This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/orWthdxjIax7o93JxiqqBsfVPc4.cer File: orWthdxjIax7o93JxiqqBsfVPc4.cer (raw, json) Hash identifier: oWWojwzcvhWOg/oEiNAcCFAU6RZgG1AgPzDS6vVnCUU= Subject key identifier: A2:B5:AD:85:DC:63:21:AC:7B:A3:DD:C9:C6:2A:AA:06:C7:D5:3D:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB22E315E5CA0DF4374A95F78D9514 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205674 IP: 185.209.248.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:22:e3:15:e5:ca:0d:f4:37:4a:95:f7:8d:95:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2b5ad85dc6321ac7ba3ddc9c62aaa06c7d53dce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:ab:59:4f:01:7e:67:4a:4d:1e:19:fb:4f: 68:e7:23:3d:d4:c8:c7:26:a4:48:b6:d5:87:e5:1b: 14:a6:b9:5b:bd:84:f5:ce:2f:ae:cc:0c:25:af:d7: 5e:5e:57:b7:b0:b9:6a:f3:eb:76:f0:6e:9a:5e:27: ef:07:2c:b6:8d:a2:6b:71:f6:17:73:e0:7b:2c:8d: c0:68:ad:da:3e:02:2f:da:37:77:90:1e:05:66:b8: 7b:4e:ec:03:aa:e2:6b:89:72:27:21:bb:7d:3f:81: 17:f0:2b:ed:34:91:d2:20:51:24:10:0a:60:a0:17: 27:8f:53:a0:ef:7e:d7:1e:0c:c6:a3:aa:34:2f:9f: e2:cd:23:4a:03:93:92:aa:69:e6:7f:5c:c9:49:a7: f0:0e:4d:bb:68:a7:7e:e7:ab:43:7d:29:df:22:cf: fa:b6:1d:fe:29:00:64:bd:58:62:a5:68:78:0a:d6: 0e:11:38:90:f4:6d:b4:27:bb:f8:11:b4:31:5c:35: e2:9d:7d:f2:93:09:13:ec:fd:36:af:83:a9:a1:88: 62:3e:70:23:1a:f1:60:71:4f:18:b8:43:8f:3f:7b: a7:da:a3:31:8e:ab:fe:69:a9:c5:60:3d:99:0e:54: ea:85:ea:a2:6a:ff:b8:11:66:e6:6a:67:cb:22:96: 95:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B5:AD:85:DC:63:21:AC:7B:A3:DD:C9:C6:2A:AA:06:C7:D5:3D:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4cc7ae-f565-41e0-9c76-cd686763e9cf/1/orWthdxjIax7o93JxiqqBsfVPc4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205674 Signature Algorithm: sha256WithRSAEncryption 91:b3:6c:b1:c5:93:29:d2:c9:60:86:e4:68:c0:55:fd:80:f6: 5a:d9:18:0e:cb:dc:db:af:8b:d3:6b:5a:57:d3:58:aa:71:9b: df:78:25:7b:63:11:f8:b0:66:6e:03:2c:44:f5:be:92:32:93: fd:c8:54:28:fb:cd:31:72:dc:ab:b0:e5:ea:1d:6b:2e:ec:7a: 40:21:98:89:76:32:4c:20:9f:c5:f3:c6:41:77:43:c0:35:bc: 7d:f5:61:3c:be:7a:69:3d:fa:e9:d1:d5:5a:60:a1:d5:49:54: ce:e2:43:3b:f9:25:3e:79:0e:7c:27:f1:28:75:d4:71:b2:05: 5f:3b:05:6c:e5:79:84:2b:57:11:06:bf:7f:e2:73:4e:bc:12: f1:9b:7e:1b:eb:f6:42:26:94:4c:d3:03:5a:be:5b:d7:f4:9b: 0d:7c:08:f4:bd:32:d8:a7:31:57:0a:cc:b1:14:a1:2b:d1:33: 01:99:5a:3c:d2:cf:52:44:30:f1:06:aa:a9:92:26:86:e2:c6: b8:20:51:f7:3b:d9:46:49:36:80:4d:8d:ad:f8:29:fe:83:3e: 2b:13:a8:54:f7:51:20:91:4a:13:94:74:6e:e2:4a:52:12:f5: 8e:71:75:69:4d:ff:79:bc:a2:f5:03:ac:9e:54:9c:74:db:c3: 70:1b:cb:29 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt26yLjFeXKDfQ3SpX3jZUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMmI1YWQ4NWRjNjMyMWFjN2JhM2RkYzljNjJhYWEwNmM3ZDUzZGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQSrWU8BfmdKTR4Z+09o5yM91MjH JqRIttWH5RsUprlbvYT1zi+uzAwlr9deXle3sLlq8+t28G6aXifvByy2jaJrcfYX c+B7LI3AaK3aPgIv2jd3kB4FZrh7TuwDquJriXInIbt9P4EX8CvtNJHSIFEkEApg oBcnj1Og737XHgzGo6o0L5/izSNKA5OSqmnmf1zJSafwDk27aKd+56tDfSnfIs/6 th3+KQBkvVhipWh4CtYOETiQ9G20J7v4EbQxXDXinX3ykwkT7P02r4OpoYhiPnAj GvFgcU8YuEOPP3un2qMxjqv+aanFYD2ZDlTqheqiav+4EWbmamfLIpaVVQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFKK1rYXcYyGse6PdycYqqgbH1T3OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzRjYzdh ZS1mNTY1LTQxZTAtOWM3Ni1jZDY4Njc2M2U5Y2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvNGNjN2Fl LWY1NjUtNDFlMC05Yzc2LWNkNjg2NzYzZTljZi8xL29yV3RoZHhqSWF4N285M0p4 aXFxQnNmVlBjNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCudH4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMjajANBgkqhkiG9w0BAQsFAAOCAQEAkbNsscWTKdLJYIbkaMBV/YD2WtkYDsvc 26+L02taV9NYqnGb33gle2MR+LBmbgMsRPW+kjKT/chUKPvNMXLcq7Dl6h1rLux6 QCGYiXYyTCCfxfPGQXdDwDW8ffVhPL56aT366dHVWmCh1UlUzuJDO/klPnkOfCfx KHXUcbIFXzsFbOV5hCtXEQa/f+JzTrwS8Zt+G+v2QiaUTNMDWr5b1/SbDXwI9L0y 2KcxVwrMsRShK9EzAZlaPNLPUkQw8QaqqZImhuLGuCBR9zvZRkk2gE2Nrfgp/oM+ KxOoVPdRIJFKE5R0buJKUhL1jnF1aU3/ebyi9QOsnlScdNvDcBvLKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:34 2026 by rpki-client