This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aTHX56mXSaOF6usn-FCridqPLuA.cer File: aTHX56mXSaOF6usn-FCridqPLuA.cer (raw, json) Hash identifier: 8l5SRGBbKmf5hk/SjItHi3jeXK7TBgU90dhhicm2P3Q= Subject key identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA57A953154BB4A04E72126462A85B5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60538 IP: 193.36.1.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7a:95:31:54:bb:4a:04:e7:21:26:46:2a:85:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6931d7e7a99749a385eaeb27f850ab89da8f2ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:63:f8:f0:33:be:98:64:a0:e2:a7:c8:88:53: fa:ea:d0:df:04:fe:8a:36:27:7a:22:ce:b7:81:36: 63:d3:87:53:d1:4a:a4:dc:c4:2d:cb:b3:7a:0d:ab: 62:82:76:32:4c:4a:7d:57:e9:c3:97:2d:bd:98:ce: 01:ac:72:25:7e:df:4d:0c:44:64:52:4f:9e:5b:a5: aa:fa:6c:e3:48:b6:b4:b0:ce:2b:3a:9f:c7:4c:15: 72:28:4e:8e:26:eb:05:b4:6d:5a:50:1e:43:0d:a9: ae:7e:d8:08:a6:26:61:6f:76:51:49:39:f6:34:57: d0:7a:a9:69:f0:f5:12:f9:6b:6c:f4:63:51:ae:74: ff:82:b8:d7:17:82:04:c7:65:b6:bf:c0:c3:9a:55: 3f:9a:08:2b:d1:96:80:f5:1c:f0:87:6b:37:c4:4a: 87:65:dd:9e:dd:ba:d6:8c:5c:a0:75:97:6a:93:8c: 0b:99:63:95:ad:db:c6:75:65:7e:15:ae:71:60:61: 04:2b:f5:09:4c:50:f9:ee:48:e5:e0:c5:c0:6a:51: 8c:8f:63:b3:3a:a9:70:d3:00:f5:bc:41:4c:06:c5: bc:f8:1b:3c:94:97:2f:94:95:7f:34:9a:7b:7e:9c: d0:00:b1:5f:e7:3f:6e:07:f5:88:69:73:bf:1a:44: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:D7:E7:A9:97:49:A3:85:EA:EB:27:F8:50:AB:89:DA:8F:2E:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8cfd73-1257-4dfa-8c59-76ae42356ce5/1/aTHX56mXSaOF6usn-FCridqPLuA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.1.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60538 Signature Algorithm: sha256WithRSAEncryption 31:d9:7d:dd:91:eb:dc:db:26:e3:63:5c:26:7c:25:c6:6f:bd: 11:d0:04:bc:b5:c5:c8:39:82:d0:af:d4:88:39:c8:42:49:c0: 19:2b:70:03:fe:ef:1a:e1:5d:06:44:01:6a:7e:db:33:c4:cc: a2:f9:32:16:19:e7:87:8f:bb:8e:df:3e:23:7a:8f:0d:48:ff: c9:f8:8b:b2:e5:19:b9:23:1d:19:9b:3a:8b:48:f9:30:81:6b: 0f:c8:08:f7:0b:fb:c9:09:da:72:99:bd:e6:4f:f5:b3:5e:78: c5:c5:1c:d1:bd:b6:52:8d:23:0b:01:59:48:4d:7f:25:38:cc: 6e:3d:03:e1:ea:ad:16:ed:35:50:b0:72:74:72:1e:c7:a3:b2: 05:91:b9:fe:ab:99:5c:64:5a:05:f9:3f:cd:88:be:fa:1b:ed: d4:a8:6d:0d:ad:4e:08:e3:4f:58:09:aa:ac:d3:77:1d:28:9c: 45:29:ec:d8:92:ff:f1:4f:dc:57:f2:ec:17:f3:68:6e:3d:af: 85:ca:0d:cc:e7:c9:76:b9:f8:16:85:8d:3f:94:7b:8c:51:dc: 2b:b5:23:d9:19:6f:c1:82:32:0f:52:36:35:26:02:98:5d:31: aa:d0:a9:f2:08:47:85:82:c1:2e:fa:6a:03:9d:b7:4b:05:c1: 16:28:6e:fa -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pXqVMVS7SgTnISZGKoW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTMxZDdlN2E5OTc0OWEzODVlYWViMjdmODUwYWI4OWRhOGYyZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2P48DO+mGSg4qfIiFP66tDfBP6K Nid6Is63gTZj04dT0Uqk3MQty7N6DatignYyTEp9V+nDly29mM4BrHIlft9NDERk Uk+eW6Wq+mzjSLa0sM4rOp/HTBVyKE6OJusFtG1aUB5DDamuftgIpiZhb3ZRSTn2 NFfQeqlp8PUS+Wts9GNRrnT/grjXF4IEx2W2v8DDmlU/mggr0ZaA9Rzwh2s3xEqH Zd2e3brWjFygdZdqk4wLmWOVrdvGdWV+Fa5xYGEEK/UJTFD57kjl4MXAalGMj2Oz Oqlw0wD1vEFMBsW8+Bs8lJcvlJV/NJp7fpzQALFf5z9uB/WIaXO/GkT22QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGkx1+epl0mjherrJ/hQq4najy7gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwLzhjZmQ3 My0xMjU3LTRkZmEtOGM1OS03NmFlNDIzNTZjZTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvOGNmZDcz LTEyNTctNGRmYS04YzU5LTc2YWU0MjM1NmNlNS8xL2FUSFg1Nm1YU2FPRjZ1c24t RkNyaWRxUEx1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSQBMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDsejANBgkqhkiG9w0BAQsFAAOCAQEAMdl93ZHr3Nsm42NcJnwlxm+9EdAEvLXF yDmC0K/UiDnIQknAGStwA/7vGuFdBkQBan7bM8TMovkyFhnnh4+7jt8+I3qPDUj/ yfiLsuUZuSMdGZs6i0j5MIFrD8gI9wv7yQnacpm95k/1s154xcUc0b22Uo0jCwFZ SE1/JTjMbj0D4eqtFu01ULBydHIex6OyBZG5/quZXGRaBfk/zYi++hvt1KhtDa1O CONPWAmqrNN3HSicRSns2JL/8U/cV/LsF/Nobj2vhcoNzOfJdrn4FoWNP5R7jFHc K7Uj2RlvwYIyD1I2NSYCmF0xqtCp8ghHhYLBLvpqA523SwXBFihu+g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:55 2026 by rpki-client