This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer (raw, json) Hash identifier: 5eQ3cCIhxo79yj8LsdJdr/nYWRNd1fjlYl3RpprTvOc= Subject key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6BA908DC42B90CA95BBC25867E7BA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.116.156.0/23 IP: 195.49.160.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ba:90:8d:c4:2b:90:ca:95:bb:c2:58:67:e7:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01bacccb74c77bd5fd2abea3e612d881eab73356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:32:ab:80:fa:29:91:61:69:eb:97:af:73: 41:ef:4e:0c:3f:c7:04:df:ae:1b:f7:46:d1:a2:9c: 74:d4:f2:75:0f:ad:60:bf:f5:12:83:b4:cc:71:d1: 97:95:c1:06:a1:3b:5a:2f:99:23:95:36:23:ea:f5: e9:41:bf:97:58:3f:ca:21:6c:f7:82:22:e3:fd:7a: 99:fa:5e:69:f9:20:97:d7:63:23:2d:27:d6:aa:e4: d5:5c:b0:0f:c8:9c:35:2e:d5:c7:78:31:db:26:cb: 09:12:cf:d9:c1:14:c2:ca:b7:d0:fe:d6:63:22:07: de:56:6b:ec:b9:86:05:8d:0f:19:66:7c:fd:69:8a: 39:3e:47:71:83:9f:2e:27:dd:bc:62:c0:e5:90:ca: fb:f7:14:f2:4b:5f:bd:da:5b:39:5a:ea:7e:e9:56: e6:29:56:48:8f:e9:8c:20:17:66:e4:9e:6b:84:16: 9b:2e:c8:f6:76:71:7c:75:d6:fc:aa:7d:d3:a0:ee: f5:3f:ad:30:f8:bc:40:d0:f0:0b:b9:d9:01:96:25: a7:b8:09:1b:be:73:ca:b5:33:25:94:48:a7:31:54: ef:d5:bc:74:eb:c0:cb:76:cc:c1:2e:89:80:bd:97: 3f:f3:a7:28:18:e0:9a:eb:3c:7b:35:e3:85:f5:09: 69:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.156.0/23 195.49.160.0/22 Signature Algorithm: sha256WithRSAEncryption a9:af:79:de:40:71:80:45:75:e9:04:c1:72:57:c8:67:4c:34: 96:09:a5:12:21:71:71:4a:4a:71:e2:26:5d:c5:74:ab:7b:03: 0c:dd:87:db:12:66:cd:1b:be:93:bc:0e:0b:ce:0c:9b:50:0b: af:c3:14:59:96:3c:50:61:8c:5f:a7:2a:19:b0:7f:42:44:95: e7:1c:c7:a3:9a:ed:08:0b:96:42:b1:ce:14:02:e8:31:d9:2c: 70:c2:5a:de:62:c6:f9:23:ab:f9:b5:c1:36:e3:ab:c2:d9:55: 0a:e2:25:22:2f:84:75:e4:a0:7b:b9:02:24:b8:a4:df:e4:c9: 04:f3:ae:82:2b:6e:9d:f2:6c:d3:cc:02:c7:03:b2:ff:24:59: bb:9c:fe:25:f5:66:ab:c7:83:b0:89:0d:d2:a5:ce:9c:ae:21: 49:8c:9c:68:28:37:3c:9c:13:94:e2:f5:c4:1c:a7:45:fc:1d: cf:c4:a3:c3:8c:49:b0:60:4c:0b:e2:e5:85:7e:6a:4f:7a:37: 25:a1:b4:16:9e:14:6f:55:ec:ff:09:c5:29:4b:2e:4c:e6:47: d6:07:c8:8f:c8:fe:14:67:50:8d:70:df:49:25:2f:90:e8:f3: 35:dc:30:9b:38:f8:96:d4:2f:d4:92:e0:27:75:d1:4b:e3:3a: d1:e3:20:f5 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt3xrqQjcQrkMqVu8JYZ+e6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWJhY2NjYjc0Yzc3YmQ1ZmQyYWJlYTNlNjEyZDg4MWVhYjczMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Myq4D6KZFhaeuXr3NB704MP8cE 364b90bRopx01PJ1D61gv/USg7TMcdGXlcEGoTtaL5kjlTYj6vXpQb+XWD/KIWz3 giLj/XqZ+l5p+SCX12MjLSfWquTVXLAPyJw1LtXHeDHbJssJEs/ZwRTCyrfQ/tZj IgfeVmvsuYYFjQ8ZZnz9aYo5Pkdxg58uJ928YsDlkMr79xTyS1+92ls5Wup+6Vbm KVZIj+mMIBdm5J5rhBabLsj2dnF8ddb8qn3ToO71P60w+LxA0PALudkBliWnuAkb vnPKtTMllEinMVTv1bx068DLdszBLomAvZc/86coGOCa6zx7NeOF9QlpawIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFAG6zMt0x3vV/Sq+o+YS2IHqtzNWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA0L2ExNDRl NS1mY2U2LTRhNTAtYmQyYS04Mzc0MTA0MWI4YzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQvYTE0NGU1 LWZjZTYtNGE1MC1iZDJhLTgzNzQxMDQxYjhjNy8xL0Fick15M1RIZTlYOUtyNmo1 aExZZ2VxM00xWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwnScAwQCwzGgMA0GCSqGSIb3DQEBCwUAA4IB AQCpr3neQHGARXXpBMFyV8hnTDSWCaUSIXFxSkpx4iZdxXSrewMM3YfbEmbNG76T vA4LzgybUAuvwxRZljxQYYxfpyoZsH9CRJXnHMejmu0IC5ZCsc4UAugx2Sxwwlre Ysb5I6v5tcE246vC2VUK4iUiL4R15KB7uQIkuKTf5MkE866CK26d8mzTzALHA7L/ JFm7nP4l9Warx4OwiQ3Spc6criFJjJxoKDc8nBOU4vXEHKdF/B3PxKPDjEmwYEwL 4uWFfmpPejclobQWnhRvVez/CcUpSy5M5kfWB8iPyP4UZ1CNcN9JJS+Q6PM13DCb OPiW1C/UkuAnddFL4zrR4yD1 -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:48 2026 by rpki-client