This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer File: rtyPMnpGGWTAqHqceAlAHFfIbUE.cer (raw, json) Hash identifier: Rdig9CM8VbxIeAcn2zoSRHppap3FgnLegfzwLKedAKU= Subject key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE0EC6A59F1F994A5F697D8F732A3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61189 IP: 85.194.200.0/22 IP: 185.7.252.0/22 IP: 2a03:29c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0e:c6:a5:9f:1f:99:4a:5f:69:7d:8f:73:2a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aedc8f327a461964c0a87a9c7809401c57c86d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:da:02:7d:3c:45:8f:45:cd:52:28:a2:8d: 29:6b:1a:3f:ff:91:7c:b0:b9:5e:b3:47:33:35:16: c4:42:dd:6a:dc:1f:49:ab:cd:ff:f6:74:1d:a7:63: 0b:cb:f3:03:44:48:71:88:9a:70:57:36:4c:4b:0e: f3:ed:4a:21:18:2a:f3:aa:fb:fa:f8:c2:6c:54:cb: 36:b8:43:dc:02:e7:df:fc:42:3a:43:d2:92:76:71: 04:3c:8d:6f:62:b6:7a:81:88:9d:0f:ac:45:8a:50: b3:33:f2:02:5a:08:dc:f7:11:ac:26:a9:54:a3:d7: 42:43:83:14:a3:fd:06:68:0d:a9:5a:d8:34:46:d2: 69:ab:7b:cc:d0:10:0a:d6:85:22:fe:7f:a9:af:07: 45:92:1f:1b:6e:e2:ce:dc:37:8f:3e:a6:e4:43:fb: 0a:a8:ce:25:29:3b:7d:f9:fe:15:1a:03:92:b4:e8: 81:e1:01:74:c4:d1:7f:15:75:ef:f3:e0:95:53:42: 67:01:16:99:83:84:28:6e:9e:dd:82:54:7d:95:ae: c5:37:b9:94:a5:81:00:72:bd:01:fe:84:47:76:d4: a1:ed:4a:fd:1c:8e:cd:1b:8c:b9:03:6c:cf:d8:e5: 2c:fd:be:d2:3f:7a:ea:c0:90:59:33:82:e7:b5:3f: c8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.194.200.0/22 185.7.252.0/22 IPv6: 2a03:29c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61189 Signature Algorithm: sha256WithRSAEncryption 00:89:eb:17:cd:6e:df:4b:69:75:09:3f:0e:5d:31:f7:b8:2a: a5:3a:60:d8:7e:50:25:0f:11:10:c9:a4:a1:79:16:59:44:97: 00:52:ce:ee:02:3b:99:e9:2c:df:44:00:4b:29:58:ed:d4:1a: 95:4e:73:9d:84:a9:ce:32:95:eb:89:0a:14:91:c1:c1:96:9f: f6:b1:c3:7a:2c:bc:10:db:30:7f:d7:22:f0:ff:d1:eb:81:7f: 5a:c2:27:b7:fd:0c:bd:5f:57:2e:1e:b8:a5:e7:5e:61:47:b8: e5:13:0e:ac:d2:30:5f:42:c1:48:d9:a1:9a:7e:ce:8d:63:7a: 68:5c:99:36:4e:e1:bc:53:f6:f5:e1:ad:16:5d:08:48:c7:29: 99:c6:fa:0d:d2:d8:73:94:b6:9e:98:ec:06:1b:47:77:e5:dc: 96:2c:21:65:8a:4b:a3:b6:8a:0c:e7:74:78:86:bf:d0:6a:25: 22:cb:b1:6f:a5:35:1c:9d:cf:20:a6:92:ac:41:6a:0d:81:68: d5:23:b0:5f:bb:96:85:71:a4:47:00:32:7f:db:75:ad:58:71: f2:a8:ee:8e:40:91:a3:87:a4:72:cb:88:1f:9a:88:ab:39:5d: 95:24:32:9c:ea:17:3b:19:10:84:c4:f7:55:a3:65:5b:71:cc: b5:46:07:39 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt87g7GpZ8fmUpfaX2Pcyo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWRjOGYzMjdhNDYxOTY0YzBhODdhOWM3ODA5NDAxYzU3Yzg2ZDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8DaAn08RY9FzVIooo0paxo//5F8 sLles0czNRbEQt1q3B9Jq83/9nQdp2MLy/MDREhxiJpwVzZMSw7z7UohGCrzqvv6 +MJsVMs2uEPcAuff/EI6Q9KSdnEEPI1vYrZ6gYidD6xFilCzM/ICWgjc9xGsJqlU o9dCQ4MUo/0GaA2pWtg0RtJpq3vM0BAK1oUi/n+prwdFkh8bbuLO3DePPqbkQ/sK qM4lKTt9+f4VGgOStOiB4QF0xNF/FXXv8+CVU0JnARaZg4Qobp7dglR9la7FN7mU pYEAcr0B/oRHdtSh7Ur9HI7NG4y5A2zP2OUs/b7SP3rqwJBZM4LntT/IxwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFK7cjzJ6RhlkwKh6nHgJQBxXyG1BMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2IwZGM1 Mi00MTZlLTRhMDItODk5My1mYmM1YTFlMzgyYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvYjBkYzUy LTQxNmUtNGEwMi04OTkzLWZiYzVhMWUzODJjNS8xL3J0eVBNbnBHR1dUQXFIcWNl QWxBSEZmSWJVRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCVcLIAwQCuQf8MA0EAgACMAcDBQAqAynAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDvBTANBgkqhkiG9w0BAQsFAAOCAQEAAInr F81u30tpdQk/Dl0x97gqpTpg2H5QJQ8REMmkoXkWWUSXAFLO7gI7meks30QASylY 7dQalU5znYSpzjKV64kKFJHBwZaf9rHDeiy8ENswf9ci8P/R64F/WsInt/0MvV9X Lh64pedeYUe45RMOrNIwX0LBSNmhmn7OjWN6aFyZNk7hvFP29eGtFl0ISMcpmcb6 DdLYc5S2npjsBhtHd+XcliwhZYpLo7aKDOd0eIa/0GolIsuxb6U1HJ3PIKaSrEFq DYFo1SOwX7uWhXGkRwAyf9t1rVhx8qjujkCRo4ekcsuIH5qIqzldlSQynOoXOxkQ hMT3VaNlW3HMtUYHOQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:37 2026 by rpki-client