This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aUSJSM9NjazkdxjA9yWe3usJPns.cer File: aUSJSM9NjazkdxjA9yWe3usJPns.cer (raw, json) Hash identifier: HG/PJUOkgsYyrilirhqDkPhjhqoyuWiRTLOKAgkcdVo= Subject key identifier: 69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E548F31BA547FC7B91CF072FA6A4C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.31.240.0/21 IP: 78.41.0.0/21 IP: 92.43.208.0/21 IP: 93.187.0.0/21 IP: 93.189.160.0/21 IP: 185.37.76.0/22 IP: 195.226.128.0/19 IP: 2a04:6b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:54:8f:31:ba:54:7f:c7:b9:1c:f0:72:fa:6a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69448948cf4d8dace47718c0f7259edeeb093e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:f5:54:09:71:e1:9d:6d:00:cd:cd:86:9e: b0:68:14:b7:fd:b7:89:b6:74:ff:f2:6c:cd:d8:76: 57:89:fc:fa:d5:95:c1:81:cc:c1:e1:09:33:22:cd: 62:51:9f:75:c1:39:9b:8b:5e:6a:65:29:2d:07:83: 5c:5b:a6:ef:46:0a:bc:97:d7:ca:23:c9:bf:8c:fb: e2:0f:2f:23:d6:11:73:45:6b:16:dd:6f:da:ff:c3: 71:fd:7e:f2:fd:d8:00:75:85:38:af:59:ce:d7:21: 09:71:46:b3:a7:e9:be:37:82:93:74:42:98:9c:8e: 89:45:ee:b9:5d:9b:80:b4:b0:4b:9e:52:30:bb:db: 21:de:79:02:60:37:e4:ba:89:65:51:d4:b4:f6:b1: 49:2f:e3:5c:08:e3:4d:8f:4f:33:af:18:d5:48:a2: fb:d5:79:fd:9a:7d:59:71:8e:b4:ab:d7:95:5a:32: 82:e7:1d:65:28:0a:58:3e:72:0e:cc:f8:88:2d:7d: 40:55:d3:e1:9e:11:88:b8:71:b7:49:43:78:fa:e3: 00:8f:4c:13:d2:97:d4:bb:ef:1d:f1:3e:84:b3:a1: 8d:c7:73:ef:15:45:f4:6a:1e:3f:2a:95:63:ae:90: 61:8f:dc:fb:d3:10:bb:dc:02:bb:81:48:32:81:6b: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:44:89:48:CF:4D:8D:AC:E4:77:18:C0:F7:25:9E:DE:EB:09:3E:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a9248-ec91-43fa-86ff-4b137a4dbc6e/1/aUSJSM9NjazkdxjA9yWe3usJPns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.240.0/21 78.41.0.0/21 92.43.208.0/21 93.187.0.0/21 93.189.160.0/21 185.37.76.0/22 195.226.128.0/19 IPv6: 2a04:6b40::/29 Signature Algorithm: sha256WithRSAEncryption 0b:f3:0a:1c:c2:dc:53:46:b8:9d:30:df:99:e1:1a:0c:2b:94: bd:99:a0:6f:f4:86:ff:8f:10:7a:8b:2d:16:39:14:c5:4e:ed: 36:93:18:f9:c9:a0:fc:62:fe:95:81:de:0a:bd:c1:2c:76:4e: 1d:0e:92:b6:05:c8:a8:2b:9d:00:73:91:53:e3:df:e3:19:c0: e1:f0:5f:7b:62:dd:3f:91:56:f0:b4:28:ef:07:7e:3b:53:6b: 5d:e1:e5:eb:a9:f4:d1:0c:47:0a:cb:c5:ad:62:c1:9b:57:0a: 71:59:0c:fb:a9:ab:ff:ec:80:6a:b6:c6:a3:db:f6:19:31:b9: 7a:a8:b8:7c:68:73:f1:11:d2:2f:1e:58:10:09:b9:df:3d:9d: df:7d:87:9e:c5:80:2a:71:d7:bf:6c:72:55:ce:0c:5c:95:a2: 5e:28:06:fc:16:5e:34:0d:e9:b0:ff:fe:f7:7f:60:5f:23:65: 00:aa:ee:d4:67:7e:95:98:38:6e:d0:4b:1b:01:2e:4d:08:33: 85:3b:1a:cb:7f:23:60:49:32:92:db:d2:89:18:10:15:d1:42: 2c:30:52:50:68:b2:a0:0d:0e:c2:5d:3a:ef:f7:d6:34:be:d4: 76:af:92:f5:19:43:fb:40:1c:31:c2:36:8c:14:9e:1c:20:63: fe:c1:00:33 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt5flSPMbpUf8e5HPBy+mpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTQ0ODk0OGNmNGQ4ZGFjZTQ3NzE4YzBmNzI1OWVkZWViMDkzZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaL1VAlx4Z1tAM3Nhp6waBS3/beJ tnT/8mzN2HZXifz61ZXBgczB4QkzIs1iUZ91wTmbi15qZSktB4NcW6bvRgq8l9fK I8m/jPviDy8j1hFzRWsW3W/a/8Nx/X7y/dgAdYU4r1nO1yEJcUazp+m+N4KTdEKY nI6JRe65XZuAtLBLnlIwu9sh3nkCYDfkuollUdS09rFJL+NcCONNj08zrxjVSKL7 1Xn9mn1ZcY60q9eVWjKC5x1lKApYPnIOzPiILX1AVdPhnhGIuHG3SUN4+uMAj0wT 0pfUu+8d8T6Es6GNx3PvFUX0ah4/KpVjrpBhj9z70xC73AK7gUgygWulZwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFGlEiUjPTY2s5HcYwPclnt7rCT57MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFkLzFhOTI0 OC1lYzkxLTQzZmEtODZmZi00YjEzN2E0ZGJjNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWQvMWE5MjQ4 LWVjOTEtNDNmYS04NmZmLTRiMTM3YTRkYmM2ZS8xL2FVU0pTTTlOamF6a2R4akE5 eVdlM3VzSlBucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDLh/wAwQDTikAAwQDXCvQAwQDXbsAAwQDXb2g AwQCuSVMAwQFw+KAMA0EAgACMAcDBQMqBGtAMA0GCSqGSIb3DQEBCwUAA4IBAQAL 8wocwtxTRridMN+Z4RoMK5S9maBv9Ib/jxB6iy0WORTFTu02kxj5yaD8Yv6Vgd4K vcEsdk4dDpK2BcioK50Ac5FT49/jGcDh8F97Yt0/kVbwtCjvB347U2td4eXrqfTR DEcKy8WtYsGbVwpxWQz7qav/7IBqtsaj2/YZMbl6qLh8aHPxEdIvHlgQCbnfPZ3f fYeexYAqcde/bHJVzgxclaJeKAb8Fl40Demw//73f2BfI2UAqu7UZ36VmDhu0Esb AS5NCDOFOxrLfyNgSTKS29KJGBAV0UIsMFJQaLKgDQ7CXTrv99Y0vtR2r5L1GUP7 QBwxwjaMFJ4cIGP+wQAz -----END CERTIFICATE-----Generated at Mon Feb 9 18:27:52 2026 by rpki-client