This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer File: aRWYIN1xgAT7FchbJweWy06EpOo.cer (raw, json) Hash identifier: /JNERGmdr5QVKw/Tst0yoUwL/ke/Hv9mzRCKEYke3G8= Subject key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7801F8448CC6D5203C6968DDE9863 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49366 IP: 188.144.0.0/15 IP: 195.149.76.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:80:1f:84:48:cc:6d:52:03:c6:96:8d:de:98:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69159820dd718004fb15c85b270796cb4e84a4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d4:b6:6c:a3:ae:5b:1f:e6:2d:90:37:26:9c: f1:fc:23:47:10:b8:be:15:e0:3d:12:7e:03:1a:8d: b7:e4:03:c3:93:74:eb:dc:59:a2:ba:f8:f5:ed:12: b1:ca:b5:fa:cc:3e:b2:e8:94:3a:99:3c:ba:8d:bc: 2c:15:83:e2:4a:f5:57:89:19:84:9f:18:55:55:ac: 58:79:bc:1c:bd:0b:2c:b3:a4:6f:69:cf:bc:0c:e8: 39:1e:6a:37:b4:69:32:1c:cd:83:d4:b2:11:d2:d5: fc:72:a8:77:de:76:c4:55:56:97:c0:8d:81:81:6d: 7b:c8:67:0f:3c:fc:c0:9b:bd:9b:50:c1:88:56:f5: d4:19:cc:ed:4c:24:90:9f:2a:56:85:c1:5a:58:69: dd:f8:21:15:07:55:f8:db:48:22:ac:b4:d6:c1:3d: 4f:aa:5a:ba:df:65:d5:bb:58:0d:9f:5e:d3:ea:30: d8:12:04:20:55:8e:ef:9d:63:8c:fa:f5:43:82:c4: 02:a4:9a:96:ce:6f:ea:62:ab:de:1e:74:51:c1:36: 31:0d:98:59:ab:72:90:a7:c5:07:0c:95:76:dd:83: ba:f5:0a:c9:16:d2:0f:51:74:b8:63:69:71:1e:88: c8:71:b6:c9:ef:ef:25:2c:2e:70:96:53:83:8a:0c: 46:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.144.0.0/15 195.149.76.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49366 Signature Algorithm: sha256WithRSAEncryption a3:36:9b:a1:39:b1:89:1b:7b:83:83:ea:b9:ef:18:2f:be:6f: 10:66:3a:b8:96:72:3b:e5:d9:c5:09:50:c6:1e:e3:11:a4:bf: ce:5b:c1:ee:38:67:32:78:72:6b:39:47:77:91:49:9b:a4:b6: e3:8e:df:8c:40:92:e9:17:86:f1:e9:b0:41:79:72:23:39:7c: 36:57:16:5e:14:b5:9f:b6:3f:8e:d1:3a:ab:db:76:4e:43:aa: 02:d4:93:2b:f3:c4:c6:4c:16:46:18:2c:09:af:23:65:5e:e9: c7:7d:be:af:95:6a:f2:b7:39:32:9d:7a:48:69:ff:a2:30:c1: 09:14:b3:39:ca:02:57:4e:18:6b:ef:b8:22:cb:fa:8a:24:db: 8f:11:db:01:f7:89:1d:2c:30:80:14:d0:79:65:4f:c0:1a:5b: bc:50:e0:da:6b:4b:60:53:0f:4d:11:4b:13:eb:24:41:3f:5a: 55:71:7b:71:2f:90:d6:d6:1a:48:47:28:b8:50:28:ae:10:bf: 23:2a:f9:33:56:1f:fd:af:66:49:81:79:af:06:40:e2:75:57: 67:24:bb:73:40:2f:c8:39:26:bc:ca:18:d1:23:60:5e:e8:9e: 92:88:25:53:8e:2e:35:61:56:ac:de:c1:e8:df:b0:82:d3:18: 66:01:47:57 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt6x4AfhEjMbVIDxpaN3phjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTE1OTgyMGRkNzE4MDA0ZmIxNWM4NWIyNzA3OTZjYjRlODRhNGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dS2bKOuWx/mLZA3Jpzx/CNHELi+ FeA9En4DGo235APDk3Tr3Fmiuvj17RKxyrX6zD6y6JQ6mTy6jbwsFYPiSvVXiRmE nxhVVaxYebwcvQsss6Rvac+8DOg5Hmo3tGkyHM2D1LIR0tX8cqh33nbEVVaXwI2B gW17yGcPPPzAm72bUMGIVvXUGcztTCSQnypWhcFaWGnd+CEVB1X420girLTWwT1P qlq632XVu1gNn17T6jDYEgQgVY7vnWOM+vVDgsQCpJqWzm/qYqveHnRRwTYxDZhZ q3KQp8UHDJV23YO69QrJFtIPUXS4Y2lxHojIcbbJ7+8lLC5wllODigxGFQIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFGkVmCDdcYAE+xXIWycHlstOhKTqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzdkZGYz MC0zYzkxLTQzZjktYjNiMS1jOTQ5ZjA1OTFmNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvN2RkZjMw LTNjOTEtNDNmOS1iM2IxLWM5NDlmMDU5MWY1Yi8xL2FSV1lJTjF4Z0FUN0ZjaGJK d2VXeTA2RXBPby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF BwEHAQH/BBUwEzARBAIAATALAwMBvJADBADDlUwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAMDWMA0GCSqGSIb3DQEBCwUAA4IBAQCjNpuhObGJG3uDg+q57xgvvm8Q Zjq4lnI75dnFCVDGHuMRpL/OW8HuOGcyeHJrOUd3kUmbpLbjjt+MQJLpF4bx6bBB eXIjOXw2VxZeFLWftj+O0Tqr23ZOQ6oC1JMr88TGTBZGGCwJryNlXunHfb6vlWry tzkynXpIaf+iMMEJFLM5ygJXThhr77giy/qKJNuPEdsB94kdLDCAFNB5ZU/AGlu8 UODaa0tgUw9NEUsT6yRBP1pVcXtxL5DW1hpIRyi4UCiuEL8jKvkzVh/9r2ZJgXmv BkDidVdnJLtzQC/IOSa8yhjRI2Be6J6SiCVTji41YVas3sHo37CC0xhmAUdX -----END CERTIFICATE-----Generated at Tue Feb 3 08:12:39 2026 by rpki-client