This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer File: Afq489H7PSo1xPZ6SPb2CD6rpXU.cer (raw, json) Hash identifier: S0r1G8/0g0IirZLPe8gY7gcBLOyaaAJthyCC/JWlA1g= Subject key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791027D3D1308CFE02D12D6F59E86F80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203667 IP: 185.233.72.0/22 IP: 2a0c:d700::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:27:d3:d1:30:8c:fe:02:d1:2d:6f:59:e8:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:76:f2:62:2d:61:27:69:d0:20:f4:db:eb: 7a:40:1b:ac:80:ae:67:19:3d:08:9e:ab:d5:79:03: 2f:fc:25:b5:2c:21:42:c4:2c:57:5e:60:30:f4:6a: 95:66:a7:59:de:c2:ef:8f:aa:3b:50:74:aa:1d:08: b3:5a:7a:8c:03:f9:cd:9c:68:8e:8c:cc:23:03:3a: da:9a:57:e8:b1:bb:15:e2:4b:77:47:22:0e:ab:58: db:38:20:a9:06:7f:91:c4:d1:d9:fd:fc:83:ee:0c: 76:ff:7f:8f:ba:4a:79:99:9b:8c:a5:96:c4:da:ad: 53:3e:26:75:49:fb:98:0e:71:ff:d3:85:52:0b:27: fb:65:6b:5b:3f:46:4a:0a:c9:eb:a3:a1:0b:b5:55: 13:b2:b2:05:a7:51:59:30:11:ee:db:4d:bb:cd:60: e2:50:71:ce:dc:5d:0e:57:20:51:ca:cc:72:15:9a: f1:00:bf:91:3d:2c:5a:8c:87:7a:27:d2:0c:e6:e0: 4e:2d:1a:50:5c:e6:b0:b0:76:de:65:67:9c:5e:3b: d7:b1:8d:f5:f0:00:17:d2:43:c2:ca:49:87:d4:17: a9:3b:1f:97:a9:c1:ac:e8:a1:f7:46:a1:e4:12:ba: bc:83:30:43:06:e1:6d:29:e0:53:62:b3:a5:28:4e: b1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.72.0/22 IPv6: 2a0c:d700::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203667 Signature Algorithm: sha256WithRSAEncryption 84:04:56:db:b3:c1:37:19:d3:03:7d:79:1b:62:dd:9a:f0:69: 6b:7d:e8:61:af:0c:6e:c8:ff:10:34:f4:85:b0:38:2b:0b:15: a9:3e:f1:39:3c:b6:79:d4:d7:4c:37:67:56:6a:a1:24:63:9e: 5a:ed:2a:4f:59:8c:1d:c5:a1:74:8d:5c:ef:c7:f2:59:97:67: c6:c3:87:5d:09:05:4f:7e:db:eb:51:66:00:a8:12:b3:20:89: 67:b6:20:db:45:c7:f6:98:7c:ad:c8:af:89:45:2e:e5:06:25: 3c:2e:db:a9:67:95:5b:f4:96:d8:a0:ed:d7:4b:2e:21:8a:f4: af:e6:18:ee:f3:ca:23:82:37:8b:1b:33:7b:53:b7:15:80:3a: 3a:60:3b:66:10:28:92:00:e0:4b:c1:88:01:92:dc:db:84:78: 41:bc:23:ca:d8:e2:b2:a4:5b:6b:2d:7e:d1:f6:11:bf:e2:ee: 32:6c:b3:37:73:87:19:5b:c7:ba:20:62:90:a8:40:12:12:80: 77:5e:e7:0a:af:94:01:d8:d0:d5:ac:2d:c5:c0:3e:35:c8:e3: 91:20:9f:57:e1:b9:9b:68:fe:05:19:85:a8:6f:79:fb:44:14: 48:e2:cb:09:c6:d1:02:fb:38:b4:66:fb:a6:af:86:9f:ea:ce: dc:9a:da:7c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5ECfT0TCM/gLRLW9Z6G+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWZhYjhmM2QxZmIzZDJhMzVjNGY2N2E0OGY2ZjYwODNlYWJhNTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulB28mItYSdp0CD02+t6QBusgK5n GT0InqvVeQMv/CW1LCFCxCxXXmAw9GqVZqdZ3sLvj6o7UHSqHQizWnqMA/nNnGiO jMwjAzramlfosbsV4kt3RyIOq1jbOCCpBn+RxNHZ/fyD7gx2/3+Pukp5mZuMpZbE 2q1TPiZ1SfuYDnH/04VSCyf7ZWtbP0ZKCsnro6ELtVUTsrIFp1FZMBHu2027zWDi UHHO3F0OVyBRysxyFZrxAL+RPSxajId6J9IM5uBOLRpQXOawsHbeZWecXjvXsY31 8AAX0kPCykmH1BepOx+XqcGs6KH3RqHkErq8gzBDBuFtKeBTYrOlKE6xRwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAH6uPPR+z0qNcT2ekj29gg+q6V1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3Lzk3Zjkx Ny05M2Y4LTQwNWMtOWQ1NS1hM2MwNjFkOGJlOTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvOTdmOTE3 LTkzZjgtNDA1Yy05ZDU1LWEzYzA2MWQ4YmU5MS8xL0FmcTQ4OUg3UFNvMXhQWjZT UGIyQ0Q2cnBYVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuelIMA0EAgACMAcDBQMqDNcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbkzANBgkqhkiG9w0BAQsFAAOCAQEAhARW27PBNxnT A315G2LdmvBpa33oYa8Mbsj/EDT0hbA4KwsVqT7xOTy2edTXTDdnVmqhJGOeWu0q T1mMHcWhdI1c78fyWZdnxsOHXQkFT37b61FmAKgSsyCJZ7Yg20XH9ph8rciviUUu 5QYlPC7bqWeVW/SW2KDt10suIYr0r+YY7vPKI4I3ixsze1O3FYA6OmA7ZhAokgDg S8GIAZLc24R4QbwjytjisqRbay1+0fYRv+LuMmyzN3OHGVvHuiBikKhAEhKAd17n Cq+UAdjQ1awtxcA+NcjjkSCfV+G5m2j+BRmFqG95+0QUSOLLCcbRAvs4tGb7pq+G n+rO3JrafA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:14 2026 by rpki-client