This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer File: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer (raw, json) Hash identifier: ldz7Wk7l218UhszzgxRTt12PS3JZEnf4SjCZqEv8TDI= Subject key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2E64208728972CF9D8A1068BF206B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49649 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e6:42:08:72:89:72:cf:9d:8a:10:68:bf:20:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:7b:00:dd:d0:71:80:f2:89:45:a5:18:64: 0b:7f:58:ea:d9:fc:71:7e:83:12:27:b0:8a:4e:6d: 7f:57:e0:4e:55:7e:e6:7e:e3:92:b5:b6:d5:7f:aa: 5d:f6:f5:64:9d:8e:c1:5c:7d:3b:17:5e:4c:6b:a5: cc:45:7c:cb:32:bd:b5:5e:f1:6e:d5:51:23:68:5b: 1b:cd:c3:d5:29:2d:ed:26:aa:0e:6b:76:6b:36:cd: 35:48:b9:fc:44:34:92:a4:f0:18:09:e5:6a:48:34: 29:82:cf:ed:84:f2:7d:af:88:7f:9c:a7:31:95:87: b3:62:72:93:8b:54:1b:66:07:0f:dc:7a:8d:56:ff: 96:70:6d:1b:2e:9e:0c:2b:0d:09:8f:72:88:51:0c: 77:b2:9e:8f:82:81:44:75:93:bc:6c:2d:e3:f5:31: b7:27:f4:9b:f6:f6:f1:b2:d0:0d:56:98:44:98:03: b0:c1:29:70:c5:12:1a:54:0e:bb:b6:61:39:52:77: ea:11:c4:b6:18:d9:df:3e:ed:f6:7b:09:3a:04:55: a6:d0:18:21:1e:a7:4e:38:9a:eb:71:9e:37:33:88: 45:e5:3f:b0:e8:d6:0f:7a:f1:51:c8:2e:30:95:28: e9:04:58:3e:82:52:a8:6a:5f:86:10:65:a2:4e:73: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 49649 Signature Algorithm: sha256WithRSAEncryption 9e:fc:8a:65:3c:1a:f5:8f:53:3d:ee:05:7c:41:39:4c:00:50: 91:a1:1d:ab:cf:4e:6e:f5:f3:c4:74:fd:67:4f:41:b0:36:7b: 3b:a5:35:40:1a:15:4b:a4:07:dd:fb:3d:be:a4:d4:1a:98:be: 99:ac:33:aa:d7:d5:7b:ca:06:ad:ff:3a:82:79:48:8c:19:ad: 94:24:4d:52:1a:66:6c:28:ae:91:d7:45:9b:0c:5b:60:c8:f6: 27:24:35:27:bb:2b:5f:b9:cc:75:10:02:49:64:09:66:e7:a3: 8c:d9:d5:8b:2e:f7:82:11:28:b9:85:b8:53:ab:4d:e4:55:ff: 13:dc:f9:ae:4c:87:36:4c:a8:12:d5:a2:4f:b1:c5:b7:82:04: be:71:3d:ca:42:d4:57:82:cb:73:81:bf:2d:02:9e:89:27:07: 52:ac:50:9f:b7:b5:fb:0e:79:79:c3:09:f2:b5:24:c6:e0:5c: 45:b6:d7:b4:0a:75:ac:fe:4d:65:62:c0:89:77:9a:3d:da:b9: ee:83:dc:42:cf:4d:c7:f3:b2:c2:b6:ef:b2:03:79:b7:a0:b3: ce:66:20:cf:9d:04:b4:f3:69:dd:36:e9:2d:b5:dc:42:d8:00: b1:af:ce:3d:e8:30:df:b5:d8:32:dc:fd:97:44:71:2c:02:7b: 32:8d:fa:20 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4ouZCCHKJcs+dihBovyBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDBiZDRkNTY4MmNlNjA4ZTI3Y2JlMjIxYTI2NzdlY2I1MDc0OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7R7AN3QcYDyiUWlGGQLf1jq2fxx foMSJ7CKTm1/V+BOVX7mfuOStbbVf6pd9vVknY7BXH07F15Ma6XMRXzLMr21XvFu 1VEjaFsbzcPVKS3tJqoOa3ZrNs01SLn8RDSSpPAYCeVqSDQpgs/thPJ9r4h/nKcx lYezYnKTi1QbZgcP3HqNVv+WcG0bLp4MKw0Jj3KIUQx3sp6PgoFEdZO8bC3j9TG3 J/Sb9vbxstANVphEmAOwwSlwxRIaVA67tmE5UnfqEcS2GNnfPu32ewk6BFWm0Bgh HqdOOJrrcZ43M4hF5T+w6NYPevFRyC4wlSjpBFg+glKoal+GEGWiTnN/UQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNAL1NVoLOYI4ny+Ihomd+y1B0l9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzI5OTUy Mi05MzJjLTQ4N2EtYWYzZC1lYjkzMDA2NzJhZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvMjk5NTIy LTkzMmMtNDg3YS1hZjNkLWViOTMwMDY3MmFlNC8xLzBBdlUxV2dzNWdqaWZMNGlH aVozN0xVSFNYMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDB8TANBgkqhkiG9w0BAQsFAAOCAQEAnvyKZTwa9Y9T Pe4FfEE5TABQkaEdq89ObvXzxHT9Z09BsDZ7O6U1QBoVS6QH3fs9vqTUGpi+mawz qtfVe8oGrf86gnlIjBmtlCRNUhpmbCiukddFmwxbYMj2JyQ1J7srX7nMdRACSWQJ ZuejjNnViy73ghEouYW4U6tN5FX/E9z5rkyHNkyoEtWiT7HFt4IEvnE9ykLUV4LL c4G/LQKeiScHUqxQn7e1+w55ecMJ8rUkxuBcRbbXtAp1rP5NZWLAiXeaPdq57oPc Qs9Nx/OywrbvsgN5t6CzzmYgz50EtPNp3TbpLbXcQtgAsa/OPegw37XYMtz9l0Rx LAJ7Mo36IA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:52 2026 by rpki-client