This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aJQuPste6nkqdvray-wBqFaOl_Q.cer File: aJQuPste6nkqdvray-wBqFaOl_Q.cer (raw, json) Hash identifier: OW19xgTMHq19lUBBmcquvMkHmuuDtxq46p5ejzo6MC8= Subject key identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD1F76EE9E66F431897661004C596 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48498 IP: 91.211.36.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d1:f7:6e:e9:e6:6f:43:18:97:66:10:04:c5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68942e3ecb5eea792a76fadacbec01a8568e97f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:30:dc:cf:37:be:3e:e4:ab:fb:c2:89:34:62: 60:9a:34:ce:63:bf:c7:06:ab:57:aa:80:f8:86:d0: 1e:20:3e:70:70:c9:b4:44:3d:e5:19:ef:06:9e:c8: 95:b5:02:61:b3:40:a1:b4:7f:d9:3d:ee:db:97:7f: b0:b8:d1:e6:c6:99:27:66:d6:80:81:06:30:e4:17: 3f:2d:45:01:2d:e2:d8:43:ef:3b:c9:fb:07:ce:03: a5:15:9a:21:55:26:ff:02:f1:77:88:81:a7:a3:ad: ad:fb:02:fb:dd:ae:00:79:c6:28:6d:bf:bb:0e:8c: a5:69:fa:a7:58:7e:76:33:42:3b:55:3e:1a:16:8f: 5d:ee:97:3d:a3:8e:a4:78:c9:7b:73:f6:f7:1d:65: 04:31:a1:30:90:b1:64:18:c0:f0:cf:cc:cb:34:5e: 2e:62:d1:4c:40:74:08:aa:38:93:4d:af:31:9d:06: ca:bf:37:b5:a4:55:45:ac:a9:66:90:be:11:b1:fc: 89:32:10:24:cd:c1:c2:52:e5:65:2a:79:29:3f:3e: 82:a3:54:32:9a:71:46:36:32:0c:5f:81:3f:45:4b: b8:f8:ba:a8:9b:31:90:b1:ae:3d:72:42:22:e4:39: aa:4f:4b:54:0a:3d:ea:0c:12:ad:6e:e6:83:80:c3: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:94:2E:3E:CB:5E:EA:79:2A:76:FA:DA:CB:EC:01:A8:56:8E:97:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/beb3a8-4b72-48ec-8e04-03cce3969f9c/1/aJQuPste6nkqdvray-wBqFaOl_Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.211.36.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48498 Signature Algorithm: sha256WithRSAEncryption ab:2f:c9:9c:4f:d8:88:5e:9e:41:24:56:3c:cd:75:01:b4:57: 2e:65:a6:db:24:4b:87:5f:a4:16:5a:bd:e1:ae:f4:10:85:b0: a0:37:6e:63:14:22:1b:be:f3:49:f5:b5:2b:17:ae:e5:79:78: ba:86:b3:44:4b:50:f5:e4:63:ac:19:41:9b:89:a0:a7:8d:c7: a5:fa:d6:a4:a8:60:a1:76:b0:39:21:a8:83:23:41:7c:08:69: d8:cd:81:30:6a:52:c1:2a:e9:f7:24:28:c9:04:6b:60:1f:d0: 32:ed:04:94:8b:13:a9:d3:5e:2d:8b:89:45:56:21:54:63:41: 32:8b:d9:7b:f8:01:86:20:cf:84:e3:73:e1:23:74:17:18:60: 99:1a:ba:98:a5:fc:02:be:63:69:77:28:96:eb:0e:3b:77:56: 84:c7:71:48:31:07:96:7d:29:56:35:92:8d:91:41:41:2a:5b: d3:05:6b:3f:6a:ba:6c:fd:03:62:ab:12:30:c8:aa:ea:79:1f: c1:f3:a4:08:0a:2c:de:63:f0:22:19:89:ce:90:58:4a:0c:33: b3:44:9a:b0:51:6e:88:77:ef:ad:d5:95:fe:38:37:c9:c2:1b: a9:c9:c3:77:ff:54:a0:f5:d0:6a:e4:09:19:30:c2:7b:7f:6a: 4b:22:4b:da -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9ytH3bunmb0MYl2YQBMWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODk0MmUzZWNiNWVlYTc5MmE3NmZhZGFjYmVjMDFhODU2OGU5N2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljDczze+PuSr+8KJNGJgmjTOY7/H BqtXqoD4htAeID5wcMm0RD3lGe8GnsiVtQJhs0ChtH/ZPe7bl3+wuNHmxpknZtaA gQYw5Bc/LUUBLeLYQ+87yfsHzgOlFZohVSb/AvF3iIGno62t+wL73a4AecYobb+7 DoylafqnWH52M0I7VT4aFo9d7pc9o46keMl7c/b3HWUEMaEwkLFkGMDwz8zLNF4u YtFMQHQIqjiTTa8xnQbKvze1pFVFrKlmkL4RsfyJMhAkzcHCUuVlKnkpPz6Co1Qy mnFGNjIMX4E/RUu4+LqomzGQsa49ckIi5DmqT0tUCj3qDBKtbuaDgMNHCwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGiULj7LXup5Knb62svsAahWjpf0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2JlYjNh OC00YjcyLTQ4ZWMtOGUwNC0wM2NjZTM5NjlmOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvYmViM2E4 LTRiNzItNDhlYy04ZTA0LTAzY2NlMzk2OWY5Yy8xL2FKUXVQc3RlNm5rcWR2cmF5 LXdCcUZhT2xfUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW9MkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC9cjANBgkqhkiG9w0BAQsFAAOCAQEAqy/JnE/YiF6eQSRWPM11AbRXLmWm2yRL h1+kFlq94a70EIWwoDduYxQiG77zSfW1Kxeu5Xl4uoazREtQ9eRjrBlBm4mgp43H pfrWpKhgoXawOSGogyNBfAhp2M2BMGpSwSrp9yQoyQRrYB/QMu0ElIsTqdNeLYuJ RVYhVGNBMovZe/gBhiDPhONz4SN0FxhgmRq6mKX8Ar5jaXcolusOO3dWhMdxSDEH ln0pVjWSjZFBQSpb0wVrP2q6bP0DYqsSMMiq6nkfwfOkCAos3mPwIhmJzpBYSgwz s0SasFFuiHfvrdWV/jg3ycIbqcnDd/9UoPXQauQJGTDCe39qSyJL2g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:48 2026 by rpki-client