This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer File: a0I7KaGCk2si34-YJt1YOgBZE0o.cer (raw, json) Hash identifier: mJsoYgQ8Wx8eRUtHcvcI0mryt5s8cGezqJUV9PKziJg= Subject key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758E7249292D12A61FCB11D3C7067F2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204550 IP: 94.101.100.0/24 IP: 198.205.102.0/24 IP: 2a0b:eb00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e7:24:92:92:d1:2a:61:fc:b1:1d:3c:70:67:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b423b29a182936b22df8f9826dd583a0059134a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:ff:20:85:e2:1a:f0:0a:42:b7:7f:42:4e: cb:d5:63:29:0c:b6:c3:0f:c1:af:85:ca:92:ac:c6: c2:93:b9:56:72:bd:97:ea:41:33:cb:75:6a:52:ba: 96:ef:f1:76:e7:57:8f:a7:ca:95:26:13:eb:32:fa: dc:4a:46:5c:01:b0:22:ad:fd:f7:f8:94:8d:b1:2b: 0b:85:3d:bf:d7:33:2a:e5:3d:f7:7a:7e:9e:0f:bb: 2c:eb:0d:a2:18:85:85:39:1a:d1:81:4e:72:7a:e4: b5:8d:ee:aa:12:0a:57:2f:cb:c5:bf:96:f8:82:b6: 19:84:6e:f7:60:91:eb:6d:a6:57:7e:27:d1:11:7d: 2d:9b:8c:09:8a:09:00:a8:27:88:e6:9b:fd:d0:a6: 90:28:6f:1a:48:03:f2:86:c8:30:7f:1d:fd:54:ec: 04:dc:1f:43:40:c6:4a:33:7e:43:d9:a9:ce:ee:37: 01:02:50:2a:1e:64:49:81:b4:34:2c:ef:d7:59:70: 12:a9:05:43:1b:45:b3:6d:ab:0d:54:c6:dd:eb:7c: e3:ed:83:ce:75:71:f1:46:15:20:35:dc:bb:39:c5: 18:6c:99:02:b5:92:be:4a:04:00:b2:3a:08:45:54: e7:0b:6a:ba:44:69:7a:ab:58:08:23:99:36:d0:fa: a4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.100.0/24 198.205.102.0/24 IPv6: 2a0b:eb00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204550 Signature Algorithm: sha256WithRSAEncryption 13:11:54:1e:ee:64:cc:ca:e3:b2:0e:09:60:19:21:8f:9a:ed: 24:51:a5:54:b0:47:5d:70:73:be:80:93:fd:d1:85:d0:42:9c: 2e:a0:ef:58:4f:3f:2e:61:93:5d:7b:a3:3b:f9:96:74:41:19: cf:fb:d9:1c:5d:47:d7:67:30:d0:89:c3:88:5a:3e:e1:22:b4: b3:fa:ee:7b:43:cc:9c:88:86:3b:48:80:3e:cd:c4:01:75:d6: d8:f4:0e:92:3a:1c:95:05:0c:f8:06:80:79:5c:5c:f2:72:01: 4c:0d:d1:30:95:22:ed:43:18:fe:66:77:3f:24:a6:03:a8:79: 30:34:01:30:6f:9f:ee:93:97:a4:93:bd:2c:79:31:f2:fe:cb: 99:48:3b:b9:18:db:d8:c1:e5:02:f9:a6:07:c4:c5:32:28:35: 35:0f:23:93:a7:c9:4b:3c:58:c1:96:4d:25:23:e3:85:46:58: 83:7b:73:9c:e8:8d:e0:cd:6d:17:79:6a:5f:6c:7f:d2:14:f2: 91:6d:58:fc:91:a2:3b:23:83:86:2e:76:1d:76:da:b4:b5:c2: fb:83:bd:58:e6:63:d7:9f:f0:0d:e5:7b:63:0a:ce:21:f5:38: 86:d4:0f:c0:fb:67:00:d6:65:36:ee:12:48:21:c2:39:b7:bc: d0:e8:00:7b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt3WOckkpLRKmH8sR08cGfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjQyM2IyOWExODI5MzZiMjJkZjhmOTgyNmRkNTgzYTAwNTkxMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm3/IIXiGvAKQrd/Qk7L1WMpDLbD D8GvhcqSrMbCk7lWcr2X6kEzy3VqUrqW7/F251ePp8qVJhPrMvrcSkZcAbAirf33 +JSNsSsLhT2/1zMq5T33en6eD7ss6w2iGIWFORrRgU5yeuS1je6qEgpXL8vFv5b4 grYZhG73YJHrbaZXfifREX0tm4wJigkAqCeI5pv90KaQKG8aSAPyhsgwfx39VOwE 3B9DQMZKM35D2anO7jcBAlAqHmRJgbQ0LO/XWXASqQVDG0WzbasNVMbd63zj7YPO dXHxRhUgNdy7OcUYbJkCtZK+SgQAsjoIRVTnC2q6RGl6q1gII5k20PqklQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGtCOymhgpNrIt+PmCbdWDoAWRNKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkL2JhMGZm MC0yYmUyLTQyODYtYTJkNy01OGE4YTMzZDU0YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvYmEwZmYw LTJiZTItNDI4Ni1hMmQ3LTU4YThhMzNkNTRhNi8xL2EwSTdLYUdDazJzaTM0LVlK dDFZT2dCWkUwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAXmVkAwQAxs1mMA0EAgACMAcDBQAqC+sAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMfBjANBgkqhkiG9w0BAQsFAAOCAQEAExFU Hu5kzMrjsg4JYBkhj5rtJFGlVLBHXXBzvoCT/dGF0EKcLqDvWE8/LmGTXXujO/mW dEEZz/vZHF1H12cw0InDiFo+4SK0s/rue0PMnIiGO0iAPs3EAXXW2PQOkjoclQUM +AaAeVxc8nIBTA3RMJUi7UMY/mZ3PySmA6h5MDQBMG+f7pOXpJO9LHkx8v7LmUg7 uRjb2MHlAvmmB8TFMig1NQ8jk6fJSzxYwZZNJSPjhUZYg3tznOiN4M1tF3lqX2x/ 0hTykW1Y/JGiOyODhi52HXbatLXC+4O9WOZj15/wDeV7YwrOIfU4htQPwPtnANZl Nu4SSCHCObe80OgAew== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:11 2026 by rpki-client