This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aVHUVR0mpRwPkrd8LTePs0dYuHc.cer File: aVHUVR0mpRwPkrd8LTePs0dYuHc.cer (raw, json) Hash identifier: oOeN7jD1EKuhQcOFJy4Q6n6l8LCs7Y5BlarB1apBn0A= Subject key identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F153E73AA52C57CA144070410D42CBF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 196658 IP: 91.213.102.0/24 IP: 146.0.88.0/21 IP: 185.195.88.0/22 IP: 2a00:9980::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3e:73:aa:52:c5:7c:a1:44:07:04:10:d4:2c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6951d4551d26a51c0f92b77c2d378fb34758b877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:1b:fb:95:e7:47:8e:34:70:85:9d:85:02: 87:41:75:c6:e5:c5:6e:e3:fa:d9:58:07:a8:0c:6e: fa:23:d5:ac:f6:ab:9f:b6:99:41:66:30:ef:7a:fc: 07:54:06:71:b3:5c:3d:98:70:01:06:16:76:b8:aa: 23:5c:eb:e1:8a:25:4e:c0:7a:30:08:b7:a9:78:fb: 82:39:28:9e:b2:38:b3:1e:13:1f:55:89:dd:f1:7b: 5e:f1:33:fb:dc:20:de:04:63:48:b9:ca:ad:a6:e4: 70:2a:95:cd:8e:d9:86:df:a9:e0:b1:f3:c1:7f:5c: ca:91:a6:8a:5e:07:ca:5c:7e:81:89:7e:4e:4c:0e: af:bb:59:cf:78:cb:13:62:9a:a4:8c:ed:00:d4:0b: c2:91:1f:de:3c:41:a9:84:ad:9f:22:53:15:2c:d2: 70:b6:0c:fb:3c:70:42:32:0d:d9:4d:4f:1a:ac:e2: 24:4d:88:c8:1b:35:5c:1b:f3:7d:4c:3e:3c:5f:a7: 61:ab:4d:92:9d:28:0c:b3:7f:c8:da:d8:bd:0d:7a: ca:c1:52:e0:83:77:1c:5d:cf:1d:42:05:f2:bd:5b: 72:99:16:f6:84:4a:6d:6b:65:1d:9c:19:c5:cb:53: 5a:44:82:f1:6e:5a:63:4e:e7:ed:41:2f:d6:bf:56: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:51:D4:55:1D:26:A5:1C:0F:92:B7:7C:2D:37:8F:B3:47:58:B8:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/02610f-6913-4049-97f0-a2eda946ed29/1/aVHUVR0mpRwPkrd8LTePs0dYuHc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.102.0/24 146.0.88.0/21 185.195.88.0/22 IPv6: 2a00:9980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 196658 Signature Algorithm: sha256WithRSAEncryption 09:04:90:5a:0e:e8:d9:14:cb:d4:50:d7:99:89:04:2e:9a:b2: f3:d6:b5:ce:81:08:c0:36:ac:c5:12:87:a9:bf:82:51:0e:ec: 56:41:3a:37:a6:13:75:f7:04:b3:7d:be:b1:78:cf:93:df:ab: 7e:d1:65:4c:8d:33:63:b1:5d:26:2c:a6:43:e8:e4:ce:4f:4b: eb:b9:4b:82:77:3d:00:8a:75:84:9e:19:a3:bd:63:0b:27:9c: e0:15:3e:67:04:2d:cd:78:52:95:f3:64:3d:b6:c4:36:f5:b8: 5c:ed:88:53:e8:4c:32:ed:28:81:d1:b7:bd:af:91:60:33:ca: ff:1b:81:3c:da:c5:0e:88:83:f1:e8:76:36:98:a4:44:12:95: 85:81:34:9c:5e:e6:bb:d6:87:2e:0f:d7:61:19:a5:cc:3b:fc: cc:4c:b6:2e:64:fc:17:5a:d3:5e:ad:47:6c:56:c2:c9:cf:9c: 3b:16:95:c7:c3:c4:95:07:9a:b9:7d:4d:95:03:7d:8a:38:ea: 19:d4:86:de:0c:13:1f:36:a2:a4:7c:05:8f:45:48:a3:2e:9c: d0:47:e0:43:f5:ca:24:61:97:9c:00:62:3e:d8:b8:b6:94:09: 3e:66:84:56:9e:d6:55:5f:f0:8c:09:44:dd:87:95:ef:51:1d: 30:5a:15:29 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/FT5zqlLFfKFEBwQQ1Cy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTUxZDQ1NTFkMjZhNTFjMGY5MmI3N2MyZDM3OGZiMzQ3NThiODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYcb+5XnR440cIWdhQKHQXXG5cVu 4/rZWAeoDG76I9Ws9quftplBZjDvevwHVAZxs1w9mHABBhZ2uKojXOvhiiVOwHow CLepePuCOSiesjizHhMfVYnd8Xte8TP73CDeBGNIucqtpuRwKpXNjtmG36ngsfPB f1zKkaaKXgfKXH6BiX5OTA6vu1nPeMsTYpqkjO0A1AvCkR/ePEGphK2fIlMVLNJw tgz7PHBCMg3ZTU8arOIkTYjIGzVcG/N9TD48X6dhq02SnSgMs3/I2ti9DXrKwVLg g3ccXc8dQgXyvVtymRb2hEpta2UdnBnFy1NaRILxblpjTuftQS/Wv1Zd9wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFGlR1FUdJqUcD5K3fC03j7NHWLh3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzAyNjEw Zi02OTEzLTQwNDktOTdmMC1hMmVkYTk0NmVkMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMDI2MTBm LTY5MTMtNDA0OS05N2YwLWEyZWRhOTQ2ZWQyOS8xL2FWSFVWUjBtcFJ3UGtyZDhM VGVQczBkWXVIYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW9VmAwQDkgBYAwQCucNYMA0EAgACMAcDBQAq AJmAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMAMjANBgkqhkiG9w0BAQsFAAOC AQEACQSQWg7o2RTL1FDXmYkELpqy89a1zoEIwDasxRKHqb+CUQ7sVkE6N6YTdfcE s32+sXjPk9+rftFlTI0zY7FdJiymQ+jkzk9L67lLgnc9AIp1hJ4Zo71jCyec4BU+ ZwQtzXhSlfNkPbbENvW4XO2IU+hMMu0ogdG3va+RYDPK/xuBPNrFDoiD8eh2Npik RBKVhYE0nF7mu9aHLg/XYRmlzDv8zEy2LmT8F1rTXq1HbFbCyc+cOxaVx8PElQea uX1NlQN9ijjqGdSG3gwTHzaipHwFj0VIoy6c0EfgQ/XKJGGXnABiPti4tpQJPmaE Vp7WVV/wjAlE3YeV71EdMFoVKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:58 2026 by rpki-client