This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer File: AnTQhnltTXea0WTCTCI_JrMoTtQ.cer (raw, json) Hash identifier: up34n7HXmSlAjod2J/w/f9JdcZUsEax8txwYSBQjC04= Subject key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A250C03B153BBD3FFC3B43A9561706 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204209 IP: 185.249.88.0/22 IP: 2a07:fb00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:50:c0:3b:15:3b:bd:3f:fc:3b:43:a9:56:17:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0274d086796d4d779ad164c24c223f26b3284ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:90:f6:70:6a:54:ae:d6:59:e8:9e:a1:a7:ea: 5b:04:b9:29:a1:1e:3b:a3:f0:82:86:f7:bc:10:3f: 59:08:cd:a1:cb:dd:e5:11:b7:72:d8:2e:10:ae:05: 07:6f:6d:87:24:df:0e:20:54:44:01:01:7f:15:a8: ff:3c:10:32:20:8f:70:90:7f:4c:39:e7:96:0c:19: f3:5f:76:c0:94:2e:b9:7f:d0:49:28:25:e5:ca:34: 3d:81:54:05:c3:a6:82:ac:5c:29:41:e8:a5:8d:84: 90:9d:ed:e1:d4:df:64:1d:a3:a7:de:95:b8:b6:a0: bd:23:9a:65:24:eb:a8:35:f3:15:14:83:c0:73:fa: 4f:de:f3:85:f7:2b:00:17:1b:99:a0:ad:8a:b9:f9: 75:d6:f6:47:a4:50:0c:6c:98:c2:80:f1:22:aa:9a: ac:95:e1:b3:2a:9f:24:a8:b5:f1:2a:d1:23:63:e4: e5:70:22:1e:e3:45:72:ac:49:ea:08:af:79:0a:60: 23:60:72:fd:ac:a9:91:b8:92:6f:0b:82:01:0b:6b: f7:86:e0:69:ae:dc:e6:df:9f:c4:d1:11:56:a4:1e: 23:85:84:3b:d8:27:89:d4:85:10:a0:72:f1:e8:54: 24:9a:fe:3c:54:24:fe:ca:05:5c:22:ae:f8:ed:36: 06:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.88.0/22 IPv6: 2a07:fb00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204209 Signature Algorithm: sha256WithRSAEncryption 24:b3:90:5e:67:7e:a8:1e:eb:c0:75:3e:c5:fa:40:46:20:fa: 5c:31:88:59:ac:3d:e6:2f:95:c2:b0:ef:7d:db:a9:ca:8a:4e: 02:04:83:7b:87:02:b2:4a:bf:c3:47:82:a3:11:e4:56:c9:0e: d9:c4:5b:4e:51:39:7d:c8:16:6b:93:9b:2d:ef:69:2e:99:7b: e2:34:da:34:d0:4b:da:7d:e1:ec:44:5c:97:da:29:84:9d:94: 96:97:90:c1:19:86:cf:0f:1b:b8:83:a8:18:88:52:aa:c3:d5: bb:19:b6:1c:9f:4e:d0:64:c2:06:d9:ea:dd:3b:71:cd:a2:e3: 40:57:68:06:4d:d8:15:49:df:3d:9f:5c:be:90:7d:04:f7:43: 44:d1:54:d0:4c:9a:9b:08:80:51:25:f6:f9:db:0d:cb:6b:4c: b5:27:ce:70:1e:2f:0d:90:73:72:5a:5e:0e:73:51:25:68:80: 09:e2:7a:ae:ba:4c:ab:c3:c5:f8:97:7d:86:d2:96:1c:33:be: 3c:1c:5a:b9:85:13:44:f2:1f:6a:6b:aa:8a:75:64:e4:0c:6f: 11:85:f7:83:cd:70:a3:10:bd:6c:0b:b3:99:f6:20:42:31:44: 27:8e:33:d4:c0:c4:a6:f4:6e:4e:a0:73:e2:86:bc:cb:34:05: a3:e5:e4:8d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4olDAOxU7vT/8O0OpVhcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjc0ZDA4Njc5NmQ0ZDc3OWFkMTY0YzI0YzIyM2YyNmIzMjg0ZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05D2cGpUrtZZ6J6hp+pbBLkpoR47 o/CChve8ED9ZCM2hy93lEbdy2C4QrgUHb22HJN8OIFREAQF/Faj/PBAyII9wkH9M OeeWDBnzX3bAlC65f9BJKCXlyjQ9gVQFw6aCrFwpQeiljYSQne3h1N9kHaOn3pW4 tqC9I5plJOuoNfMVFIPAc/pP3vOF9ysAFxuZoK2Kufl11vZHpFAMbJjCgPEiqpqs leGzKp8kqLXxKtEjY+TlcCIe40VyrEnqCK95CmAjYHL9rKmRuJJvC4IBC2v3huBp rtzm35/E0RFWpB4jhYQ72CeJ1IUQoHLx6FQkmv48VCT+ygVcIq747TYGFQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAJ00IZ5bU13mtFkwkwiPyazKE7UMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc4Lzc1MTk1 OC1hYmViLTQ1OWUtODE0MS1iOTU1MjBjODcyYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvNzUxOTU4 LWFiZWItNDU5ZS04MTQxLWI5NTUyMGM4NzJjNS8xL0FuVFFobmx0VFhlYTBXVENU Q0lfSnJNb1R0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuflYMA0EAgACMAcDBQAqB/sAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMdsTANBgkqhkiG9w0BAQsFAAOCAQEAJLOQXmd+qB7r wHU+xfpARiD6XDGIWaw95i+VwrDvfdupyopOAgSDe4cCskq/w0eCoxHkVskO2cRb TlE5fcgWa5ObLe9pLpl74jTaNNBL2n3h7ERcl9ophJ2UlpeQwRmGzw8buIOoGIhS qsPVuxm2HJ9O0GTCBtnq3TtxzaLjQFdoBk3YFUnfPZ9cvpB9BPdDRNFU0EyamwiA USX2+dsNy2tMtSfOcB4vDZBzclpeDnNRJWiACeJ6rrpMq8PF+Jd9htKWHDO+PBxa uYUTRPIfamuqinVk5AxvEYX3g81woxC9bAuzmfYgQjFEJ44z1MDEpvRuTqBz4oa8 yzQFo+XkjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:13 2026 by rpki-client