This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aNLCXQU0pAJ8aVViqM5PABzVOW8.cer File: aNLCXQU0pAJ8aVViqM5PABzVOW8.cer (raw, json) Hash identifier: mZls+2lTTIsD2E7x1ue9xdrp27VfQNLnd49Spp6KAkI= Subject key identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F1366BA90F37B71888FB3D2E2DA03A5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41015 IP: 185.90.84.0/22 IP: 2a05:df80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:66:ba:90:f3:7b:71:88:8f:b3:d2:e2:da:03:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68d2c25d0534a4027c695562a8ce4f001cd5396f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:a1:6e:3d:22:16:75:bf:cd:6e:15:c5:2f: 99:c2:be:5a:eb:d6:be:01:d8:e7:99:c6:56:0e:14: 92:5a:ef:75:a3:b5:63:1d:2c:07:b2:54:84:27:ec: 04:73:23:11:9b:ab:17:83:b1:a2:72:d6:c0:35:f4: b7:bf:ec:ee:ae:54:b5:f0:23:7d:ff:d4:53:b2:dd: 44:1f:b1:9f:fd:f6:35:e2:df:7d:86:83:b3:42:05: 62:e3:e3:bb:a1:8e:7c:9a:25:8d:6b:97:12:68:f7: db:28:a0:2c:7a:74:e6:7d:68:0c:1c:48:8b:01:eb: 82:1e:e8:d5:4c:2b:ab:c4:fe:e3:d2:3e:fe:08:7a: ac:e2:c0:e2:b9:3a:e6:6b:63:43:8c:1d:50:66:17: bb:8d:b3:99:82:e5:e6:f6:a5:ca:df:a4:ac:90:c8: 22:c5:54:50:2e:a0:71:39:fd:95:f0:44:e7:44:3a: b0:8c:40:31:e8:57:b3:16:46:1e:d3:c5:62:0d:aa: 99:0b:a9:37:ef:18:36:7e:6f:7a:54:4b:17:91:a5: 2a:42:21:5e:cd:df:da:a2:ac:4a:22:d8:5b:0d:23: 1e:73:2b:41:0f:cb:76:b4:c9:3d:a6:c4:d1:56:30: 28:15:5b:4d:28:58:05:2f:47:14:7a:b4:23:8f:da: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D2:C2:5D:05:34:A4:02:7C:69:55:62:A8:CE:4F:00:1C:D5:39:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ad9756-84d1-4ab9-96e1-14797eac522e/1/aNLCXQU0pAJ8aVViqM5PABzVOW8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.90.84.0/22 IPv6: 2a05:df80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41015 Signature Algorithm: sha256WithRSAEncryption 0d:8a:a6:08:82:57:5a:f2:9c:3f:7d:be:37:c4:29:10:0a:d7: ea:8f:af:bf:0f:55:a2:07:a7:d3:30:4f:a8:9c:a7:07:eb:2e: 69:f0:df:b5:6d:83:5e:a1:15:d6:78:e3:54:6a:ea:f4:8c:44: 79:68:f6:59:c2:70:17:eb:24:e9:91:a3:f4:bf:26:8c:51:3a: 66:a6:95:8f:21:eb:10:7b:1a:01:9d:54:57:cf:90:e8:f8:f6: db:4d:ad:f9:56:24:66:ba:10:03:9f:80:5a:76:ce:d0:38:88: 2a:6e:49:b6:35:0c:06:a6:e9:63:88:62:08:cf:a8:3d:e7:f4: 8b:b7:9f:5b:3b:40:94:77:42:79:de:df:00:99:de:bc:ee:55: 51:d8:c0:13:cb:f6:f8:2a:7d:2d:b0:3c:88:1e:b5:af:c7:0a: f0:95:a2:82:03:ad:0d:a8:93:75:8d:8b:05:01:94:55:da:29: b0:7e:27:d9:11:fd:89:8a:8c:ec:65:f0:e0:e5:ce:77:d8:f5: 06:46:8b:74:ee:dc:b6:5d:b7:f7:c6:cc:cd:56:c7:1e:71:93: 51:65:ce:23:74:24:16:e0:b3:e5:1e:23:ca:00:86:f8:ed:54: 6f:9d:82:7a:fb:da:e9:ce:05:f4:9e:4c:22:cb:06:b5:13:3c: 9a:a9:f8:5a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/E2a6kPN7cYiPs9Li2gOlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGQyYzI1ZDA1MzRhNDAyN2M2OTU1NjJhOGNlNGYwMDFjZDUzOTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWuhbj0iFnW/zW4VxS+Zwr5a69a+ AdjnmcZWDhSSWu91o7VjHSwHslSEJ+wEcyMRm6sXg7GictbANfS3v+zurlS18CN9 /9RTst1EH7Gf/fY14t99hoOzQgVi4+O7oY58miWNa5cSaPfbKKAsenTmfWgMHEiL AeuCHujVTCurxP7j0j7+CHqs4sDiuTrma2NDjB1QZhe7jbOZguXm9qXK36SskMgi xVRQLqBxOf2V8ETnRDqwjEAx6FezFkYe08ViDaqZC6k37xg2fm96VEsXkaUqQiFe zd/aoqxKIthbDSMecytBD8t2tMk9psTRVjAoFVtNKFgFL0cUerQjj9riIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGjSwl0FNKQCfGlVYqjOTwAc1TlvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2FkOTc1 Ni04NGQxLTRhYjktOTZlMS0xNDc5N2VhYzUyMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYWQ5NzU2 LTg0ZDEtNGFiOS05NmUxLTE0Nzk3ZWFjNTIyZS8xL2FOTENYUVUwcEFKOGFWVmlx TTVQQUJ6Vk9XOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuVpUMA0EAgACMAcDBQMqBd+AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCgNzANBgkqhkiG9w0BAQsFAAOCAQEADYqmCIJXWvKc P32+N8QpEArX6o+vvw9Vogen0zBPqJynB+suafDftW2DXqEV1njjVGrq9IxEeWj2 WcJwF+sk6ZGj9L8mjFE6ZqaVjyHrEHsaAZ1UV8+Q6Pj2202t+VYkZroQA5+AWnbO 0DiIKm5JtjUMBqbpY4hiCM+oPef0i7efWztAlHdCed7fAJnevO5VUdjAE8v2+Cp9 LbA8iB61r8cK8JWiggOtDaiTdY2LBQGUVdopsH4n2RH9iYqM7GXw4OXOd9j1BkaL dO7ctl2398bMzVbHHnGTUWXOI3QkFuCz5R4jygCG+O1Ub52Cevva6c4F9J5MIssG tRM8mqn4Wg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:46 2026 by rpki-client