This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer File: by4eTgnsEV2nA2tkpRnSSNUtuFg.cer (raw, json) Hash identifier: E7BWhA4ZqgEmA9WoRIceLiOjLrEAT6rBc7PDsAbYKsE= Subject key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D1D08F187174126A55C5B25818DDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202839 IP: 185.136.92.0/22 IP: 2a07:1dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:1d:08:f1:87:17:41:26:a5:5c:5b:25:81:8d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f2e1e4e09ec115da7036b64a519d248d52db858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:c9:52:0a:6d:c3:a8:0f:2a:87:b9:e9:25: 12:82:f0:06:9d:57:b5:a0:03:80:04:d8:67:e1:5b: 54:25:98:e0:fd:32:af:63:fa:5b:73:90:19:87:8f: 14:61:8c:df:22:c3:4c:71:f0:d0:4b:40:c9:8a:c8: af:85:08:e7:c8:1e:09:1d:b8:d7:a8:4e:87:b2:59: 9f:69:5d:ca:6a:f9:81:15:ac:67:97:fa:10:69:52: fb:56:ab:8a:52:30:02:41:9a:a6:cc:78:15:5d:9a: 9e:a0:d0:e9:f5:15:0d:f1:b8:31:7e:39:38:99:f2: 3b:19:97:81:e4:77:a1:92:6e:07:5b:a4:e4:16:26: 79:e1:1c:67:a2:8b:80:c7:72:bc:9c:83:43:35:26: 82:b3:05:f6:b4:fe:51:a7:1c:ac:96:c0:93:f0:96: 6d:a8:3e:8b:72:ff:31:6f:f4:10:75:2a:ba:82:2d: 2a:8e:ce:a2:83:4f:bc:d2:21:32:e0:5f:64:75:47: 16:15:6a:e6:9a:52:33:58:c6:20:ff:3c:7c:7a:36: e9:5f:d5:4e:ea:90:2a:17:9f:98:74:af:11:ae:c9: 9b:d2:65:99:d3:32:c8:2d:d6:0c:28:78:f3:35:a8: 3a:53:ec:5f:57:93:22:42:f1:ea:97:47:2c:ca:17: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.92.0/22 IPv6: 2a07:1dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202839 Signature Algorithm: sha256WithRSAEncryption 85:6d:cc:1d:83:37:46:16:5e:43:d2:f2:52:3a:f3:79:76:35: 6a:32:30:79:e1:9e:22:f2:1a:d8:29:f2:c7:30:91:29:f8:71: 68:a8:2a:f2:c2:4a:b2:d1:55:d5:cc:9f:82:e8:ce:5e:04:d0: 32:a1:46:3e:90:0d:d5:f9:92:5f:de:20:86:58:1a:c0:af:60: a7:9f:4b:e9:fb:11:57:d1:70:92:8a:0a:6d:49:73:2c:d9:46: 11:99:d1:99:15:34:47:b1:96:d2:ca:76:e4:d0:08:0e:c8:09: 1c:ea:bc:53:37:e2:7d:e3:59:ac:66:dc:e4:d0:b5:b2:1b:78: 8d:da:c5:7e:fb:f8:c8:56:2f:5c:aa:90:ec:7f:8c:84:4e:05: b0:11:67:ae:7e:a1:a2:49:47:2d:ed:50:68:1a:ae:31:17:c8: 28:5b:0b:9a:11:f4:7b:1e:e6:72:e5:30:13:77:7d:6e:c7:1e: ee:aa:ae:8b:f1:63:84:76:31:5f:3c:fe:31:92:04:0e:59:8c: 2c:b6:84:f3:b9:18:ce:07:a3:09:39:5d:48:51:64:9e:0a:4c: 87:47:20:4b:53:ab:19:ff:f1:1c:8c:0e:67:7b:b8:08:19:a1: 83:f1:5e:ca:6d:76:45:5d:63:c9:bf:97:f2:c2:5b:df:8e:bf: 6f:a1:f9:4b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XR0I8YcXQSalXFslgY3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjJlMWU0ZTA5ZWMxMTVkYTcwMzZiNjRhNTE5ZDI0OGQ1MmRiODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunPJUgptw6gPKoe56SUSgvAGnVe1 oAOABNhn4VtUJZjg/TKvY/pbc5AZh48UYYzfIsNMcfDQS0DJisivhQjnyB4JHbjX qE6HslmfaV3KavmBFaxnl/oQaVL7VquKUjACQZqmzHgVXZqeoNDp9RUN8bgxfjk4 mfI7GZeB5Hehkm4HW6TkFiZ54RxnoouAx3K8nINDNSaCswX2tP5RpxyslsCT8JZt qD6Lcv8xb/QQdSq6gi0qjs6ig0+80iEy4F9kdUcWFWrmmlIzWMYg/zx8ejbpX9VO 6pAqF5+YdK8Rrsmb0mWZ0zLILdYMKHjzNag6U+xfV5MiQvHql0csyheduQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFG8uHk4J7BFdpwNrZKUZ0kjVLbhYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4LzFlMzU0 OC00YmFhLTQ5MWItYmNhZi1hYWMxNmM0ZDU5Y2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvMWUzNTQ4 LTRiYWEtNDkxYi1iY2FmLWFhYzE2YzRkNTljYy8xL2J5NGVUZ25zRVYybkEydGtw Um5TU05VdHVGZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYhcMA0EAgACMAcDBQMqBx3AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYVzANBgkqhkiG9w0BAQsFAAOCAQEAhW3MHYM3RhZe Q9LyUjrzeXY1ajIweeGeIvIa2CnyxzCRKfhxaKgq8sJKstFV1cyfgujOXgTQMqFG PpAN1fmSX94ghlgawK9gp59L6fsRV9FwkooKbUlzLNlGEZnRmRU0R7GW0sp25NAI DsgJHOq8UzfifeNZrGbc5NC1sht4jdrFfvv4yFYvXKqQ7H+MhE4FsBFnrn6hoklH Le1QaBquMRfIKFsLmhH0ex7mcuUwE3d9bsce7qqui/FjhHYxXzz+MZIEDlmMLLaE 87kYzgejCTldSFFkngpMh0cgS1OrGf/xHIwOZ3u4CBmhg/Feym12RV1jyb+X8sJb 346/b6H5Sw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:03:10 2026 by rpki-client