This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer File: ABCrc5F2m18sVOM8i1p9-fN6M6g.cer (raw, json) Hash identifier: 6RaIqox5RCQ8e1Hxlybf+yeZnlnhKD6zeYeGorvWRhk= Subject key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C783BCDD042FD4545076E367A4A24 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47829 IP: 2.58.236.0/22 IP: 193.176.236.0/24 IP: 2001:67c:2c8::/48 IP: 2a09:ed40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:78:3b:cd:d0:42:fd:45:45:07:6e:36:7a:4a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:3f:27:d4:6d:a7:80:9a:85:1c:b2:87:bb: 7b:74:50:3d:37:a4:c3:0c:7f:37:29:83:35:95:00: 3c:30:ed:52:d1:c5:ca:88:89:19:ad:de:7e:c5:4c: ea:ee:2f:2f:4c:98:0f:06:b5:b7:59:a0:f4:2c:5e: 9b:0f:b3:64:c5:d5:c9:02:44:f7:56:eb:23:ce:4f: 7f:d2:51:a5:a6:ea:e8:a0:fb:68:21:00:0f:33:ce: 05:0c:1c:62:c3:8e:f6:e3:3a:66:d9:43:64:31:0f: da:91:ad:52:12:d4:5d:62:c8:fb:49:d3:3a:35:fa: 52:28:9e:e2:ac:75:b0:54:72:58:6f:39:c3:ce:f9: c0:b8:57:09:7d:6f:54:a6:a2:8b:3d:22:23:2d:41: 38:1e:59:c6:eb:61:cf:0b:15:84:80:3d:d6:99:91: 97:04:9e:87:78:ad:fb:bf:08:be:a1:4a:89:b9:99: e3:2f:77:6e:11:c8:1a:84:32:10:0c:af:bd:2d:87: 07:69:7a:b8:b8:3e:81:c0:fb:22:d6:7a:a8:eb:0c: 6c:b8:b2:20:0b:5f:d0:91:34:a0:bc:14:ef:4d:85: 3b:17:df:c3:f5:38:79:0d:16:10:3d:9b:69:74:48: 2f:d5:55:7a:5c:72:fb:77:c0:98:d3:a1:d1:0d:94: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.236.0/22 193.176.236.0/24 IPv6: 2001:67c:2c8::/48 2a09:ed40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47829 Signature Algorithm: sha256WithRSAEncryption 31:28:f0:ea:bc:bc:b6:8c:3c:85:6c:a1:dc:07:80:66:ca:ec: 57:4b:9b:87:15:c4:41:28:98:66:70:ee:21:62:84:84:11:87: 1f:ad:ca:cf:e4:1f:90:0b:af:b5:1b:4c:33:71:40:38:e5:09: 95:f4:68:88:cd:18:5c:fd:b5:1f:56:6a:c3:be:25:7c:7d:79: 8e:6e:1b:05:ef:ef:2a:57:45:ae:0a:dd:e9:a4:75:6b:88:48: d5:2a:b9:32:b8:54:fa:4d:29:0e:d5:ff:dd:34:18:bc:7d:8d: 70:b8:28:8f:07:0e:ae:71:e5:30:35:0c:ad:5f:57:52:61:34: 13:e1:d2:fa:99:fe:08:4b:92:48:68:07:23:d2:92:7b:ed:91: bd:3f:e7:1d:ea:75:85:4a:e4:16:0e:ee:25:f9:cf:58:d2:43: a6:c0:14:d8:73:5d:38:c6:b9:38:82:da:17:3d:9c:e3:4b:e3: 94:85:f2:6c:9b:3f:df:67:00:6c:a0:b9:72:e6:e2:85:4a:e6: 9f:41:e8:ce:90:fd:ba:0a:4a:4d:27:46:54:16:b9:55:81:ca: 5b:24:cb:2b:a4:eb:14:7f:01:7d:cf:dd:a8:36:4d:1d:28:da: 0c:3c:45:5f:21:43:b5:cf:a5:9b:9a:0f:ce:eb:ea:f1:8c:02: c8:ac:33:6a -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt9XHg7zdBC/UVFB242ekokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDEwYWI3MzkxNzY5YjVmMmM1NGUzM2M4YjVhN2RmOWYzN2EzM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFs/J9Rtp4CahRyyh7t7dFA9N6TD DH83KYM1lQA8MO1S0cXKiIkZrd5+xUzq7i8vTJgPBrW3WaD0LF6bD7NkxdXJAkT3 Vusjzk9/0lGlpurooPtoIQAPM84FDBxiw4724zpm2UNkMQ/aka1SEtRdYsj7SdM6 NfpSKJ7irHWwVHJYbznDzvnAuFcJfW9UpqKLPSIjLUE4HlnG62HPCxWEgD3WmZGX BJ6HeK37vwi+oUqJuZnjL3duEcgahDIQDK+9LYcHaXq4uD6BwPsi1nqo6wxsuLIg C1/QkTSgvBTvTYU7F9/D9Th5DRYQPZtpdEgv1VV6XHL7d8CY06HRDZRC+wIDAQAB o4ICvjCCArowHQYDVR0OBBYEFAAQq3ORdptfLFTjPItaffnzejOoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2MyMmY2 MS0xMzNjLTRkMGMtODhjZi1hMTU1ZTNmOWQ1MjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvYzIyZjYx LTEzM2MtNGQwYy04OGNmLWExNTVlM2Y5ZDUyOS8xL0FCQ3JjNUYybTE4c1ZPTThp MXA5LWZONk02Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQCAjrsAwQAwbDsMBYEAgACMBADBwAgAQZ8AsgD BQMqCe1AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC61TANBgkqhkiG9w0BAQsF AAOCAQEAMSjw6ry8tow8hWyh3AeAZsrsV0ubhxXEQSiYZnDuIWKEhBGHH63Kz+Qf kAuvtRtMM3FAOOUJlfRoiM0YXP21H1Zqw74lfH15jm4bBe/vKldFrgrd6aR1a4hI 1Sq5MrhU+k0pDtX/3TQYvH2NcLgojwcOrnHlMDUMrV9XUmE0E+HS+pn+CEuSSGgH I9KSe+2RvT/nHep1hUrkFg7uJfnPWNJDpsAU2HNdOMa5OILaFz2c40vjlIXybJs/ 32cAbKC5cubihUrmn0HozpD9ugpKTSdGVBa5VYHKWyTLK6TrFH8Bfc/dqDZNHSja DDxFXyFDtc+lm5oPzuvq8YwCyKwzag== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:51 2026 by rpki-client