This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer File: aYfUeTXhE31URCbbUojhKpwCWsI.cer (raw, json) Hash identifier: rJbgPno3dvloODw0Y53BKyq9HBQjI96J1p84Ss0ULmA= Subject key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A720A410840B8E5E3A1BE8947811C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.44.178.0/23 IP: 193.84.4.0/23 IP: 2a01:7660::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:72:0a:41:08:40:b8:e5:e3:a1:be:89:47:81:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6987d47935e1137d544426db5288e12a9c025ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ed:07:4e:cd:f2:a7:8e:60:ad:11:89:5b:0f: 13:c2:78:83:2b:92:17:52:5f:56:60:b0:c8:b3:67: db:6d:61:bd:43:c8:67:0e:1f:b5:6e:36:a2:6e:0a: c8:42:a3:42:e7:da:7e:5a:5f:b1:37:8b:18:67:ee: 4c:81:8d:90:3d:e5:a5:f9:5d:c9:4e:c8:10:ff:5e: 59:5d:f9:24:26:f7:92:aa:10:2c:c9:55:dd:f5:d1: 96:7f:69:fe:4b:e7:de:57:06:1c:b2:db:e8:38:a2: bf:50:dd:d8:a4:03:bd:ae:ca:12:ff:d2:06:70:dc: 06:f7:ed:6d:e4:49:f5:94:cf:e7:1d:f0:5c:c6:fc: 96:b1:e2:49:b0:79:e9:35:eb:fc:32:28:21:1f:95: b4:13:87:6a:3b:07:e2:8d:c3:02:d3:e3:d2:95:49: fd:6e:a5:c7:d9:21:b3:b0:65:ea:5b:a2:70:de:84: 60:16:bf:a4:53:e3:d7:b7:1a:6a:49:99:a9:7d:c2: 76:d4:74:91:9b:a8:be:5d:dc:23:57:01:c2:6c:e1: b3:7c:89:3c:e9:8b:5a:f3:bd:c8:b1:d5:8c:1a:a7: 80:3a:b3:96:a5:d6:af:60:87:24:d2:e9:3f:86:5d: 91:7c:fc:6b:3c:01:ce:6f:9e:12:60:94:bf:e8:70: cc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.178.0/23 193.84.4.0/23 IPv6: 2a01:7660::/32 Signature Algorithm: sha256WithRSAEncryption 2c:0b:43:44:04:ff:a3:44:4a:56:1f:90:b5:66:fe:26:1b:92: 6b:e9:de:68:01:1b:5f:97:0b:b4:91:27:2b:74:7c:56:6e:45: d6:84:25:70:ba:fd:db:d8:39:e4:2f:de:77:b5:17:27:e0:4d: 59:77:fd:46:e4:3c:60:28:01:63:19:67:85:97:75:7f:dc:40: 03:a8:d0:50:8f:d2:77:ec:f8:a5:87:d8:40:76:48:a0:22:07: 8c:bc:36:98:8d:da:87:c3:e8:b2:1d:e6:2f:8e:13:9f:94:c9: d4:a8:b9:41:d6:96:f3:6c:19:f0:ae:71:0b:10:b2:ef:5a:c3: 05:56:bf:22:57:87:a8:97:17:24:8b:e9:d3:19:e3:3d:d5:e1: 9e:d4:1a:ea:34:cf:b5:b9:e5:ff:92:5e:36:87:48:be:2a:e0: 44:4d:63:61:14:66:1e:00:2e:fa:aa:c3:5d:30:f9:f4:13:66: a7:99:cc:21:7c:4b:78:dd:ac:5b:65:0d:cc:83:5d:cd:d1:44: 39:f0:0f:ce:bb:2b:48:29:68:0a:25:b3:72:c4:be:a0:85:e3: 49:b3:8d:2f:26:8b:a2:cb:2b:78:84:ab:2c:61:6b:b6:f9:0d: c3:82:12:ac:4b:de:62:a4:e7:1d:77:12:f6:ef:09:4a:46:ec: f3:af:39:8a -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6WnIKQQhAuOXjob6JR4EcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTg3ZDQ3OTM1ZTExMzdkNTQ0NDI2ZGI1Mjg4ZTEyYTljMDI1YWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u0HTs3yp45grRGJWw8TwniDK5IX Ul9WYLDIs2fbbWG9Q8hnDh+1bjaibgrIQqNC59p+Wl+xN4sYZ+5MgY2QPeWl+V3J TsgQ/15ZXfkkJveSqhAsyVXd9dGWf2n+S+feVwYcstvoOKK/UN3YpAO9rsoS/9IG cNwG9+1t5En1lM/nHfBcxvyWseJJsHnpNev8MighH5W0E4dqOwfijcMC0+PSlUn9 bqXH2SGzsGXqW6Jw3oRgFr+kU+PXtxpqSZmpfcJ21HSRm6i+XdwjVwHCbOGzfIk8 6Yta873IsdWMGqeAOrOWpdavYIck0uk/hl2RfPxrPAHOb54SYJS/6HDMEQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFGmH1Hk14RN9VEQm21KI4SqcAlrCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzMyZDdh ZC04YmY5LTQyNzQtOTVmOC05Yzk1MzU5NGQ2YjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMzJkN2Fk LThiZjktNDI3NC05NWY4LTljOTUzNTk0ZDZiMS8xL2FZZlVlVFhoRTMxVVJDYmJV b2poS3B3Q1dzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBuSyyAwQBwVQEMA0EAgACMAcDBQAqAXZgMA0G CSqGSIb3DQEBCwUAA4IBAQAsC0NEBP+jREpWH5C1Zv4mG5Jr6d5oARtflwu0kScr dHxWbkXWhCVwuv3b2DnkL953tRcn4E1Zd/1G5DxgKAFjGWeFl3V/3EADqNBQj9J3 7Pilh9hAdkigIgeMvDaYjdqHw+iyHeYvjhOflMnUqLlB1pbzbBnwrnELELLvWsMF Vr8iV4eolxcki+nTGeM91eGe1BrqNM+1ueX/kl42h0i+KuBETWNhFGYeAC76qsNd MPn0E2anmcwhfEt43axbZQ3Mg13N0UQ58A/OuytIKWgKJbNyxL6gheNJs40vJoui yyt4hKssYWu2+Q3DghKsS95ipOcddxL27wlKRuzzrzmK -----END CERTIFICATE-----Generated at Fri Jan 2 23:51:59 2026 by rpki-client