This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer File: unZwbT4IgT24sndmKK-EZRjibdI.cer (raw, json) Hash identifier: l+7BJPtq55tDpU1tjDk+xMYm2OBxWvVSywCF5QcFM/o= Subject key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAAF5580C6A6CA65D35775E5FA7B11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203205 IP: 185.125.8.0/22 IP: 2a06:b6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:af:55:80:c6:a6:ca:65:d3:57:75:e5:fa:7b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba76706d3e08813db8b2776628af846518e26dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1a:52:34:f7:fd:71:66:57:e2:d1:04:63:83: c8:e0:4a:61:b0:05:51:6c:04:c1:fd:f9:ba:3c:4a: 33:a8:81:06:fe:c3:10:4a:9d:ba:7d:70:3f:47:31: 0b:44:f1:4c:58:10:39:fb:5c:e6:fb:59:e3:f9:f5: fc:00:74:b3:77:73:ef:bd:c8:a3:d4:54:d3:7c:cd: 52:d3:0d:18:ad:1b:b4:35:37:f3:5c:25:d1:a0:f1: a6:84:7b:fd:50:02:92:41:8a:92:00:1f:a8:13:d0: 17:f4:de:09:53:71:11:c9:28:bb:83:36:b1:fd:55: 3f:c3:07:b8:00:0f:b9:d2:5e:06:aa:d9:b5:38:73: fa:b2:61:9e:10:4b:b6:1c:a2:db:cd:95:f8:41:66: c9:33:0e:d7:9a:85:16:d0:74:ad:58:ad:f8:2b:10: e4:16:92:ce:fa:01:00:5f:eb:7c:59:1b:11:5a:06: 93:2e:68:5b:01:99:d7:0d:87:ac:9f:d3:3b:f1:27: f4:84:93:75:71:bf:39:e4:b1:3d:17:d3:6d:37:5d: f9:c5:9e:ef:86:fe:a5:55:8c:76:92:8a:37:ed:85: de:22:38:6e:98:61:6e:df:3c:a8:28:18:3b:a9:1b: 70:5a:19:30:c6:2b:59:7a:a2:c8:51:ee:10:52:45: f1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.8.0/22 IPv6: 2a06:b6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203205 Signature Algorithm: sha256WithRSAEncryption 8f:be:f2:ff:ba:ef:48:94:fa:9d:25:1d:7b:98:37:b7:35:d4: 04:65:a2:52:9d:d7:a0:ee:86:5b:64:4d:dc:18:be:bf:57:3a: 70:13:c4:76:96:93:49:09:6a:75:27:5f:d1:14:13:41:1f:60: 5c:83:d6:95:a0:a8:0f:8f:90:e9:76:7e:09:ff:b5:f0:66:c4: 05:22:99:70:6a:6d:56:9e:f2:54:dd:24:7f:1e:86:55:09:24: cc:b1:05:18:ac:20:55:46:b6:8b:f1:17:e9:fe:6c:19:09:f6: b5:88:80:1c:a5:7a:49:3f:fb:8e:51:51:97:08:b6:59:82:09: 96:d5:d4:b4:6f:36:db:2d:f2:38:e1:b6:f1:00:a2:86:a2:95: ad:6a:85:77:51:1f:4c:e2:27:55:53:ef:65:d7:90:bf:71:7d: f1:9d:4f:d5:e0:ee:77:16:83:c8:18:5a:8f:4a:06:88:59:3a: 2c:54:07:a0:40:84:73:ff:4c:96:ef:a0:9b:f0:ed:07:a1:db: fc:1b:38:84:09:dd:73:f9:6b:0a:e7:8d:d8:1f:eb:50:a3:df: 93:51:60:85:2e:c9:f6:16:83:f5:62:6d:88:cc:f3:2a:cf:4b: d6:84:5e:2a:e2:4d:31:a2:f1:c3:df:74:93:9d:3c:3f:10:99: d7:bd:ca:44 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26q9VgMamymXTV3Xl+nsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTc2NzA2ZDNlMDg4MTNkYjhiMjc3NjYyOGFmODQ2NTE4ZTI2ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBpSNPf9cWZX4tEEY4PI4EphsAVR bATB/fm6PEozqIEG/sMQSp26fXA/RzELRPFMWBA5+1zm+1nj+fX8AHSzd3Pvvcij 1FTTfM1S0w0YrRu0NTfzXCXRoPGmhHv9UAKSQYqSAB+oE9AX9N4JU3ERySi7gzax /VU/wwe4AA+50l4Gqtm1OHP6smGeEEu2HKLbzZX4QWbJMw7XmoUW0HStWK34KxDk FpLO+gEAX+t8WRsRWgaTLmhbAZnXDYesn9M78Sf0hJN1cb855LE9F9NtN135xZ7v hv6lVYx2koo37YXeIjhumGFu3zyoKBg7qRtwWhkwxitZeqLIUe4QUkXxJwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLp2cG0+CIE9uLJ3ZiivhGUY4m3SMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzZkNDc1 OS1hMDVlLTQ2YmMtYmU1OC02NjllZWQyZWM3ZWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNmQ0NzU5 LWEwNWUtNDZiYy1iZTU4LTY2OWVlZDJlYzdlYS8xL3VuWndiVDRJZ1QyNHNuZG1L Sy1FWlJqaWJkSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuX0IMA0EAgACMAcDBQMqBrbAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZxTANBgkqhkiG9w0BAQsFAAOCAQEAj77y/7rvSJT6 nSUde5g3tzXUBGWiUp3XoO6GW2RN3Bi+v1c6cBPEdpaTSQlqdSdf0RQTQR9gXIPW laCoD4+Q6XZ+Cf+18GbEBSKZcGptVp7yVN0kfx6GVQkkzLEFGKwgVUa2i/EX6f5s GQn2tYiAHKV6ST/7jlFRlwi2WYIJltXUtG822y3yOOG28QCihqKVrWqFd1EfTOIn VVPvZdeQv3F98Z1P1eDudxaDyBhaj0oGiFk6LFQHoECEc/9Mlu+gm/DtB6Hb/Bs4 hAndc/lrCueN2B/rUKPfk1FghS7J9haD9WJtiMzzKs9L1oReKuJNMaLxw990k508 PxCZ173KRA== -----END CERTIFICATE-----Generated at Thu Jan 1 15:55:57 2026 by rpki-client