This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer (raw, json) Hash identifier: cACIPMUAG7jBqeT4/1KLO+Ve44N85+UCq/P07x86qAo= Subject key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A25A0767F69397EF47B319E43ADB8A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205609 IP: 185.133.252.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:5a:07:67:f6:93:97:ef:47:b3:19:e4:3a:db:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d325fc508a7373256720a54d73fa9057d8a21c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bc:7d:05:2b:db:da:a9:7d:db:46:a2:b7:c8: c5:09:0e:8f:33:a6:24:f2:a4:99:d0:44:2b:30:f1: e4:9b:b9:90:20:28:27:93:86:61:04:7d:19:87:8c: 95:82:74:04:87:5d:f3:5b:13:1c:07:bf:e0:7a:00: 04:11:e9:17:d8:ed:54:f4:74:20:3d:7a:4b:94:03: 3a:bc:84:b3:d1:df:a5:d7:ed:8e:49:e3:74:b9:0a: 41:88:54:34:13:ae:a3:c5:f6:c5:f6:49:5d:29:8e: a8:cb:71:96:d6:98:61:77:90:09:f7:aa:5c:92:ad: ab:a4:c2:2d:f8:e3:f4:c9:5c:81:3b:bf:9c:8d:3f: d4:3c:39:83:db:ad:d8:21:72:c2:a6:b3:24:5a:7f: a0:91:03:0a:d4:8d:4b:ef:59:a5:1f:99:2a:eb:96: fb:6c:30:06:c2:ee:9d:53:48:d3:0b:8f:8f:48:e8: ce:ec:19:e9:8d:d0:c6:30:9c:87:77:31:fc:93:fe: b1:dc:d1:a2:bb:e8:ed:1e:7e:5f:ff:12:d6:80:01: 67:d8:44:2c:25:5c:e5:5a:c5:0e:9a:91:db:21:50: e7:41:b7:93:01:cc:da:71:30:f7:2d:7c:87:2c:0f: 4d:00:04:09:a3:fe:e0:bd:45:ac:58:0b:0b:d6:42: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205609 Signature Algorithm: sha256WithRSAEncryption 18:a0:e8:4e:00:06:4b:8e:76:c9:84:37:bd:7a:c6:38:91:c9: 91:0e:a2:d3:6d:76:d2:2e:c7:ec:24:e3:13:bb:4c:07:d0:95: 13:bd:be:cc:ac:84:d5:c7:0d:53:02:87:a6:4e:25:ec:f1:62: 23:1d:f3:e3:60:8b:38:82:c1:6a:13:2e:36:57:73:b8:86:32: 1f:5e:45:ef:d4:10:d3:57:c1:33:ab:4f:dd:38:ea:c0:2e:21: 64:69:53:a3:97:8b:59:fa:1e:22:18:61:74:21:8c:b3:66:c4: f8:03:c3:59:da:60:f3:ca:7e:c5:4b:df:35:b7:78:2f:d6:eb: 8b:40:a7:d6:49:bb:0b:6b:bf:4b:f3:1a:e0:ff:c2:f6:b2:fe: 5f:ac:b3:02:6b:54:5b:fe:b7:b7:38:2e:d1:ed:d2:e6:f4:9f: 82:c3:4f:7d:d3:54:33:b6:ae:97:56:a6:dd:a4:78:7c:20:93: 38:fc:e5:1d:da:8a:d5:00:fc:91:70:3a:c6:96:45:b5:7f:08: 86:61:66:9f:d1:73:53:a4:0a:24:61:ae:e9:20:9e:52:59:38: cc:5a:85:71:04:2a:6a:5d:e9:6a:f1:d0:79:b9:d4:83:0b:9e: 8f:13:5e:9a:79:04:77:75:26:83:04:ae:b0:87:85:f2:a2:80: cf:ed:c3:70 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4oloHZ/aTl+9HsxnkOtuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzI1ZmM1MDhhNzM3MzI1NjcyMGE1NGQ3M2ZhOTA1N2Q4YTIxYzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLx9BSvb2ql920ait8jFCQ6PM6Yk 8qSZ0EQrMPHkm7mQICgnk4ZhBH0Zh4yVgnQEh13zWxMcB7/gegAEEekX2O1U9HQg PXpLlAM6vISz0d+l1+2OSeN0uQpBiFQ0E66jxfbF9kldKY6oy3GW1phhd5AJ96pc kq2rpMIt+OP0yVyBO7+cjT/UPDmD263YIXLCprMkWn+gkQMK1I1L71mlH5kq65b7 bDAGwu6dU0jTC4+PSOjO7BnpjdDGMJyHdzH8k/6x3NGiu+jtHn5f/xLWgAFn2EQs JVzlWsUOmpHbIVDnQbeTAczacTD3LXyHLA9NAAQJo/7gvUWsWAsL1kLsbwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNMl/FCKc3MlZyClTXP6kFfYohwTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2RjMTcy NC0zMTY1LTQ3ZWYtYTZmZS0xYzZhYTFmNmI3MGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZGMxNzI0 LTMxNjUtNDdlZi1hNmZlLTFjNmFhMWY2YjcwYi8xLzB5WDhVSXB6Y3lWbklLVk5j X3FRVjlpaUhCTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuYX8MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMjKTANBgkqhkiG9w0BAQsFAAOCAQEAGKDoTgAGS452yYQ3vXrGOJHJkQ6i0212 0i7H7CTjE7tMB9CVE72+zKyE1ccNUwKHpk4l7PFiIx3z42CLOILBahMuNldzuIYy H15F79QQ01fBM6tP3TjqwC4hZGlTo5eLWfoeIhhhdCGMs2bE+APDWdpg88p+xUvf Nbd4L9bri0Cn1km7C2u/S/Ma4P/C9rL+X6yzAmtUW/63tzgu0e3S5vSfgsNPfdNU M7aul1am3aR4fCCTOPzlHdqK1QD8kXA6xpZFtX8IhmFmn9FzU6QKJGGu6SCeUlk4 zFqFcQQqal3pavHQebnUgwuejxNemnkEd3UmgwSusIeF8qKAz+3DcA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:45 2026 by rpki-client