This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer File: r070qO03Ebas1owPSPYhgx_Vqq4.cer (raw, json) Hash identifier: DC8Vz90i46ALSx8PjF1alWDXm1tal0DptQH9nHTb+rk= Subject key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC261ADF8B570A4C46B22CE4543DEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207141 IP: 185.164.252.0/22 IP: 185.206.236.0/22 IP: 2a0b:1b40::/29 IP: 2a0b:b400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:26:1a:df:8b:57:0a:4c:46:b2:2c:e4:54:3d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:c7:3a:aa:56:86:f7:ee:15:1c:8a:b9:ac: d9:30:1d:8e:e3:ef:da:64:ec:f3:dc:f6:8d:c1:f7: 59:e7:be:63:c8:04:10:d9:47:1c:bf:7d:63:6e:f6: d4:a2:fb:af:32:d8:4b:ad:b0:85:67:f6:e0:05:22: 35:84:40:fc:a2:83:71:2d:34:77:be:d2:47:31:16: 65:ab:3e:a7:6b:a9:2d:2b:57:ad:6c:3c:f3:2f:eb: 68:c9:d2:69:4c:1d:03:71:73:fc:b1:34:86:08:b4: 77:9b:32:c2:20:4b:75:58:0d:53:50:8f:2f:ee:e0: 5a:c3:fa:ae:73:13:88:05:6b:f1:05:1e:77:93:0b: 96:7d:f7:5b:1e:f3:12:2a:8f:d6:29:17:2a:86:0a: ef:05:52:68:a8:7b:bd:79:0b:ff:70:21:cc:bb:5c: 15:64:0c:4f:2c:6d:a4:92:91:9f:36:d9:c7:5e:20: d6:19:06:18:6c:2c:57:7e:24:70:ad:ec:4d:02:cb: 0a:00:f0:a5:e4:db:06:65:c7:6b:e9:40:94:d8:4f: e4:ee:24:b2:33:3e:51:36:32:1e:fc:9e:14:2c:fa: 45:d6:77:3a:05:0d:e4:6d:34:32:fc:6e:4a:a6:52: 82:26:b8:32:80:85:ef:0e:a7:86:e7:30:1d:df:78: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.252.0/22 185.206.236.0/22 IPv6: 2a0b:1b40::/29 2a0b:b400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207141 Signature Algorithm: sha256WithRSAEncryption 4f:fc:d8:a8:07:ba:3d:e9:10:e1:8e:f0:ad:a7:34:25:34:97: 98:df:9a:0e:75:a7:9d:2b:f6:8f:81:7d:6d:9e:d8:85:f1:a5: 52:66:b6:56:ba:ba:12:32:19:9a:7a:72:d0:df:e3:51:4a:a6: 06:19:fc:f4:c7:5e:f5:74:1f:08:65:4e:03:d2:a6:e5:1a:0f: a2:c4:eb:2c:49:a7:3f:77:48:61:fd:04:07:b1:6b:ec:1b:7f: 8c:de:02:23:68:6c:98:ad:07:ec:de:0d:bf:52:5d:9c:26:14: 7f:e8:74:be:a9:5b:d2:18:8d:3f:b5:d2:30:36:a3:f1:a9:92: 08:ea:71:93:90:ef:0b:46:b8:8f:c0:f9:f1:ee:02:4a:9d:f5: 1f:b9:41:b9:1a:12:4d:e0:d8:85:99:87:8f:c7:a8:66:5f:f9: 60:89:8d:f7:08:f0:95:33:ab:ea:7f:87:6c:75:43:08:9a:c3: 3c:97:6c:b3:f0:33:1b:95:87:72:f0:ae:d5:c1:09:ee:6a:3b: 7c:d0:5e:40:b8:d5:e0:be:eb:ae:98:b1:bd:51:21:56:16:35: b0:b9:38:24:a1:d4:b6:70:f3:a0:5e:eb:34:ca:1c:fe:ee:b1: 2c:08:bb:63:0a:3d:92:d5:c4:82:08:e5:3b:ae:d7:3c:26:c1: 3c:7b:54:ef -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt57CYa34tXCkxGsizkVD3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjRlZjRhOGVkMzcxMWI2YWNkNjhjMGY0OGY2MjE4MzFmZDVhYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDPHOqpWhvfuFRyKuazZMB2O4+/a ZOzz3PaNwfdZ575jyAQQ2Uccv31jbvbUovuvMthLrbCFZ/bgBSI1hED8ooNxLTR3 vtJHMRZlqz6na6ktK1etbDzzL+toydJpTB0DcXP8sTSGCLR3mzLCIEt1WA1TUI8v 7uBaw/qucxOIBWvxBR53kwuWffdbHvMSKo/WKRcqhgrvBVJoqHu9eQv/cCHMu1wV ZAxPLG2kkpGfNtnHXiDWGQYYbCxXfiRwrexNAssKAPCl5NsGZcdr6UCU2E/k7iSy Mz5RNjIe/J4ULPpF1nc6BQ3kbTQy/G5KplKCJrgygIXvDqeG5zAd33h09QIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFK9O9KjtNxG2rNaMD0j2IYMf1aquMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ2L2U4ZjRi My0yMTIwLTRlY2ItOTYwOS1jYjljNThmNTEwY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZThmNGIz LTIxMjAtNGVjYi05NjA5LWNiOWM1OGY1MTBjYi8xL3IwNzBxTzAzRWJhczFvd1BT UFloZ3hfVnFxNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCuaT8AwQCuc7sMBQEAgACMA4DBQMqCxtAAwUD Kgu0ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDKSUwDQYJKoZIhvcNAQELBQAD ggEBAE/82KgHuj3pEOGO8K2nNCU0l5jfmg51p50r9o+BfW2e2IXxpVJmtla6uhIy GZp6ctDf41FKpgYZ/PTHXvV0HwhlTgPSpuUaD6LE6yxJpz93SGH9BAexa+wbf4ze AiNobJitB+zeDb9SXZwmFH/odL6pW9IYjT+10jA2o/GpkgjqcZOQ7wtGuI/A+fHu Akqd9R+5QbkaEk3g2IWZh4/HqGZf+WCJjfcI8JUzq+p/h2x1QwiawzyXbLPwMxuV h3LwrtXBCe5qO3zQXkC41eC+666Ysb1RIVYWNbC5OCSh1LZw86Be6zTKHP7usSwI u2MKPZLVxIII5Tuu1zwmwTx7VO8= -----END CERTIFICATE-----Generated at Tue Jan 27 02:33:44 2026 by rpki-client