This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer File: tDbA8OyLvt8PYIRN_k_pOTaaS0A.cer (raw, json) Hash identifier: MPAkQLzk/B04ubTgNS1kgbH840D0CDqyiwIn9ekwmks= Subject key identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8084EBC20B32FCCD05258FC10F7E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:08 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50782 IP: 2.57.48.0/22 IP: 91.215.240.0/22 IP: 185.159.200.0/22 IP: 185.246.20.0/22 IP: 194.127.196.0/24 IP: 194.127.202.0/24 IP: 194.127.206.0/24 IP: 194.127.214.0/24 IP: 2a07:b6c0::/29 IP: 2a09:c940::/29 IP: 2a0d:6680::/29 IP: 2a0f:afc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:08:4e:bc:20:b3:2f:cc:d0:52:58:fc:10:f7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b436c0f0ec8bbedf0f60844dfe4fe939369a4b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:e5:15:88:9b:a3:3d:3e:9a:b6:4f:86:f1: eb:6f:d4:51:2f:ac:a9:fa:d6:ec:ce:f8:72:a5:46: 89:97:6e:da:4d:1b:e9:c6:9c:a0:6a:d5:85:11:a2: 0a:14:5f:b6:a1:f1:54:8d:ff:7e:1d:ae:64:33:86: ce:4f:28:e8:cd:92:23:9f:35:a0:ef:ae:a5:4c:70: f5:e5:ce:ba:9c:93:e9:ca:e6:5b:de:45:b5:77:34: fb:18:cc:25:8a:75:de:d9:a9:dd:fb:ef:a9:a5:c9: fc:f5:d3:b4:9a:b6:20:b6:43:d5:f2:44:cb:03:a6: e0:67:04:45:db:e2:ab:bb:74:46:89:6f:3d:c4:47: 57:22:5b:f8:ea:dd:69:bf:19:83:06:57:7e:f9:be: bf:08:5b:5a:da:94:58:65:dd:13:0d:ca:0e:cb:ea: 2f:97:18:da:8d:f8:1f:5c:d8:82:27:a8:dd:38:df: ef:8f:c1:22:7a:59:42:39:41:6a:b0:aa:35:e9:a6: 62:6e:c7:78:d1:8c:57:10:99:a4:c8:2e:c5:f2:32: 60:1f:1c:ab:9d:3b:8f:a6:d9:f3:24:5a:6e:61:64: 9b:dc:03:30:5e:41:fb:fb:17:e7:3f:33:3d:4f:7b: 44:b5:7e:35:5a:40:49:53:77:99:5b:34:26:f4:fc: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:36:C0:F0:EC:8B:BE:DF:0F:60:84:4D:FE:4F:E9:39:36:9A:4B:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/db66ab-70ac-41ad-9958-dd8b5afcee3b/1/tDbA8OyLvt8PYIRN_k_pOTaaS0A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.48.0/22 91.215.240.0/22 185.159.200.0/22 185.246.20.0/22 194.127.196.0/24 194.127.202.0/24 194.127.206.0/24 194.127.214.0/24 IPv6: 2a07:b6c0::/29 2a09:c940::/29 2a0d:6680::/29 2a0f:afc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50782 Signature Algorithm: sha256WithRSAEncryption 4c:e6:77:b0:a5:8b:95:51:ee:be:b8:7a:ed:46:af:97:c9:49: 4a:02:cd:6a:98:10:f4:00:62:0d:10:8f:2e:1d:17:d7:1a:74: e6:cd:e0:5a:ef:03:66:96:31:d7:3c:44:19:4a:6e:b8:38:9e: b9:4f:ff:75:91:23:f1:2b:bd:80:26:e9:cf:bf:68:18:73:83: 28:b7:d4:d4:91:4e:f0:19:f5:3f:9f:7b:2a:f2:4c:77:9c:cd: c8:3b:65:f9:9a:b0:99:e4:09:47:2e:2f:61:c7:f2:ce:51:ec: 30:21:13:f4:45:9d:2c:bb:54:35:8f:0f:10:66:34:a9:f3:a8: 22:97:50:f8:27:9a:d9:b7:38:63:07:32:c0:43:b0:7f:33:72: eb:e1:79:b1:47:d3:6f:3f:b0:21:e5:58:a4:14:ab:32:d2:4a: f1:8e:3f:84:45:76:93:d9:a8:e7:57:54:4d:5d:96:ec:bc:06: 1d:66:75:ef:ae:c0:88:43:0b:3a:8a:4d:56:6a:84:17:41:84: 8a:73:43:66:07:42:7e:11:c8:44:ce:c0:e4:0e:6d:51:5c:44: 75:55:d4:53:01:49:9a:54:bc:ab:ee:f1:7d:93:c3:83:e5:57: c5:f6:a9:8c:c6:53:ec:6e:a7:6d:39:e3:53:55:94:52:55:29: 6d:3a:e6:cc -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt6yAhOvCCzL8zQUlj8EPfkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDM2YzBmMGVjOGJiZWRmMGY2MDg0NGRmZTRmZTkzOTM2OWE0YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsazlFYiboz0+mrZPhvHrb9RRL6yp +tbszvhypUaJl27aTRvpxpygatWFEaIKFF+2ofFUjf9+Ha5kM4bOTyjozZIjnzWg 766lTHD15c66nJPpyuZb3kW1dzT7GMwlinXe2and+++ppcn89dO0mrYgtkPV8kTL A6bgZwRF2+Kru3RGiW89xEdXIlv46t1pvxmDBld++b6/CFta2pRYZd0TDcoOy+ov lxjajfgfXNiCJ6jdON/vj8EiellCOUFqsKo16aZibsd40YxXEJmkyC7F8jJgHxyr nTuPptnzJFpuYWSb3AMwXkH7+xfnPzM9T3tEtX41WkBJU3eZWzQm9Px2IwIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFLQ2wPDsi77fD2CETf5P6Tk2mktAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2RiNjZh Yi03MGFjLTQxYWQtOTk1OC1kZDhiNWFmY2VlM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvZGI2NmFi LTcwYWMtNDFhZC05OTU4LWRkOGI1YWZjZWUzYi8xL3REYkE4T3lMdnQ4UFlJUk5f a19wT1RhYVMwQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG0GCCsGAQUF BwEHAQH/BF4wXDA2BAIAATAwAwQCAjkwAwQCW9fwAwQCuZ/IAwQCufYUAwQAwn/E AwQAwn/KAwQAwn/OAwQAwn/WMCIEAgACMBwDBQMqB7bAAwUDKgnJQAMFAyoNZoAD BQMqD6/AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDGXjANBgkqhkiG9w0BAQsF AAOCAQEATOZ3sKWLlVHuvrh67Uavl8lJSgLNapgQ9ABiDRCPLh0X1xp05s3gWu8D ZpYx1zxEGUpuuDieuU//dZEj8Su9gCbpz79oGHODKLfU1JFO8Bn1P597KvJMd5zN yDtl+ZqwmeQJRy4vYcfyzlHsMCET9EWdLLtUNY8PEGY0qfOoIpdQ+Cea2bc4Ywcy wEOwfzNy6+F5sUfTbz+wIeVYpBSrMtJK8Y4/hEV2k9mo51dUTV2W7LwGHWZ1767A iEMLOopNVmqEF0GEinNDZgdCfhHIRM7A5A5tUVxEdVXUUwFJmlS8q+7xfZPDg+VX xfapjMZT7G6nbTnjU1WUUlUpbTrmzA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:55 2026 by rpki-client