This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer File: aYhRnekYGF-24euv0eCDXKoRMuQ.cer (raw, json) Hash identifier: 9LhqdOoIUav0xekbPY5hKysq1/sqBwI21gXtzwy0sPg= Subject key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAC2334F58CF278B18C74A8D716279 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197157 IP: 178.249.136.0/21 IP: 2a02:13d8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c2:33:4f:58:cf:27:8b:18:c7:4a:8d:71:62:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6988519de918185fb6e1ebafd1e0835caa1132e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:14:c5:5b:34:73:34:7f:08:e5:75:70:ff: bd:19:d6:d1:c2:f4:73:a2:95:8c:98:26:34:4d:0b: 9e:84:37:4c:34:96:e2:44:70:10:13:46:db:96:18: cc:49:a5:1e:2e:59:5f:82:45:40:4f:74:40:a7:a4: b3:7b:14:5e:be:6f:bb:78:74:58:29:b6:ae:59:cd: 2a:4c:93:94:95:2b:2f:e8:71:dd:52:8f:9e:ee:0b: 80:05:80:b8:57:82:e9:82:91:1d:a7:9a:ae:37:46: 01:24:e1:7e:2e:a1:f9:87:c4:83:1f:96:3d:7c:6b: 4d:0c:b4:94:50:34:da:31:55:4f:a1:80:b4:fd:1d: 29:26:27:d6:fc:96:6b:d8:b7:0e:7b:1e:cd:b3:a3: 40:c5:f4:9d:e3:82:8a:2e:dc:d3:b6:89:7c:84:df: 7d:15:26:5f:40:67:0f:f0:e6:1d:a1:e2:32:50:a7: 19:a8:67:fc:ba:c4:60:ad:5c:ca:59:e0:e1:72:ed: a1:11:e4:dc:db:12:63:c8:6b:48:f3:5e:9a:75:06: 04:e1:7b:62:34:16:01:b8:f9:dc:10:41:55:73:4f: 3e:77:04:74:64:cc:1b:08:60:46:1a:35:f0:9a:24: a8:c2:96:97:e8:d2:7e:ee:ee:b4:83:81:13:19:ba: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.249.136.0/21 IPv6: 2a02:13d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197157 Signature Algorithm: sha256WithRSAEncryption 09:15:2c:61:38:4e:6e:93:43:d1:cf:b3:0d:a3:7d:26:ff:98: 81:e1:f5:29:84:9e:1e:5c:7c:0e:b4:20:55:ad:f8:e2:ae:cb: 24:df:77:d8:1c:65:ed:9a:5c:81:b3:4b:61:82:d2:5e:e0:13: 1e:08:ab:5e:0d:16:69:4c:60:fd:57:3b:fa:8b:c0:1b:9f:dc: 9b:c5:bf:9f:aa:bf:36:e7:ba:2a:50:94:bd:21:09:66:93:99: c9:d1:7b:fe:9d:cb:88:80:ff:e4:63:84:d6:3e:2b:1b:0f:72: 5a:d9:bc:a1:b0:03:79:3b:38:40:7d:37:24:37:7e:75:a2:e3: 54:85:c0:a5:24:60:ab:e7:3c:92:d4:1a:1d:a9:5d:45:b6:90: 6f:db:bc:2b:f7:e5:19:6d:ab:9e:09:42:02:42:f5:b7:ef:25: d8:79:db:5c:27:a8:76:88:9b:85:1a:57:d4:b3:35:f5:11:21: 1f:25:9f:38:3f:73:c8:3a:75:ec:86:34:48:b8:c2:58:09:58: bf:d8:cb:ce:e4:fc:99:93:ef:9a:0a:45:11:0f:51:53:de:b9: 35:f5:6e:f0:20:e4:08:19:40:d4:93:12:2d:a1:9d:6e:c9:18: 6e:fd:49:a4:23:a1:03:e5:91:b4:8a:1c:ce:eb:93:23:23:11: 8b:b8:8f:f7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26sIzT1jPJ4sYx0qNcWJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTg4NTE5ZGU5MTgxODVmYjZlMWViYWZkMWUwODM1Y2FhMTEzMmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvcUxVs0czR/COV1cP+9GdbRwvRz opWMmCY0TQuehDdMNJbiRHAQE0bblhjMSaUeLllfgkVAT3RAp6SzexRevm+7eHRY KbauWc0qTJOUlSsv6HHdUo+e7guABYC4V4LpgpEdp5quN0YBJOF+LqH5h8SDH5Y9 fGtNDLSUUDTaMVVPoYC0/R0pJifW/JZr2LcOex7Ns6NAxfSd44KKLtzTtol8hN99 FSZfQGcP8OYdoeIyUKcZqGf8usRgrVzKWeDhcu2hEeTc2xJjyGtI816adQYE4Xti NBYBuPncEEFVc08+dwR0ZMwbCGBGGjXwmiSowpaX6NJ+7u60g4ETGbpSPQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGmIUZ3pGBhftuHrr9Hgg1yqETLkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzUxNTI0 MC1iNTk0LTQ2OWItYTk5Mi1lYzcyZDZhZGEwNGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNTE1MjQw LWI1OTQtNDY5Yi1hOTkyLWVjNzJkNmFkYTA0YS8xL2FZaFJuZWtZR0YtMjRldXYw ZUNEWEtvUk11US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDsvmIMA0EAgACMAcDBQAqAhPYMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMCJTANBgkqhkiG9w0BAQsFAAOCAQEACRUsYThObpND 0c+zDaN9Jv+YgeH1KYSeHlx8DrQgVa344q7LJN932Bxl7ZpcgbNLYYLSXuATHgir Xg0WaUxg/Vc7+ovAG5/cm8W/n6q/Nue6KlCUvSEJZpOZydF7/p3LiID/5GOE1j4r Gw9yWtm8obADeTs4QH03JDd+daLjVIXApSRgq+c8ktQaHaldRbaQb9u8K/flGW2r nglCAkL1t+8l2HnbXCeodoibhRpX1LM19REhHyWfOD9zyDp17IY0SLjCWAlYv9jL zuT8mZPvmgpFEQ9RU965NfVu8CDkCBlA1JMSLaGdbskYbv1JpCOhA+WRtIoczuuT IyMRi7iP9w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:08 2026 by rpki-client