This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer File: aXJqlhM2--eCCz10joEvSVyHLTU.cer (raw, json) Hash identifier: HhxDwiIWyOAj1EL1IMw96rXt/N8a+jI/qKJMtMHbIg4= Subject key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B71ED8B22EE8A54D282506AB972B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210653 IP: 194.8.86.0/23 IP: 194.9.0.0/23 IP: 2a0f:ee80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:71:ed:8b:22:ee:8a:54:d2:82:50:6a:b9:72:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69726a961336fbe7820b3d748e812f495c872d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:24:3a:70:78:2c:f6:42:0f:4d:23:1c:60:1a: 21:9b:31:6b:98:30:a6:63:fc:ac:74:ff:68:85:21: 0b:1e:f1:c6:20:96:70:b8:90:7b:67:44:7c:3d:7a: bf:02:97:c6:4e:f8:5d:a3:ac:59:a2:16:ed:9e:de: 24:40:58:fb:58:3c:75:33:c5:88:b5:0b:bf:d1:09: 5c:52:ee:3e:97:de:24:f2:df:11:cf:20:1e:9b:ea: aa:44:22:6e:72:44:7d:21:1c:45:86:29:aa:38:ae: 56:c1:3a:74:0f:f1:f3:c6:84:5b:32:9c:af:08:85: f3:1b:93:74:02:ae:b3:91:e7:03:c9:0a:2d:f9:6a: 85:93:33:42:67:b8:fd:7d:0e:3f:cd:96:5d:cd:7c: e7:c1:6b:e4:7e:da:95:8f:81:32:f2:d1:fc:70:d9: b1:c5:63:17:c7:85:1f:2a:5d:29:36:60:d1:4f:85: 84:c1:f9:5a:9d:7e:dd:4d:b4:99:e5:9c:80:78:a2: 0b:cf:85:5d:2f:c8:8a:16:5c:3a:b1:e4:ec:33:a4: ae:2e:6d:99:46:93:0f:5f:88:81:f3:69:92:65:84: 9b:44:c8:47:99:54:03:35:9a:25:37:fa:e3:8a:f0: 2b:f4:f2:e2:f5:31:16:88:14:6d:e0:6e:9a:52:7d: 86:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.86.0/23 194.9.0.0/23 IPv6: 2a0f:ee80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210653 Signature Algorithm: sha256WithRSAEncryption 86:5e:ce:6b:fb:bb:3b:44:14:77:5a:7c:25:7d:80:30:68:82: 97:94:18:07:9c:36:15:4f:df:a1:60:7b:09:63:2b:da:66:a2: 3e:c8:cf:f6:1e:17:a7:3a:21:02:f6:62:03:b7:1f:88:b0:0b: 5d:e1:f2:2b:e4:f7:2b:99:95:13:83:3a:19:df:7b:25:ca:d5: 21:41:35:40:a9:c4:31:51:e9:77:cd:14:79:22:ca:ad:18:e5: 8d:a8:63:79:ff:77:21:d1:3b:4b:13:39:42:bf:04:80:11:0c: 2f:79:b0:7d:f6:02:41:76:78:b6:c8:05:db:b0:a8:37:5d:4d: f1:08:bb:ee:72:a3:f1:e6:ff:4b:ca:df:3f:a6:39:b3:3d:a6: 8c:ee:ca:65:17:d0:3a:6a:2c:42:71:b5:c5:35:75:d0:85:1c: 80:68:e0:2c:f3:ee:6a:95:52:b0:36:26:9f:b9:51:35:c8:1f: da:99:7f:07:5d:73:33:a0:8c:d4:34:b0:be:61:12:44:ec:35: ef:a0:20:53:14:36:8f:84:4a:33:6c:63:63:2e:b8:aa:9e:71: 40:24:03:8d:72:ff:76:38:34:73:72:55:82:c0:a9:d8:fc:a3: c0:a0:fd:c7:ef:11:f9:08:54:e1:41:82:dc:36:e9:c5:ac:18: 38:bc:a7:b8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6W3HtiyLuilTSglBquXKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTcyNmE5NjEzMzZmYmU3ODIwYjNkNzQ4ZTgxMmY0OTVjODcyZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSQ6cHgs9kIPTSMcYBohmzFrmDCm Y/ysdP9ohSELHvHGIJZwuJB7Z0R8PXq/ApfGTvhdo6xZohbtnt4kQFj7WDx1M8WI tQu/0QlcUu4+l94k8t8RzyAem+qqRCJuckR9IRxFhimqOK5WwTp0D/HzxoRbMpyv CIXzG5N0Aq6zkecDyQot+WqFkzNCZ7j9fQ4/zZZdzXznwWvkftqVj4Ey8tH8cNmx xWMXx4UfKl0pNmDRT4WEwflanX7dTbSZ5ZyAeKILz4VdL8iKFlw6seTsM6SuLm2Z RpMPX4iB82mSZYSbRMhHmVQDNZolN/rjivAr9PLi9TEWiBRt4G6aUn2GawIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFGlyapYTNvvnggs9dI6BL0lchy01MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzI1ZTk3 Mi0yODQyLTQ1MTQtOGFkZS1jMDE2NmQ5NzAxMGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvMjVlOTcy LTI4NDItNDUxNC04YWRlLWMwMTY2ZDk3MDEwZC8xL2FYSnFsaE0yLS1lQ0N6MTBq b0V2U1Z5SExUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwghWAwQBwgkAMA0EAgACMAcDBQMqD+6AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM23TANBgkqhkiG9w0BAQsFAAOCAQEAhl7O a/u7O0QUd1p8JX2AMGiCl5QYB5w2FU/foWB7CWMr2maiPsjP9h4XpzohAvZiA7cf iLALXeHyK+T3K5mVE4M6Gd97JcrVIUE1QKnEMVHpd80UeSLKrRjljahjef93IdE7 SxM5Qr8EgBEML3mwffYCQXZ4tsgF27CoN11N8Qi77nKj8eb/S8rfP6Y5sz2mjO7K ZRfQOmosQnG1xTV10IUcgGjgLPPuapVSsDYmn7lRNcgf2pl/B11zM6CM1DSwvmES ROw176AgUxQ2j4RKM2xjYy64qp5xQCQDjXL/djg0c3JVgsCp2PyjwKD9x+8R+QhU 4UGC3DbpxawYOLynuA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:01 2026 by rpki-client