This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer File: AJEXecdn0jZOhvTifvjF_puwEJA.cer (raw, json) Hash identifier: TeKpeAQqSd72vXMYyf7lgBzeBiDti7P7I5H5hLsVXdc= Subject key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758D8B62A4BD7610B7DC6863C683A56 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 198867 IP: 5.45.188.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d8:b6:2a:4b:d7:61:0b:7d:c6:86:3c:68:3a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1b:09:d2:24:d2:36:70:88:23:63:b8:d6:5f: 94:03:6e:2d:2d:78:6b:ee:2f:93:0f:9e:07:40:f3: 0a:12:ee:15:7f:61:43:23:56:c9:a6:20:44:b3:ad: f7:43:44:69:05:85:51:65:26:0b:2d:24:34:c1:16: 3d:57:e4:06:a1:62:21:0f:38:76:d1:0a:36:8a:be: c3:35:3a:0f:40:0d:41:27:35:3c:d0:27:9e:51:40: cf:17:f4:dd:69:40:65:30:77:99:3e:ad:e5:53:61: d3:bc:68:3b:08:7e:b7:ad:f7:0c:d0:b3:01:7e:80: ea:e4:f2:b4:d9:67:4d:1a:cb:92:c4:98:c4:3a:7f: c5:22:a5:b1:67:91:6a:a0:09:31:1b:46:2e:0b:6a: 80:fb:d1:27:55:ca:99:f1:1d:6d:a2:3c:8c:bd:89: b3:b6:bb:d1:ae:bf:98:60:65:99:3e:f5:b5:b3:f9: 1a:85:d7:62:55:68:01:a4:de:eb:83:8a:5c:eb:ff: ad:fc:26:ea:3a:41:e5:c0:5e:56:d1:3a:45:9e:c6: ee:65:9b:8c:d9:1b:0c:69:3c:e2:81:ad:ad:5e:12: ab:fb:4d:96:90:75:aa:18:4d:b0:8d:94:d1:e8:1b: 13:2d:9d:d5:c2:33:11:4a:d8:f2:da:57:dc:73:fb: 6f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.188.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 198867 Signature Algorithm: sha256WithRSAEncryption aa:3c:d5:2c:84:d2:c9:64:c3:65:da:92:67:c1:96:e9:93:af: e7:63:ac:f6:36:5f:1f:64:6f:38:54:84:3f:6e:9f:4d:f8:72: 55:2d:42:6f:02:5d:c2:1f:8e:8d:e0:ab:f1:3f:c6:64:62:78: 85:2b:e1:b6:9d:8e:de:bb:00:36:71:3e:d8:67:0c:20:18:18: 8b:17:db:6c:33:37:77:77:45:f0:13:7d:69:07:78:cb:3f:8b: 29:f7:0f:1e:3a:8c:55:3f:5c:de:18:65:4c:fc:f8:d0:f3:32: d9:b8:a3:7c:a9:32:e4:2b:c3:d3:c3:86:86:a9:c8:c4:2d:cc: d1:d6:4a:b1:ec:f3:e3:e8:39:97:de:94:d1:e7:58:ad:56:f5: b1:b6:25:9e:0f:f2:bf:c7:5d:f3:06:f6:f5:71:69:f7:7f:86: 05:b9:49:b6:11:d8:2b:a6:3c:11:a0:6f:bf:15:e3:55:39:90: 28:ac:2f:ae:39:f2:32:74:50:9d:21:7e:2f:2d:85:7c:e7:09: 57:10:ce:c5:f5:c7:c3:f4:b3:95:47:2a:dd:7d:0d:0a:a6:13: bd:b8:52:bc:7f:08:30:00:ca:a7:d9:f9:70:9c:b1:80:4c:8f: e8:a9:3f:5b:19:81:ad:ec:e0:cc:44:db:cb:67:06:4b:b9:99: cc:12:d8:6b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WNi2KkvXYQt9xoY8aDpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDkxMTc3OWM3NjdkMjM2NGU4NmY0ZTI3ZWY4YzVmZTliYjAxMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhsJ0iTSNnCII2O41l+UA24tLXhr 7i+TD54HQPMKEu4Vf2FDI1bJpiBEs633Q0RpBYVRZSYLLSQ0wRY9V+QGoWIhDzh2 0Qo2ir7DNToPQA1BJzU80CeeUUDPF/TdaUBlMHeZPq3lU2HTvGg7CH63rfcM0LMB foDq5PK02WdNGsuSxJjEOn/FIqWxZ5FqoAkxG0YuC2qA+9EnVcqZ8R1tojyMvYmz trvRrr+YYGWZPvW1s/kahddiVWgBpN7rg4pc6/+t/CbqOkHlwF5W0TpFnsbuZZuM 2RsMaTziga2tXhKr+02WkHWqGE2wjZTR6BsTLZ3VwjMRStjy2lfcc/tvJQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFACRF3nHZ9I2Tob04n74xf6bsBCQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzI1OWZi ZS0yODU1LTRlMTktOTE4Zi02MmMxYjFmZjNhMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMjU5ZmJl LTI4NTUtNGUxOS05MThmLTYyYzFiMWZmM2EyNi8xL0FKRVhlY2RuMGpaT2h2VGlm dmpGX3B1d0VKQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCBS28MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMI0zANBgkqhkiG9w0BAQsFAAOCAQEAqjzVLITSyWTDZdqSZ8GW6ZOv52Os9jZf H2RvOFSEP26fTfhyVS1CbwJdwh+OjeCr8T/GZGJ4hSvhtp2O3rsANnE+2GcMIBgY ixfbbDM3d3dF8BN9aQd4yz+LKfcPHjqMVT9c3hhlTPz40PMy2bijfKky5CvD08OG hqnIxC3M0dZKsezz4+g5l96U0edYrVb1sbYlng/yv8dd8wb29XFp93+GBblJthHY K6Y8EaBvvxXjVTmQKKwvrjnyMnRQnSF+Ly2FfOcJVxDOxfXHw/SzlUcq3X0NCqYT vbhSvH8IMADKp9n5cJyxgEyP6Kk/WxmBrezgzETby2cGS7mZzBLYaw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:02 2026 by rpki-client