This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer (raw, json) Hash identifier: c7gfin0hEsCl385pzFgX7vxCDXExDQr4nRaWkpY7SQ8= Subject key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78347C939B8F9E18FBE4083ECADA1B7B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211905 IP: 212.108.120.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7c:93:9b:8f:9e:18:fb:e4:08:3e:ca:da:1b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=690ae175fbe63b0e930469097c9492d42ed79249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:af:fc:a4:94:7a:40:56:8c:9f:da:eb:b2:b8: aa:70:e0:c1:7e:ad:4a:7e:e6:68:1b:03:66:6c:55: 86:89:09:94:c5:7a:0d:4e:8e:26:8b:09:fb:05:a3: 77:38:4d:8a:0c:c7:3d:49:c4:56:72:fb:2c:b8:5e: 4f:4b:a5:0a:75:cb:a1:2f:81:d1:4b:f7:e6:2c:b2: e0:ed:5d:0f:75:94:22:2b:16:6f:a6:51:02:8d:44: 06:0a:da:c8:6d:e9:68:9c:f6:a9:df:bd:37:bc:e0: 7d:20:ab:50:8c:b0:1c:36:9b:4d:9a:99:f6:20:0e: 2b:d8:5b:f6:63:1d:a1:6c:5f:46:a7:0a:b4:3e:db: b1:9a:0b:dd:97:d3:d2:32:76:b7:0f:21:91:d7:1f: 93:ff:50:14:90:de:d0:47:ab:a5:42:8e:53:55:3e: 53:3d:af:0c:3b:0b:0d:5a:0c:a7:92:e7:8a:be:18: 89:18:48:29:32:0b:e9:ad:63:bd:f0:0a:4e:54:cf: df:f5:c7:1e:0f:1c:d6:a7:4b:04:2f:c5:89:e0:1f: 2e:64:3b:5b:6e:91:75:2f:7e:5d:4e:92:d9:f8:9e: 01:a9:d9:60:7c:81:ae:2e:60:7f:03:a8:f5:aa:fa: 44:27:f2:97:44:8c:dc:76:41:7e:91:ba:c6:82:0f: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.120.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211905 Signature Algorithm: sha256WithRSAEncryption 83:1f:0d:8b:6d:63:cc:73:e5:9f:ea:a6:02:df:ff:07:2b:d3: 75:72:91:d7:a4:9d:8d:33:07:c6:f4:35:e2:49:04:aa:fd:0d: 8b:ec:24:4c:62:52:d1:81:62:93:b6:c7:6e:4c:25:8b:ba:86: 02:6f:e9:66:e8:5d:5b:8d:db:e0:84:fc:a0:c5:5d:31:51:a8: 30:fd:f1:3f:c4:01:72:5d:65:f9:bb:9a:13:3d:f0:29:74:a3: b5:88:53:f9:12:be:7c:4c:7c:37:39:c7:56:51:34:c2:1f:97: 6f:0a:19:8a:6c:7e:c6:bd:17:92:f3:e0:ce:0b:6b:66:3d:97: 6c:92:08:03:f4:90:e0:5c:63:c7:c6:05:7d:22:c2:b0:23:dd: 0f:9e:0f:fd:3a:8e:4f:a1:36:38:73:1f:dd:1d:44:e8:8b:e3: 86:ea:66:85:5b:66:e9:fa:49:02:40:83:c4:91:94:74:0e:a7: 24:01:d3:b0:17:73:9a:b1:3b:33:f5:e8:b4:7f:bd:4a:ad:6e: 4a:0d:80:23:e4:86:60:04:30:50:11:58:84:2e:76:b5:a5:41: ce:b1:dc:d6:e6:94:90:8e:b6:29:ac:90:37:30:01:8f:ef:05: e5:be:17:1c:69:ee:92:25:4e:62:f9:4b:7f:31:2d:ef:4a:03: 54:d6:38:2f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NHyTm4+eGPvkCD7K2ht7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTBhZTE3NWZiZTYzYjBlOTMwNDY5MDk3Yzk0OTJkNDJlZDc5MjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a/8pJR6QFaMn9rrsriqcODBfq1K fuZoGwNmbFWGiQmUxXoNTo4miwn7BaN3OE2KDMc9ScRWcvssuF5PS6UKdcuhL4HR S/fmLLLg7V0PdZQiKxZvplECjUQGCtrIbelonPap3703vOB9IKtQjLAcNptNmpn2 IA4r2Fv2Yx2hbF9Gpwq0Ptuxmgvdl9PSMna3DyGR1x+T/1AUkN7QR6ulQo5TVT5T Pa8MOwsNWgynkueKvhiJGEgpMgvprWO98ApOVM/f9cceDxzWp0sEL8WJ4B8uZDtb bpF1L35dTpLZ+J4BqdlgfIGuLmB/A6j1qvpEJ/KXRIzcdkF+kbrGgg+PdwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGkK4XX75jsOkwRpCXyUktQu15JJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwL2I4ODRj MC00ZDA1LTQ0MDEtOTg1OC04YTA4NmVhOTRiZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvYjg4NGMw LTRkMDUtNDQwMS05ODU4LThhMDg2ZWE5NGJlNS8xL2FRcmhkZnZtT3c2VEJHa0pm SlNTMUM3WGtray5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA1Gx4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM7wTANBgkqhkiG9w0BAQsFAAOCAQEAgx8Ni21jzHPln+qmAt//ByvTdXKR16Sd jTMHxvQ14kkEqv0Ni+wkTGJS0YFik7bHbkwli7qGAm/pZuhdW43b4IT8oMVdMVGo MP3xP8QBcl1l+buaEz3wKXSjtYhT+RK+fEx8NznHVlE0wh+XbwoZimx+xr0XkvPg zgtrZj2XbJIIA/SQ4Fxjx8YFfSLCsCPdD54P/TqOT6E2OHMf3R1E6IvjhupmhVtm 6fpJAkCDxJGUdA6nJAHTsBdzmrE7M/XotH+9Sq1uSg2AI+SGYAQwUBFYhC52taVB zrHc1uaUkI62KayQNzABj+8F5b4XHGnukiVOYvlLfzEt70oDVNY4Lw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:06:25 2026 by rpki-client