This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer File: aHmbdytVHbeE7rqLDhFaDEM807o.cer (raw, json) Hash identifier: qiJg3rOjAZGVbTs5ZAXjdqohfDM8eoET/jwb3BKu5Jk= Subject key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC97523170EA5B8F417203AC671BC82 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39691 IP: 185.234.224.0/22 IP: 2a0d:2f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:75:23:17:0e:a5:b8:f4:17:20:3a:c6:71:bc:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68799b772b551db784eeba8b0e115a0c433cd3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:d1:c0:41:8d:bf:9f:4c:a8:85:e0:e5:4f: 5e:44:27:fb:ad:fa:73:a9:6d:3c:97:b3:2f:0e:00: 21:56:b4:e7:52:e7:f5:7f:14:de:32:70:44:a7:5e: b7:4b:85:c9:24:7f:6f:86:bb:87:b7:58:79:e7:2d: 86:ec:50:65:ad:d7:74:da:f7:1d:6b:92:c0:96:7f: fc:98:ec:32:9d:a4:77:10:2f:9e:3b:57:5a:db:8a: f2:02:7d:40:49:b2:39:42:b7:88:78:9b:8c:74:b5: 67:14:1d:c0:58:bf:15:2c:5b:c7:80:97:43:14:a8: 22:71:6b:10:36:ad:33:73:c8:b5:46:d8:61:c9:3e: a9:36:dd:23:31:e0:89:3b:4f:a0:af:85:99:1f:72: 3f:5c:30:e4:1a:f8:99:c5:13:c2:e6:ab:f7:6b:f7: 6a:62:38:8e:01:b6:4e:de:3e:fa:06:60:23:9b:fb: 49:7f:1a:7e:1f:b5:59:cd:11:72:60:28:e9:d1:43: 81:e1:24:8d:a0:62:2a:7f:b4:8f:61:41:21:f0:10: 04:b7:1c:2e:a3:31:2e:e9:68:5e:72:7f:85:66:6b: 1f:a9:a0:71:90:18:b6:20:f7:e0:3a:c9:81:c3:36: a4:51:ef:f8:6c:2c:e5:ad:ef:1a:3a:1f:d2:78:71: 42:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.234.224.0/22 IPv6: 2a0d:2f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39691 Signature Algorithm: sha256WithRSAEncryption 0b:00:7c:ac:4e:ca:f0:27:c6:da:b6:d8:f5:0e:dc:0b:76:64: 14:e0:57:1a:8d:7a:97:ac:3c:76:7f:af:ae:3f:bf:01:a4:9d: 6e:f8:ab:72:8e:9d:39:bf:94:b7:17:e0:53:17:3f:70:0a:b9: ba:84:7d:b0:0f:d3:3b:a9:18:0b:51:9a:dc:34:c0:93:ef:32: d3:89:da:16:16:19:bc:21:fe:83:15:e0:43:02:d9:7f:81:cd: 59:ff:e9:30:30:75:6a:b2:4a:fc:bd:5a:2e:63:56:e1:bc:e5: 73:df:d8:b0:88:e5:fc:31:a2:a8:56:a1:ee:29:8b:61:51:15: 7b:fe:d8:f9:29:ea:20:82:ed:60:24:99:06:3d:8c:70:24:89: 1b:13:4e:6d:cd:39:84:d1:3a:79:00:83:5c:92:e9:a6:6c:3b: 9a:c3:1a:d2:cc:cc:ce:58:bb:3d:b3:aa:e8:d5:a8:fb:e3:bc: 95:e4:b5:4d:43:f8:61:68:f4:c6:7c:a9:d4:f9:dc:2c:79:46: 0e:de:9e:99:1c:6a:9d:88:11:b7:e8:a8:57:7a:15:18:27:af: c0:c5:f7:2a:43:13:39:2a:38:03:4b:ad:12:45:20:49:48:be: 06:13:fb:e0:e3:1b:78:5c:9b:2c:40:7b:d9:e2:12:bd:56:7d: 6d:fe:86:63 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yXUjFw6luPQXIDrGcbyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODc5OWI3NzJiNTUxZGI3ODRlZWJhOGIwZTExNWEwYzQzM2NkM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LXRwEGNv59MqIXg5U9eRCf7rfpz qW08l7MvDgAhVrTnUuf1fxTeMnBEp163S4XJJH9vhruHt1h55y2G7FBlrdd02vcd a5LAln/8mOwynaR3EC+eO1da24ryAn1ASbI5QreIeJuMdLVnFB3AWL8VLFvHgJdD FKgicWsQNq0zc8i1RthhyT6pNt0jMeCJO0+gr4WZH3I/XDDkGviZxRPC5qv3a/dq YjiOAbZO3j76BmAjm/tJfxp+H7VZzRFyYCjp0UOB4SSNoGIqf7SPYUEh8BAEtxwu ozEu6Whecn+FZmsfqaBxkBi2IPfgOsmBwzakUe/4bCzlre8aOh/SeHFC7QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGh5m3crVR23hO66iw4RWgxDPNO6MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2Lzk2MmYy ZC03MjgyLTQyMWUtYTYzMS0wYzc2YTMxNmI1MmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvOTYyZjJk LTcyODItNDIxZS1hNjMxLTBjNzZhMzE2YjUyZS8xL2FIbWJkeXRWSGJlRTdycUxE aEZhREVNODA3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuergMA0EAgACMAcDBQMqDS8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCbCzANBgkqhkiG9w0BAQsFAAOCAQEACwB8rE7K8CfG 2rbY9Q7cC3ZkFOBXGo16l6w8dn+vrj+/AaSdbvirco6dOb+UtxfgUxc/cAq5uoR9 sA/TO6kYC1Ga3DTAk+8y04naFhYZvCH+gxXgQwLZf4HNWf/pMDB1arJK/L1aLmNW 4bzlc9/YsIjl/DGiqFah7imLYVEVe/7Y+SnqIILtYCSZBj2McCSJGxNObc05hNE6 eQCDXJLppmw7msMa0szMzli7PbOq6NWo++O8leS1TUP4YWj0xnyp1PncLHlGDt6e mRxqnYgRt+ioV3oVGCevwMX3KkMTOSo4A0utEkUgSUi+BhP74OMbeFybLEB72eIS vVZ9bf6GYw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:19 2026 by rpki-client