This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer File: AV3onCqMLU3oGkNnXBXlQ-qhcOk.cer (raw, json) Hash identifier: uJlXeSTYKpo/NlaM/2o9mWOfh7VBArcd/IJ46JsQU3o= Subject key identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BB015285A447C059B5A08A318C2BAABB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 12 Jan 2026 02:42:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48507 IP: 91.211.56.0/22 IP: 185.193.204.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:15:28:5a:44:7c:05:9b:5a:08:a3:18:c2:ba:ab:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 12 02:42:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=015de89c2a8c2d4de81a43675c15e543eaa170e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:44:90:59:e1:bf:82:25:6f:e7:f6:40:c8:ca: 47:e7:a6:36:6c:d0:39:dd:de:9a:90:0a:cb:b5:5f: 2f:ff:8b:95:23:0c:d1:0f:05:de:8a:7b:b8:ee:c5: 03:8e:63:38:04:32:67:47:8d:fe:f1:6b:22:02:bf: 4b:df:7a:73:89:71:9b:3d:9a:34:af:7c:92:e3:2f: c6:3e:08:03:c0:01:1c:61:c1:72:61:07:da:43:19: ce:36:f0:fa:f8:ea:d0:31:c2:9c:9c:17:8f:84:0d: 0b:6c:b3:30:62:c8:46:28:95:58:0f:45:5f:a2:a8: 7e:5a:b2:5e:fc:31:42:a1:06:09:b8:06:67:1d:2e: ff:18:34:bd:de:1b:66:17:93:e6:da:7b:1e:41:0d: ed:5a:5c:02:13:ec:b1:49:66:0f:3d:fc:27:b6:5d: 02:dd:ad:85:f1:61:59:db:de:a8:8f:6e:c1:14:3b: e1:3b:ab:3b:0b:48:37:05:27:48:0f:e9:7e:f7:11: 57:55:0c:54:a8:a1:3c:3a:e8:6f:25:ce:1b:28:02: d2:e8:98:43:32:2e:f5:b9:c7:49:20:43:7a:8d:3f: 81:46:6b:40:70:2c:b4:f4:dd:59:5a:0c:a4:1d:ec: 54:d7:4d:b7:b5:bc:22:7b:ca:13:ad:a5:df:e5:69: b7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5D:E8:9C:2A:8C:2D:4D:E8:1A:43:67:5C:15:E5:43:EA:A1:70:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/014634-7feb-47da-aae2-e21e0082636f/1/AV3onCqMLU3oGkNnXBXlQ-qhcOk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.56.0/22 185.193.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48507 Signature Algorithm: sha256WithRSAEncryption 51:24:d0:4f:8b:e7:97:d0:5a:72:dd:d4:be:f1:93:43:c6:91: 0e:3e:11:a6:9f:92:9b:6f:e6:c6:b1:31:2e:e2:12:4e:12:aa: 15:3c:63:53:65:81:5d:25:d8:86:34:cb:52:42:ab:69:0c:54: ea:06:e1:38:dd:32:f3:a0:ea:24:19:8b:7b:5b:79:f5:8d:d1: 28:b7:03:a1:e8:59:62:59:16:5f:1f:f3:cc:56:59:a6:b9:c6: 7a:ac:12:06:00:72:f7:71:c8:e3:7f:7f:f1:c3:5a:06:ba:a6: 9f:c3:4e:0d:a8:ff:d7:bc:c5:af:27:cb:8e:68:49:11:13:d8: ad:18:af:a4:69:c2:19:2e:8f:47:67:f8:5c:0b:fc:8f:21:6a: f5:21:cd:e7:d0:2c:c7:81:2e:46:c5:14:70:e2:0b:58:ba:95: 66:f2:04:d9:c1:95:e7:30:a2:d5:e6:fb:cb:2b:f5:2d:53:5d: 74:27:28:7b:d3:e5:ba:da:16:88:1a:36:ec:98:5a:02:9d:8b: b2:1a:31:02:e4:ac:b2:c7:02:8e:3c:78:69:63:e0:22:de:bf: a7:6a:b1:f0:fd:25:07:11:f6:fa:dd:2c:5d:09:cc:77:ac:62: f0:8b:86:d6:27:4e:67:2c:b2:f3:e1:85:4a:76:41:32:48:58: fb:48:5c:ad -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZuwFShaRHwFm1oIoxjCuquzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEyMDI0MjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTVkZTg5YzJhOGMyZDRkZTgxYTQzNjc1YzE1ZTU0M2VhYTE3MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ESQWeG/giVv5/ZAyMpH56Y2bNA5 3d6akArLtV8v/4uVIwzRDwXeinu47sUDjmM4BDJnR43+8WsiAr9L33pziXGbPZo0 r3yS4y/GPggDwAEcYcFyYQfaQxnONvD6+OrQMcKcnBePhA0LbLMwYshGKJVYD0Vf oqh+WrJe/DFCoQYJuAZnHS7/GDS93htmF5Pm2nseQQ3tWlwCE+yxSWYPPfwntl0C 3a2F8WFZ296oj27BFDvhO6s7C0g3BSdID+l+9xFXVQxUqKE8OuhvJc4bKALS6JhD Mi71ucdJIEN6jT+BRmtAcCy09N1ZWgykHexU1023tbwie8oTraXf5Wm3SwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFAFd6JwqjC1N6BpDZ1wV5UPqoXDpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzAxNDYz NC03ZmViLTQ3ZGEtYWFlMi1lMjFlMDA4MjYzNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMDE0NjM0 LTdmZWItNDdkYS1hYWUyLWUyMWUwMDgyNjM2Zi8xL0FWM29uQ3FNTFUzb0drTm5Y QlhsUS1xaGNPay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCW9M4AwQCucHMMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwC9ezANBgkqhkiG9w0BAQsFAAOCAQEAUSTQT4vnl9Bact3UvvGTQ8aR Dj4Rpp+Sm2/mxrExLuISThKqFTxjU2WBXSXYhjTLUkKraQxU6gbhON0y86DqJBmL e1t59Y3RKLcDoehZYlkWXx/zzFZZprnGeqwSBgBy93HI439/8cNaBrqmn8NODaj/ 17zFryfLjmhJERPYrRivpGnCGS6PR2f4XAv8jyFq9SHN59Asx4EuRsUUcOILWLqV ZvIE2cGV5zCi1eb7yyv1LVNddCcoe9PlutoWiBo27JhaAp2LshoxAuSssscCjjx4 aWPgIt6/p2qx8P0lBxH2+t0sXQnMd6xi8IuG1idOZyyy8+GFSnZBMkhY+0hcrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:32 2026 by rpki-client