This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer File: AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer (raw, json) Hash identifier: VmoPE+xxffvpyZ6eKGN+e/nhLW2Fd2KuP7hpENVhv4Y= Subject key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8096AC7F140B9661F9967292D063ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211493 IP: 193.32.84.0/24 IP: 2a10:d2c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:96:ac:7f:14:0b:96:61:f9:96:72:92:d0:63:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:15:0e:e8:86:08:39:83:73:51:0f:30:b8: 96:0c:c2:28:aa:3f:56:80:f0:dc:ff:ba:da:a1:f4: 50:7b:c7:f2:49:7b:c1:45:7a:2f:ba:c7:b5:22:cf: 15:81:ee:22:d9:52:be:51:f7:82:02:da:5f:85:e5: a3:db:b0:b7:9f:82:8d:c6:8a:0f:e5:39:16:77:ad: ca:cd:23:b6:43:1a:ed:cc:66:8c:1e:98:40:0d:d1: 20:0c:ca:c7:e6:ec:f1:13:96:38:bb:2e:f4:95:43: 00:5b:60:f7:36:1a:57:26:54:ef:90:42:5d:d3:ee: 04:43:29:61:21:7a:1b:cd:fd:b9:d1:af:89:30:b7: bb:4c:5d:09:f3:fe:70:a7:ba:ec:1d:9e:f3:9c:07: 51:b9:6b:b2:5c:59:8a:da:ca:c0:c2:f5:86:e7:75: 52:29:4a:0f:16:83:09:c3:3a:09:8a:03:90:3b:1a: 46:62:41:29:f5:25:b8:b1:88:c4:d4:c7:2c:be:70: 97:2a:81:bd:d7:a0:ad:ce:de:ba:7f:9f:3d:4e:ab: c3:4c:93:28:98:d4:2d:f2:bb:e3:e8:46:df:7f:d2: 7a:6e:b6:cd:1f:0d:2b:da:4e:df:9b:b5:a3:97:b3: 46:f7:2c:7c:bc:20:11:00:da:07:15:be:db:05:6a: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.84.0/24 IPv6: 2a10:d2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211493 Signature Algorithm: sha256WithRSAEncryption 3e:f6:f2:f9:c4:7a:0d:e6:42:86:e4:2f:46:d8:34:17:b8:bd: 45:66:da:1e:7f:10:09:0e:12:47:a3:bc:7b:bf:46:23:b4:24: bf:6b:13:49:52:0c:6e:c4:26:7a:71:10:ba:94:85:63:a3:a5: 0b:1a:80:c1:59:d1:47:dc:90:ea:a6:b7:67:e1:2e:c9:dc:c0: 99:00:66:d9:05:0a:05:ea:c9:6b:30:b4:a5:a4:2d:e6:31:0e: fe:d0:98:d0:17:77:5d:db:52:b9:b4:43:5e:46:8a:b7:0f:38: 69:9a:b0:b3:ec:25:64:fd:95:e5:6c:51:49:b3:b2:65:c0:21: 31:cd:0a:63:b6:4e:35:2f:63:01:c4:82:3b:2b:b0:1b:a9:3d: 38:be:29:09:27:b8:63:88:b8:46:b9:07:71:2d:07:da:7b:92: 98:84:bb:89:d3:48:8f:c8:43:e5:db:24:43:4f:98:c6:57:2d: f6:55:c9:fe:ad:d3:45:4b:69:cb:07:49:60:14:5b:75:8c:6b: c6:dc:bd:91:be:d3:e4:f1:b1:3d:6f:4a:07:1b:3c:5f:0c:fe: 14:b6:9b:12:59:c9:21:c2:83:89:ae:7f:76:32:0c:bb:81:f0: 2c:c7:96:5b:21:8e:93:76:90:cc:da:cd:56:e2:e8:52:7b:a9: f1:a2:0e:60 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8gJasfxQLlmH5lnKS0GPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWEwZDU4NjhjN2E0MWQ2ZmU5ZGNiY2Y5MzgwNWFjNDJjYmRiZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc0VDuiGCDmDc1EPMLiWDMIoqj9W gPDc/7raofRQe8fySXvBRXovuse1Is8Vge4i2VK+UfeCAtpfheWj27C3n4KNxooP 5TkWd63KzSO2QxrtzGaMHphADdEgDMrH5uzxE5Y4uy70lUMAW2D3NhpXJlTvkEJd 0+4EQylhIXobzf250a+JMLe7TF0J8/5wp7rsHZ7znAdRuWuyXFmK2srAwvWG53VS KUoPFoMJwzoJigOQOxpGYkEp9SW4sYjE1McsvnCXKoG916Ctzt66f589TqvDTJMo mNQt8rvj6Ebff9J6brbNHw0r2k7fm7Wjl7NG9yx8vCARANoHFb7bBWo16QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAGg1YaMekHW/p3Lz5OAWsQsvb2/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2ZjZGJl ZS1kYjlkLTQ2YjgtOWUwMy0xNDZlMGIxNzgwODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvZmNkYmVl LWRiOWQtNDZiOC05ZTAzLTE0NmUwYjE3ODA4NS8xL0FhRFZob3g2UWRiLW5jdlBr NEJheEN5OXZiOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSBUMA0EAgACMAcDBQAqENLAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6JTANBgkqhkiG9w0BAQsFAAOCAQEAPvby+cR6DeZC huQvRtg0F7i9RWbaHn8QCQ4SR6O8e79GI7Qkv2sTSVIMbsQmenEQupSFY6OlCxqA wVnRR9yQ6qa3Z+EuydzAmQBm2QUKBerJazC0paQt5jEO/tCY0Bd3XdtSubRDXkaK tw84aZqws+wlZP2V5WxRSbOyZcAhMc0KY7ZONS9jAcSCOyuwG6k9OL4pCSe4Y4i4 RrkHcS0H2nuSmIS7idNIj8hD5dskQ0+Yxlct9lXJ/q3TRUtpywdJYBRbdYxrxty9 kb7T5PGxPW9KBxs8Xwz+FLabElnJIcKDia5/djIMu4HwLMeWWyGOk3aQzNrNVuLo Unup8aIOYA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:47 2026 by rpki-client