This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer File: A-aapu504w79uBm5yxvyHnhub6M.cer (raw, json) Hash identifier: Th2LI3bdiiT54ijweP8MfrF39nhzI+s6yoeEhvaFJdg= Subject key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DD569A66190941609DFA1FC72300D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214821 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:d5:69:a6:61:90:94:16:09:df:a1:fc:72:30:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8a:2e:68:54:9d:67:95:83:c9:79:f8:8d:fa: fc:fc:e5:55:bd:af:ca:e6:d6:4a:28:52:d1:97:4d: ef:c7:da:e8:be:65:59:77:97:1a:10:c8:bb:28:09: 13:00:cc:f5:ec:9d:8d:f1:0e:a5:82:48:c5:9a:ee: 82:d2:31:9d:ff:4e:db:4e:22:f5:f7:3f:38:d8:31: ce:b9:b8:1c:64:c1:23:c1:41:e9:24:3b:24:be:e8: 07:cb:96:cd:2e:25:c2:6a:46:f2:96:11:c6:f4:31: 65:50:60:b4:25:7a:91:d7:cc:66:98:41:a7:9c:ba: 8a:9a:9b:96:26:32:cf:19:ce:36:1f:5d:f0:43:10: 92:b7:d6:35:e5:74:da:8e:53:a7:c7:4c:98:b2:b3: f4:8b:99:0b:3e:23:b3:ef:32:27:75:3d:2e:01:4f: b1:2e:2a:64:aa:8a:7f:15:7b:27:33:21:95:aa:5a: 41:a1:53:da:18:11:1e:90:47:d9:35:6a:4e:0e:23: 0e:4e:06:b6:a4:aa:5a:4a:f9:28:da:be:80:df:63: 33:07:51:fe:03:9c:a9:1b:c1:a2:ff:5f:16:6b:12: 8b:c0:0d:74:a1:6b:d4:6c:72:51:11:a0:4c:1f:7b: e2:5f:69:8b:3d:67:78:1f:ed:ea:2c:54:c3:7b:4b: 82:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214821 Signature Algorithm: sha256WithRSAEncryption 47:96:b0:dc:44:75:65:e8:96:7e:12:04:01:a8:12:cb:75:e5: f8:35:99:08:a1:35:92:6f:3b:4d:9f:22:96:12:6e:30:e9:06: 80:75:5f:ba:c7:94:60:94:a9:85:9f:0f:e9:e0:33:ba:98:12: 3d:3a:e0:9e:0e:82:b7:89:23:dd:03:dd:a2:da:80:6d:3c:62: 92:32:a9:db:75:5f:5a:6a:44:09:ea:12:9b:48:d0:f1:0d:e9: 16:16:42:9b:e0:04:cd:93:74:31:0e:88:bf:f8:be:6d:5d:9d: a3:87:7b:6c:bc:d2:78:42:7f:c2:5b:a0:e8:60:dd:dd:f1:bc: 0c:e7:1c:25:15:d0:8f:82:46:97:8d:a8:72:a5:11:11:f7:4b: ec:f7:94:45:6c:aa:9f:71:45:96:db:95:28:c4:f4:aa:d9:37: 1c:20:e9:1c:ef:0b:dc:20:8a:71:12:0c:47:fb:ae:04:8a:dc: 24:f3:96:1c:1c:4a:ec:43:fc:5c:4c:dc:31:10:f2:25:43:f1: 7c:58:db:a8:ec:3a:4e:99:a6:41:a6:92:d4:cc:96:0d:fa:fb: 86:e7:00:98:af:1a:35:65:4e:90:b1:6d:fe:26:79:fc:f4:f4: 77:fd:6e:24:a7:09:45:6f:2c:e3:48:84:4d:3e:83:83:4f:e8: 27:cf:bb:3b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt5fdVppmGQlBYJ36H8cjANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2U2OWFhNmVlNzRlMzBlZmRiODE5YjljYjFiZjIxZTc4NmU2ZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYouaFSdZ5WDyXn4jfr8/OVVva/K 5tZKKFLRl03vx9rovmVZd5caEMi7KAkTAMz17J2N8Q6lgkjFmu6C0jGd/07bTiL1 9z842DHOubgcZMEjwUHpJDskvugHy5bNLiXCakbylhHG9DFlUGC0JXqR18xmmEGn nLqKmpuWJjLPGc42H13wQxCSt9Y15XTajlOnx0yYsrP0i5kLPiOz7zIndT0uAU+x Lipkqop/FXsnMyGVqlpBoVPaGBEekEfZNWpODiMOTga2pKpaSvko2r6A32MzB1H+ A5ypG8Gi/18WaxKLwA10oWvUbHJREaBMH3viX2mLPWd4H+3qLFTDe0uCBwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFAPmmqbudOMO/bgZucsb8h54bm+jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkL2E5ZThm YS00MWQ3LTRiYzYtOTg0MS0wNWE4M2VkNzBiYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvYTllOGZh LTQxZDctNGJjNi05ODQxLTA1YTgzZWQ3MGJjMy8xL0EtYWFwdTUwNHc3OXVCbTV5 eHZ5SG5odWI2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHJTANBgkqhkiG9w0BAQsFAAOCAQEAR5aw3ER1ZeiW fhIEAagSy3Xl+DWZCKE1km87TZ8ilhJuMOkGgHVfuseUYJSphZ8P6eAzupgSPTrg ng6Ct4kj3QPdotqAbTxikjKp23VfWmpECeoSm0jQ8Q3pFhZCm+AEzZN0MQ6Iv/i+ bV2do4d7bLzSeEJ/wlug6GDd3fG8DOccJRXQj4JGl42ocqUREfdL7PeURWyqn3FF ltuVKMT0qtk3HCDpHO8L3CCKcRIMR/uuBIrcJPOWHBxK7EP8XEzcMRDyJUPxfFjb qOw6TpmmQaaS1MyWDfr7hucAmK8aNWVOkLFt/iZ5/PT0d/1uJKcJRW8s40iETT6D g0/oJ8+7Ow== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:19 2026 by rpki-client