This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer (raw, json) Hash identifier: 5ftSbc0PDXPf6BN7OnU8tZBx/En19dXgSsTtTR2VFvQ= Subject key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E378FE8BD1F9D2A9A34D37B2D46A511 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20517 AS: 58144 IP: 91.239.62.0/24 IP: 185.20.252.0/22 IP: 185.138.232.0/22 IP: 2a00:5260::/32 IP: 2a07:1040::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:8f:e8:bd:1f:9d:2a:9a:34:d3:7b:2d:46:a5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:29:34:d4:a1:cf:d2:69:cb:c6:fb:15:be: 42:81:e1:ed:8b:33:2c:19:f1:46:e8:a5:cd:02:22: 71:bd:21:fe:60:f3:64:10:f6:74:e8:c4:ed:89:0c: 73:53:37:6e:0e:c9:6d:d5:d8:9e:d8:12:32:6d:5b: 42:e2:41:44:fe:16:d6:7b:35:5b:36:8d:0b:b0:4c: eb:28:5e:10:8d:e3:ef:1e:b8:e2:95:99:93:2f:3b: b6:42:a1:b4:66:b5:b2:50:49:f7:cf:1b:2e:66:30: 86:75:d7:b1:71:64:79:6c:b5:9b:7b:31:6f:24:53: db:4c:87:a4:8e:d9:bd:03:ec:9f:e1:a4:44:7f:8a: 5f:57:e0:07:24:4c:27:6b:ec:fb:6c:ab:0f:c7:65: 6b:79:5b:cd:f1:95:fd:61:07:43:3a:d9:31:d9:41: 56:1e:b0:af:b5:1a:b0:8c:6b:86:6e:22:25:05:7e: 1b:11:45:29:13:7d:be:28:48:49:0a:91:aa:0e:72: fc:c9:7c:c0:ca:ea:b3:86:2f:4c:77:f2:ce:59:66: 43:c3:35:6b:64:65:2b:74:3e:41:25:70:fe:24:6e: 62:85:db:f0:ab:da:17:8b:53:20:ec:c3:20:76:2c: 61:53:96:a8:0a:9e:b5:cd:8d:d4:a6:53:f2:41:d6: d3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.62.0/24 185.20.252.0/22 185.138.232.0/22 IPv6: 2a00:5260::/32 2a07:1040::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20517 58144 Signature Algorithm: sha256WithRSAEncryption 77:9c:b8:d2:e5:08:40:58:fd:5e:e6:b5:8e:ed:4c:f1:82:f1: d0:19:d7:b3:7c:da:93:0e:60:f8:55:d7:d9:16:79:37:b3:3c: b9:91:13:05:76:66:e9:a3:5e:91:4b:7c:6f:a8:11:c8:e5:ee: 67:b9:ea:82:71:23:d9:a1:86:4e:bc:f3:7d:25:4c:b1:07:f0: 59:b1:b8:7c:47:72:85:74:e3:3a:1b:c9:74:c6:37:04:a3:11: 31:27:a4:ab:88:74:53:7e:99:28:68:05:f1:16:a7:2f:8a:34: a3:e5:2e:65:b3:fc:28:9b:2a:d0:58:c9:0e:8d:2b:59:46:68: 14:97:ab:0c:57:89:66:c0:83:37:1c:dc:55:69:21:72:cb:af: d8:8b:9c:79:fb:23:d3:8b:85:b5:3e:fa:8f:7e:34:d2:be:ce: 1d:29:4b:61:fa:7b:ec:34:57:bc:c0:9a:50:ba:9d:ba:86:96: c7:cd:89:d0:9e:1a:00:32:c7:da:a7:c9:39:73:2a:68:5a:90: 9c:2e:ed:78:d4:6b:85:5c:14:a1:3f:04:01:bf:fa:d6:49:42: d1:a7:12:0a:c9:5f:52:49:f4:1b:2f:ed:3f:76:00:27:f4:09: 3b:e8:ce:bd:f9:c3:f3:34:c1:8a:14:07:8a:aa:94:07:15:a4: 52:0f:37:40 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZt+N4/ovR+dKpo003stRqURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYzA2YTgyYmIxMTVkNzM5M2UzOWZkNThiNzNiYmYyMGY2Y2QwYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDwpNNShz9Jpy8b7Fb5CgeHtizMs GfFG6KXNAiJxvSH+YPNkEPZ06MTtiQxzUzduDslt1die2BIybVtC4kFE/hbWezVb No0LsEzrKF4QjePvHrjilZmTLzu2QqG0ZrWyUEn3zxsuZjCGddexcWR5bLWbezFv JFPbTIekjtm9A+yf4aREf4pfV+AHJEwna+z7bKsPx2VreVvN8ZX9YQdDOtkx2UFW HrCvtRqwjGuGbiIlBX4bEUUpE32+KEhJCpGqDnL8yXzAyuqzhi9Md/LOWWZDwzVr ZGUrdD5BJXD+JG5ihdvwq9oXi1Mg7MMgdixhU5aoCp61zY3UplPyQdbTuQIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFBwGqCuxFdc5Pjn9WLc7vyD2zQsfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzEyZWFh ZC04YTQ1LTQ3ODktYmFiNS03MjYwNTdhMWYyYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvMTJlYWFk LThhNDUtNDc4OS1iYWI1LTcyNjA1N2ExZjJhNC8xL0hBYW9LN0VWMXprLU9mMVl0 enVfSVBiTkN4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQAW+8+AwQCuRT8AwQCuYroMBQEAgACMA4DBQAq AFJgAwUDKgcQQDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJQJQIDAOMgMA0GCSqG SIb3DQEBCwUAA4IBAQB3nLjS5QhAWP1e5rWO7UzxgvHQGdezfNqTDmD4VdfZFnk3 szy5kRMFdmbpo16RS3xvqBHI5e5nueqCcSPZoYZOvPN9JUyxB/BZsbh8R3KFdOM6 G8l0xjcEoxExJ6SriHRTfpkoaAXxFqcvijSj5S5ls/womyrQWMkOjStZRmgUl6sM V4lmwIM3HNxVaSFyy6/Yi5x5+yPTi4W1PvqPfjTSvs4dKUth+nvsNFe8wJpQup26 hpbHzYnQnhoAMsfap8k5cypoWpCcLu141GuFXBShPwQBv/rWSULRpxIKyV9SSfQb L+0/dgAn9Ak76M69+cPzNMGKFAeKqpQHFaRSDzdA -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:27 2026 by rpki-client