This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDjl4BZgX27c1MlhwZys9YFMeKM.cer File: aDjl4BZgX27c1MlhwZys9YFMeKM.cer (raw, json) Hash identifier: LIy6xRZc9bvA71rDbO/7f3aX41yrYTLC0CaYrcmQyBs= Subject key identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BA833F059139C2169A93847CCA999 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62238 IP: 37.148.248.0/22 IP: 2a05:3100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a8:33:f0:59:13:9c:21:69:a9:38:47:cc:a9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6838e5e016605f6edcd4c961c19cacf5814c78a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7f:5f:5d:36:8a:2c:7b:6e:70:9d:6f:aa:99: c0:34:dc:4a:52:a6:20:b4:4c:ae:6c:76:a1:11:79: cd:e4:15:c4:b3:a4:e7:6d:57:14:2f:56:05:67:8c: 07:02:66:3c:44:c1:de:ca:ad:6d:89:b1:0f:3b:96: 5a:2c:27:06:a9:3b:58:17:59:2d:65:f3:0e:3c:90: a4:e2:cf:e5:c5:a2:6e:db:40:70:58:e3:67:18:50: 76:2d:02:20:fe:66:73:20:2e:db:73:7e:1f:f6:6a: 96:6e:c6:b4:41:e6:9c:ba:9a:47:1f:0a:38:14:9e: bb:d0:ea:fc:2d:d0:04:3c:1d:66:4d:32:6c:8d:8a: 2e:29:02:cb:86:e6:98:5a:85:65:d0:77:a9:de:54: a4:2f:76:2d:6b:6f:7c:43:a1:31:27:4a:22:c5:eb: dc:7f:f7:42:de:96:37:17:dd:05:5d:51:bd:da:1a: 46:fa:96:d3:07:e0:3b:20:a8:90:71:54:70:f9:07: 46:b4:76:a6:1d:ba:ff:13:6b:62:13:aa:38:82:c7: 32:9d:29:89:5d:61:34:7e:5e:bf:ed:9d:5a:47:18: 46:a8:35:97:63:59:cc:3e:b6:fa:2f:6d:8a:5f:c0: a0:37:27:a4:3d:e4:49:9d:44:16:0d:27:11:c9:bf: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:38:E5:E0:16:60:5F:6E:DC:D4:C9:61:C1:9C:AC:F5:81:4C:78:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77f194-ff5f-4a23-b882-f4cc25a5453f/1/aDjl4BZgX27c1MlhwZys9YFMeKM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.148.248.0/22 IPv6: 2a05:3100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62238 Signature Algorithm: sha256WithRSAEncryption 67:f4:ca:7c:0a:63:30:65:12:e0:31:4b:35:fc:1e:72:1e:7a: 67:44:11:eb:e3:0d:7d:a4:e0:39:e0:ae:82:2e:f8:a7:0f:34: ad:03:d7:f3:fd:e1:db:22:96:11:b2:11:4f:32:a1:56:80:b6: dd:da:10:b2:7a:1f:36:78:26:ca:c6:99:5a:8b:3e:6b:88:1d: ad:11:74:52:b1:6b:20:97:ea:fc:e8:ce:2c:3d:7e:84:ab:89: 9c:e7:20:f2:7f:95:bb:48:0f:d5:bb:90:7a:06:95:6d:3f:f3: 00:0b:ab:5e:fe:22:0a:34:10:88:d4:94:a2:81:d1:9b:ec:e2: a9:a2:03:02:f3:6a:d6:90:af:4a:b3:c0:50:ac:84:d5:81:30: 23:ba:f7:03:8a:69:e1:d7:11:54:cf:61:04:d2:df:c7:a8:95: bf:de:5b:2c:ef:a5:77:c3:f3:fa:b3:74:84:05:d4:5f:d5:3c: d8:ff:01:dd:60:50:78:53:52:b6:2b:cc:ec:9a:9f:1c:a1:76: d3:cd:5e:3b:e0:a0:63:dc:b0:9f:0d:32:38:c4:a8:a5:67:a8: cb:1b:e0:f3:e9:9d:8c:f0:e4:49:78:f4:e5:6c:ee:39:5c:f9: 61:92:c0:ed:70:4a:99:a3:c1:f6:ca:b5:78:e9:3d:47:76:2e: 35:bc:3c:3c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9W6gz8FkTnCFpqThHzKmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODM4ZTVlMDE2NjA1ZjZlZGNkNGM5NjFjMTljYWNmNTgxNGM3OGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H9fXTaKLHtucJ1vqpnANNxKUqYg tEyubHahEXnN5BXEs6TnbVcUL1YFZ4wHAmY8RMHeyq1tibEPO5ZaLCcGqTtYF1kt ZfMOPJCk4s/lxaJu20BwWONnGFB2LQIg/mZzIC7bc34f9mqWbsa0QeacuppHHwo4 FJ670Or8LdAEPB1mTTJsjYouKQLLhuaYWoVl0Hep3lSkL3Yta298Q6ExJ0oixevc f/dC3pY3F90FXVG92hpG+pbTB+A7IKiQcVRw+QdGtHamHbr/E2tiE6o4gscynSmJ XWE0fl6/7Z1aRxhGqDWXY1nMPrb6L22KX8CgNyekPeRJnUQWDScRyb9XlQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGg45eAWYF9u3NTJYcGcrPWBTHijMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0Lzc3ZjE5 NC1mZjVmLTRhMjMtYjg4Mi1mNGNjMjVhNTQ1M2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvNzdmMTk0 LWZmNWYtNGEyMy1iODgyLWY0Y2MyNWE1NDUzZi8xL2FEamw0QlpnWDI3YzFNbGh3 WnlzOVlGTWVLTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCJZT4MA0EAgACMAcDBQMqBTEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDzHjANBgkqhkiG9w0BAQsFAAOCAQEAZ/TKfApjMGUS 4DFLNfwech56Z0QR6+MNfaTgOeCugi74pw80rQPX8/3h2yKWEbIRTzKhVoC23doQ snofNngmysaZWos+a4gdrRF0UrFrIJfq/OjOLD1+hKuJnOcg8n+Vu0gP1buQegaV bT/zAAurXv4iCjQQiNSUooHRm+ziqaIDAvNq1pCvSrPAUKyE1YEwI7r3A4pp4dcR VM9hBNLfx6iVv95bLO+ld8Pz+rN0hAXUX9U82P8B3WBQeFNStivM7JqfHKF2081e O+CgY9ywnw0yOMSopWeoyxvg8+mdjPDkSXj05WzuOVz5YZLA7XBKmaPB9sq1eOk9 R3YuNbw8PA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:09 2026 by rpki-client