZTqMxerFaLF9hMRaixbFDbzV67jupCXjxfanp4o+UuJ+MQ 8pwmncGz3pPs9TGlJvss20ri6r9wk7MN2EsOOXqGwloh62l/bONd6kPMrQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFE/PdxBflQdc5YXUJ+l3VOjwB6i5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzEzOWVi ZC01YWJmLTQyNTQtODkzMy02Zjk3ZGZjMTBmZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMTM5ZWJk LTVhYmYtNDI1NC04OTMzLTZmOTdkZmMxMGZlNy8xL1Q4OTNFRi1WQjF6bGhkUW42 WGRVNlBBSHFMay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuS2QMA0EAgACMAcDBQMqAX4gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMMfTANBgkqhkiG9w0BAQsFAAOCAQEANLg3qnZvdr1R RAOYuCkl4Ck2PT5Vd8dgi2qWaN0xTdvwet7PtK1FcOtYG1F12y9KeS3DnhJmga60 PBtshDHjrO0a+VoDCruqO3dwvlfDwzL5QhDEAQ6Ei6tFbSllYdvfte2IEgsjcaM5 6UBcO8DhVkSacxj+T7RCz9abBUrTZzazd5ZqYQzPqewGVjQh7EmjDX25e74EmCVB BV63S5noskVYZtt4MTaiNcdG5LunLf361lbkcMTzXHlDL1V46ivo1g3agAFXZnDM 7CMJ3Elp4otBGso3MkOO/uoBHzPJ9vxksR6/DB5TeLJhpuY+ABXrbkVY+sGlicYS BIh2VPmwjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:09 2026 by rpki-client