This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer File: a26Wn-j7eyprbkZEJqSnA9N-tVQ.cer (raw, json) Hash identifier: yc2NkrNZBxQJJH3mEBb4likGW8hSilpFoTHPWBMFTAA= Subject key identifier: 6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED2D883E1F857B09DE6CB4900A7695 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 61978 IP: 185.54.84.0/22 IP: 193.203.116.0/23 IP: 2001:67c:a08::/48 IP: 2a04:d180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 11:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2d:88:3e:1f:85:7b:09:de:6c:b4:90:0a:76:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b6e969fe8fb7b2a6b6e464426a4a703d37eb554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:a8:b4:56:67:84:7b:4e:b0:03:e0:f2:ea: cc:05:11:06:83:5e:6f:f6:56:9d:fc:f5:b7:7e:7b: fe:1f:ae:f1:16:73:e9:b3:a8:65:1c:8e:50:74:b5: 31:69:23:2d:c3:0f:ee:fc:f5:1d:6f:65:c3:e7:3c: 10:3e:8f:ce:ed:80:75:9f:47:96:70:cb:7d:09:fe: 38:50:15:f0:7d:00:36:a9:45:9b:b6:96:ad:ef:40: 8d:8a:4b:55:86:a8:49:4f:08:b5:a8:d8:09:93:cd: f9:4d:27:fc:c3:39:f8:f4:f4:1c:86:3c:29:3d:c5: 91:ac:03:22:d0:18:4a:5e:83:e7:3a:18:d0:2e:0a: 65:5b:df:1b:56:5e:54:f8:4b:4a:0a:d5:99:ae:20: 39:d4:57:eb:d7:0e:65:e9:47:b2:63:56:6b:6d:b2: 91:e4:1c:0a:c6:93:8d:af:d6:ae:59:5e:fb:64:96: 14:d1:ba:cb:24:5c:91:e2:1d:d8:68:d0:a0:4f:32: 68:8d:25:80:64:35:c8:da:35:2e:75:fd:27:b6:e8: ad:03:28:ae:86:01:db:a0:5a:c6:b4:da:cf:22:86: 8e:17:79:7b:cb:bf:28:dc:f1:e9:82:80:a1:20:a2: 0b:eb:e8:c2:3f:8e:65:a1:00:eb:5f:4f:60:74:ec: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:96:9F:E8:FB:7B:2A:6B:6E:46:44:26:A4:A7:03:D3:7E:B5:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a97926-410c-466b-8bf4-ab16b69e6ad5/1/a26Wn-j7eyprbkZEJqSnA9N-tVQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.54.84.0/22 193.203.116.0/23 IPv6: 2001:67c:a08::/48 2a04:d180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61978 Signature Algorithm: sha256WithRSAEncryption 9a:ad:bf:b9:57:d5:11:1c:66:f9:cf:af:6c:ed:88:9c:c5:84: c5:78:46:af:2b:3e:bf:f6:dd:c7:2d:b6:9b:ad:72:3e:aa:03: 1a:c5:52:52:de:ca:88:83:28:36:8b:bf:44:f5:45:98:0f:e9: 9a:2d:b5:20:25:5b:1d:55:44:4b:39:a9:41:07:39:93:d5:b2: 94:6d:76:f4:15:8f:d8:af:92:ab:95:d4:25:d4:ab:d6:cc:91: 10:d3:44:5c:82:32:3f:ba:9b:00:38:7d:f6:6d:18:8e:ea:51: 51:ad:f9:ed:48:4c:5d:80:1b:07:80:8d:d5:ab:59:52:3e:7e: e1:f1:9d:57:65:ab:e0:8d:90:89:b0:8e:7e:00:4f:d0:7d:46: 94:e1:22:ea:7c:32:fc:6c:18:ce:91:a7:d4:c4:d2:fc:2b:29: ed:e1:fc:24:97:9b:c9:6b:51:c1:e3:04:01:34:f1:df:3a:31: 84:b9:97:32:2e:df:d7:04:00:b0:a8:ab:85:ea:63:0b:87:dc: d8:9d:4d:16:28:82:d4:2b:66:4a:2f:64:9f:89:df:95:d0:e7: 32:c7:ce:0b:1c:33:60:7d:c8:c0:90:6b:97:e7:3e:6b:53:cb: d4:3e:6c:dc:d3:29:d6:70:ab:f1:68:be:df:11:86:fb:b2:50: c0:83:f0:a2 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt87S2IPh+FewnebLSQCnaVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjZlOTY5ZmU4ZmI3YjJhNmI2ZTQ2NDQyNmE0YTcwM2QzN2ViNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQWotFZnhHtOsAPg8urMBREGg15v 9lad/PW3fnv+H67xFnPps6hlHI5QdLUxaSMtww/u/PUdb2XD5zwQPo/O7YB1n0eW cMt9Cf44UBXwfQA2qUWbtpat70CNiktVhqhJTwi1qNgJk835TSf8wzn49PQchjwp PcWRrAMi0BhKXoPnOhjQLgplW98bVl5U+EtKCtWZriA51Ffr1w5l6UeyY1ZrbbKR 5BwKxpONr9auWV77ZJYU0brLJFyR4h3YaNCgTzJojSWAZDXI2jUudf0ntuitAyiu hgHboFrGtNrPIoaOF3l7y78o3PHpgoChIKIL6+jCP45loQDrX09gdOwGEwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFGtulp/o+3sqa25GRCakpwPTfrVUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyL2E5Nzky Ni00MTBjLTQ2NmItOGJmNC1hYjE2YjY5ZTZhZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTIvYTk3OTI2 LTQxMGMtNDY2Yi04YmY0LWFiMTZiNjllNmFkNS8xL2EyNlduLWo3ZXlwcmJrWkVK cVNuQTlOLXRWUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQCuTZUAwQBwct0MBYEAgACMBADBwAgAQZ8CggD BQMqBNGAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDyGjANBgkqhkiG9w0BAQsF AAOCAQEAmq2/uVfVERxm+c+vbO2InMWExXhGrys+v/bdxy22m61yPqoDGsVSUt7K iIMoNou/RPVFmA/pmi21ICVbHVVESzmpQQc5k9WylG129BWP2K+Sq5XUJdSr1syR ENNEXIIyP7qbADh99m0YjupRUa357UhMXYAbB4CN1atZUj5+4fGdV2Wr4I2QibCO fgBP0H1GlOEi6nwy/GwYzpGn1MTS/Csp7eH8JJebyWtRweMEATTx3zoxhLmXMi7f 1wQAsKirhepjC4fc2J1NFiiC1CtmSi9kn4nfldDnMsfOCxwzYH3IwJBrl+c+a1PL 1D5s3NMp1nCr8Wi+3xGG+7JQwIPwog== -----END CERTIFICATE-----Generated at Mon Jan 12 14:26:09 2026 by rpki-client