This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer File: a33-S2iyCJXt7fOgAyMql54Xw4w.cer (raw, json) Hash identifier: DItzFACdV7ESPAEmNeyNDxO7scNtuO8JvToFSNrFZ5k= Subject key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA434F2C8231AF6346E8E8D0480C9D0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.164.20.0/22 IP: 2a0a:8c00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:34:f2:c8:23:1a:f6:34:6e:8e:8d:04:80:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cc:91:70:97:df:a5:db:58:e1:9a:a1:78:36: 7c:36:51:4f:74:0c:5e:12:0e:4a:f0:7e:03:86:8c: 46:ee:05:d2:48:1e:f3:3c:35:53:db:12:d7:90:91: a6:6a:a4:c6:94:12:bc:c5:bd:6d:73:d9:9b:78:75: 09:69:43:3d:2d:a5:0c:0e:84:e2:8d:18:92:75:ab: 7d:c9:06:fd:24:f3:c7:d1:20:b2:f2:dc:78:9b:71: 1c:c3:37:78:0c:cb:98:d6:ad:99:db:ef:e6:29:06: cc:07:83:a2:db:4e:b8:94:9f:4c:8e:03:4c:bc:50: a1:4f:a3:a2:9f:5b:a7:95:67:37:5a:3c:b7:2e:24: d9:e6:b5:63:45:1e:c7:99:7b:c8:a1:cc:7f:7c:be: da:33:06:1e:a8:7e:d8:f2:a3:a2:79:e6:68:68:27: 68:05:2c:e1:f5:53:29:c6:f4:aa:b0:6a:7e:f2:2f: 39:f4:8e:48:d9:57:fc:25:b8:fc:27:47:d1:28:a3: 58:4c:ec:95:34:02:fd:11:59:25:ff:04:24:f6:56: e2:d9:06:93:72:d9:8d:a1:4f:46:7b:9c:01:49:fa: b1:d2:6b:7c:67:77:d4:c3:58:a2:7a:e2:62:26:93: 1f:f7:99:3b:5d:66:88:d9:34:7f:59:53:bb:eb:b2: e3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.20.0/22 IPv6: 2a0a:8c00::/29 Signature Algorithm: sha256WithRSAEncryption 8a:43:14:39:40:b7:1e:0f:de:8d:fa:3c:b6:e1:95:cf:a2:b1: cc:36:65:16:74:79:27:81:9e:0b:f7:61:1a:67:f8:98:ca:b9: 80:ee:27:77:58:c7:6a:e0:5e:cc:3b:b5:7d:2d:68:e3:c8:8d: 9e:14:75:9c:2c:de:44:98:86:3e:43:2c:fd:ac:49:6c:3d:7c: c7:84:01:2d:4f:ed:f4:b7:74:4b:fa:bd:e7:4c:9d:e4:5b:51: be:d3:3b:ba:71:f4:0c:69:05:ef:21:fc:82:4e:fe:e6:92:ca: ae:02:1d:fb:f2:b3:b0:c4:a8:b1:b1:4f:67:59:b1:a1:58:ea: f7:15:7e:96:2f:46:1d:19:9f:ee:13:52:8c:2b:da:00:7a:87: fe:e6:46:c3:da:5a:73:31:9e:f9:36:1e:ca:5f:b1:ec:59:17: 73:c7:3f:c6:aa:b1:20:34:15:f0:78:f6:35:ec:33:9f:9a:18: 4c:1b:f1:0b:3b:6a:8c:d1:d9:ce:98:23:e9:15:95:99:bf:1f: 51:38:43:8f:79:50:cf:93:ec:3d:46:33:ce:d2:5a:53:e4:b7: 50:bb:99:ac:f4:0a:55:86:09:35:55:62:69:fc:c4:1f:27:9a: c3:58:80:90:63:e6:8c:1a:57:d6:27:de:b7:77:61:81:aa:13: 66:1e:da:6e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7pDTyyCMa9jRujo0EgMnQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdkZmU0YjY4YjIwODk1ZWRlZGYzYTAwMzIzMmE5NzllMTdjMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMyRcJffpdtY4ZqheDZ8NlFPdAxe Eg5K8H4DhoxG7gXSSB7zPDVT2xLXkJGmaqTGlBK8xb1tc9mbeHUJaUM9LaUMDoTi jRiSdat9yQb9JPPH0SCy8tx4m3Ecwzd4DMuY1q2Z2+/mKQbMB4Oi2064lJ9MjgNM vFChT6Oin1unlWc3Wjy3LiTZ5rVjRR7HmXvIocx/fL7aMwYeqH7Y8qOieeZoaCdo BSzh9VMpxvSqsGp+8i859I5I2Vf8Jbj8J0fRKKNYTOyVNAL9EVkl/wQk9lbi2QaT ctmNoU9Ge5wBSfqx0mt8Z3fUw1iieuJiJpMf95k7XWaI2TR/WVO767LjSQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGt9/ktosgiV7e3zoAMjKpeeF8OMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyL2ExYmQx Ni04NGI0LTQ2MTItYTdmMC05Yzc2ZDEwZWM1MzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYTFiZDE2 LTg0YjQtNDYxMi1hN2YwLTljNzZkMTBlYzUzMi8xL2EzMy1TMml5Q0pYdDdmT2dB eU1xbDU0WHc0dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaQUMA0EAgACMAcDBQMqCowAMA0GCSqGSIb3 DQEBCwUAA4IBAQCKQxQ5QLceD96N+jy24ZXPorHMNmUWdHkngZ4L92EaZ/iYyrmA 7id3WMdq4F7MO7V9LWjjyI2eFHWcLN5EmIY+Qyz9rElsPXzHhAEtT+30t3RL+r3n TJ3kW1G+0zu6cfQMaQXvIfyCTv7mksquAh378rOwxKixsU9nWbGhWOr3FX6WL0Yd GZ/uE1KMK9oAeof+5kbD2lpzMZ75Nh7KX7HsWRdzxz/GqrEgNBXwePY17DOfmhhM G/ELO2qM0dnOmCPpFZWZvx9ROEOPeVDPk+w9RjPO0lpT5LdQu5ms9ApVhgk1VWJp /MQfJ5rDWICQY+aMGlfWJ963d2GBqhNmHtpu -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:05 2026 by rpki-client