This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aQomMkmEfPlzRHQiE2RPkpvqqZc.cer File: aQomMkmEfPlzRHQiE2RPkpvqqZc.cer (raw, json) Hash identifier: NMMka3KPT+MCQhJHtJi4S78sbEQzS4fFmWq0BJ2Q0w4= Subject key identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791110959F941522642771F741652D94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.110.48.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:10:95:9f:94:15:22:64:27:71:f7:41:65:2d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=690a263249847cf97344742213644f929beaa997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:22:85:6a:cd:30:4c:d6:72:36:14:f6:84: 8b:18:66:24:5c:8f:b5:ca:09:55:0f:ac:2d:43:ce: 84:78:8a:49:e6:ff:d8:3c:dc:e2:f4:de:8b:c3:6a: 2e:4c:f6:6c:02:5d:22:1e:01:70:4f:d8:16:9a:1f: bb:a4:5e:ff:53:5d:de:86:66:9e:66:2f:99:4a:40: 93:5b:6c:af:d3:c6:5e:3b:bb:8c:78:f7:0d:9e:ef: 24:9d:ae:09:41:67:db:18:47:3d:cd:6e:6d:8a:25: b9:12:be:f2:65:fc:bb:4d:9b:7f:19:f5:ce:63:cd: de:1b:19:cf:52:63:70:7f:bf:8e:58:30:8a:97:71: 24:04:29:f6:1e:7d:32:13:3b:b4:26:d5:47:b8:db: 9a:ac:fc:e9:b4:74:b3:72:6c:2e:83:6c:5f:e1:92: 1d:95:11:b2:2e:f6:08:79:e0:b7:87:83:ea:5d:48: 64:48:2e:bd:62:f9:2a:a1:5e:45:65:ec:ff:b3:aa: 2c:e2:3c:91:30:b3:fc:ca:1b:28:aa:aa:7f:fb:ea: ef:2b:40:78:fd:2d:1e:98:90:ce:f1:db:39:4d:2b: db:5e:f4:d6:73:43:d6:44:74:89:b1:df:c8:e2:06: f9:d2:e6:7a:04:b3:71:a0:ab:f3:22:9c:ee:9c:d7: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0A:26:32:49:84:7C:F9:73:44:74:22:13:64:4F:92:9B:EA:A9:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a76a86-75b3-4cef-a340-31b2a607ba97/1/aQomMkmEfPlzRHQiE2RPkpvqqZc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.110.48.0/23 Signature Algorithm: sha256WithRSAEncryption 22:b6:4a:a0:93:4f:22:4b:8c:80:93:eb:22:f1:1c:41:d6:e6: f4:fa:14:e3:2b:9a:c1:d5:67:74:a8:9d:7e:6f:cc:fd:ca:39: f1:89:c4:e9:57:46:c1:2b:bb:96:9e:c0:11:ae:3f:0b:0d:2b: c4:00:7f:05:23:b6:4c:4f:56:c0:c0:10:a4:3f:45:e1:35:a8: f8:48:ec:f3:61:51:bc:0d:24:3d:b4:3e:94:53:a0:3e:34:f3: 00:47:51:60:52:a7:4c:e9:27:82:ce:51:9e:8e:81:3c:b7:e8: 84:5a:88:b1:50:40:68:98:76:28:c8:48:ee:0d:19:15:ae:ae: ab:5b:4e:ef:a6:12:37:3b:70:0c:53:2e:13:a7:e5:6a:8c:cd: 54:50:ac:86:6b:f1:c2:64:7e:15:bc:1b:66:51:4f:eb:34:92: 9f:5c:82:8f:45:bb:e7:42:52:5a:a3:6e:e6:27:9f:6f:ac:22: 13:9a:3a:48:35:9f:a0:7e:db:4d:7e:9e:ce:33:59:2c:2d:15: 1c:c9:51:c7:7a:de:b6:91:02:cf:47:cf:6f:6f:f6:b3:ae:80: 96:43:11:2e:16:eb:92:c0:8b:76:4d:57:70:58:de:6f:e7:41: d6:10:34:77:ce:d2:cd:00:af:9a:a9:72:67:45:f4:3c:79:f4: fe:17:41:0f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ERCVn5QVImQncfdBZS2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTBhMjYzMjQ5ODQ3Y2Y5NzM0NDc0MjIxMzY0NGY5MjliZWFhOTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWIihWrNMEzWcjYU9oSLGGYkXI+1 yglVD6wtQ86EeIpJ5v/YPNzi9N6Lw2ouTPZsAl0iHgFwT9gWmh+7pF7/U13ehmae Zi+ZSkCTW2yv08ZeO7uMePcNnu8kna4JQWfbGEc9zW5tiiW5Er7yZfy7TZt/GfXO Y83eGxnPUmNwf7+OWDCKl3EkBCn2Hn0yEzu0JtVHuNuarPzptHSzcmwug2xf4ZId lRGyLvYIeeC3h4PqXUhkSC69YvkqoV5FZez/s6os4jyRMLP8yhsoqqp/++rvK0B4 /S0emJDO8ds5TSvbXvTWc0PWRHSJsd/I4gb50uZ6BLNxoKvzIpzunNfq3QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGkKJjJJhHz5c0R0IhNkT5Kb6qmXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY0L2E3NmE4 Ni03NWIzLTRjZWYtYTM0MC0zMWIyYTYwN2JhOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjQvYTc2YTg2 LTc1YjMtNGNlZi1hMzQwLTMxYjJhNjA3YmE5Ny8xL2FRb21Na21FZlBselJIUWlF MlJQa3B2cXFaYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw24wMA0GCSqGSIb3DQEBCwUAA4IBAQAitkqg k08iS4yAk+si8RxB1ub0+hTjK5rB1Wd0qJ1+b8z9yjnxicTpV0bBK7uWnsARrj8L DSvEAH8FI7ZMT1bAwBCkP0XhNaj4SOzzYVG8DSQ9tD6UU6A+NPMAR1FgUqdM6SeC zlGejoE8t+iEWoixUEBomHYoyEjuDRkVrq6rW07vphI3O3AMUy4Tp+VqjM1UUKyG a/HCZH4VvBtmUU/rNJKfXIKPRbvnQlJao27mJ59vrCITmjpINZ+gfttNfp7OM1ks LRUcyVHHet62kQLPR89vb/azroCWQxEuFuuSwIt2TVdwWN5v50HWEDR3ztLNAK+a qXJnRfQ8efT+F0EP -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:56 2026 by rpki-client