This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aBzk2Zuo67kaeUq_y90VveCcmfg.cer File: aBzk2Zuo67kaeUq_y90VveCcmfg.cer (raw, json) Hash identifier: 4WwKrUNwe6XSWKY0pSANRheK3fWQJEGdLPo+KRAsd/8= Subject key identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3F2C2C7A089760AF85E122D5EDF14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6752 IP: 46.172.224.0/19 IP: 46.175.156.0/22 IP: 80.80.84.0/22 IP: 80.80.92.0/22 IP: 85.94.160.0/19 IP: 89.150.2.0 -- 89.150.15.255 IP: 91.187.64.0/19 IP: 94.125.138.0 -- 94.125.141.255 IP: 109.111.96.0/19 IP: 185.4.52.0/22 IP: 185.33.0.0/22 IP: 185.87.36.0 -- 185.87.47.255 IP: 185.132.200.0/22 IP: 185.194.56.0/22 IP: 185.247.24.0/22 IP: 188.241.26.0/23 IP: 194.158.64.0/19 IP: 213.236.8.0/21 IP: 2a02:8060::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f2:c2:c7:a0:89:76:0a:f8:5e:12:2d:5e:df:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=681ce4d99ba8ebb91a794abfcbdd15bde09c99f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:34:d5:e3:6a:3a:56:f6:66:10:cd:93:47: ad:ec:39:24:d2:36:d8:b5:21:bc:24:92:57:19:46: 30:a6:c0:cb:c9:28:80:53:26:e9:17:eb:40:6b:f7: 38:7f:9d:83:93:af:f6:80:00:41:cd:55:de:33:4b: 27:9b:8c:e3:ca:f5:a6:89:e3:bf:ff:d1:3f:70:2d: fd:40:7c:fb:ea:b8:63:dc:94:5c:30:39:9a:f9:9f: 2e:f8:84:23:6e:2c:58:13:4e:5f:28:ea:30:0e:98: 93:96:09:6a:2c:a6:42:1e:c7:0d:b7:3d:31:47:ae: 37:42:6f:41:6d:21:b7:93:f5:bc:15:d6:3a:9d:ee: 47:ad:b0:29:9f:48:f1:e0:ff:d6:bc:08:04:3f:84: 3c:e4:dc:c0:6b:ab:f9:8d:12:1f:a9:ec:23:de:dd: 93:20:3c:fb:b3:fd:9b:43:69:c6:f1:2f:11:ef:29: 15:71:a4:fd:a0:f2:59:2a:d7:be:57:cd:56:e6:10: d7:13:85:db:90:5d:1b:91:ce:f6:7f:c2:37:01:20: 6c:ef:5e:93:af:90:18:e4:9b:66:6b:59:ef:ec:b7: 47:6c:43:a5:6d:46:d6:17:68:8a:69:4a:3f:f4:0b: 36:20:c5:de:42:68:8e:4e:f4:45:f5:6f:cf:f3:f7: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1C:E4:D9:9B:A8:EB:B9:1A:79:4A:BF:CB:DD:15:BD:E0:9C:99:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6b9ee8-924b-4a31-a464-9f99c1477fbe/1/aBzk2Zuo67kaeUq_y90VveCcmfg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.224.0/19 46.175.156.0/22 80.80.84.0/22 80.80.92.0/22 85.94.160.0/19 89.150.2.0-89.150.15.255 91.187.64.0/19 94.125.138.0-94.125.141.255 109.111.96.0/19 185.4.52.0/22 185.33.0.0/22 185.87.36.0-185.87.47.255 185.132.200.0/22 185.194.56.0/22 185.247.24.0/22 188.241.26.0/23 194.158.64.0/19 213.236.8.0/21 IPv6: 2a02:8060::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6752 Signature Algorithm: sha256WithRSAEncryption 