This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer File: rwAta7hamGvIjbzZMyCUVOW14II.cer (raw, json) Hash identifier: jzdAdSk1TGnnPjZQmJVPzy7xSddoaBiP9yNRPGFOFAY= Subject key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78344A1C06C22B96B6425025E4B60788 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204383 IP: 185.250.172.0/22 IP: 2a0c:fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4a:1c:06:c2:2b:96:b6:42:50:25:e4:b6:07:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af002d6bb85a986bc88dbcd933209454e5b5e082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:29:87:fe:17:a6:a3:ba:ae:e3:6e:95:ce:00: 86:67:98:cc:90:38:ca:a0:45:79:4d:fd:6b:f6:d2: ec:34:14:3b:d2:0d:3e:92:a2:84:39:49:ac:9f:76: 32:4a:6f:12:91:6d:e9:75:e8:f1:90:b1:23:ea:5d: 4c:23:f3:5e:dd:f6:03:ce:41:c9:b1:03:e9:26:8e: 27:af:63:68:45:1b:e2:d0:bd:3c:f0:7e:71:53:ba: d3:03:6c:1a:22:83:df:fb:1a:7e:25:dd:ba:36:1c: c5:2b:0a:e5:98:7a:ff:92:f8:c4:c9:23:62:3b:e7: d0:d3:93:0b:d9:70:e2:91:ce:da:8d:dc:72:72:67: ce:8d:53:bb:82:9b:bc:fb:07:18:c2:f4:fb:a2:0d: 58:94:38:45:5c:bb:7a:59:90:b5:d6:87:5e:d2:8f: 8a:e7:28:f0:d7:12:9f:f0:b5:42:a4:8f:07:c9:07: 88:ee:07:04:85:65:25:8d:c4:74:5e:f0:59:06:a1: fa:a6:92:b1:21:6a:99:d5:cf:e4:7c:ac:ca:00:d3: 22:7f:36:f6:f4:20:c8:6b:df:4e:22:98:da:a6:c5: c7:dc:20:fd:8a:7d:99:fd:c4:75:5b:19:7d:2f:6f: d5:d3:05:56:91:8e:51:5b:4c:48:e1:d8:51:4a:d5: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.250.172.0/22 IPv6: 2a0c:fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204383 Signature Algorithm: sha256WithRSAEncryption 5e:d1:ee:9f:75:82:af:35:b6:1c:0f:9f:da:33:2b:a2:64:93: ae:8f:03:48:5c:e1:99:70:d8:bb:da:bf:63:4f:3f:5a:fd:f1: df:a0:93:4c:7c:c2:5e:c7:e4:66:1a:ad:ca:5d:7b:1f:b2:29: 08:7f:8f:24:3d:bd:62:1a:fd:36:6c:08:f3:e1:e0:b7:cd:e5: 80:11:30:14:c1:f4:07:9e:b7:43:f2:48:2a:0e:2d:2e:84:77: 7f:bc:86:9d:d0:5f:68:68:90:16:dd:ec:eb:2f:f8:89:f9:7e: a1:70:d7:e4:74:d5:03:53:35:67:26:67:24:18:43:5a:5c:a9: 5d:5a:96:23:cb:39:c6:09:a6:8f:f2:a1:50:52:d2:3e:59:61: 47:74:e5:a4:5d:36:6c:1c:53:78:87:4e:14:9a:2c:6d:a2:cd: 92:d2:ee:12:4f:6a:5b:ee:b6:e6:c0:b6:2c:ca:88:39:d8:ba: f0:27:d3:47:69:d3:8a:b6:71:15:9c:7a:5a:db:66:9b:c4:ca: af:78:51:e3:3b:91:e8:02:63:f8:0d:93:61:fd:35:c1:02:68: 8c:0e:ae:56:c7:1d:b2:21:aa:2f:31:01:a1:26:81:b1:a7:07: 11:5f:11:7d:f9:90:1f:1b:ac:c3:ed:7d:62:86:37:ef:33:0c: 2d:61:5e:db -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NEocBsIrlrZCUCXktgeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjAwMmQ2YmI4NWE5ODZiYzg4ZGJjZDkzMzIwOTQ1NGU1YjVlMDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ymH/hemo7qu426VzgCGZ5jMkDjK oEV5Tf1r9tLsNBQ70g0+kqKEOUmsn3YySm8SkW3pdejxkLEj6l1MI/Ne3fYDzkHJ sQPpJo4nr2NoRRvi0L088H5xU7rTA2waIoPf+xp+Jd26NhzFKwrlmHr/kvjEySNi O+fQ05ML2XDikc7ajdxycmfOjVO7gpu8+wcYwvT7og1YlDhFXLt6WZC11ode0o+K 5yjw1xKf8LVCpI8HyQeI7gcEhWUljcR0XvBZBqH6ppKxIWqZ1c/kfKzKANMifzb2 9CDIa99OIpjapsXH3CD9in2Z/cR1Wxl9L2/V0wVWkY5RW0xI4dhRStV2BQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK8ALWu4WphryI282TMglFTlteCCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExL2EyZWRh Mi1lODg1LTQ2NDAtOWM4NC1kNmVmOGU5MTQzMDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvYTJlZGEy LWU4ODUtNDY0MC05Yzg0LWQ2ZWY4ZTkxNDMwNy8xL3J3QXRhN2hhbUd2SWpielpN eUNVVk9XMTRJSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCufqsMA0EAgACMAcDBQMqDA/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMeXzANBgkqhkiG9w0BAQsFAAOCAQEAXtHun3WCrzW2 HA+f2jMromSTro8DSFzhmXDYu9q/Y08/Wv3x36CTTHzCXsfkZhqtyl17H7IpCH+P JD29Yhr9NmwI8+Hgt83lgBEwFMH0B563Q/JIKg4tLoR3f7yGndBfaGiQFt3s6y/4 ifl+oXDX5HTVA1M1ZyZnJBhDWlypXVqWI8s5xgmmj/KhUFLSPllhR3TlpF02bBxT eIdOFJosbaLNktLuEk9qW+625sC2LMqIOdi68CfTR2nTirZxFZx6Wttmm8TKr3hR 4zuR6AJj+A2TYf01wQJojA6uVscdsiGqLzEBoSaBsacHEV8RffmQHxusw+19YoY3 7zMMLWFe2w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:05 2026 by rpki-client