This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer File: aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer (raw, json) Hash identifier: lpvAiGPSuTbQv7WC5BxobtcVFvCUqFqNKS2juwCHEPA= Subject key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB34A3425E854F0D11EB7BB56C702A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.19.122.0/24 IP: 176.97.215.0/24 IP: 212.52.7.0/24 IP: 2a0c:6f40::/29 IP: 2a12:5200::/29 IP: 2a12:db00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:34:a3:42:5e:85:4f:0d:11:eb:7b:b5:6c:70:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69737c6e0602be3804e277580bab7e21e6e33474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6b:9a:c3:80:86:31:28:d3:1d:ac:ce:a1:8a: 00:10:77:d8:b0:ea:8f:24:cb:37:02:6c:21:7b:9c: 7d:8d:e5:bf:89:51:7a:64:4d:a2:14:f9:52:61:55: e2:8e:73:96:05:51:7a:84:e3:55:c6:59:7b:65:15: 2a:a5:6c:c8:50:cf:f2:64:35:69:1f:b1:c2:2e:02: 4c:fe:b4:1c:da:9f:e8:31:07:d7:a9:3b:93:a3:8f: da:93:09:7e:54:94:0b:d7:3c:2f:d0:c8:09:4b:62: e5:60:90:4b:d5:f6:0b:9e:a0:cb:e9:59:07:a7:5f: 8a:60:85:7e:18:81:51:ba:6a:d0:a3:fb:1e:43:5b: 38:a1:5c:bb:d8:bb:da:27:81:51:fe:31:cf:76:74: 4f:5a:db:de:f1:30:83:68:34:a6:db:a5:40:37:2b: ae:1d:65:d8:4a:9a:ae:46:e8:60:e2:02:12:e6:68: c5:57:21:61:59:95:13:86:90:e8:a3:e1:f2:79:71: ad:b2:a8:9b:77:00:e8:8a:04:38:6f:1f:ad:d1:42: 1c:a1:2b:0b:46:a9:1e:a6:b8:fd:6d:f3:30:a9:4a: a2:7a:c7:42:b3:b8:ec:fb:d3:3c:10:11:a9:7e:8e: 1e:9d:11:02:6d:09:2f:ff:37:ea:58:05:22:68:5a: 20:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.122.0/24 176.97.215.0/24 212.52.7.0/24 IPv6: 2a0c:6f40::/29 2a12:5200::/29 2a12:db00::/29 Signature Algorithm: sha256WithRSAEncryption 65:b6:9d:36:fe:47:ff:98:2a:91:2c:64:ba:b0:04:48:d2:4a: a9:cc:7b:e2:85:10:c7:07:93:43:1a:c5:1f:90:04:ce:54:4b: 8d:77:f3:b3:22:19:73:da:ef:80:62:18:94:b4:88:00:6e:3b: 2b:d7:11:21:34:2d:a3:0c:25:60:c2:3d:c5:7a:2b:2b:8a:3b: 2e:ce:35:5c:17:ac:4d:58:52:0e:ec:3d:30:a2:58:07:ec:34: fb:35:d9:52:d3:c7:05:6c:2a:33:13:ab:7a:80:f8:98:f7:5e: a6:c1:57:21:ad:71:47:57:f3:8c:f3:23:4d:65:e4:77:27:29: 83:46:c2:ff:8b:99:56:6f:71:9c:90:a5:a8:ed:dd:6d:4f:01: 5b:b4:bc:2d:d0:a7:e7:d4:8d:76:e1:37:78:54:ca:d6:3d:a1: cc:9d:a9:47:7f:26:e2:3b:fa:8c:d0:d0:e4:52:d4:6f:e8:83: 05:96:c7:74:b4:cf:e4:e3:c2:ef:7e:07:01:9e:40:85:7f:30: 63:9f:94:d9:83:77:94:6b:8e:97:c9:e9:0f:a0:0d:7f:22:90: a5:0e:d3:36:04:3a:79:1a:a5:29:86:d4:b4:1a:e2:97:66:39: 0d:54:67:b9:f5:52:d0:a8:46:96:95:bb:41:bd:fa:8d:37:70: 59:34:43:5e -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAZt26zSjQl6FTw0R63u1bHAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTczN2M2ZTA2MDJiZTM4MDRlMjc3NTgwYmFiN2UyMWU2ZTMzNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGuaw4CGMSjTHazOoYoAEHfYsOqP JMs3Amwhe5x9jeW/iVF6ZE2iFPlSYVXijnOWBVF6hONVxll7ZRUqpWzIUM/yZDVp H7HCLgJM/rQc2p/oMQfXqTuTo4/akwl+VJQL1zwv0MgJS2LlYJBL1fYLnqDL6VkH p1+KYIV+GIFRumrQo/seQ1s4oVy72LvaJ4FR/jHPdnRPWtve8TCDaDSm26VANyuu HWXYSpquRuhg4gIS5mjFVyFhWZUThpDoo+HyeXGtsqibdwDoigQ4bx+t0UIcoSsL Rqkeprj9bfMwqUqiesdCs7js+9M8EBGpfo4enRECbQkv/zfqWAUiaFogZwIDAQAB o4ICrTCCAqkwHQYDVR0OBBYEFGlzfG4GAr44BOJ3WAurfiHm4zR0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiL2I2YWY5 ZC00N2JhLTRiOTItYjQxYS04MzhhNDUwNTczNWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvYjZhZjlk LTQ3YmEtNGI5Mi1iNDFhLTgzOGE0NTA1NzM1YS8xL2FYTjhiZ1lDdmpnRTRuZFlD NnQtSWViak5IUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF BwEHAQH/BDkwNzAYBAIAATASAwQAkhN6AwQAsGHXAwQA1DQHMBsEAgACMBUDBQMq DG9AAwUDKhJSAAMFAyoS2wAwDQYJKoZIhvcNAQELBQADggEBAGW2nTb+R/+YKpEs ZLqwBEjSSqnMe+KFEMcHk0MaxR+QBM5US41387MiGXPa74BiGJS0iABuOyvXESE0 LaMMJWDCPcV6KyuKOy7ONVwXrE1YUg7sPTCiWAfsNPs12VLTxwVsKjMTq3qA+Jj3 XqbBVyGtcUdX84zzI01l5HcnKYNGwv+LmVZvcZyQpajt3W1PAVu0vC3Qp+fUjXbh N3hUytY9ocydqUd/JuI7+ozQ0ORS1G/ogwWWx3S0z+Tjwu9+BwGeQIV/MGOflNmD d5RrjpfJ6Q+gDX8ikKUO0zYEOnkapSmG1LQa4pdmOQ1UZ7n1UtCoRpaVu0G9+o03 cFk0Q14= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:40 2026 by rpki-client