This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer (raw, json) Hash identifier: sxxY4Mwehe8ZYRI1dqs8n44Dyf1MPLiW/eh0bwZN8vA= Subject key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED616B47F1F203684F833B2B4DF919 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207282 IP: 193.135.20.0/24 IP: 2a10:6000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:61:6b:47:f1:f2:03:68:4f:83:3b:2b:4d:f9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:4b:61:0b:d1:74:a9:c3:bc:f9:0e:fc:07: 0f:d9:2f:e9:a7:16:35:80:b0:f8:a7:37:78:96:a5: bb:1c:76:06:3c:26:7d:a7:56:75:99:87:69:77:08: d6:43:4f:bf:8f:fa:ae:c8:69:de:2e:d7:d6:8a:66: 99:c4:f6:d7:54:f7:b2:98:2c:33:06:d9:f2:88:1f: 3d:78:a9:d7:70:34:03:09:c6:25:21:b1:31:2c:78: 00:8f:33:3b:4c:d9:1d:61:7c:be:c8:02:87:83:66: 68:49:f3:c2:12:36:78:ea:47:14:be:ee:0b:a6:03: 98:a5:ee:42:9e:77:44:4d:7d:27:9c:23:9e:1a:61: 01:e5:df:11:97:f1:b6:df:e4:cf:bc:26:79:3b:93: 8c:4d:7e:5b:86:0b:1d:62:5b:05:17:36:54:bd:45: 95:b5:28:8b:b1:ec:12:4a:3e:13:36:40:c0:36:d2: 0e:63:f0:f1:99:fc:47:27:da:ea:20:b9:09:6d:97: c9:6a:ab:d7:7d:3c:6d:1e:1c:42:03:48:f7:a8:11: 2d:c2:6a:62:89:5a:f3:09:13:85:0a:7a:46:8b:37: 6e:fd:5b:c7:5d:86:d1:d9:f3:33:9d:cc:43:e8:72: f4:73:ec:de:2a:82:b3:df:60:3d:5c:de:37:d9:e1: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.20.0/24 IPv6: 2a10:6000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207282 Signature Algorithm: sha256WithRSAEncryption 49:cc:ef:7d:1d:7e:9b:93:89:b9:7e:89:e1:3b:ba:ba:a5:2b: 47:8b:8d:d8:79:93:a1:ef:f0:69:15:64:e6:c1:b1:b6:11:0c: f2:bd:8a:22:a5:80:29:91:a3:34:d8:5d:e6:87:1f:75:68:04: 0f:0b:20:d6:05:20:72:3c:3d:f5:10:4a:50:44:eb:8b:f1:9a: b2:d6:4f:67:46:8f:28:ed:ae:fe:84:f6:01:22:56:67:04:74: 2a:8e:c3:e0:1d:ae:64:96:09:61:2c:f9:db:d2:93:02:38:06: 0d:12:9f:8e:43:51:77:a4:5f:b5:9f:d8:cc:3e:2d:35:7a:09: 7e:8f:16:38:ae:ff:9e:4f:31:b1:ba:cf:8c:82:bb:69:4b:fd: 53:47:c4:4d:58:64:57:af:57:9d:c0:a3:22:9e:07:78:55:7d: 5b:59:87:45:eb:c1:05:ba:26:61:78:b5:e0:c1:d1:e4:86:f6: 91:2e:6c:5d:b1:dc:61:ad:33:22:28:a3:31:05:1d:40:20:14: eb:d4:28:d7:2f:cf:51:79:52:70:77:56:5c:b5:cc:88:7a:8e: f5:9d:7e:e1:6d:dc:e8:30:38:e1:a5:3f:8b:5a:dc:39:aa:7c: 69:6c:8e:f4:a7:92:4c:a9:9a:1b:15:22:b8:db:ee:b6:3d:da: b3:9a:3b:e9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87WFrR/HyA2hPgzsrTfkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjhhZjZhZjU3ZGRmYzVjN2FhODI4Y2YyMjVmOThkY2U5NTkwNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshRLYQvRdKnDvPkO/AcP2S/ppxY1 gLD4pzd4lqW7HHYGPCZ9p1Z1mYdpdwjWQ0+/j/quyGneLtfWimaZxPbXVPeymCwz BtnyiB89eKnXcDQDCcYlIbExLHgAjzM7TNkdYXy+yAKHg2ZoSfPCEjZ46kcUvu4L pgOYpe5CnndETX0nnCOeGmEB5d8Rl/G23+TPvCZ5O5OMTX5bhgsdYlsFFzZUvUWV tSiLsewSSj4TNkDANtIOY/DxmfxHJ9rqILkJbZfJaqvXfTxtHhxCA0j3qBEtwmpi iVrzCROFCnpGizdu/VvHXYbR2fMzncxD6HL0c+zeKoKz32A9XN432eHxgwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIuK9q9X3fxceqgozyJfmNzpWQSgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzFmMmM4 Zi04ZWQ5LTRiN2UtYWExZS1kM2M0ZjVkY2JlNGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMWYyYzhm LThlZDktNGI3ZS1hYTFlLWQzYzRmNWRjYmU0Yy8xL2k0cjJyMWZkX0Z4NnFDalBJ bC1ZM09sWkJLQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwYcUMA0EAgACMAcDBQMqEGAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpsjANBgkqhkiG9w0BAQsFAAOCAQEASczvfR1+m5OJ uX6J4Tu6uqUrR4uN2HmToe/waRVk5sGxthEM8r2KIqWAKZGjNNhd5ocfdWgEDwsg 1gUgcjw99RBKUETri/GastZPZ0aPKO2u/oT2ASJWZwR0Ko7D4B2uZJYJYSz529KT AjgGDRKfjkNRd6RftZ/YzD4tNXoJfo8WOK7/nk8xsbrPjIK7aUv9U0fETVhkV69X ncCjIp4HeFV9W1mHRevBBbomYXi14MHR5Ib2kS5sXbHcYa0zIiijMQUdQCAU69Qo 1y/PUXlScHdWXLXMiHqO9Z1+4W3c6DA44aU/i1rcOap8aWyO9KeSTKmaGxUiuNvu tj3as5o76Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:41 2026 by rpki-client