This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer File: 85SkZHKLgoVtwrlVzK6atbplOcg.cer (raw, json) Hash identifier: ZS2UofYUvRhrYiKIxuoSdNx2cfUNfK3oRtccK4xMNr0= Subject key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F155B0DF21A72950584868B60B35AEB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58011 IP: 164.138.240.0/21 IP: 188.244.108.0/22 IP: 2a0d:55c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5b:0d:f2:1a:72:95:05:84:86:8b:60:b3:5a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:27:c2:10:a8:21:0d:ab:0c:85:fd:1c:45: a4:3d:6c:9e:51:75:eb:63:a9:79:38:c1:cc:ec:b1: 86:b5:c0:8d:fa:3e:00:89:ab:a9:61:3f:81:ee:f2: c3:b6:38:75:79:1f:fd:2a:e8:8c:6b:4f:3f:8f:47: 10:70:9d:7b:db:af:7b:bb:92:ef:b0:b8:fd:b8:21: 2a:55:87:74:e6:52:65:78:3d:c4:dc:17:b6:6a:54: ad:1c:11:50:a4:c2:31:97:9f:03:2d:9e:26:3a:21: eb:18:b6:0a:b2:58:4d:cb:e6:3d:4b:38:0d:66:f2: 15:10:53:52:bc:66:b4:10:ed:1a:2a:6c:93:86:a7: 8f:14:d6:99:d8:f9:98:9b:5e:b3:15:21:c6:89:7b: 23:ae:c7:57:c0:58:0f:ea:12:87:c8:67:69:0a:e1: 19:a5:f2:b5:2e:3c:d8:d1:86:ee:21:26:42:6f:f1: 0f:20:d2:04:e1:34:ec:95:a6:c0:4f:d2:d4:55:3c: 1e:9a:41:1c:fe:36:6b:51:b5:c1:79:48:b9:6d:ba: 11:c0:e3:15:3f:ee:7d:e2:dc:8b:17:fc:30:f0:b8: a3:2a:7c:12:28:80:78:03:d5:c1:1f:9e:79:7a:cf: 48:86:13:fe:63:11:38:d1:7b:7d:ee:85:6a:56:e8: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.240.0/21 188.244.108.0/22 IPv6: 2a0d:55c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58011 Signature Algorithm: sha256WithRSAEncryption 59:3a:9a:b4:2e:5a:c3:55:54:87:b8:d2:13:75:d6:57:af:61: 17:08:49:59:e1:a3:f3:eb:75:78:6b:f5:4c:0d:d3:40:10:4d: 0f:f2:9a:d9:b5:f8:e3:36:be:0c:a6:63:06:06:67:a7:28:91: f5:7b:34:48:41:46:84:b7:da:8a:7f:f8:0e:6e:d5:ae:06:d5: ea:ab:a2:97:1c:e7:f3:e2:f8:2a:5b:41:1b:45:ee:41:ad:9e: 0e:13:fa:68:26:3d:74:59:e9:fb:ca:c7:8b:f1:56:3e:dc:6c: 92:2d:8c:fb:8c:d1:bd:e7:58:36:fa:20:80:ec:a1:88:fd:bb: 2a:6c:b4:c8:bd:76:30:e3:5b:15:74:54:f5:ed:b4:78:23:19: 3a:09:29:ca:fb:af:d5:ed:f5:7f:f3:75:6c:7a:52:4b:be:6b: 77:dc:52:39:7d:92:39:9a:c2:ec:ed:96:58:ce:57:40:32:11: 8f:96:a9:5f:b3:bb:d4:c5:58:3b:87:ad:e6:7c:bf:9a:be:c0: b7:f3:d8:3d:69:c5:04:28:37:75:34:b1:7b:1e:cf:bd:2c:db: 98:61:0c:fa:d9:74:00:83:3e:7c:82:b0:23:00:6d:a9:9f:da: 22:fa:49:c8:ef:cb:18:fb:5c:06:a2:86:66:aa:79:7d:1f:05: 39:28:5c:d5 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/FVsN8hpylQWEhotgs1rrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzk0YTQ2NDcyOGI4Mjg1NmRjMmI5NTVjY2FlOWFiNWJhNjUzOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCYnwhCoIQ2rDIX9HEWkPWyeUXXr Y6l5OMHM7LGGtcCN+j4AiaupYT+B7vLDtjh1eR/9KuiMa08/j0cQcJ172697u5Lv sLj9uCEqVYd05lJleD3E3Be2alStHBFQpMIxl58DLZ4mOiHrGLYKslhNy+Y9SzgN ZvIVEFNSvGa0EO0aKmyThqePFNaZ2PmYm16zFSHGiXsjrsdXwFgP6hKHyGdpCuEZ pfK1LjzY0YbuISZCb/EPINIE4TTslabAT9LUVTwemkEc/jZrUbXBeUi5bboRwOMV P+594tyLF/ww8LijKnwSKIB4A9XBH555es9IhhP+YxE40Xt97oVqVujQrQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPOUpGRyi4KFbcK5VcyumrW6ZTnIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyLzdkYjgw Yy01MTEzLTRlODMtYjJjOC1mMjY2NGQxOTIxZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvN2RiODBj LTUxMTMtNGU4My1iMmM4LWYyNjY0ZDE5MjFkMy8xLzg1U2taSEtMZ29WdHdybFZ6 SzZhdGJwbE9jZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDpIrwAwQCvPRsMA0EAgACMAcDBQMqDVXAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDimzANBgkqhkiG9w0BAQsFAAOCAQEAWTqa tC5aw1VUh7jSE3XWV69hFwhJWeGj8+t1eGv1TA3TQBBND/Ka2bX44za+DKZjBgZn pyiR9Xs0SEFGhLfain/4Dm7VrgbV6quilxzn8+L4KltBG0XuQa2eDhP6aCY9dFnp +8rHi/FWPtxski2M+4zRvedYNvoggOyhiP27Kmy0yL12MONbFXRU9e20eCMZOgkp yvuv1e31f/N1bHpSS75rd9xSOX2SOZrC7O2WWM5XQDIRj5apX7O71MVYO4et5ny/ mr7At/PYPWnFBCg3dTSxex7PvSzbmGEM+tl0AIM+fIKwIwBtqZ/aIvpJyO/LGPtc BqKGZqp5fR8FOShc1Q== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:33 2026 by rpki-client