This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer File: rSzfJ9neZesk5c_J0xDkyKAwFGA.cer (raw, json) Hash identifier: jmWzV8Hv4a6Qv3hslHixEXuLTh8Pot4dbp4zjXuc4vo= Subject key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BB4893501EA108A62727F785E5D54 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202526 IP: 185.161.152.0/22 IP: 2a07:c5c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b4:89:35:01:ea:10:8a:62:72:7f:78:5e:5d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:1a:8e:6e:5f:4c:f7:46:a3:6b:34:1f:10: 22:75:91:d8:74:d4:16:ac:17:5d:8b:47:89:77:c5: 46:21:53:ce:0b:b0:e3:c3:54:b5:16:43:4f:69:53: bd:9c:a9:06:82:61:18:50:8e:49:64:ca:8b:73:4d: a3:fb:a8:1b:95:de:5d:a8:a2:bf:7a:4d:05:e2:f9: d1:b6:d1:a4:c2:66:a6:8c:17:28:45:20:6f:83:5e: a7:35:ed:ea:ff:89:83:7a:32:99:d9:3a:04:cc:7e: b3:01:22:b9:25:99:27:7f:eb:ea:04:a3:f8:6f:53: c2:3d:c6:92:09:d9:2d:90:d4:3f:04:0a:24:ea:78: db:3d:73:b7:20:9e:d4:eb:94:2c:90:f9:30:9d:3e: f7:78:85:02:67:21:11:f1:0c:31:f0:57:a5:0e:4f: 1e:8d:16:52:be:7f:f0:a2:ab:ab:2b:5d:46:8a:c6: c3:b5:1a:f7:d9:da:c5:0f:43:45:d2:ce:33:ca:37: 4d:eb:b8:38:68:b1:38:3b:0e:80:f0:f7:cc:5b:14: 20:b0:85:3f:17:e2:78:fa:57:8b:2b:7d:7b:2b:41: 4c:e7:fe:2e:68:34:dd:70:3b:c6:62:83:7a:c5:be: ef:f0:a5:d6:ac:94:27:83:43:63:82:f1:2b:f0:fc: 9d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.152.0/22 IPv6: 2a07:c5c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202526 Signature Algorithm: sha256WithRSAEncryption 47:95:f6:e1:34:5b:bd:e8:08:b3:83:cb:81:cd:5b:d4:a7:55: 3f:cc:49:eb:c6:b2:c3:c9:47:aa:ca:bc:9f:f3:b4:0d:74:e6: c9:c2:92:af:da:12:d6:7b:ef:be:68:99:93:1a:77:2b:10:bd: 9a:df:1c:71:0f:1c:74:d3:0f:25:e9:c7:9d:42:66:a0:8b:c1: 78:21:0a:7f:e7:5a:af:50:1a:a2:94:b4:7e:d2:1b:94:71:4a: 16:92:ce:79:f8:a7:76:df:2d:ea:6c:c9:29:2a:31:89:54:0d: 2b:03:5d:69:01:00:fc:24:52:67:24:a7:77:7e:38:bb:f0:da: fd:97:bc:d8:13:40:48:ed:09:1b:32:6a:23:1f:03:6d:52:c5: a1:aa:f9:d2:c9:ff:45:db:a5:54:2a:bc:c9:e3:1c:6e:42:3b: 39:fc:95:46:34:ae:6c:dc:3c:ff:a8:be:8a:19:3c:7d:f7:42: 58:de:27:8d:45:7d:44:f2:c5:3f:22:69:dd:df:e5:a0:f2:98: e4:9b:eb:ed:9d:a4:6f:87:f1:a6:0c:bb:7d:ce:49:56:38:1c: 1c:c7:05:23:63:c2:96:f4:ab:c2:6d:f9:c6:2f:1f:fc:83:b8: 0a:f4:d8:c1:3a:26:1f:eb:85:19:f5:d7:e4:19:79:b6:44:19: c0:58:60:81 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9W7SJNQHqEIpicn94Xl1UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDJjZGYyN2Q5ZGU2NWViMjRlNWNmYzlkMzEwZTRjOGEwMzAxNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmkajm5fTPdGo2s0HxAidZHYdNQW rBddi0eJd8VGIVPOC7Djw1S1FkNPaVO9nKkGgmEYUI5JZMqLc02j+6gbld5dqKK/ ek0F4vnRttGkwmamjBcoRSBvg16nNe3q/4mDejKZ2ToEzH6zASK5JZknf+vqBKP4 b1PCPcaSCdktkNQ/BAok6njbPXO3IJ7U65QskPkwnT73eIUCZyER8Qwx8FelDk8e jRZSvn/woqurK11GisbDtRr32drFD0NF0s4zyjdN67g4aLE4Ow6A8PfMWxQgsIU/ F+J4+leLK317K0FM5/4uaDTdcDvGYoN6xb7v8KXWrJQng0NjgvEr8PydDQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK0s3yfZ3mXrJOXPydMQ5MigMBRgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RhL2VkNjM0 Yi0zOWY3LTRiOWMtODZlNC0xZTkyMzhjZjAyOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGEvZWQ2MzRi LTM5ZjctNGI5Yy04NmU0LTFlOTIzOGNmMDI4Yy8xL3JTemZKOW5lWmVzazVjX0ow eERreUtBd0ZHQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaGYMA0EAgACMAcDBQMqB8XAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMXHjANBgkqhkiG9w0BAQsFAAOCAQEAR5X24TRbvegI s4PLgc1b1KdVP8xJ68ayw8lHqsq8n/O0DXTmycKSr9oS1nvvvmiZkxp3KxC9mt8c cQ8cdNMPJenHnUJmoIvBeCEKf+dar1AaopS0ftIblHFKFpLOefindt8t6mzJKSox iVQNKwNdaQEA/CRSZySnd344u/Da/Ze82BNASO0JGzJqIx8DbVLFoar50sn/Rdul VCq8yeMcbkI7OfyVRjSubNw8/6i+ihk8ffdCWN4njUV9RPLFPyJp3d/loPKY5Jvr 7Z2kb4fxpgy7fc5JVjgcHMcFI2PClvSrwm35xi8f/IO4CvTYwTomH+uFGfXX5Bl5 tkQZwFhggQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:09 2026 by rpki-client