This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer File: AyTbHc8MJCnhIVFq4nkvwyU_07o.cer (raw, json) Hash identifier: zpVAbHkECKaeebdNR4/I2PXcWH3verlZ7eiJksMemrI= Subject key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC86D8CCBABC9C6E669161FBAEF3A12 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29486 AS: 39783 IP: 31.24.128.0/21 IP: 46.226.8.0/21 IP: 62.122.248.0/21 IP: 81.27.32.0/20 IP: 91.189.168.0/21 IP: 91.192.220.0/22 IP: 178.21.128.0/21 IP: 185.7.60.0/22 IP: 185.35.184.0/22 IP: 193.93.220.0/22 IP: 2a00:1c90::/32 IP: 2a02:2690::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6d:8c:cb:ab:c9:c6:e6:69:16:1f:ba:ef:3a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e8:ef:c9:d3:04:98:b8:5a:ec:0d:1e:f1:ab: 8f:ce:ba:4b:b8:0a:d1:53:26:ad:44:81:44:8b:55: da:2f:7d:ff:96:53:ec:d9:60:7c:0b:f7:6a:bf:4b: 4f:80:75:b4:5a:c8:5b:27:b5:37:aa:3c:37:2f:cf: d5:05:6b:54:b6:30:4e:a1:d7:64:33:4e:ad:87:18: d1:69:2b:48:b5:ff:c9:6f:d2:e2:fc:60:2e:8e:55: a3:86:88:53:fc:68:b6:42:e1:2c:2b:56:de:e9:28: 33:fb:ed:fa:f5:75:8a:fc:7b:b6:68:f8:b4:b2:05: 20:53:bc:9d:9d:78:80:75:4e:bb:98:05:d5:db:35: 8f:cb:73:f4:57:89:09:2c:13:46:c5:0f:f0:86:f0: 35:06:1f:53:08:9f:22:f4:a1:16:5c:f6:b2:c0:58: 95:b0:00:56:e4:0b:1c:f8:bb:33:30:8f:4b:d8:b6: 46:24:2d:dc:c2:08:1a:10:e1:ed:87:d6:27:23:61: 71:cb:d8:f6:45:d8:a7:ff:cd:75:5e:16:81:32:f4: 83:59:22:5d:22:f5:45:2b:aa:38:6c:24:8f:ec:fd: 5c:9b:6d:4e:66:3d:c8:ca:08:3f:f7:4c:9f:20:f4: 4b:58:60:e2:ed:b7:96:08:79:91:5b:87:62:fa:03: ca:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.128.0/21 46.226.8.0/21 62.122.248.0/21 81.27.32.0/20 91.189.168.0/21 91.192.220.0/22 178.21.128.0/21 185.7.60.0/22 185.35.184.0/22 193.93.220.0/22 IPv6: 2a00:1c90::/32 2a02:2690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29486 39783 Signature Algorithm: sha256WithRSAEncryption 1a:ff:f0:bd:dc:a2:21:05:3e:5d:fb:36:27:e9:c9:9f:d9:23: d2:64:9f:1c:45:f4:cd:11:c0:bd:d7:e0:a5:f3:bf:13:9b:36: f4:fb:d1:7c:ea:58:57:23:32:c6:61:34:e6:89:9d:12:c3:ef: ce:89:65:68:9a:9a:10:72:4f:bc:3d:69:b3:3f:5f:99:72:c9: 52:36:8a:a2:66:1f:ab:32:f8:54:d8:98:1c:e0:05:f5:f9:6f: 86:7f:b6:e5:ee:f6:7b:2f:ff:65:8c:f6:37:d9:c4:91:a3:fa: 93:6a:e4:ac:91:73:bc:cd:96:49:4f:65:e2:85:00:74:b9:53: 2f:ad:48:66:10:cd:b6:2a:10:a8:08:be:4a:7a:23:d4:fc:fa: 7a:11:52:cc:da:e3:73:46:8e:d1:d1:fb:7a:bd:58:8c:b5:5c: f6:bf:48:76:ff:c4:94:e7:a4:0a:59:7b:ab:16:bc:36:9b:6e: ee:94:24:3e:c3:13:dd:f0:65:21:ac:b9:b8:02:86:99:f6:af: 5c:49:7f:c9:e2:ea:ec:92:20:86:48:0a:94:ad:57:cd:72:51: 4e:a2:cf:88:ec:7a:d0:d3:0e:87:f1:64:c1:39:ec:4b:a4:84: be:89:b1:e0:cd:bb:44:ed:ef:c9:db:c7:1d:65:f6:ed:37:d5: 5b:c1:2d:3e -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt6yG2My6vJxuZpFh+67zoSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzI0ZGIxZGNmMGMyNDI5ZTEyMTUxNmFlMjc5MmZjMzI1M2ZkM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOjvydMEmLha7A0e8auPzrpLuArR UyatRIFEi1XaL33/llPs2WB8C/dqv0tPgHW0WshbJ7U3qjw3L8/VBWtUtjBOoddk M06thxjRaStItf/Jb9Li/GAujlWjhohT/Gi2QuEsK1be6Sgz++369XWK/Hu2aPi0 sgUgU7ydnXiAdU67mAXV2zWPy3P0V4kJLBNGxQ/whvA1Bh9TCJ8i9KEWXPaywFiV sABW5Asc+LszMI9L2LZGJC3cwggaEOHth9YnI2Fxy9j2Rdin/811XhaBMvSDWSJd IvVFK6o4bCSP7P1cm21OZj3Iygg/90yfIPRLWGDi7beWCHmRW4di+gPK9wIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFAMk2x3PDCQp4SFRauJ5L8MlP9O6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzkwZjk0 Mi02NTExLTQwNTQtOTRiZS00ZDJjNGRhNzIxZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvOTBmOTQy LTY1MTEtNDA1NC05NGJlLTRkMmM0ZGE3MjFkNC8xL0F5VGJIYzhNSkNuaElWRnE0 bmt2d3lVXzA3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF BwEHAQH/BFwwWjBCBAIAATA8AwQDHxiAAwQDLuIIAwQDPnr4AwQEURsgAwQDW72o AwQCW8DcAwQDshWAAwQCuQc8AwQCuSO4AwQCwV3cMBQEAgACMA4DBQAqAByQAwUA KgImkDAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJzLgIDAJtnMA0GCSqGSIb3DQEB CwUAA4IBAQAa//C93KIhBT5d+zYn6cmf2SPSZJ8cRfTNEcC91+Cl878Tmzb0+9F8 6lhXIzLGYTTmiZ0Sw+/OiWVompoQck+8PWmzP1+ZcslSNoqiZh+rMvhU2Jgc4AX1 +W+Gf7bl7vZ7L/9ljPY32cSRo/qTauSskXO8zZZJT2XihQB0uVMvrUhmEM22KhCo CL5KeiPU/Pp6EVLM2uNzRo7R0ft6vViMtVz2v0h2/8SU56QKWXurFrw2m27ulCQ+ wxPd8GUhrLm4AoaZ9q9cSX/J4urskiCGSAqUrVfNclFOos+I7HrQ0w6H8WTBOexL pIS+ibHgzbtE7e/J28cdZfbtN9VbwS0+ -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:57 2026 by rpki-client