This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer File: btA5KsdmC9FGD6HVAx0YQNAblBI.cer (raw, json) Hash identifier: 9N3EI9AEk3jmYlsdBHdKbaN6+Uh2NR/VG6KZ4wzpF0s= Subject key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7413249F2B0690F449D442A364AAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34240 IP: 2.59.84.0/22 IP: 85.116.192.0/19 IP: 89.238.64.0/18 IP: 217.11.48.0/20 IP: 2a00:1828::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:41:32:49:f2:b0:69:0f:44:9d:44:2a:36:4a:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9a:a3:eb:2c:f3:0f:00:8e:33:8a:4d:1b:99: 67:bd:d9:98:ad:e0:07:95:b9:8e:ba:61:52:50:63: fe:af:07:e0:1b:9b:82:93:51:c4:e0:b3:cd:b1:1c: cd:00:38:74:4c:49:cc:57:be:fe:f5:d1:83:2f:2d: a1:2b:d8:f3:36:71:c8:1e:4e:53:70:c2:e1:72:04: 67:89:6a:72:49:be:0e:d6:f8:af:29:62:9d:aa:a5: 06:6e:f9:59:55:80:c3:d9:a6:78:a2:38:d5:eb:d4: 95:5d:5e:94:e8:e5:bd:f5:81:7a:fe:fc:44:7f:22: 59:c4:fc:c6:28:5a:57:fd:32:52:68:aa:37:25:a3: 9a:a7:95:f1:1b:7c:37:86:af:c6:33:a5:ad:34:fd: b9:4d:16:9a:7e:f8:08:8b:12:1c:07:32:f1:87:ef: 4a:24:b4:c1:f1:d4:4f:95:a4:c4:75:03:6c:31:bf: 10:40:7a:00:d5:de:39:01:b6:cc:67:d8:7a:4c:cd: a3:cb:2d:9d:53:9a:20:5c:83:11:6a:5a:90:8d:6e: 08:b8:bb:87:e4:19:b0:72:c2:29:54:4c:ae:de:62: 17:ef:94:d0:be:64:b2:79:9e:13:57:32:46:aa:11: 44:16:9b:25:38:ea:fc:bd:31:d6:46:d5:8f:6d:6c: 16:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.84.0/22 85.116.192.0/19 89.238.64.0/18 217.11.48.0/20 IPv6: 2a00:1828::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34240 Signature Algorithm: sha256WithRSAEncryption 09:7d:e3:79:40:32:73:84:2b:04:ee:44:ca:f0:6a:30:3c:b1: ea:bb:e6:49:ff:7d:ab:d1:49:59:75:b9:2d:a7:9e:2a:3e:c9: a0:1c:da:fd:27:e8:fb:27:5f:6b:89:f3:55:6d:1d:fd:6b:f5: f0:09:dd:f3:f8:0a:21:22:af:e9:58:a3:75:21:ed:4c:1d:c5: 68:91:92:48:63:33:28:be:9f:93:ab:51:8a:27:3f:97:6d:34: 1f:41:9e:f5:74:a9:a2:20:73:0f:09:1f:9a:88:28:dd:69:f5: c3:ac:a5:b0:2b:1a:db:bf:4b:c5:a1:be:b9:31:83:b8:b3:48: e9:1e:16:f8:07:eb:7c:96:10:b7:50:2e:78:97:2d:e0:ba:3a: a2:bf:01:5e:db:53:d7:f8:ca:99:b6:7d:97:76:20:0c:af:d1: ba:8f:c1:ae:dc:67:3c:d3:07:a5:28:4c:ef:07:c0:f3:ab:8f: d6:a3:97:8c:9f:1d:66:1b:ab:65:89:ce:f8:69:03:4c:b4:9a: 39:2c:9c:78:46:b2:f5:12:db:2c:ce:65:c9:2c:59:18:fb:e0: eb:8a:64:ed:2a:13:d7:93:dd:ec:61:e8:d5:2b:f4:62:b4:88: 1c:f7:3a:a3:84:9f:39:eb:29:df:b7:c5:27:1c:0e:2b:f6:66: 95:7f:94:01 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3x0EySfKwaQ9EnUQqNkqsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWQwMzkyYWM3NjYwYmQxNDYwZmExZDUwMzFkMTg0MGQwMWI5NDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJqj6yzzDwCOM4pNG5lnvdmYreAH lbmOumFSUGP+rwfgG5uCk1HE4LPNsRzNADh0TEnMV77+9dGDLy2hK9jzNnHIHk5T cMLhcgRniWpySb4O1vivKWKdqqUGbvlZVYDD2aZ4ojjV69SVXV6U6OW99YF6/vxE fyJZxPzGKFpX/TJSaKo3JaOap5XxG3w3hq/GM6WtNP25TRaafvgIixIcBzLxh+9K JLTB8dRPlaTEdQNsMb8QQHoA1d45AbbMZ9h6TM2jyy2dU5ogXIMRalqQjW4IuLuH 5BmwcsIpVEyu3mIX75TQvmSyeZ4TVzJGqhFEFpslOOr8vTHWRtWPbWwWqwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFG7QOSrHZgvRRg+h1QMdGEDQG5QSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzc4ZTAz Yy1jOWM3LTRjODUtYmZkZC1lOGJhZjlmZmFkZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvNzhlMDNj LWM5YzctNGM4NS1iZmRkLWU4YmFmOWZmYWRmOC8xL2J0QTVLc2RtQzlGR0Q2SFZB eDBZUU5BYmxCSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCAjtUAwQFVXTAAwQGWe5AAwQE2QswMA0EAgAC MAcDBQAqABgoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCFwDANBgkqhkiG9w0B AQsFAAOCAQEACX3jeUAyc4QrBO5EyvBqMDyx6rvmSf99q9FJWXW5LaeeKj7JoBza /Sfo+ydfa4nzVW0d/Wv18And8/gKISKv6VijdSHtTB3FaJGSSGMzKL6fk6tRiic/ l200H0Ge9XSpoiBzDwkfmogo3Wn1w6ylsCsa279LxaG+uTGDuLNI6R4W+AfrfJYQ t1AueJct4Lo6or8BXttT1/jKmbZ9l3YgDK/Ruo/BrtxnPNMHpShM7wfA86uP1qOX jJ8dZhurZYnO+GkDTLSaOSyceEay9RLbLM5lySxZGPvg64pk7SoT15Pd7GHo1Sv0 YrSIHPc6o4SfOesp37fFJxwOK/ZmlX+UAQ== -----END CERTIFICATE-----Generated at Mon Jan 19 18:37:48 2026 by rpki-client