This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer File: aZlc4YW2DnhgSd9V8VydLsBdT2s.cer (raw, json) Hash identifier: dNUsj+ukroNStpqhHutqvWU+VbH2xsy8e+J8cWcRxcE= Subject key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED61544029B26290409934CF094EC6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204939 IP: 185.235.0.0/22 IP: 2a0d:3b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:54:40:29:b2:62:90:40:99:34:cf:09:4e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:53:bd:5e:65:cb:56:e5:93:40:35:67:2b: 04:e6:5b:9d:f9:99:23:c2:4b:b6:83:d5:01:54:16: ac:10:3c:5e:1c:97:ad:95:07:31:8a:4f:db:cb:bd: 0a:40:6b:a5:06:71:27:1e:e7:4b:bc:2c:8f:ef:99: 3d:be:ba:97:0a:33:d9:d2:d7:cf:db:f7:dd:48:6d: 0a:6f:09:a1:80:e4:c9:a3:39:f9:71:1c:a4:15:42: e0:a5:06:3e:90:50:a0:f8:db:1c:c6:1c:d3:dc:4e: ec:a8:6e:c2:69:63:ee:4a:70:cd:c7:59:8d:31:80: 0f:86:97:3a:d5:18:4f:52:e9:58:7e:b4:a7:c3:10: 08:e8:18:6a:6d:29:e0:e8:7f:b5:a3:fd:86:7c:90: 22:bc:f1:91:4f:6f:6f:f1:b8:46:5a:fe:52:dd:18: 73:0c:01:88:48:a2:4c:07:f8:76:2e:b5:f6:3c:4d: 2b:ee:f0:af:05:2d:83:aa:59:dd:6f:8c:10:01:fe: aa:3c:b7:53:70:3e:1b:57:a3:fd:98:dc:c9:1f:a3: 93:61:11:10:09:72:a5:60:b4:ca:2e:cf:0c:f4:01: 12:a6:0c:ca:93:16:a0:f4:83:8d:93:5c:45:89:26: c6:14:8b:6d:f3:f2:44:1f:33:22:b4:3b:48:b1:3d: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.0.0/22 IPv6: 2a0d:3b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204939 Signature Algorithm: sha256WithRSAEncryption 14:72:ef:58:33:be:ed:46:da:d9:13:cc:ec:6c:ef:e8:2a:f4: 8f:29:3f:9f:4f:68:ce:9d:a5:42:2c:37:d9:d5:de:c9:93:64: e8:fa:86:32:e4:34:2c:d6:c5:09:54:53:8c:ed:09:8a:ee:15: 49:d9:cf:70:5f:f7:86:0e:3c:7b:9a:44:b0:05:34:4c:1d:45: 1f:e6:8a:69:82:0a:d7:6b:8b:e1:d6:b9:cc:19:b2:a0:31:13: 04:9c:17:77:86:46:4f:86:2a:bf:bf:b3:2d:85:93:88:db:6b: 12:7d:24:b9:62:21:aa:ec:1c:c2:69:3f:f1:09:b1:62:2c:12: 95:e3:02:fa:fc:09:ba:d8:db:7f:92:1d:25:4c:63:5a:db:42: d7:80:e7:14:2e:ec:5c:86:94:cc:f7:f3:a2:ed:d0:bf:81:4c: 17:26:4b:d3:c7:b7:fc:0c:bb:4d:c7:0c:94:a2:ba:69:32:3e: b2:61:73:f1:fe:05:a5:04:7a:07:6e:84:71:04:ec:3e:45:8c: b6:ec:b4:f4:39:c0:f9:98:60:6e:21:ca:06:86:a3:e9:73:6f: de:9c:9e:dd:98:d7:8c:10:5c:a7:d7:ff:7e:0f:42:7f:5b:42: ea:99:e7:46:3a:aa:01:06:27:fd:95:80:6d:e5:04:d5:f1:cc: e3:0c:fa:3e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt57WFUQCmyYpBAmTTPCU7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk5NWNlMTg1YjYwZTc4NjA0OWRmNTVmMTVjOWQyZWMwNWQ0ZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a1TvV5ly1blk0A1ZysE5lud+Zkj wku2g9UBVBasEDxeHJetlQcxik/by70KQGulBnEnHudLvCyP75k9vrqXCjPZ0tfP 2/fdSG0KbwmhgOTJozn5cRykFULgpQY+kFCg+NscxhzT3E7sqG7CaWPuSnDNx1mN MYAPhpc61RhPUulYfrSnwxAI6BhqbSng6H+1o/2GfJAivPGRT29v8bhGWv5S3Rhz DAGISKJMB/h2LrX2PE0r7vCvBS2Dqlndb4wQAf6qPLdTcD4bV6P9mNzJH6OTYREQ CXKlYLTKLs8M9AESpgzKkxag9IONk1xFiSbGFItt8/JEHzMitDtIsT14jwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGmZXOGFtg54YEnfVfFcnS7AXU9rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4L2RmZGI2 NS1jNDVkLTRkZTYtYmZiMS1iN2M5OWViMTg4MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvZGZkYjY1 LWM0NWQtNGRlNi1iZmIxLWI3Yzk5ZWIxODgzNC8xL2FabGM0WVcyRG5oZ1NkOVY4 VnlkTHNCZFQycy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuesAMA0EAgACMAcDBQMqDTsAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMgizANBgkqhkiG9w0BAQsFAAOCAQEAFHLvWDO+7Uba 2RPM7Gzv6Cr0jyk/n09ozp2lQiw32dXeyZNk6PqGMuQ0LNbFCVRTjO0Jiu4VSdnP cF/3hg48e5pEsAU0TB1FH+aKaYIK12uL4da5zBmyoDETBJwXd4ZGT4Yqv7+zLYWT iNtrEn0kuWIhquwcwmk/8QmxYiwSleMC+vwJutjbf5IdJUxjWttC14DnFC7sXIaU zPfzou3Qv4FMFyZL08e3/Ay7TccMlKK6aTI+smFz8f4FpQR6B26EcQTsPkWMtuy0 9DnA+ZhgbiHKBoaj6XNv3pye3ZjXjBBcp9f/fg9Cf1tC6pnnRjqqAQYn/ZWAbeUE 1fHM4wz6Pg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:46 2026 by rpki-client