This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer File: aREkWuICUVXAm-wlqJkdVnrxhB0.cer (raw, json) Hash identifier: rQf3t0LTzPgluLiCTEzpciic8JvxtFEACbhFAFQAhwk= Subject key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78353965A56DBF8A4E673CBB17F106D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203752 IP: 185.125.60.0/22 IP: 2a03:94a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:39:65:a5:6d:bf:8a:4e:67:3c:bb:17:f1:06:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6911245ae2025155c09bec25a8991d567af1841d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:f1:47:b7:49:57:f6:40:10:c6:9e:b9:2d: 7e:18:72:55:7e:45:4d:a8:b7:e1:93:93:4b:c7:95: 34:ec:4c:f6:12:38:e4:a6:05:a1:c0:9d:00:d8:24: 6e:e7:f2:6e:08:28:bf:ba:fb:32:e7:0a:65:66:24: ea:7b:ff:72:45:3c:e5:dd:62:d1:ed:e3:3d:cc:72: 13:20:24:9c:a4:6e:59:2d:71:1d:ed:1b:b9:28:e5: cf:bb:c5:82:c2:d9:78:d9:87:ac:49:19:81:80:89: 64:31:d9:63:68:48:69:a1:34:16:c6:e9:35:b5:77: 90:33:4b:86:24:d1:15:d3:7a:68:2a:28:6d:57:72: a1:f5:8d:bd:07:ad:ee:d6:ef:03:6a:c5:9f:37:17: ce:d8:54:73:03:12:ec:b1:e5:1c:81:70:3d:c4:33: 54:c1:fc:d9:25:6b:27:4c:0e:93:4d:58:73:53:2e: ad:7f:aa:72:07:72:c7:70:8f:c5:af:f8:d1:aa:f3: 49:5b:24:67:a8:28:b5:73:01:b8:1d:87:4f:cc:a4: 4d:d3:b0:2b:c7:eb:63:a6:e7:30:73:14:87:20:68: cb:75:1f:4d:94:c6:50:32:7e:c2:62:39:57:38:04: 58:e5:15:71:fe:f8:90:b0:d3:a2:09:76:66:27:11: 9b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.60.0/22 IPv6: 2a03:94a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203752 Signature Algorithm: sha256WithRSAEncryption 89:e5:38:ba:d6:54:e0:9c:d1:07:c8:c9:ff:8d:2d:a8:5c:4d: b1:87:1b:81:ea:5c:b9:f8:3b:42:7a:e1:c6:5a:e0:ef:30:82: f2:f0:4a:c7:78:e3:4c:07:65:4c:df:15:ad:13:d6:05:d0:dc: 89:62:f4:dd:b2:36:e8:e5:20:7c:37:53:be:33:a3:23:06:72: a3:57:93:f7:25:68:f4:fc:49:2c:d5:14:67:ae:2f:15:39:7f: 1c:40:fd:1c:48:9c:5f:38:77:c1:ad:13:26:85:08:07:9f:53: 9d:81:9d:ab:3c:d6:17:55:d2:18:6d:99:aa:70:08:bb:1d:35: 71:79:5d:f4:12:a2:10:6e:7b:a9:f1:c4:67:17:cf:de:8f:57: ff:d8:59:03:d7:b2:cb:a8:c9:37:f6:36:21:d8:56:78:3b:c4: 1e:35:77:10:2a:b6:b3:38:20:cf:4b:55:74:54:dc:0c:15:fa: 8a:f6:5e:6b:de:25:73:fb:01:9a:45:b0:0b:48:86:b7:58:8f: 3b:4d:c4:17:b4:d8:da:4f:cd:15:75:cf:f2:b7:08:7f:d9:b4: ab:a6:d6:2c:1e:b6:78:94:a7:0f:c3:48:06:bd:72:46:98:58: 4e:b1:31:57:5a:9b:46:6c:ed:29:a3:7e:6f:8d:2e:09:81:b2: c5:f4:f2:dd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NTllpW2/ik5nPLsX8QbWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTExMjQ1YWUyMDI1MTU1YzA5YmVjMjVhODk5MWQ1NjdhZjE4NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq3xR7dJV/ZAEMaeuS1+GHJVfkVN qLfhk5NLx5U07Ez2EjjkpgWhwJ0A2CRu5/JuCCi/uvsy5wplZiTqe/9yRTzl3WLR 7eM9zHITICScpG5ZLXEd7Ru5KOXPu8WCwtl42YesSRmBgIlkMdljaEhpoTQWxuk1 tXeQM0uGJNEV03poKihtV3Kh9Y29B63u1u8DasWfNxfO2FRzAxLsseUcgXA9xDNU wfzZJWsnTA6TTVhzUy6tf6pyB3LHcI/Fr/jRqvNJWyRnqCi1cwG4HYdPzKRN07Ar x+tjpucwcxSHIGjLdR9NlMZQMn7CYjlXOARY5RVx/viQsNOiCXZmJxGbEQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGkRJFriAlFVwJvsJaiZHVZ68YQdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzBlNGRk NS05YzhmLTQ4NTYtOTBkNy0xZTFlOWNiZjQ3ZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvMGU0ZGQ1 LTljOGYtNDg1Ni05MGQ3LTFlMWU5Y2JmNDdkYS8xL2FSRWtXdUlDVVZYQW0td2xx SmtkVm5yeGhCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuX08MA0EAgACMAcDBQAqA5SgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMb6DANBgkqhkiG9w0BAQsFAAOCAQEAieU4utZU4JzR B8jJ/40tqFxNsYcbgepcufg7Qnrhxlrg7zCC8vBKx3jjTAdlTN8VrRPWBdDciWL0 3bI26OUgfDdTvjOjIwZyo1eT9yVo9PxJLNUUZ64vFTl/HED9HEicXzh3wa0TJoUI B59TnYGdqzzWF1XSGG2ZqnAIux01cXld9BKiEG57qfHEZxfP3o9X/9hZA9eyy6jJ N/Y2IdhWeDvEHjV3ECq2szggz0tVdFTcDBX6ivZea94lc/sBmkWwC0iGt1iPO03E F7TY2k/NFXXP8rcIf9m0q6bWLB62eJSnD8NIBr1yRphYTrExV1qbRmztKaN+b40u CYGyxfTy3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:11 2026 by rpki-client