This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer File: aH2bViukcmGPk5jiZcoOcQj2h6M.cer (raw, json) Hash identifier: 7nyQhDjTRyQ1wFjQx9tGea61h7rWUwAaUAIB4N0T3+I= Subject key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15963883DE8BC0829344D738678B62 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.55.138.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:96:38:83:de:8b:c0:82:93:44:d7:38:67:8b:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=687d9b562ba472618f9398e265ca0e7108f687a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ae:19:00:fb:a8:0b:9d:91:ec:ed:6e:3d:fe: b4:c3:54:f1:fc:2a:c6:fd:78:a1:d8:25:08:fc:8a: 36:3f:07:57:08:46:4f:57:8b:43:1a:c2:e1:92:5e: 33:5c:8f:c8:07:89:ff:d5:3c:e2:d8:00:58:c6:9d: 03:7f:35:7e:71:88:9c:fb:53:b8:7e:2f:34:9f:60: ad:37:1c:5e:76:0f:e7:ae:72:7c:db:c1:eb:fc:25: 85:a0:30:1f:2d:82:64:5d:d3:22:5a:29:ed:db:93: 61:82:93:f9:0e:87:6b:cc:16:95:10:cd:25:3a:11: 26:79:9c:65:aa:5c:82:8e:79:7c:51:90:aa:24:e8: 03:10:cb:a6:31:d7:4b:cb:36:46:8a:9c:04:4b:3f: 03:04:a5:d8:2b:c9:8c:15:0b:2b:98:0a:3a:06:bc: bf:b6:be:d2:64:66:64:91:50:48:85:f4:60:f5:3d: 41:ec:41:a0:c4:93:e1:e9:33:b1:a1:a8:25:4d:6e: e5:3d:2d:e1:fa:2f:08:78:c8:b1:30:2b:85:69:1b: 36:eb:4d:73:77:ce:39:f3:f9:c9:b5:cf:f0:02:84: 04:44:f5:f9:c4:41:ab:b3:12:1d:f4:12:3d:51:f3: b6:e7:23:12:d0:ae:3e:da:07:98:ed:a8:20:16:6c: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.138.0/24 Signature Algorithm: sha256WithRSAEncryption 92:86:89:f6:9c:b1:b3:4b:e2:25:4e:85:ca:41:0a:f9:0c:32: f9:30:7d:80:2b:00:f5:6f:cc:23:06:54:ec:f6:23:12:c5:70: a5:f7:6e:1e:7b:a9:a9:08:43:07:b1:9e:87:d4:61:88:c2:ce: 16:f0:fe:98:cd:55:f0:be:2c:12:e4:b1:16:2d:e4:1e:bc:83: 36:fe:b6:04:1e:7b:7a:21:ea:a3:ec:db:c3:09:c9:91:95:80: af:a5:a8:da:a7:7d:02:20:84:89:83:cf:46:82:b2:8d:b6:da: fb:61:80:e5:32:d1:b5:45:f6:37:94:a3:ee:19:0e:60:da:82: b0:0c:c0:a7:18:d6:3d:e1:6d:dc:f1:b7:3c:fd:f1:07:f6:e2: 4e:15:59:7c:3b:61:92:7c:3d:a7:ef:25:1c:a1:19:7e:db:eb: 7f:15:57:8e:9f:a8:14:20:3d:db:d0:ac:4f:fe:6d:a9:1b:72: e6:e9:b8:01:55:e3:38:5a:f3:0c:53:01:c8:5a:33:27:a0:e7: 47:1e:71:b2:63:ad:94:f0:7e:c8:29:b9:71:b4:bf:a8:0a:5c: 7a:fb:58:e4:95:fd:01:6c:5c:c2:a1:de:85:4b:c3:d9:f9:47: ed:13:bb:25:1f:3b:cf:7c:11:45:f8:aa:61:50:70:d1:98:3d: 51:b7:b1:a0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FZY4g96LwIKTRNc4Z4tiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODdkOWI1NjJiYTQ3MjYxOGY5Mzk4ZTI2NWNhMGU3MTA4ZjY4N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq4ZAPuoC52R7O1uPf60w1Tx/CrG /Xih2CUI/Io2PwdXCEZPV4tDGsLhkl4zXI/IB4n/1Tzi2ABYxp0DfzV+cYic+1O4 fi80n2CtNxxedg/nrnJ828Hr/CWFoDAfLYJkXdMiWint25NhgpP5DodrzBaVEM0l OhEmeZxlqlyCjnl8UZCqJOgDEMumMddLyzZGipwESz8DBKXYK8mMFQsrmAo6Bry/ tr7SZGZkkVBIhfRg9T1B7EGgxJPh6TOxoaglTW7lPS3h+i8IeMixMCuFaRs2601z d8458/nJtc/wAoQERPX5xEGrsxId9BI9UfO25yMS0K4+2geY7aggFmx8RQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGh9m1YrpHJhj5OY4mXKDnEI9oejMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0L2I4OWMx Zi04ZGNiLTQzOGItOGFmZC02MDVkMTM1MTM2ZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjQvYjg5YzFm LThkY2ItNDM4Yi04YWZkLTYwNWQxMzUxMzZmNy8xL2FIMmJWaXVrY21HUGs1amla Y29PY1FqMmg2TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwjeKMA0GCSqGSIb3DQEBCwUAA4IBAQCShon2 nLGzS+IlToXKQQr5DDL5MH2AKwD1b8wjBlTs9iMSxXCl924ee6mpCEMHsZ6H1GGI ws4W8P6YzVXwviwS5LEWLeQevIM2/rYEHnt6Ieqj7NvDCcmRlYCvpajap30CIISJ g89GgrKNttr7YYDlMtG1RfY3lKPuGQ5g2oKwDMCnGNY94W3c8bc8/fEH9uJOFVl8 O2GSfD2n7yUcoRl+2+t/FVeOn6gUID3b0KxP/m2pG3Lm6bgBVeM4WvMMUwHIWjMn oOdHHnGyY62U8H7IKblxtL+oClx6+1jklf0BbFzCod6FS8PZ+UftE7slHzvPfBFF +KphUHDRmD1Rt7Gg -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:38 2026 by rpki-client