This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer File: aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer (raw, json) Hash identifier: JArkcOFBEBD59dXCaf+ukWyk5XFkqorCjp35MeC4b9M= Subject key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79102D2A4DB2B1F6A0CFEE561D2E0C5F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35362 IP: 5.83.16.0/21 IP: 37.17.240.0/21 IP: 62.84.248.0/21 IP: 95.158.0.0/18 IP: 146.0.80.0/21 IP: 176.113.168.0/21 IP: 185.11.28.0/22 IP: 2a07:1080::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2d:2a:4d:b2:b1:f6:a0:cf:ee:56:1d:2e:0c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68d6604c88c2e04e6167241315b74a758ce648c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:b3:31:44:6f:21:33:e3:c7:5b:a2:ef:90: 08:ca:a9:39:3c:56:09:3d:86:d5:19:e3:f4:18:7c: 58:9b:04:af:79:9a:5f:92:97:12:3a:77:31:c1:7f: 79:03:43:38:f7:b9:ec:9a:05:ad:09:c5:e9:8a:84: c5:ed:dc:23:40:fb:ac:8f:c1:bd:49:66:18:73:b3: 25:45:e0:42:22:19:9b:f5:f5:b9:5e:be:1e:9d:c3: fd:31:74:c5:8d:01:58:14:51:cf:9d:c8:92:07:28: 5a:8d:88:b1:1b:b4:33:be:fc:06:ca:b6:25:fb:b1: 05:52:9c:32:f1:f4:41:43:10:98:be:03:43:e8:95: 12:b0:25:4d:db:9f:36:dd:2b:14:3f:6d:8f:03:d6: 6c:e2:12:9f:23:9c:6f:93:c6:15:94:d4:ea:e8:10: 62:46:66:eb:55:50:66:e7:e0:90:ff:5f:f7:59:fc: ed:1c:9f:c7:dd:90:cd:65:43:f1:be:88:a3:6f:95: 36:4f:7c:42:76:da:e1:a3:93:e1:25:a5:6b:51:cf: 7c:93:93:02:bd:b1:05:88:ff:4d:dd:1a:59:c1:4e: f9:2a:00:27:df:8d:4a:fb:6e:a0:a1:6b:0e:2b:eb: 76:3d:7b:96:79:aa:6c:fc:18:80:1f:24:c1:5f:93: 9b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.16.0/21 37.17.240.0/21 62.84.248.0/21 95.158.0.0/18 146.0.80.0/21 176.113.168.0/21 185.11.28.0/22 IPv6: 2a07:1080::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35362 Signature Algorithm: sha256WithRSAEncryption 6d:fe:2c:10:cc:56:c6:18:f6:c8:f9:85:4b:f5:a0:7d:d0:c6: 93:6b:db:9a:44:1f:a0:14:63:62:88:79:28:4f:4d:c8:4f:77: be:fa:fd:ca:bc:27:ff:b2:9e:90:f3:45:3f:35:3d:ec:19:f0: b7:a4:3d:0e:d8:49:47:e1:0b:4f:89:29:df:19:d8:5b:1e:6f: 00:cd:77:fd:4d:49:91:60:ae:e4:a2:7c:4c:7b:44:65:c4:5d: 4d:40:6f:7b:10:37:1c:8f:70:87:84:b6:81:68:fd:de:8c:59: 37:46:d3:ec:de:f1:68:c9:6e:33:a3:d1:cb:60:31:9c:5c:c7: cc:eb:fd:50:cd:e1:1f:2e:5f:9b:60:aa:d7:12:cc:b7:ab:b4: 3f:3b:58:26:d8:dd:30:a0:d6:fe:95:f7:e0:fe:9f:d6:ad:5c: a1:f2:7c:7b:15:a6:96:b8:74:57:e9:82:7e:40:08:cb:51:a0: 55:91:9c:03:13:df:60:cd:4c:73:38:e9:8e:28:a2:f7:c7:bf: 3a:cb:54:9a:15:5a:77:51:51:0a:6b:f5:2d:6a:04:29:fc:52: f6:51:16:28:3b:46:3d:8c:8d:0b:30:45:38:7d:cc:bf:19:0f: aa:be:66:1e:a8:3a:03:44:ff:bc:fd:78:be:72:c0:48:a4:96: db:b8:d4:bd -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgISAZt5EC0qTbKx9qDP7lYdLgxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGQ2NjA0Yzg4YzJlMDRlNjE2NzI0MTMxNWI3NGE3NThjZTY0OGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAGzMURvITPjx1ui75AIyqk5PFYJ PYbVGeP0GHxYmwSveZpfkpcSOncxwX95A0M497nsmgWtCcXpioTF7dwjQPusj8G9 SWYYc7MlReBCIhmb9fW5Xr4encP9MXTFjQFYFFHPnciSByhajYixG7QzvvwGyrYl +7EFUpwy8fRBQxCYvgND6JUSsCVN25823SsUP22PA9Zs4hKfI5xvk8YVlNTq6BBi RmbrVVBm5+CQ/1/3WfztHJ/H3ZDNZUPxvoijb5U2T3xCdtrho5PhJaVrUc98k5MC vbEFiP9N3RpZwU75KgAn341K+26goWsOK+t2PXuWeaps/BiAHyTBX5ObzwIDAQAB o4IC0zCCAs8wHQYDVR0OBBYEFGjWYEyIwuBOYWckExW3SnWM5kjDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0LzAwNjIy NS05YmZmLTQ1ODMtOGExNS03Y2MyOTQ1ZjJjYTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvMDA2MjI1 LTliZmYtNDU4My04YTE1LTdjYzI5NDVmMmNhNi8xL2FOWmdUSWpDNEU1aFp5UVRG YmRLZFl6bVNNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDBVMQAwQDJRHwAwQDPlT4AwQGX54AAwQDkgBQ AwQDsHGoAwQCuQscMA0EAgACMAcDBQMqBxCAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwCKIjANBgkqhkiG9w0BAQsFAAOCAQEAbf4sEMxWxhj2yPmFS/WgfdDGk2vb mkQfoBRjYoh5KE9NyE93vvr9yrwn/7KekPNFPzU97Bnwt6Q9DthJR+ELT4kp3xnY Wx5vAM13/U1JkWCu5KJ8THtEZcRdTUBvexA3HI9wh4S2gWj93oxZN0bT7N7xaMlu M6PRy2AxnFzHzOv9UM3hHy5fm2Cq1xLMt6u0PztYJtjdMKDW/pX34P6f1q1cofJ8 exWmlrh0V+mCfkAIy1GgVZGcAxPfYM1Mczjpjiii98e/OstUmhVad1FRCmv1LWoE KfxS9lEWKDtGPYyNCzBFOH3MvxkPqr5mHqg6A0T/vP14vnLASKSW27jUvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:31 2026 by rpki-client