This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iAsPesuH0TTDhZ1y0NGmHkdRusA.cer File: iAsPesuH0TTDhZ1y0NGmHkdRusA.cer (raw, json) Hash identifier: 6PRE15FldWqwocbOapyW1GjueZQPG6tgVYRHsBm8Vrs= Subject key identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB47E668791653B8BFDCB76231A16A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51092 IP: 185.250.0.0/22 IP: 2a0c:7bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:47:e6:68:79:16:53:b8:bf:dc:b7:62:31:a1:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=880b0f7acb87d134c3859d72d0d1a61e4751bac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:1b:e9:34:06:01:c2:db:77:04:31:d4:73: 86:dd:93:f4:8e:71:e0:51:10:78:eb:97:c9:93:ec: e2:91:ad:f2:2b:22:cc:c3:f7:46:36:73:4e:ed:ed: 77:6f:57:68:47:7b:12:34:3f:d4:db:b7:a0:ae:2f: 4a:c9:c2:cc:48:07:b1:c5:64:2f:3f:40:40:24:6a: d6:37:e0:d4:d7:8e:03:0d:a9:ed:55:c7:36:12:66: eb:fa:64:7d:1a:fa:79:19:f9:a6:ce:f8:61:c8:0d: 47:1b:0f:a1:5e:ff:bc:c4:7e:85:57:8e:1a:46:d8: 55:e2:6b:e7:9c:10:8d:df:54:85:2f:b1:1e:1d:b7: 91:02:d3:f0:1d:72:e9:bc:0e:d4:3a:30:fb:c4:2e: 2c:61:e6:c5:ce:6c:68:03:5f:45:cf:4b:e8:50:a3: a9:1e:98:d7:93:a9:ba:17:3c:83:ed:db:4e:d8:d0: a1:1b:ee:05:97:e6:9c:9c:d2:38:c7:ad:2a:14:0c: 24:bb:db:60:96:4a:bb:4b:05:2a:ac:b2:6d:c0:71: 6b:c5:68:47:5b:e1:42:ac:c2:71:00:c6:bd:4a:d1: 2c:98:7e:9e:c7:5c:66:40:e9:59:98:18:f4:e0:be: b9:ae:1b:40:9a:7b:89:30:9b:ab:4b:b8:a4:98:9a: ae:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:0B:0F:7A:CB:87:D1:34:C3:85:9D:72:D0:D1:A6:1E:47:51:BA:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/445a66-b76b-4b48-a02d-bc289a931b4b/1/iAsPesuH0TTDhZ1y0NGmHkdRusA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.0.0/22 IPv6: 2a0c:7bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51092 Signature Algorithm: sha256WithRSAEncryption 2b:c8:a2:65:16:75:dc:71:3b:78:ed:13:75:c4:0d:e9:26:66: 93:94:2b:5f:c9:fa:57:82:0c:ed:b6:de:ac:43:02:ad:9d:a1: be:29:b8:79:75:bf:91:b5:a3:6b:06:d4:c3:ea:72:2b:06:1e: 10:82:9b:75:cd:ff:18:4b:7c:2e:5b:07:15:e7:35:f9:3e:1f: 43:eb:8f:67:60:62:4a:0e:37:9c:bc:f3:8b:4c:d1:74:9f:8c: 50:72:fc:71:7b:0a:03:ae:1f:46:b8:21:d1:af:07:9a:47:90: cf:fc:3a:7c:b9:83:ab:15:eb:91:9d:56:9b:84:e3:9e:5e:2c: 53:5f:9f:d6:ec:4a:14:3c:60:b7:8b:c3:f1:7a:c3:38:ec:6b: b1:bd:6a:51:ff:ef:f1:f6:8b:16:4a:ef:5e:3c:c5:e5:64:b3: 32:05:9e:36:97:8e:d6:b4:79:be:f0:93:3f:dc:91:ac:15:32: 44:a3:4e:17:b9:b8:45:92:9c:73:f1:aa:0b:f0:9b:bf:47:06: ca:3f:6e:5c:f6:53:e1:bd:23:0d:97:24:37:d2:a6:20:8a:e8: 3f:40:21:b7:30:b4:2d:19:73:d6:a2:76:90:29:95:4f:9c:7e: 59:36:e4:6f:8d:0f:1a:72:d1:c0:f4:41:b7:71:a0:45:11:ae: 02:8f:b9:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9y0fmaHkWU7i/3LdiMaFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODBiMGY3YWNiODdkMTM0YzM4NTlkNzJkMGQxYTYxZTQ3NTFiYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMMb6TQGAcLbdwQx1HOG3ZP0jnHg URB465fJk+zika3yKyLMw/dGNnNO7e13b1doR3sSND/U27egri9KycLMSAexxWQv P0BAJGrWN+DU144DDantVcc2Embr+mR9Gvp5GfmmzvhhyA1HGw+hXv+8xH6FV44a RthV4mvnnBCN31SFL7EeHbeRAtPwHXLpvA7UOjD7xC4sYebFzmxoA19Fz0voUKOp HpjXk6m6FzyD7dtO2NChG+4Fl+acnNI4x60qFAwku9tglkq7SwUqrLJtwHFrxWhH W+FCrMJxAMa9StEsmH6ex1xmQOlZmBj04L65rhtAmnuJMJurS7ikmJquxwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFIgLD3rLh9E0w4WdctDRph5HUbrAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzQ0NWE2 Ni1iNzZiLTRiNDgtYTAyZC1iYzI4OWE5MzFiNGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNDQ1YTY2 LWI3NmItNGI0OC1hMDJkLWJjMjg5YTkzMWI0Yi8xL2lBc1Blc3VIMFRURGhaMXkw TkdtSGtkUnVzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufoAMA0EAgACMAcDBQMqDHvAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDHlDANBgkqhkiG9w0BAQsFAAOCAQEAK8iiZRZ13HE7 eO0TdcQN6SZmk5QrX8n6V4IM7bberEMCrZ2hvim4eXW/kbWjawbUw+pyKwYeEIKb dc3/GEt8LlsHFec1+T4fQ+uPZ2BiSg43nLzzi0zRdJ+MUHL8cXsKA64fRrgh0a8H mkeQz/w6fLmDqxXrkZ1Wm4Tjnl4sU1+f1uxKFDxgt4vD8XrDOOxrsb1qUf/v8faL FkrvXjzF5WSzMgWeNpeO1rR5vvCTP9yRrBUyRKNOF7m4RZKcc/GqC/Cbv0cGyj9u XPZT4b0jDZckN9KmIIroP0AhtzC0LRlz1qJ2kCmVT5x+WTbkb40PGnLRwPRBt3Gg RRGuAo+5HA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:03 2026 by rpki-client