This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer File: aPQ7W7zEligG6pMi7Ckum2bdzMU.cer (raw, json) Hash identifier: F8fBXe306E+0n5PYzVjs2dXEVrIN5sXzIapBjmqOdTw= Subject key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80083DB9D124B4084276B5EDFBB969 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213312 IP: 104.204.244.0/22 IP: 2001:678:10bc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:08:3d:b9:d1:24:b4:08:42:76:b5:ed:fb:b9:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:59:69:3e:f9:41:5f:ff:6d:a4:df:8c:5c:96: 81:54:ad:9d:f8:d8:0a:bf:67:56:ed:3f:b9:f5:9a: 1c:b7:48:c7:4c:18:5a:62:ea:ac:32:b1:fc:6a:2c: 4a:c0:a7:08:e0:9a:1b:1f:f0:f0:db:61:74:59:7d: d4:22:c3:3a:64:36:5b:d6:af:3a:8e:34:d1:ba:e2: f3:a6:46:0a:ac:bf:63:f9:86:d1:4c:62:cb:b1:c7: c8:61:8f:0d:51:fc:e7:93:d6:2d:e3:67:96:86:cf: d8:81:ef:a1:0a:99:cd:dd:55:f7:59:34:63:05:6e: 49:c9:1f:f6:fa:2e:ed:c3:6a:79:6a:57:e9:48:11: af:21:fc:ad:1b:e1:32:41:15:01:84:2e:b8:90:7b: 8e:58:f0:5e:3c:83:d3:d0:07:3b:50:f4:18:98:ed: 13:d6:4e:d3:e2:3b:cc:9c:39:27:d7:85:90:fb:fa: 88:d5:17:0c:7f:2e:84:d0:93:cf:2f:62:85:e7:a9: 10:a6:f8:cb:a5:df:9a:cc:f6:0a:a5:41:96:d1:ff: 9e:b1:7a:94:5d:20:1c:9b:7a:1d:63:8b:56:76:eb: f0:ea:49:1a:d5:8e:76:7c:b2:9d:b0:6f:83:83:6d: 28:aa:8b:4e:61:e1:93:eb:c7:61:b0:6c:6b:c3:5c: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.204.244.0/22 IPv6: 2001:678:10bc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213312 Signature Algorithm: sha256WithRSAEncryption 8f:95:16:1e:36:e3:2c:e0:c1:50:7b:47:c0:e1:22:08:ee:a0: ec:58:93:d9:48:1e:46:02:fb:27:38:0d:f8:78:24:1c:3f:10: 8d:49:19:e1:89:49:eb:9c:5e:d8:35:83:f2:d9:67:d9:d1:90: df:ea:f4:e8:72:d2:d6:c7:48:c8:8d:c8:27:49:8f:ea:1c:0b: 09:b3:10:50:66:76:97:c1:67:8e:0f:76:0f:1d:a6:71:a6:34: 14:69:0c:d9:84:8a:92:f6:3c:26:24:7b:1b:d3:45:92:35:03: 05:37:3e:d0:ed:be:cd:63:d6:73:7e:81:62:bd:29:85:fe:e3: cb:97:49:aa:56:3b:72:00:46:2d:0b:22:0f:81:0e:6b:5b:ff: 6e:47:12:79:13:ec:55:b9:25:e5:b8:32:7d:15:e3:47:c7:3c: aa:c7:76:fe:c5:4a:ee:46:81:31:27:55:0d:79:3d:14:98:bb: aa:e6:9f:64:39:3f:41:ea:f9:bf:60:54:d7:cb:9e:8e:59:6a: 16:b0:df:92:32:e7:a8:8c:c7:33:0a:ed:db:56:79:bf:b5:f1: d6:a0:3f:74:d0:ed:9d:7e:fe:f5:1c:d6:6d:94:19:4a:87:39: 6f:38:ad:cb:c0:fc:07:7d:fc:23:9f:66:f5:0f:24:88:e0:7d: a7:e0:09:03 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt8gAg9udEktAhCdrXt+7lpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGY0M2I1YmJjYzQ5NjI4MDZlYTkzMjJlYzI5MmU5YjY2ZGRjY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FlpPvlBX/9tpN+MXJaBVK2d+NgK v2dW7T+59Zoct0jHTBhaYuqsMrH8aixKwKcI4JobH/Dw22F0WX3UIsM6ZDZb1q86 jjTRuuLzpkYKrL9j+YbRTGLLscfIYY8NUfznk9Yt42eWhs/Yge+hCpnN3VX3WTRj BW5JyR/2+i7tw2p5alfpSBGvIfytG+EyQRUBhC64kHuOWPBePIPT0Ac7UPQYmO0T 1k7T4jvMnDkn14WQ+/qI1RcMfy6E0JPPL2KF56kQpvjLpd+azPYKpUGW0f+esXqU XSAcm3odY4tWduvw6kka1Y52fLKdsG+Dg20oqotOYeGT68dhsGxrw1xWJQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFGj0O1u8xJYoBuqTIuwpLptm3czFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjLzA0NmZm ZS0wNWViLTRjOGMtODU0NS0wMjQ4M2U2NDgyY2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvMDQ2ZmZl LTA1ZWItNGM4Yy04NTQ1LTAyNDgzZTY0ODJjYi8xL2FQUTdXN3pFbGlnRzZwTWk3 Q2t1bTJiZHpNVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCaMz0MA8EAgACMAkDBwAgAQZ4ELwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDA0FAMA0GCSqGSIb3DQEBCwUAA4IBAQCPlRYeNuMs 4MFQe0fA4SII7qDsWJPZSB5GAvsnOA34eCQcPxCNSRnhiUnrnF7YNYPy2WfZ0ZDf 6vToctLWx0jIjcgnSY/qHAsJsxBQZnaXwWeOD3YPHaZxpjQUaQzZhIqS9jwmJHsb 00WSNQMFNz7Q7b7NY9ZzfoFivSmF/uPLl0mqVjtyAEYtCyIPgQ5rW/9uRxJ5E+xV uSXluDJ9FeNHxzyqx3b+xUruRoExJ1UNeT0UmLuq5p9kOT9B6vm/YFTXy56OWWoW sN+SMueojMczCu3bVnm/tfHWoD900O2dfv71HNZtlBlKhzlvOK3LwPwHffwjn2b1 DySI4H2n4AkD -----END CERTIFICATE-----Generated at Wed Jan 21 08:57:35 2026 by rpki-client