This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer File: I02TlaK6I5y50njrWJty7VyWctE.cer (raw, json) Hash identifier: 7KCKgFpUez42WqTe3Ts5oHkaInt3SRLdO0og6/jalO8= Subject key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FDD547BD10BFE85EF8847DEBB67FE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203427 IP: 185.135.52.0/22 IP: 2a02:faa0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:dd:54:7b:d1:0b:fe:85:ef:88:47:de:bb:67:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1d:3c:e7:08:90:b0:50:2e:25:e3:bd:3e:64: 1a:ca:fa:31:58:1e:1d:f3:23:80:57:5f:32:fd:0e: 54:4c:99:f1:91:a1:78:42:4a:a5:cc:7b:ad:1a:ad: ca:94:98:97:e2:33:a8:e7:93:94:1f:3b:4b:0a:09: a4:e4:24:c3:57:ec:f3:2e:3e:7f:32:73:d8:52:04: 8b:9f:89:95:8b:bc:fc:32:53:25:e4:40:90:ac:80: 7d:82:4c:2e:7b:a5:70:db:e8:db:7b:93:d6:6a:83: ef:d7:b2:06:d9:11:a8:d1:8e:1a:92:0a:67:e7:f9: 93:69:54:7b:2d:c2:24:fa:09:59:29:e3:10:8b:7c: 49:1f:d6:92:28:e9:48:2f:c9:5e:51:07:26:5b:15: 16:39:fe:6f:cc:ee:2a:07:67:42:22:96:6c:dd:ed: bf:86:af:5c:81:a5:99:56:f9:a9:5d:c6:49:cd:db: cf:e5:c2:21:30:e1:ad:20:21:51:68:4f:c9:fe:d8: 7d:ec:a7:a6:76:ed:95:9b:bb:66:9d:71:05:e2:94: 34:bf:bd:01:00:20:05:a7:85:8b:e6:14:f8:23:87: fd:d6:f8:ac:9c:c6:36:48:6e:ce:33:93:4b:37:47: aa:f7:c1:61:0c:a2:68:cc:aa:a0:bd:fe:a7:d6:91: 88:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.52.0/22 IPv6: 2a02:faa0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203427 Signature Algorithm: sha256WithRSAEncryption 0e:07:56:f3:3b:e2:da:8c:9a:fb:59:82:53:de:b1:90:6c:8f: d5:7c:69:99:86:72:14:ab:6c:80:31:dd:4d:7c:24:d7:f8:66: 22:91:45:2b:68:4a:d6:96:ea:44:03:2f:71:f0:b7:32:27:6b: f9:5e:bc:bf:bc:7e:d6:47:d5:a1:6a:1e:f7:0f:29:f2:6b:c6: ec:2b:69:45:b2:f0:07:93:30:e6:6f:58:6a:81:0c:fd:25:f5: 3b:a1:42:a4:84:24:f7:bd:ba:be:d5:ad:6b:10:c4:6e:b6:c8: 6d:50:48:e3:67:5e:83:6d:1d:cf:58:73:39:dd:51:d1:e0:23: 8a:0c:c4:bb:f9:14:9f:38:81:43:5e:c2:a9:be:6b:ad:17:73: 55:ae:2a:fc:ea:14:76:27:41:bc:c4:a0:de:6b:76:f3:49:67: c2:d1:37:b0:a0:d0:4b:b9:56:d4:35:2b:ee:6b:df:6a:36:85: 3a:d5:93:17:57:95:c9:5a:f0:5b:6b:31:d5:04:f2:b4:c0:b9: 7d:aa:9e:7e:74:0f:9a:73:af:24:5c:4d:b9:5a:fb:06:59:42: 1e:fa:be:a1:b3:69:76:d1:d9:a6:3e:fe:38:af:9c:87:7a:ca: e7:87:6d:ec:0d:d0:40:14:16:c4:4b:9b:15:68:79:7f:96:7d: 18:70:90:32 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f91Ue9EL/oXviEfeu2f+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzRkOTM5NWEyYmEyMzljYjlkMjc4ZWI1ODliNzJlZDVjOTY3MmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx085wiQsFAuJeO9PmQayvoxWB4d 8yOAV18y/Q5UTJnxkaF4QkqlzHutGq3KlJiX4jOo55OUHztLCgmk5CTDV+zzLj5/ MnPYUgSLn4mVi7z8MlMl5ECQrIB9gkwue6Vw2+jbe5PWaoPv17IG2RGo0Y4akgpn 5/mTaVR7LcIk+glZKeMQi3xJH9aSKOlIL8leUQcmWxUWOf5vzO4qB2dCIpZs3e2/ hq9cgaWZVvmpXcZJzdvP5cIhMOGtICFRaE/J/th97Kemdu2Vm7tmnXEF4pQ0v70B ACAFp4WL5hT4I4f91visnMY2SG7OM5NLN0eq98FhDKJozKqgvf6n1pGI8QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCNNk5WiuiOcudJ461ibcu1clnLRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzNkZThj Yy1kYjc5LTRhOWItYjc5YS00ZWY0ODhkYzZkYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvM2RlOGNj LWRiNzktNGE5Yi1iNzlhLTRlZjQ4OGRjNmRjNC8xL0kwMlRsYUs2STV5NTBuanJX SnR5N1Z5V2N0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYc0MA0EAgACMAcDBQAqAvqgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMaozANBgkqhkiG9w0BAQsFAAOCAQEADgdW8zvi2oya +1mCU96xkGyP1XxpmYZyFKtsgDHdTXwk1/hmIpFFK2hK1pbqRAMvcfC3Midr+V68 v7x+1kfVoWoe9w8p8mvG7CtpRbLwB5Mw5m9YaoEM/SX1O6FCpIQk9726vtWtaxDE brbIbVBI42deg20dz1hzOd1R0eAjigzEu/kUnziBQ17Cqb5rrRdzVa4q/OoUdidB vMSg3mt280lnwtE3sKDQS7lW1DUr7mvfajaFOtWTF1eVyVrwW2sx1QTytMC5faqe fnQPmnOvJFxNuVr7BllCHvq+obNpdtHZpj7+OK+ch3rK54dt7A3QQBQWxEubFWh5 f5Z9GHCQMg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:23 2026 by rpki-client