This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer (raw, json) Hash identifier: XsoF1lDzdNAuMGJ7LK37bA+YbEkTK8DrFbpG4NnqTBI= Subject key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B02026AC3ED019BDB222E70FA49E40569 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 07:27:51 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 197631 IP: 93.187.48.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:02:6a:c3:ed:01:9b:db:22:2e:70:fa:49:e4:05:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 07:27:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:34:e8:32:1c:bb:61:c0:a7:54:fe:22:16: f1:a4:7f:bb:d8:68:e6:21:29:b0:fc:20:e2:6a:35: ee:b9:52:17:b9:69:ec:ea:9e:e2:e8:1a:5a:46:d9: 0d:00:54:9c:a5:41:1c:d5:0c:09:8c:0f:cd:73:cb: 54:11:3b:b9:c0:e2:af:40:6e:0e:f8:4d:8a:e3:78: cd:e0:a4:42:ac:f6:fc:01:ea:45:0d:55:9e:97:0e: a9:0e:b4:af:2a:a1:5b:26:e5:34:6b:73:47:b4:a4: d6:07:a5:80:37:23:e9:cc:e7:30:92:8a:75:55:00: 16:ff:22:dd:3e:09:e8:08:23:c6:74:82:34:f8:21: 92:29:24:25:24:c2:97:0b:3a:b5:e4:03:8b:b0:5f: bb:9e:1c:4a:4d:f7:6f:11:11:02:51:40:fd:a3:fe: 3e:27:46:40:ad:a7:8b:c7:6d:a9:ae:97:65:d2:59: 5d:2f:de:cb:4b:fa:de:23:f1:0d:be:f0:7b:c7:8b: 43:f5:48:78:a8:d3:f8:c6:08:b6:62:38:ae:1d:08: e1:ca:52:9b:71:d6:36:9b:aa:08:f8:8c:fd:d4:90: 80:d7:6d:3d:5c:cf:e9:92:e6:31:c9:bd:35:83:f0: 21:ef:6c:af:02:52:0b:e0:cd:e1:22:6a:84:4f:6d: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197631 Signature Algorithm: sha256WithRSAEncryption 56:0b:43:e9:91:31:9c:ef:bd:4f:74:7c:ed:18:e4:69:93:a1: a5:00:89:5f:da:06:d0:e1:cd:0f:8f:b2:35:41:c1:9b:bf:30: df:c4:a4:1d:20:0b:01:fa:09:cb:13:0c:df:8e:07:aa:82:a3: dc:fc:1c:19:b3:14:39:94:e9:2d:ab:5a:7f:67:d0:2a:34:08: 04:ad:52:1b:67:8b:84:79:e1:2b:4c:1e:17:5b:c1:89:21:fe: bf:ac:d5:c4:46:b7:bf:d7:80:c8:99:73:2a:92:fd:f3:14:e8: 5f:e6:4e:bd:0c:8b:17:36:f4:0e:fe:77:97:49:52:af:98:14: 1d:02:0f:cb:2f:95:32:43:6d:49:2e:a3:87:ae:0f:d5:90:7e: 18:6a:3d:d5:9b:32:1b:61:43:e5:e4:41:c6:65:a7:ac:39:b1: 28:50:14:32:3c:7b:8a:68:33:67:7a:9a:30:52:2a:f8:f9:23: bf:16:74:76:7c:cc:42:58:1d:bc:1e:4a:96:94:76:0d:5e:33: 23:4e:2c:9b:97:bc:71:45:68:47:27:f1:1d:3d:7d:80:47:46: 1a:f7:6c:93:0c:29:d1:98:0c:0e:e8:04:dc:83:bf:66:db:13: a0:30:cd:bf:9c:37:d7:22:f6:6d:8a:42:c4:90:c7:1c:9c:fe: e3:b8:9a:c8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZsCAmrD7QGb2yIucPpJ5AVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MDcyNzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmFmM2I2MzUzNTRiOTc1N2I5ZjJkNjhlYTVkNThjNTA3NDJhYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWM06DIcu2HAp1T+IhbxpH+72Gjm ISmw/CDiajXuuVIXuWns6p7i6BpaRtkNAFScpUEc1QwJjA/Nc8tUETu5wOKvQG4O +E2K43jN4KRCrPb8AepFDVWelw6pDrSvKqFbJuU0a3NHtKTWB6WANyPpzOcwkop1 VQAW/yLdPgnoCCPGdII0+CGSKSQlJMKXCzq15AOLsF+7nhxKTfdvERECUUD9o/4+ J0ZAraeLx22prpdl0lldL97LS/reI/ENvvB7x4tD9Uh4qNP4xgi2YjiuHQjhylKb cdY2m6oI+Iz91JCA1209XM/pkuYxyb01g/Ah72yvAlIL4M3hImqET2145wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAKvO2NTVLl1e58taOpdWMUHQqqwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzQzZDRj YS04MmNiLTQxNGEtYjM5ZS04NmY4OGNlNDQ3OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNDNkNGNh LTgyY2ItNDE0YS1iMzllLTg2Zjg4Y2U0NDc5My8xL0FxODdZMU5VdVhWN255MW82 bDFZeFFkQ3FyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXbswMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMD/zANBgkqhkiG9w0BAQsFAAOCAQEAVgtD6ZExnO+9T3R87RjkaZOhpQCJX9oG 0OHND4+yNUHBm78w38SkHSALAfoJyxMM344HqoKj3PwcGbMUOZTpLataf2fQKjQI BK1SG2eLhHnhK0weF1vBiSH+v6zVxEa3v9eAyJlzKpL98xToX+ZOvQyLFzb0Dv53 l0lSr5gUHQIPyy+VMkNtSS6jh64P1ZB+GGo91ZsyG2FD5eRBxmWnrDmxKFAUMjx7 imgzZ3qaMFIq+PkjvxZ0dnzMQlgdvB5KlpR2DV4zI04sm5e8cUVoRyfxHT19gEdG Gvdskwwp0ZgMDugE3IO/ZtsToDDNv5w31yL2bYpCxJDHHJz+47iayA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:04 2025 by rpki-client