This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer File: aXejEW7MnXpCnxNlFhPorRSf8yQ.cer (raw, json) Hash identifier: EpJA3k1MAdAI/OuGdTPpqyEoz1zabwCu5lJaTwJjelE= Subject key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BFF81806DC73AEACC507EBC46F491ECDA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 27 Jan 2026 12:50:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58051 IP: 45.154.196.0/22 IP: 176.116.126.0/24 IP: 185.139.7.0/24 IP: 185.185.42.0/24 IP: 185.203.91.0/24 IP: 185.221.63.0/24 IP: 193.105.184.0/24 IP: 193.105.207.0/24 IP: 2a01:fdc0::/29 IP: 2a12:ab40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:81:80:6d:c7:3a:ea:cc:50:7e:bc:46:f4:91:ec:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 27 12:50:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:6e:ae:80:3d:81:31:0b:86:89:5b:28:01: 0a:be:b8:a9:5a:f1:c5:15:bb:c8:f5:51:39:3a:46: d1:d4:96:45:21:18:8b:02:93:07:61:a2:92:6a:31: 0e:55:03:52:3e:ea:b6:50:7d:4c:49:4b:ce:d0:94: 70:91:38:cc:9b:36:f9:54:02:0f:aa:4b:ae:dc:05: af:3e:df:bc:5f:b9:63:59:ab:90:df:41:bf:6b:a8: db:3a:a3:e3:38:6f:b8:f2:3b:06:b7:07:26:95:79: 5b:3f:d2:dc:b0:31:fc:60:e6:05:31:b8:e1:ce:e1: ea:88:76:79:41:4d:92:30:c3:c2:59:d5:58:06:98: df:c0:c9:4a:1a:96:d1:92:54:3b:19:43:2c:4d:76: 1e:3d:f7:69:e4:1e:c2:12:03:86:e2:91:40:b5:5f: 93:2f:88:c7:4a:e7:7e:37:82:93:34:c1:12:47:2e: ab:f0:f7:b1:21:9a:a6:5f:c0:d9:c2:7f:48:73:c3: ee:e0:e2:6b:20:9b:eb:21:35:38:bc:c7:23:c2:71: 13:40:da:e6:76:88:7e:b0:a6:35:fb:6c:63:f1:57: 4c:7a:e0:de:81:b9:10:63:a8:01:76:31:79:3e:1b: 2a:91:54:34:de:fa:27:b7:43:37:d7:a0:8f:5c:7f: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.196.0/22 176.116.126.0/24 185.139.7.0/24 185.185.42.0/24 185.203.91.0/24 185.221.63.0/24 193.105.184.0/24 193.105.207.0/24 IPv6: 2a01:fdc0::/29 2a12:ab40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58051 Signature Algorithm: sha256WithRSAEncryption 19:44:a1:da:6a:93:cb:0a:cd:15:51:a8:7c:2f:7d:be:46:b0: 3d:b1:93:ad:20:3f:54:03:c0:76:84:66:1f:7d:2f:ac:5c:7c: 98:cd:10:10:2a:80:09:f9:8c:08:27:5c:f0:c6:b8:8f:22:27: ec:59:1e:f1:d1:eb:9a:c0:0c:e7:78:20:80:2f:1c:58:b1:82: 8b:c7:7a:2d:ec:49:ce:90:09:f9:7b:64:e7:46:bf:97:71:2b: fe:d9:ae:d1:b9:7e:2e:4d:ea:2e:f8:a1:97:62:f7:a9:3b:08: 2e:c6:c6:57:2b:84:0f:5b:7e:38:ed:33:5e:92:26:30:47:28: d7:80:6d:78:b0:b3:66:54:fc:bd:e5:22:c1:b2:c5:9e:0c:49: a7:65:1b:d9:6c:80:ab:cc:66:1c:8d:95:55:ef:79:b2:f6:15: 8d:0a:33:d9:98:18:68:17:99:b1:c9:46:7c:c0:9c:aa:de:c8: 53:eb:c7:19:70:c2:a2:a8:61:d9:80:fa:a3:2c:3f:43:0a:16: 0c:e7:40:e9:9a:32:c2:e8:58:b9:74:6c:60:fa:2a:b2:d7:dc: 85:40:0a:bd:2d:48:ed:e0:84:6b:5f:ff:49:52:a0:e6:17:aa: 94:cd:e1:a1:54:35:b1:a8:54:6f:8f:32:2a:b5:9c:ee:34:7f: 8a:da:eb:73 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZv/gYBtxzrqzFB+vEb0kezaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI3MTI1MDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTc3YTMxMTZlY2M5ZDdhNDI5ZjEzNjUxNjEzZThhZDE0OWZmMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZZuroA9gTELholbKAEKvripWvHF FbvI9VE5OkbR1JZFIRiLApMHYaKSajEOVQNSPuq2UH1MSUvO0JRwkTjMmzb5VAIP qkuu3AWvPt+8X7ljWauQ30G/a6jbOqPjOG+48jsGtwcmlXlbP9LcsDH8YOYFMbjh zuHqiHZ5QU2SMMPCWdVYBpjfwMlKGpbRklQ7GUMsTXYePfdp5B7CEgOG4pFAtV+T L4jHSud+N4KTNMESRy6r8PexIZqmX8DZwn9Ic8Pu4OJrIJvrITU4vMcjwnETQNrm doh+sKY1+2xj8VdMeuDegbkQY6gBdjF5PhsqkVQ03vont0M316CPXH88ywIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzljNjY5 MS1hZGFjLTQxZTUtOGNlOS1mNGI3YjM5OGM2MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvOWM2Njkx LWFkYWMtNDFlNS04Y2U5LWY0YjdiMzk4YzYzNC8xL2FYZWpFVzdNblhwQ254TmxG aFBvclJTZjh5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQCLZrEAwQAsHR+AwQAuYsHAwQAubkqAwQAuctb AwQAud0/AwQAwWm4AwQAwWnPMBQEAgACMA4DBQMqAf3AAwUDKhKrQDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA4sMwDQYJKoZIhvcNAQELBQADggEBABlEodpqk8sK zRVRqHwvfb5GsD2xk60gP1QDwHaEZh99L6xcfJjNEBAqgAn5jAgnXPDGuI8iJ+xZ HvHR65rADOd4IIAvHFixgovHei3sSc6QCfl7ZOdGv5dxK/7ZrtG5fi5N6i74oZdi 96k7CC7GxlcrhA9bfjjtM16SJjBHKNeAbXiws2ZU/L3lIsGyxZ4MSadlG9lsgKvM ZhyNlVXvebL2FY0KM9mYGGgXmbHJRnzAnKreyFPrxxlwwqKoYdmA+qMsP0MKFgzn QOmaMsLoWLl0bGD6KrLX3IVACr0tSO3ghGtf/0lSoOYXqpTN4aFUNbGoVG+PMiq1 nO40f4ra63M= -----END CERTIFICATE-----Generated at Mon Feb 2 12:45:41 2026 by rpki-client