This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CaaG43DW0GCBGe6wBsiq2qsHjSI.cer File: CaaG43DW0GCBGe6wBsiq2qsHjSI.cer (raw, json) Hash identifier: kn2TqGl7oE5tDiBTa/scPAZNWG2XqMGLePwbhqBjcU4= Subject key identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758CCE0256E4A3CDC7002A02727EB11 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39224 AS: 48881 AS: 203809 IP: 185.101.168.0/22 IP: 185.104.32.0/21 IP: 185.104.48.0/21 IP: 185.104.180.0/22 IP: 185.253.252.0/22 IP: 193.106.149.0/24 IP: 2a05:fec0::/29 IP: 2a06:1fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:cc:e0:25:6e:4a:3c:dc:70:02:a0:27:27:eb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a686e370d6d0608119eeb006c8aadaab078d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:83:f1:fe:3e:f2:61:7a:0a:32:c6:b4:d0: 4b:bf:8b:43:6a:26:5e:f7:ca:1f:80:37:f4:fd:cf: 22:8f:93:56:d7:93:6e:ac:ea:a7:c5:10:d0:f7:e7: 76:0c:b4:4f:99:95:f4:2d:7f:bd:16:9a:86:ac:7c: 91:d7:c1:7c:69:35:b4:90:45:09:65:b7:ab:1c:bf: e0:52:24:28:d6:73:c5:a2:7a:ef:4f:8b:69:45:14: 38:cb:d9:de:78:5f:b8:d6:7f:94:82:46:00:ad:f4: e8:14:f7:f3:42:ff:81:26:cc:b7:a5:06:aa:f6:6a: b5:63:5c:0c:ed:3e:fa:c6:1c:54:28:f1:96:97:15: b6:27:c5:39:b6:4b:fd:a4:36:f9:1b:e5:a5:b3:52: e8:84:0d:80:2f:b9:0e:38:98:fb:f5:87:89:5d:8b: cf:0f:24:2c:17:dc:f0:f1:bc:35:cf:83:8d:06:f6: d4:19:84:a1:1d:b8:ef:5b:ec:80:8b:8c:27:33:5a: f5:1a:72:76:b2:91:e2:ba:51:f9:93:91:9c:49:ae: 97:b0:13:13:31:e2:f5:2c:fc:89:df:f0:ef:98:1a: 63:82:d0:e1:2c:81:72:b5:5f:c5:5e:1f:d1:25:41: 70:44:0d:2d:50:f0:6b:00:96:9c:99:9f:78:6a:b9: 11:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A6:86:E3:70:D6:D0:60:81:19:EE:B0:06:C8:AA:DA:AB:07:8D:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/d429b9-385e-430f-b2c4-81768c60ee08/1/CaaG43DW0GCBGe6wBsiq2qsHjSI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.168.0/22 185.104.32.0/21 185.104.48.0/21 185.104.180.0/22 185.253.252.0/22 193.106.149.0/24 IPv6: 2a05:fec0::/29 2a06:1fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39224 48881 203809 Signature Algorithm: sha256WithRSAEncryption 24:9c:41:08:30:40:9c:e6:ce:6b:0d:f9:61:73:62:d6:e9:17: 83:fd:20:70:cb:ae:8d:47:2b:7e:4c:92:20:79:35:c8:37:0a: fb:65:3a:fc:24:f5:60:af:1a:31:e5:28:8e:ca:df:78:83:b6: e4:27:52:59:0e:88:6b:4f:3c:56:95:7e:41:a2:db:20:4d:c2: 86:da:e5:9c:56:82:48:e0:83:16:2a:a4:c9:12:2b:fd:55:a3: ba:1f:39:3a:b5:b7:84:82:36:24:ba:a6:7b:2b:6f:d8:a7:da: 0d:76:57:6b:48:a5:56:23:3b:56:0c:f5:5d:66:02:2f:a4:60: 3e:70:fe:99:7e:f1:46:48:64:dc:4f:72:bd:61:04:0a:03:13: 74:b2:7d:ce:f6:34:03:09:07:a6:b4:3c:c2:4d:f0:43:3a:d7: 09:3b:fc:a5:4f:f6:c7:0a:7f:1e:3c:5f:74:e5:21:af:b7:df: 02:89:fd:7e:8c:7c:e2:b4:22:88:89:66:c3:9b:9b:9f:7a:de: 6a:3f:0b:89:79:e9:e8:ff:c8:c9:ca:cc:a4:4a:4e:0c:ec:af: c6:c3:d1:c2:c4:58:6d:82:fd:7d:a2:d3:48:cf:79:01:7d:d0: cd:16:77:2c:22:6c:07:c1:b5:8b:d3:0d:f1:b0:55:0b:d1:a4: 3f:ba:85:be -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZt3WMzgJW5KPNxwAqAnJ+sRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWE2ODZlMzcwZDZkMDYwODExOWVlYjAwNmM4YWFkYWFiMDc4ZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpiD8f4+8mF6CjLGtNBLv4tDaiZe 98ofgDf0/c8ij5NW15NurOqnxRDQ9+d2DLRPmZX0LX+9FpqGrHyR18F8aTW0kEUJ ZberHL/gUiQo1nPFonrvT4tpRRQ4y9neeF+41n+UgkYArfToFPfzQv+BJsy3pQaq 9mq1Y1wM7T76xhxUKPGWlxW2J8U5tkv9pDb5G+Wls1LohA2AL7kOOJj79YeJXYvP DyQsF9zw8bw1z4ONBvbUGYShHbjvW+yAi4wnM1r1GnJ2spHiulH5k5GcSa6XsBMT MeL1LPyJ3/DvmBpjgtDhLIFytV/FXh/RJUFwRA0tUPBrAJacmZ94arkRvwIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFAmmhuNw1tBggRnusAbIqtqrB40iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzczL2Q0Mjli OS0zODVlLTQzMGYtYjJjNC04MTc2OGM2MGVlMDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMvZDQyOWI5 LTM4NWUtNDMwZi1iMmM0LTgxNzY4YzYwZWUwOC8xL0NhYUc0M0RXMEdDQkdlNndC c2lxMnFzSGpTSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQCuWWoAwQDuWggAwQDuWgwAwQCuWi0AwQCuf38 AwQAwWqVMBQEAgACMA4DBQMqBf7AAwUDKgYfwDAkBggrBgEFBQcBCAEB/wQVMBOg ETAPAgMAmTgCAwC+8QIDAxwhMA0GCSqGSIb3DQEBCwUAA4IBAQAknEEIMECc5s5r Dflhc2LW6ReD/SBwy66NRyt+TJIgeTXINwr7ZTr8JPVgrxox5SiOyt94g7bkJ1JZ DohrTzxWlX5BotsgTcKG2uWcVoJI4IMWKqTJEiv9VaO6Hzk6tbeEgjYkuqZ7K2/Y p9oNdldrSKVWIztWDPVdZgIvpGA+cP6ZfvFGSGTcT3K9YQQKAxN0sn3O9jQDCQem tDzCTfBDOtcJO/ylT/bHCn8ePF905SGvt98Cif1+jHzitCKIiWbDm5ufet5qPwuJ eeno/8jJysykSk4M7K/Gw9HCxFhtgv19otNIz3kBfdDNFncsImwHwbWL0w3xsFUL 0aQ/uoW+ -----END CERTIFICATE-----Generated at Sun Jan 18 09:48:34 2026 by rpki-client