This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer File: AiyP_FBgnsDYtKcoBciZCmSq5x4.cer (raw, json) Hash identifier: Wv3s5jmxABY3LYuAy++NtNQlMJVdwOuBtaq2AUdPuqY= Subject key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2DAFF7F37E15AB3088B62FF7C4A75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56695 IP: 195.128.128.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:da:ff:7f:37:e1:5a:b3:08:8b:62:ff:7c:4a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:04:35:0c:bf:8d:17:bc:ce:ba:ca:55:35: a1:4d:8e:51:83:15:84:3e:d4:e8:8e:18:eb:45:bf: 5c:06:70:7f:1d:49:61:40:6f:92:2f:30:7a:0d:ea: eb:9c:52:eb:ce:88:d5:b0:53:17:42:8d:14:03:40: eb:99:62:55:64:d9:56:16:ef:b5:f8:8c:9f:f2:29: ac:ca:29:9e:c9:8c:e8:14:a4:43:85:f2:86:a1:05: 20:c8:72:32:a8:29:18:4e:36:af:83:a7:23:48:06: 63:24:a0:d9:a5:83:17:51:75:88:0d:50:43:3f:51: e2:e4:05:ab:ac:d2:56:6e:fa:86:e7:e5:82:6f:7a: b8:97:f2:d4:ba:cf:7d:25:57:20:a2:23:00:08:a3: dc:b0:fc:16:f3:68:a2:97:dc:bc:f6:b8:31:49:b7: 9a:cd:c0:5f:fb:a8:f0:50:6f:38:e5:93:72:64:5c: d5:50:60:11:51:ff:59:34:ce:c2:79:b2:aa:94:ce: 59:d3:d1:d2:13:06:4e:1f:5f:49:aa:97:57:b2:3c: 36:7d:f0:36:ab:8d:52:cc:ad:be:dd:a9:da:3e:da: 93:e1:af:a7:0d:da:ab:1c:9a:21:b5:54:d3:4c:e6: d6:cf:34:79:8e:4f:1c:95:1e:bf:33:28:a0:fe:65: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.128.128.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56695 Signature Algorithm: sha256WithRSAEncryption 13:3c:91:ec:2a:c6:71:a3:a8:7f:b9:49:87:82:88:b0:74:17: a1:16:c7:79:cb:a8:b1:3a:9c:96:35:bd:77:16:1a:ed:c6:fc: 30:fc:5d:48:c3:6f:ca:e1:58:e9:f4:4d:47:42:c7:9d:5c:d7: b4:bf:63:0d:c2:64:c7:a9:07:7b:06:1d:47:27:8f:b8:c6:5a: a8:b6:5c:31:3c:07:c5:c9:42:fa:03:54:44:04:8d:15:7b:db: 81:99:a2:e8:e9:2f:03:6a:a7:61:a8:f4:64:82:88:94:74:72: f8:77:61:4a:ba:c3:c9:f8:c6:09:b5:96:9d:b3:a7:5f:06:30: 2b:de:df:c6:65:94:10:97:ba:21:46:92:cd:ac:ad:e4:ee:c2: 12:00:12:43:48:be:01:e7:e4:e6:62:cf:8b:5a:69:98:55:96: ee:fa:96:ce:2a:2a:3c:c8:5c:41:11:92:db:6d:24:10:f4:4e: 55:4a:35:d2:23:d8:48:a7:d4:3c:55:82:ea:df:23:26:0d:88: 52:b7:09:21:cc:f4:bc:e0:10:54:ff:a2:48:33:90:5e:8a:63: d9:3a:3f:88:a9:c9:6f:d3:39:23:bf:22:1d:3a:8b:2c:05:85: 32:d2:76:fb:74:fa:f8:09:53:17:a2:1d:02:7b:93:65:4d:64: a2:d4:a8:8d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4otr/fzfhWrMIi2L/fEp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjJjOGZmYzUwNjA5ZWMwZDhiNGE3MjgwNWM4OTkwYTY0YWFlNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QkENQy/jRe8zrrKVTWhTY5RgxWE PtTojhjrRb9cBnB/HUlhQG+SLzB6DerrnFLrzojVsFMXQo0UA0DrmWJVZNlWFu+1 +Iyf8imsyimeyYzoFKRDhfKGoQUgyHIyqCkYTjavg6cjSAZjJKDZpYMXUXWIDVBD P1Hi5AWrrNJWbvqG5+WCb3q4l/LUus99JVcgoiMACKPcsPwW82iil9y89rgxSbea zcBf+6jwUG845ZNyZFzVUGARUf9ZNM7CebKqlM5Z09HSEwZOH19JqpdXsjw2ffA2 q41SzK2+3anaPtqT4a+nDdqrHJohtVTTTObWzzR5jk8clR6/Myig/mU1QwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAIsj/xQYJ7A2LSnKAXImQpkquceMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczLzZmOGE3 Ny1iMjZjLTRkMjQtYmI0NC0xNWIwYzM0NDk5MDcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvNmY4YTc3 LWIyNmMtNGQyNC1iYjQ0LTE1YjBjMzQ0OTkwNy8xL0FpeVBfRkJnbnNEWXRLY29C Y2laQ21TcTV4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw4CAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDddzANBgkqhkiG9w0BAQsFAAOCAQEAEzyR7CrGcaOof7lJh4KIsHQXoRbHecuo sTqcljW9dxYa7cb8MPxdSMNvyuFY6fRNR0LHnVzXtL9jDcJkx6kHewYdRyePuMZa qLZcMTwHxclC+gNURASNFXvbgZmi6OkvA2qnYaj0ZIKIlHRy+HdhSrrDyfjGCbWW nbOnXwYwK97fxmWUEJe6IUaSzayt5O7CEgASQ0i+Aefk5mLPi1ppmFWW7vqWzioq PMhcQRGS220kEPROVUo10iPYSKfUPFWC6t8jJg2IUrcJIcz0vOAQVP+iSDOQXopj 2To/iKnJb9M5I78iHTqLLAWFMtJ2+3T6+AlTF6IdAnuTZU1kotSojQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:56 2026 by rpki-client