This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer File: ascqc0OS9s95Kz0MPtEYIChvGfQ.cer (raw, json) Hash identifier: cCeJgdJaN635229UPlNRZCVBu2yHOHWSCPrVEnyzl6U= Subject key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCADB73AF6FDABE8E17348D3D813CE1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212574 IP: 185.153.232.0/24 IP: 2a10:7240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:db:73:af:6f:da:be:8e:17:34:8d:3d:81:3c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:19:0a:7e:79:60:3b:d0:10:85:95:75:0f:26: 10:a7:1f:24:1e:7d:d6:32:f6:8a:e2:c6:21:5c:e1: bc:51:07:5b:79:02:ad:d6:f9:dd:5c:bc:c8:47:f0: c7:17:b8:b9:71:4f:94:a8:3e:fc:91:02:3d:ce:35: c8:3a:71:32:49:d7:29:4c:d8:ce:9f:f8:a0:c9:af: 11:89:57:42:7c:55:36:c2:aa:6f:85:4a:ad:a8:91: 00:9a:5c:76:9e:45:33:69:cb:92:7e:8e:ff:56:85: 46:d1:ad:0f:86:c6:3c:74:cf:e8:99:4b:ff:1a:a5: b3:bd:8a:5f:bc:1b:d5:fc:67:46:00:85:ee:cc:9f: 5f:f7:04:ca:4a:8c:81:2c:2e:28:ba:d3:77:68:72: 34:6e:bd:00:dc:40:23:cf:18:a1:88:0c:63:95:bd: 07:4f:80:e3:21:e2:9d:5c:f1:a6:52:ea:bd:d7:48: 33:1c:88:6e:3b:67:3d:4a:df:f4:5b:8b:65:61:2c: 63:ea:62:20:ea:a1:52:87:8d:48:3e:58:4c:b2:a9: 87:2f:71:8b:db:d9:cf:55:72:9d:fb:20:b4:1a:ad: 82:16:ad:06:03:95:44:01:b5:aa:f6:69:bd:b0:69: 0e:3f:6c:23:13:d3:8b:b0:ff:bd:47:20:d9:25:ee: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.232.0/24 IPv6: 2a10:7240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212574 Signature Algorithm: sha256WithRSAEncryption 36:33:ad:65:1b:28:ac:ea:76:04:8e:e5:2a:bd:96:30:32:fe: 7b:bf:2b:53:a6:1f:e5:4b:0b:47:4e:81:3f:8b:d9:21:6f:b6: e3:47:d9:51:24:d5:b5:48:d2:99:cc:3a:1c:43:83:47:e5:98: 52:9a:62:5f:17:50:23:7a:40:ce:d2:a1:e8:a9:ae:e7:d6:d8: b3:1f:54:5b:30:2e:02:16:3e:08:ca:7c:2e:b0:c0:3c:ef:61: 6d:63:3f:b3:6c:f8:84:f1:4d:33:c3:55:c0:e3:39:97:f1:7a: 91:e1:df:25:93:d1:e2:39:c8:31:3e:12:6f:72:d7:b1:87:c7: 97:d9:4f:58:98:fc:b2:89:09:6f:07:ca:e7:9d:67:d8:68:fd: 1d:e9:f6:11:d2:f7:52:e4:64:ce:4c:84:12:70:96:ee:26:49: 2e:b7:c8:2a:9f:4a:de:45:8b:63:20:ed:4b:c2:d6:b0:c4:f4: 7f:7c:f7:83:c8:91:fe:4b:e2:4f:ed:c1:1e:57:50:26:ec:37: 77:df:c5:ce:a7:70:24:b4:ce:9a:93:21:7e:57:c3:1f:a7:42: 13:ac:54:2a:56:32:7e:05:5b:b3:0c:4c:55:0c:aa:30:c2:48: 6a:03:bf:c1:9c:ca:e3:a9:f8:1b:28:d8:9f:c9:ee:59:72:ad: 1b:bb:96:8e -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yttzr2/avo4XNI09gTzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWM3MmE3MzQzOTJmNmNmNzkyYjNkMGMzZWQxMTgyMDI4NmYxOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxkKfnlgO9AQhZV1DyYQpx8kHn3W MvaK4sYhXOG8UQdbeQKt1vndXLzIR/DHF7i5cU+UqD78kQI9zjXIOnEySdcpTNjO n/igya8RiVdCfFU2wqpvhUqtqJEAmlx2nkUzacuSfo7/VoVG0a0PhsY8dM/omUv/ GqWzvYpfvBvV/GdGAIXuzJ9f9wTKSoyBLC4outN3aHI0br0A3EAjzxihiAxjlb0H T4DjIeKdXPGmUuq910gzHIhuO2c9St/0W4tlYSxj6mIg6qFSh41IPlhMsqmHL3GL 29nPVXKd+yC0Gq2CFq0GA5VEAbWq9mm9sGkOP2wjE9OLsP+9RyDZJe4jPQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGrHKnNDkvbPeSs9DD7RGCAobxn0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmL2ZjZDUx Ni04OGY1LTRlNDgtOWFiNC05M2RmNDUwMDNlN2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvZmNkNTE2 LTg4ZjUtNGU0OC05YWI0LTkzZGY0NTAwM2U3ZS8xL2FzY3FjME9TOXM5NUt6ME1Q dEVZSUNodkdmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuZnoMA0EAgACMAcDBQAqEHJAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+XjANBgkqhkiG9w0BAQsFAAOCAQEANjOtZRsorOp2 BI7lKr2WMDL+e78rU6Yf5UsLR06BP4vZIW+240fZUSTVtUjSmcw6HEODR+WYUppi XxdQI3pAztKh6Kmu59bYsx9UWzAuAhY+CMp8LrDAPO9hbWM/s2z4hPFNM8NVwOM5 l/F6keHfJZPR4jnIMT4Sb3LXsYfHl9lPWJj8sokJbwfK551n2Gj9Hen2EdL3UuRk zkyEEnCW7iZJLrfIKp9K3kWLYyDtS8LWsMT0f3z3g8iR/kviT+3BHldQJuw3d9/F zqdwJLTOmpMhflfDH6dCE6xUKlYyfgVbswxMVQyqMMJIagO/wZzK46n4GyjYn8nu WXKtG7uWjg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:10 2026 by rpki-client