7a:cb:10:60:5f:cb:31:6f:a4:83:d9:5b:78:2b:b8:5c:a8:ca: a4:3f:86:ea:ff:12:ec:a9:b2:da:4c:b5:6d:1f:ad:b4:68:10: f3:4b:1b:11:f1:43:31:b0:84:1f:59:9a:73:90:85:46:5a:0d: 99:ba:2a:e8:c9:76:cb:97:ff:74:b9:0c:a7:a5:7f:f8:41:50: e1:2f:f5:e5:62:74:66:ec:70:eb:76:e2:a7:b6:9f:54:55:a5: 12:77:15:61:de:fc:ee:c0:50:cf:55:e5:04:55:ac:e8:b3:0a: 2e:12:67:35:f8:fd:63:56:dc:e9:23:6b:a6:2e:3b:01:7c:63: ec:4a:f2:e7:81:c7:6c:2c:6d:3c:fa:83:5a:5f:ed:2c:99:ef: e5:c3:f1:23:47:be:16:f1:d4:5c:2e:cc:41:19:f6:45:62:fa: 55:80:fe:79:69:29:2b:8b:b6:7f:13:b0:48:4d:2b:b2:3b:c3: a6:d3:62:48:4f:8f:c5:df:7f:75:31:fa:42:2e:27:45:75:94: d4:6c:a3:3a:db:95:32:1b:f3:a9:72:da:8e:a6:93:b4:a6:1a: 98:e7:0d:52:e9:ff:cf:62:4d:83:cd:79:0e:ac:2f:58:89:be: 2d:1e:de:db:86:0d:ce:f9:69:5c:6d:08:39:db:47:25:4b:cb: 39:a2:42:55 -----BEGIN CERTIFICATE----- MIIGJTCCBQ2gAwIBAgISAZt7o/LCx6CJdgr4XhItXt8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODFjZTRkOTliYThlYmI5MWE3OTRhYmZjYmRkMTViZGUwOWM5OWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZg01eNqOlb2ZhDNk0et7Dkk0jbY tSG8JJJXGUYwpsDLySiAUybpF+tAa/c4f52Dk6/2gABBzVXeM0snm4zjyvWmieO/ /9E/cC39QHz76rhj3JRcMDma+Z8u+IQjbixYE05fKOowDpiTlglqLKZCHscNtz0x R643Qm9BbSG3k/W8FdY6ne5HrbApn0jx4P/WvAgEP4Q85NzAa6v5jRIfqewj3t2T IDz7s/2bQ2nG8S8R7ykVcaT9oPJZKte+V81W5hDXE4XbkF0bkc72f8I3ASBs716T r5AY5Jtma1nv7LdHbEOlbUbWF2iKaUo/9As2IMXeQmiOTvRF9W/P8/dHmQIDAQAB o4IDMTCCAy0wHQYDVR0OBBYEFGgc5NmbqOu5GnlKv8vdFb3gnJn4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JiLzZiOWVl OC05MjRiLTRhMzEtYTQ2NC05Zjk5YzE0NzdmYmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvNmI5ZWU4 LTkyNGItNGEzMS1hNDY0LTlmOTljMTQ3N2ZiZS8xL2FCemsyWnVvNjdrYWVVcV95 OTBWdmVDY21mZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGwBggrBgEF BQcBBwEB/wSBoDCBnTCBiwQCAAEwgYQDBAUurOADBAIur5wDBAJQUFQDBAJQUFwD BAVVXqAwDAMEAVmWAgMEBFmWAAMEBVu7QDAMAwQBXn2KAwQBXn2MAwQFbW9gAwQC uQQ0AwQCuSEAMAwDBAK5VyQDBAS5VyADBAK5hMgDBAK5wjgDBAK59xgDBAG88RoD BAXCnkADBAPV7AgwDQQCAAIwBwMFASoCgGAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICGmAwDQYJKoZIhvcNAQELBQADggEBAHrLEGBfyzFvpIPZW3gruFyoyqQ/hur/ EuypstpMtW0frbRoEPNLGxHxQzGwhB9ZmnOQhUZaDZm6KujJdsuX/3S5DKelf/hB UOEv9eVidGbscOt24qe2n1RVpRJ3FWHe/O7AUM9V5QRVrOizCi4SZzX4/WNW3Okj a6YuOwF8Y+xK8ueBx2wsbTz6g1pf7SyZ7+XD8SNHvhbx1FwuzEEZ9kVi+lWA/nlp KSuLtn8TsEhNK7I7w6bTYkhPj8Xff3Ux+kIuJ0V1lNRsozrblTIb86ly2o6mk7Sm GpjnDVLp/89iTYPNeQ6sL1iJvi0e3tuGDc75aVxtCDnbRyVLyzmiQlU= -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:49 2026 by rpki-client