This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer File: aErIoCEnBoJ2XSPvAzjzXHht2zU.cer (raw, json) Hash identifier: kDyFdj3B5wi7IEK7jVvyaTI4QegOTWbaM6d587B9C3w= Subject key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79112B3D85C5095F4780D10270846E5A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58207 IP: 31.129.124.0/24 IP: 195.16.93.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2b:3d:85:c5:09:5f:47:80:d1:02:70:84:6e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=684ac8a021270682765d23ef0338f35c786ddb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8d:59:53:d4:1c:64:ba:b6:5d:09:c0:75:65: aa:41:66:66:4f:63:94:7b:8d:28:1b:3a:03:84:22: 0c:ce:4c:3e:c2:87:06:e7:5e:3d:89:3e:2a:13:1c: f7:99:5f:77:01:43:78:2b:eb:5a:87:0a:6d:db:63: b1:ac:c3:91:3e:1a:22:e1:16:a8:8d:00:d4:a8:a3: bf:bf:69:2f:a9:80:c6:2f:4b:2d:b5:9b:7b:11:54: 46:6d:47:53:ce:c5:b2:fa:fd:d1:e5:cb:fa:70:32: 78:cb:4f:55:7c:92:dc:da:b0:cc:77:cd:af:bb:54: dd:cd:24:30:db:72:0f:07:2a:c1:bc:cf:5a:f4:08: 4e:ce:5b:31:64:3f:fb:ee:53:d2:5d:ed:aa:1d:8c: 02:28:9e:39:d2:b2:5b:5c:2f:d7:65:c1:bb:f5:d0: 90:82:1b:8f:db:13:46:73:10:ed:80:3e:71:76:6c: aa:ef:ae:5d:be:e8:b3:be:c7:a8:ae:24:3e:46:0c: b3:67:10:7c:2d:dd:e2:95:29:90:ab:1b:c5:df:4a: ff:21:f7:f2:84:d4:44:b6:9c:cf:2c:97:8b:08:cc: 62:93:39:3a:46:ae:86:47:77:da:78:9f:84:c1:0d: 2e:47:b5:3c:35:9b:0d:ee:79:f3:66:c1:7d:e3:43: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.124.0/24 195.16.93.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58207 Signature Algorithm: sha256WithRSAEncryption 51:59:e5:82:9a:96:b7:94:0e:95:64:fa:1a:ac:a4:ab:1b:d3: 1f:b4:dd:0a:61:dd:f7:bd:81:30:85:dc:fd:88:9f:f7:61:23: 98:c4:06:26:af:8d:04:59:1d:26:9a:70:c3:71:29:0e:3d:e7: 56:c3:d3:ef:a0:eb:84:0d:35:ff:d7:95:fd:aa:2d:01:d0:b1: 39:cd:5d:06:35:df:19:b1:46:99:b1:b7:e7:af:49:52:8b:0a: f1:d9:a7:33:2c:02:5a:af:30:1a:c4:f2:1f:da:60:11:c9:32: d4:93:87:9b:bc:b1:38:ed:7d:7e:49:67:90:7c:0a:5b:26:1a: e0:93:db:59:48:ef:9f:af:6a:39:1a:63:44:e9:27:69:f6:7e: f8:43:08:96:2d:fe:c5:a4:4c:ab:34:05:45:ce:4d:5e:0a:ae: 0e:19:dc:48:49:7f:85:18:fa:01:bd:0a:1f:5c:a3:db:20:2b: ac:fb:e7:d7:dc:a1:47:f2:d8:af:9a:3e:de:12:8c:82:e7:c4: 6c:f4:9a:a0:3f:b0:f5:27:1f:f7:59:20:a1:5a:62:e6:d2:05: 07:3a:83:86:33:5c:f0:94:db:b5:42:e4:42:04:0b:44:a3:e4: 0e:06:9c:a7:7f:47:35:69:8a:2f:c3:73:50:47:0d:f8:74:91: 3a:44:15:ce -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt5ESs9hcUJX0eA0QJwhG5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODRhYzhhMDIxMjcwNjgyNzY1ZDIzZWYwMzM4ZjM1Yzc4NmRkYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo1ZU9QcZLq2XQnAdWWqQWZmT2OU e40oGzoDhCIMzkw+wocG5149iT4qExz3mV93AUN4K+tahwpt22OxrMORPhoi4Rao jQDUqKO/v2kvqYDGL0sttZt7EVRGbUdTzsWy+v3R5cv6cDJ4y09VfJLc2rDMd82v u1TdzSQw23IPByrBvM9a9AhOzlsxZD/77lPSXe2qHYwCKJ450rJbXC/XZcG79dCQ ghuP2xNGcxDtgD5xdmyq765dvuizvseoriQ+RgyzZxB8Ld3ilSmQqxvF30r/Iffy hNREtpzPLJeLCMxikzk6Rq6GR3faeJ+EwQ0uR7U8NZsN7nnzZsF940NStQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFGhKyKAhJwaCdl0j7wM481x4bds1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3L2QzMGI1 ZC03ZjNiLTRhNWEtOTg5Ny0wYzAxMWM5YzkyN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvZDMwYjVk LTdmM2ItNGE1YS05ODk3LTBjMDExYzljOTI3ZC8xL2FFcklvQ0VuQm9KMlhTUHZB emp6WEhodDJ6VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAH4F8AwQAwxBdMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDjXzANBgkqhkiG9w0BAQsFAAOCAQEAUVnlgpqWt5QOlWT6GqykqxvT H7TdCmHd972BMIXc/Yif92EjmMQGJq+NBFkdJppww3EpDj3nVsPT76DrhA01/9eV /aotAdCxOc1dBjXfGbFGmbG3569JUosK8dmnMywCWq8wGsTyH9pgEcky1JOHm7yx OO19fklnkHwKWyYa4JPbWUjvn69qORpjROknafZ++EMIli3+xaRMqzQFRc5NXgqu DhncSEl/hRj6Ab0KH1yj2yArrPvn19yhR/LYr5o+3hKMgufEbPSaoD+w9Scf91kg oVpi5tIFBzqDhjNc8JTbtULkQgQLRKPkDgacp39HNWmKL8NzUEcN+HSROkQVzg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:04 2026 by rpki-client