This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer (raw, json) Hash identifier: K0EPuOvwXw5fzsWBNyjhxHiI/RrGDyKzb4KiuNqf1sQ= Subject key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F392243660DC108010A7D6DEDC2F7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57561 IP: 91.233.4.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:39:22:43:66:0d:c1:08:01:0a:7d:6d:ed:c2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:68:92:e7:08:93:d1:72:ff:3d:46:ca:d9: e1:4e:bb:c8:47:de:57:ca:a7:4e:1a:44:bf:9b:ea: 41:ed:03:b8:6a:9c:81:cf:5a:a3:cb:24:b9:7d:fc: 27:cd:d7:a9:83:ef:d2:d8:7e:26:05:13:60:23:05: 2d:92:33:6a:36:bf:3e:b6:00:b0:e3:7d:54:ba:8d: 7e:00:8f:57:60:bd:6f:34:45:5a:14:d2:91:ec:ff: f6:2e:51:73:ea:ed:ea:5a:aa:d9:b1:77:61:01:f0: 03:d8:6d:77:64:b2:92:06:be:0f:27:ae:87:bc:c0: 1f:84:e4:0d:44:56:04:80:ba:72:b6:e7:db:7d:0b: 4a:be:50:e6:6e:f1:49:cb:e1:70:f0:6c:76:e1:52: 35:61:cb:e0:66:9f:8b:ed:f9:5f:b6:fd:72:08:12: 68:a6:91:da:f7:dc:c9:e1:a6:2c:a5:b3:c4:e2:40: 58:cb:16:29:e9:87:4b:36:26:e8:ba:7b:5f:0a:58: 31:b2:78:9d:83:bc:dc:f7:78:a7:c1:3f:d3:a2:6e: 78:34:bb:df:77:d5:70:67:7d:6f:1a:63:57:3d:df: 03:fa:87:a9:68:bb:3d:5b:45:00:a0:58:35:f8:fe: 3a:0b:a4:0e:7d:09:59:10:d6:5c:c6:dd:1f:16:eb: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.4.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57561 Signature Algorithm: sha256WithRSAEncryption 17:42:3e:69:50:4f:0a:44:89:88:1c:85:3e:86:36:d0:a0:d7: 9d:ae:97:74:44:19:72:e6:2b:ff:12:d5:00:77:c6:3d:18:c4: a1:97:05:86:7b:cc:9e:5b:39:e8:e6:3e:5d:dc:4c:f9:c0:d4: 88:cd:9f:f2:9f:8a:11:8c:ed:4d:b3:0c:36:5e:ed:ce:83:1c: 37:f4:11:d7:e7:dd:6f:2a:8f:59:cc:92:42:c7:f1:af:97:8e: de:c5:37:05:da:e7:97:a8:c0:e5:21:c0:d2:02:99:b8:f6:13: 13:b6:74:eb:1b:bb:a3:8e:55:81:51:77:62:83:17:ba:10:e5: 12:8c:ee:bf:8d:df:71:95:fe:66:f1:e4:57:47:33:16:56:0a: df:a3:3c:15:69:49:8e:fc:b4:75:0e:33:ce:94:31:37:3a:46: a3:e7:a1:ff:7a:a5:83:ec:4c:c8:ba:22:fb:89:d7:4e:d7:db: 91:c8:00:91:f4:95:06:c2:a0:b1:a6:4a:72:1b:b7:cf:8a:3d: b3:70:4d:89:53:1a:8b:8c:9b:25:54:2c:99:12:68:7d:85:92: 0c:f3:f2:1d:e9:61:1a:ce:c6:a2:a7:ec:ae:cd:c4:ac:1c:98: eb:aa:50:5c:f0:52:36:dc:f5:09:85:08:7a:b9:12:28:c2:03: 6d:64:bb:ab -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8fzkiQ2YNwQgBCn1t7cL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDAwNmQ1ZTBjMjc5MzExZDFhODFmZDBiYmQyMTBkMGJkYWQ1OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yZokucIk9Fy/z1GytnhTrvIR95X yqdOGkS/m+pB7QO4apyBz1qjyyS5ffwnzdepg+/S2H4mBRNgIwUtkjNqNr8+tgCw 431Uuo1+AI9XYL1vNEVaFNKR7P/2LlFz6u3qWqrZsXdhAfAD2G13ZLKSBr4PJ66H vMAfhOQNRFYEgLpytufbfQtKvlDmbvFJy+Fw8Gx24VI1YcvgZp+L7flftv1yCBJo ppHa99zJ4aYspbPE4kBYyxYp6YdLNibountfClgxsnidg7zc93inwT/Tom54NLvf d9VwZ31vGmNXPd8D+oepaLs9W0UAoFg1+P46C6QOfQlZENZcxt0fFusJ/QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAAAbV4MJ5MR0agf0LvSENC9rVlCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4Lzk3Yjdk MC04MzgzLTRhMzctOGNjZS0xZjkxOGQ5Mzc1NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvOTdiN2Qw LTgzODMtNGEzNy04Y2NlLTFmOTE4ZDkzNzU2Zi8xL0FBQnRYZ3dua3hIUnFCX1F1 OUlRMEwydFdVSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW+kEMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDg2TANBgkqhkiG9w0BAQsFAAOCAQEAF0I+aVBPCkSJiByFPoY20KDXna6XdEQZ cuYr/xLVAHfGPRjEoZcFhnvMnls56OY+XdxM+cDUiM2f8p+KEYztTbMMNl7tzoMc N/QR1+fdbyqPWcySQsfxr5eO3sU3Bdrnl6jA5SHA0gKZuPYTE7Z06xu7o45VgVF3 YoMXuhDlEozuv43fcZX+ZvHkV0czFlYK36M8FWlJjvy0dQ4zzpQxNzpGo+eh/3ql g+xMyLoi+4nXTtfbkcgAkfSVBsKgsaZKchu3z4o9s3BNiVMai4ybJVQsmRJofYWS DPPyHelhGs7Goqfsrs3ErByY66pQXPBSNtz1CYUIerkSKMIDbWS7qw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:15 2026 by rpki-client