This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1aqcEWV9iipUzmcoFLa9uXlhiDA.cer File: 1aqcEWV9iipUzmcoFLa9uXlhiDA.cer (raw, json) Hash identifier: 76m6N+FKe3Sht61xOilJ0S6Vl1UwTYtcB9fGW/LfU2A= Subject key identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC917A50C05728E8F607AAC0D322CC9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215293 IP: 91.237.251.0/24 IP: 217.19.1.0/24 IP: 2a14:22c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:17:a5:0c:05:72:8e:8f:60:7a:ac:0d:32:2c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5aa9c11657d8a2a54ce672814b6bdb979618830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:df:11:3f:3f:77:d4:69:73:f6:54:30:c1:45: 9a:75:98:d0:00:7b:9c:d9:b8:fa:72:43:0c:39:92: 3c:62:ac:71:df:ae:0f:bb:db:34:80:1b:d6:82:15: 86:b6:ee:a6:13:d5:52:19:8b:d2:db:a1:8b:8c:3f: f6:f8:43:c8:d0:1c:ef:a5:a3:bd:09:d1:1d:94:e9: 65:c1:ba:02:7e:46:8d:25:17:9b:db:b4:cb:34:d8: af:78:2e:8d:16:4d:13:43:dc:b2:59:8b:fc:d5:1b: 67:21:c7:a5:c6:9f:3a:5b:9e:31:ac:c8:b0:71:6d: 57:aa:11:88:ac:2f:59:4b:53:10:3c:90:88:38:25: 29:6c:ff:fe:6c:1e:42:04:06:a4:75:00:e1:de:07: cc:9b:bd:61:1c:4a:a8:96:57:36:10:b9:a0:ea:44: 95:84:48:86:08:97:9d:b6:e4:86:a9:a7:eb:69:ee: aa:5c:da:62:eb:d4:25:cc:27:61:d1:d3:8f:28:c3: 07:09:33:76:c0:e3:86:9b:66:9a:02:cd:88:1e:ac: 82:e0:27:76:57:8c:a1:67:6c:8d:fe:af:5f:9b:d2: 14:85:ed:53:06:81:09:36:d8:5c:1a:5c:ad:8c:c8: 3a:2b:8c:56:e8:f8:39:22:92:2f:e0:82:61:13:62: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AA:9C:11:65:7D:8A:2A:54:CE:67:28:14:B6:BD:B9:79:61:88:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/304a4f-2cc0-451a-b15f-cf99d5e257e9/1/1aqcEWV9iipUzmcoFLa9uXlhiDA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.251.0/24 217.19.1.0/24 IPv6: 2a14:22c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215293 Signature Algorithm: sha256WithRSAEncryption 91:1a:0d:e7:f9:37:86:a4:05:4e:9c:55:0a:9a:33:b8:67:2d: 9f:40:e1:25:b3:7b:11:07:54:9e:68:0d:be:eb:a4:cc:09:6a: 0b:b9:9a:d9:4d:35:36:43:8d:cf:40:3d:0a:a1:9d:ef:af:4d: 7c:a3:2f:93:94:19:24:87:82:5d:00:f9:fb:ce:e2:17:79:3b: d8:4c:cc:1e:4c:0a:c3:c8:76:43:96:f1:9f:37:74:50:1c:18: 1f:23:e0:b5:f2:59:23:20:b9:c9:96:94:a9:e5:2d:28:84:e6: 5d:83:fd:23:71:cf:63:74:9a:62:21:c7:bc:9b:f0:ad:0e:b9: cf:49:47:69:e4:9a:d4:40:f7:7d:aa:2a:d9:db:9c:47:16:4b: 12:1b:e5:0d:58:ad:90:74:25:c6:03:2a:87:53:e4:59:2e:b3: e8:da:08:44:10:04:2a:82:3c:57:63:e0:62:00:63:ff:11:f0: 41:c8:1d:87:cd:13:30:f3:ca:59:39:5a:7e:8d:4f:ee:fe:14: fd:d4:03:14:f9:30:be:61:34:1f:29:c2:da:be:2e:e0:32:7c: 3e:a0:ed:ba:39:20:fe:8c:03:3f:9d:55:41:97:60:a3:21:07: 6d:8c:a8:cf:39:d7:6c:ef:db:96:20:05:5a:5a:9c:f9:eb:08: 9c:ae:0a:25 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6yRelDAVyjo9geqwNMizJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWFhOWMxMTY1N2Q4YTJhNTRjZTY3MjgxNGI2YmRiOTc5NjE4ODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd8RPz931Glz9lQwwUWadZjQAHuc 2bj6ckMMOZI8Yqxx364Pu9s0gBvWghWGtu6mE9VSGYvS26GLjD/2+EPI0BzvpaO9 CdEdlOllwboCfkaNJReb27TLNNiveC6NFk0TQ9yyWYv81RtnIcelxp86W54xrMiw cW1XqhGIrC9ZS1MQPJCIOCUpbP/+bB5CBAakdQDh3gfMm71hHEqollc2ELmg6kSV hEiGCJedtuSGqafrae6qXNpi69QlzCdh0dOPKMMHCTN2wOOGm2aaAs2IHqyC4Cd2 V4yhZ2yN/q9fm9IUhe1TBoEJNthcGlytjMg6K4xW6Pg5IpIv4IJhE2IIDwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNWqnBFlfYoqVM5nKBS2vbl5YYgwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJmLzMwNGE0 Zi0yY2MwLTQ1MWEtYjE1Zi1jZjk5ZDVlMjU3ZTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYvMzA0YTRm LTJjYzAtNDUxYS1iMTVmLWNmOTlkNWUyNTdlOS8xLzFhcWNFV1Y5aWlwVXptY29G TGE5dVhsaGlEQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW+37AwQA2RMBMA0EAgACMAcDBQMqFCLAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNI/TANBgkqhkiG9w0BAQsFAAOCAQEAkRoN 5/k3hqQFTpxVCpozuGctn0DhJbN7EQdUnmgNvuukzAlqC7ma2U01NkONz0A9CqGd 769NfKMvk5QZJIeCXQD5+87iF3k72EzMHkwKw8h2Q5bxnzd0UBwYHyPgtfJZIyC5 yZaUqeUtKITmXYP9I3HPY3SaYiHHvJvwrQ65z0lHaeSa1ED3faoq2ducRxZLEhvl DVitkHQlxgMqh1PkWS6z6NoIRBAEKoI8V2PgYgBj/xHwQcgdh80TMPPKWTlafo1P 7v4U/dQDFPkwvmE0HynC2r4u4DJ8PqDtujkg/owDP51VQZdgoyEHbYyozznXbO/b liAFWlqc+esInK4KJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:25 2026 by rpki-client