This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer File: AblFvZ9KDnOPSRWctrba8iSG1cA.cer (raw, json) Hash identifier: XkT1ar4y2619mSTnEP+x9brFNynQMjWaiMwkJe5HWAo= Subject key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77590DF9F49E1E6420E03B8D255F9AAB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212864 IP: 2001:67c:2ba4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0d:f9:f4:9e:1e:64:20:e0:3b:8d:25:5f:9a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:ff:d1:80:fc:7b:54:e1:f4:64:87:86:b3: ea:0f:11:51:10:9f:bd:6d:bf:11:06:11:08:ed:ca: 3f:3d:de:a2:91:3e:9c:0b:fa:de:2f:4b:63:87:c0: 85:4b:72:72:fb:3a:4c:80:3c:fd:43:1d:4e:7a:42: d8:96:4a:ca:de:85:6a:2a:55:c1:65:36:99:64:d6: f1:d7:66:aa:58:ff:5d:2c:34:4d:97:d0:7b:d6:ff: d7:dc:b0:aa:16:0e:ec:0f:27:cf:50:cc:8c:87:9c: dc:2f:30:a7:08:00:69:28:a7:1b:fd:8f:62:33:78: 85:62:1f:7a:52:71:9d:a5:ff:e7:6f:a8:c9:b4:a1: fc:4e:40:40:8c:9e:07:d2:c5:96:0a:57:ab:ee:a9: 94:41:8e:d0:e4:eb:f8:50:e6:ba:5a:68:fe:39:2f: 95:3f:a8:42:58:35:e5:87:02:7e:bc:8a:41:57:78: 21:83:3d:b9:66:05:89:ce:1e:89:0a:03:0e:9d:7c: 7f:40:7e:67:69:dd:c0:12:91:f9:39:24:bc:e7:b4: f6:71:0d:20:75:f0:f6:56:52:61:0c:f7:38:c7:7e: 56:68:66:3c:68:9f:06:6c:e3:c6:1c:c5:5b:1c:7f: b4:d4:de:ac:3a:04:3c:9d:e8:ae:6a:4e:ba:67:19: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2ba4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212864 Signature Algorithm: sha256WithRSAEncryption af:c7:d7:ae:30:d3:19:5e:6e:aa:bd:3f:90:c4:79:2a:b6:af: 99:27:8e:00:2b:27:eb:56:41:79:ff:6e:1e:65:e3:74:e3:5d: 72:ae:76:af:6e:09:1f:b7:21:f3:62:08:ed:b1:fa:d9:c9:24: 48:98:23:ca:c6:d6:74:27:44:36:b9:c7:05:49:cc:ae:1f:6b: eb:f9:91:ad:ab:6e:2d:04:e3:64:fa:10:c2:09:4b:0e:56:4a: 78:06:14:a8:95:c5:32:ef:1d:ff:a4:e6:b9:63:a2:1b:b6:13: 92:f6:d4:95:92:55:1a:60:c5:a1:61:cc:15:f1:45:6c:80:27: 79:bd:e0:46:c5:f3:40:96:f8:32:99:1a:17:91:12:56:61:0a: 2f:2e:3e:4c:24:ce:49:8e:05:48:72:53:85:34:14:ed:8e:b1: d9:3b:23:8b:e9:34:52:c2:cd:83:8a:1e:36:9f:41:fb:ca:2c: cf:2c:bd:e7:bf:18:b8:a1:b0:f7:f3:fa:28:6e:83:61:7b:f6: 1c:79:a6:77:15:31:03:b3:45:99:96:02:1b:71:d1:ea:39:df: b7:d5:4b:f6:50:5f:ae:1f:13:f9:9e:5f:6b:cb:7e:dd:33:f0: af:e7:bb:68:63:dc:1c:83:60:92:3d:f1:89:c4:94:ae:4a:3e: 75:df:67:6e -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt3WQ359J4eZCDgO40lX5qrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWI5NDViZDlmNGEwZTczOGY0OTE1OWNiNmI2ZGFmMjI0ODZkNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxj/0YD8e1Th9GSHhrPqDxFREJ+9 bb8RBhEI7co/Pd6ikT6cC/reL0tjh8CFS3Jy+zpMgDz9Qx1OekLYlkrK3oVqKlXB ZTaZZNbx12aqWP9dLDRNl9B71v/X3LCqFg7sDyfPUMyMh5zcLzCnCABpKKcb/Y9i M3iFYh96UnGdpf/nb6jJtKH8TkBAjJ4H0sWWCler7qmUQY7Q5Ov4UOa6Wmj+OS+V P6hCWDXlhwJ+vIpBV3ghgz25ZgWJzh6JCgMOnXx/QH5nad3AEpH5OSS857T2cQ0g dfD2VlJhDPc4x35WaGY8aJ8GbOPGHMVbHH+01N6sOgQ8neiuak66Zxl0QQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFAG5Rb2fSg5zj0kVnLa22vIkhtXAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzhjOWVk Yi1hMjI2LTQ1YWQtOGIzYi1kM2JkN2FiM2VkMzYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvOGM5ZWRi LWEyMjYtNDVhZC04YjNiLWQzYmQ3YWIzZWQzNi8xL0FibEZ2WjlLRG5PUFNSV2N0 cmJhOGlTRzFjQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCukMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwM/gDANBgkqhkiG9w0BAQsFAAOCAQEAr8fXrjDTGV5uqr0/kMR5KravmSeO ACsn61ZBef9uHmXjdONdcq52r24JH7ch82II7bH62ckkSJgjysbWdCdENrnHBUnM rh9r6/mRratuLQTjZPoQwglLDlZKeAYUqJXFMu8d/6TmuWOiG7YTkvbUlZJVGmDF oWHMFfFFbIAneb3gRsXzQJb4MpkaF5ESVmEKLy4+TCTOSY4FSHJThTQU7Y6x2Tsj i+k0UsLNg4oeNp9B+8oszyy9578YuKGw9/P6KG6DYXv2HHmmdxUxA7NFmZYCG3HR 6jnft9VL9lBfrh8T+Z5fa8t+3TPwr+e7aGPcHINgkj3xicSUrko+dd9nbg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:01 2026 by rpki-client