This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer File: aGWWsztIwpNd0Sn6xuYdvACBk_8.cer (raw, json) Hash identifier: 9bbJPOGL/gIIDFPLMnvBjU4KGRIz4Ho8Dy1UxMCJteg= Subject key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B361D118F29A10038EAE8516B6BBD5D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47174 IP: 195.216.228.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1d:11:8f:29:a1:00:38:ea:e8:51:6b:6b:bd:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=686596b33b48c2935dd129fac6e61dbc008193ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:b9:b4:36:aa:e2:f2:64:aa:e1:68:50:17: ad:44:92:9d:72:8f:62:63:c3:39:2b:7f:35:f3:b6: 82:07:f6:a6:19:64:af:a2:39:00:b9:59:af:bc:e0: ad:4a:00:91:d6:b8:d3:7d:8f:32:b5:f7:c8:50:7b: c3:3a:e8:ce:b3:27:27:39:3e:e1:94:a2:2f:3c:00: 5a:58:2d:31:34:e9:ca:db:74:b8:fa:52:ba:53:a1: ed:52:e7:87:bc:8c:08:04:c8:1e:11:54:bf:fe:69: 1a:d5:cf:43:7b:53:39:8f:a2:2e:71:a7:e1:36:81: 0b:18:0d:ce:e4:73:8f:af:3a:03:9d:cf:6d:14:25: af:ad:e7:21:26:89:2d:4c:2f:c5:9c:f2:b4:21:9a: bb:be:70:14:c5:8d:bf:fa:5e:4c:c5:a5:02:c7:97: b5:81:f0:c7:bf:d6:b8:72:38:20:4e:b8:0e:21:e7: c6:4e:25:62:e7:91:43:37:9b:eb:ab:39:93:dd:c5: e9:a4:00:ac:36:c1:76:79:96:bb:07:6b:5a:4c:78: 24:a8:33:2f:be:09:44:01:64:31:15:06:10:f4:53: 04:ed:07:2a:5e:bb:b9:c8:7b:e8:04:16:42:14:66: b7:8b:bd:3e:92:3b:dc:a9:82:71:ef:bf:02:c2:79: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.228.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47174 Signature Algorithm: sha256WithRSAEncryption 4a:30:73:dc:1a:3d:e7:93:db:c3:38:92:a8:32:ff:63:19:36: 5d:6f:ce:05:b9:d1:4b:5b:ec:99:e7:43:08:66:f0:55:52:4b: 1c:f0:c6:c1:62:de:82:80:07:d8:ed:19:65:82:2f:49:60:89: 9d:90:29:22:93:3f:1c:b6:43:47:fa:10:ac:69:a9:29:98:05: 49:05:24:b9:96:b9:ef:05:3a:96:59:32:5e:dc:2c:0a:f0:24: 1b:42:23:7b:af:95:e5:48:96:59:d5:77:84:ea:1b:0d:43:15: ed:1a:5d:21:78:33:f9:0c:73:53:36:4d:2e:7d:bf:72:37:7e: 27:af:9a:8e:ea:c9:cf:de:ac:cf:61:3e:ae:98:19:b5:14:a8: cc:6a:d5:03:21:53:7f:18:d6:4e:00:9d:e7:f0:c8:2f:b6:6b: 4c:6f:63:c9:2b:e1:b7:8f:fe:a3:a7:31:c0:a9:91:45:4f:0b: 4b:cc:2f:c4:69:54:92:cc:f0:69:7d:8c:ea:72:66:86:b4:68: b0:f9:89:b0:26:70:7e:31:79:17:c5:3d:f8:6c:0e:e0:9b:83: 71:55:ed:97:fa:59:7f:f5:3d:0e:74:dc:34:86:5d:07:ec:54: 24:d4:d1:27:92:ec:4d:c5:c1:3e:fa:84:8d:94:d7:af:9e:22: a1:d4:e2:9a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7Nh0RjymhADjq6FFra71dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODY1OTZiMzNiNDhjMjkzNWRkMTI5ZmFjNmU2MWRiYzAwODE5M2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w+5tDaq4vJkquFoUBetRJKdco9i Y8M5K38187aCB/amGWSvojkAuVmvvOCtSgCR1rjTfY8ytffIUHvDOujOsycnOT7h lKIvPABaWC0xNOnK23S4+lK6U6HtUueHvIwIBMgeEVS//mka1c9De1M5j6Iucafh NoELGA3O5HOPrzoDnc9tFCWvrechJoktTC/FnPK0IZq7vnAUxY2/+l5MxaUCx5e1 gfDHv9a4cjggTrgOIefGTiVi55FDN5vrqzmT3cXppACsNsF2eZa7B2taTHgkqDMv vglEAWQxFQYQ9FME7QcqXru5yHvoBBZCFGa3i70+kjvcqYJx778CwnkxOQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGhllrM7SMKTXdEp+sbmHbwAgZP/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5L2MwNjlm MS05ZjgyLTRkNWEtODYzMS00NTFjZGEwNzdkODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvYzA2OWYx LTlmODItNGQ1YS04NjMxLTQ1MWNkYTA3N2Q4Ni8xL2FHV1dzenRJd3BOZDBTbjZ4 dVlkdkFDQmtfOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAw9jkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC4RjANBgkqhkiG9w0BAQsFAAOCAQEASjBz3Bo955PbwziSqDL/Yxk2XW/OBbnR S1vsmedDCGbwVVJLHPDGwWLegoAH2O0ZZYIvSWCJnZApIpM/HLZDR/oQrGmpKZgF SQUkuZa57wU6llkyXtwsCvAkG0Ije6+V5UiWWdV3hOobDUMV7RpdIXgz+QxzUzZN Ln2/cjd+J6+ajurJz96sz2E+rpgZtRSozGrVAyFTfxjWTgCd5/DIL7ZrTG9jySvh t4/+o6cxwKmRRU8LS8wvxGlUkszwaX2M6nJmhrRosPmJsCZwfjF5F8U9+GwO4JuD cVXtl/pZf/U9DnTcNIZdB+xUJNTRJ5LsTcXBPvqEjZTXr54iodTimg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:56 2026 by rpki-client