This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZhQBALIIVz1cQc6SVzcgMdC8sw.cer File: aZhQBALIIVz1cQc6SVzcgMdC8sw.cer (raw, json) Hash identifier: ykELAxX+8zRH5CeSeEVqTiVKBP8XFJhg33tj2ks2ZaI= Subject key identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF21A7D474046B3F814B8E0E6C97A23 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197784 IP: 31.13.8.0/21 IP: 77.243.152.0/22 IP: 185.152.228.0/22 IP: 2a03:ef00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1a:7d:47:40:46:b3:f8:14:b8:e0:e6:c9:7a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6998500402c8215cf571073a495cdc80c742f2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:61:d3:04:f3:7c:f6:0f:a0:40:2c:f2:9f:67: f5:63:fb:63:b8:4c:ee:a8:67:1a:62:37:4c:77:8c: 14:97:b8:53:ed:1b:69:87:00:79:fd:c1:66:04:02: dd:bc:71:a3:eb:dd:bf:73:08:22:60:d8:6b:6b:90: fd:da:27:f9:77:be:25:45:da:2e:22:f2:df:ba:cc: 5b:fc:a0:0c:27:e7:49:67:72:ba:5c:da:e9:68:0d: a4:87:e2:a9:f2:f5:16:95:5e:1d:f9:28:37:7d:31: eb:dd:a3:5d:eb:46:72:8b:78:02:51:d2:92:24:2a: 9e:60:38:2d:27:b3:13:df:2d:e9:eb:26:b7:37:d0: 03:e3:72:84:e5:9f:8e:09:b2:af:a1:ff:c4:91:ba: 45:c2:e8:3d:ea:5d:95:c6:a0:b3:90:0b:ac:af:84: b4:7a:56:73:f8:67:f9:22:2d:de:2b:ca:66:b1:d1: 44:a8:9e:74:b5:6b:b8:bf:1b:7e:72:0d:41:8b:4f: 44:cb:d8:2f:cb:af:53:75:99:82:bd:ad:27:94:9e: 4c:1c:32:bb:11:e5:95:f9:d6:1b:df:5c:5e:61:ee: 94:a5:a6:3a:fd:b8:4d:74:f2:f9:6b:80:2c:8a:4c: 80:25:d6:04:4e:12:be:2c:b7:63:56:93:40:59:e1: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:98:50:04:02:C8:21:5C:F5:71:07:3A:49:5C:DC:80:C7:42:F2:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/057ae8-0cb7-4e14-8a5b-189028f3396c/1/aZhQBALIIVz1cQc6SVzcgMdC8sw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.8.0/21 77.243.152.0/22 185.152.228.0/22 IPv6: 2a03:ef00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197784 Signature Algorithm: sha256WithRSAEncryption 63:72:57:26:74:03:e8:37:2d:b8:72:13:be:18:f7:86:88:c0: c0:c6:41:73:fe:46:92:25:4d:33:16:6f:0a:0b:c3:dc:5f:d1: 73:22:3c:87:b7:ea:fd:92:b7:2f:1b:b3:25:89:5a:d2:93:b9: fe:b9:58:65:9b:0d:80:9f:ba:6a:23:0f:5a:da:f4:0f:e8:ff: 41:f0:74:32:87:9c:36:c5:55:00:7f:0c:ef:ed:f6:9d:54:41: 76:fa:56:43:45:ec:24:3f:94:52:af:3d:04:5e:67:10:36:f8: 17:b7:15:48:86:a5:42:26:59:d4:8a:c3:04:ec:65:ea:18:de: 60:42:56:ac:fa:7c:73:b1:73:37:23:e2:88:37:a4:d4:91:62: 6b:f9:7a:66:58:9c:b0:d6:ac:31:cc:e6:47:a5:9a:f1:4f:e9: ca:b7:f1:14:a5:20:d0:f5:fc:9f:45:01:64:04:9d:70:b9:ab: 7a:47:28:b2:97:a4:f9:79:a6:1c:31:31:02:1a:ca:30:97:fc: 68:5a:63:c2:17:27:fc:85:c4:c1:82:b8:cb:09:00:e6:49:da: 73:0a:32:85:57:4b:0f:a2:f8:89:38:ea:ff:e9:03:b4:8b:dd: 20:0a:02:94:05:47:ae:36:ff:19:cb:4b:d6:61:4a:1d:08:19: 06:6c:00:e7 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/8hp9R0BGs/gUuODmyXojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk4NTAwNDAyYzgyMTVjZjU3MTA3M2E0OTVjZGM4MGM3NDJmMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmHTBPN89g+gQCzyn2f1Y/tjuEzu qGcaYjdMd4wUl7hT7RtphwB5/cFmBALdvHGj692/cwgiYNhra5D92if5d74lRdou IvLfusxb/KAMJ+dJZ3K6XNrpaA2kh+Kp8vUWlV4d+Sg3fTHr3aNd60Zyi3gCUdKS JCqeYDgtJ7MT3y3p6ya3N9AD43KE5Z+OCbKvof/EkbpFwug96l2VxqCzkAusr4S0 elZz+Gf5Ii3eK8pmsdFEqJ50tWu4vxt+cg1Bi09Ey9gvy69TdZmCva0nlJ5MHDK7 EeWV+dYb31xeYe6UpaY6/bhNdPL5a4AsikyAJdYEThK+LLdjVpNAWeF3YwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFGmYUAQCyCFc9XEHOklc3IDHQvLMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzA1N2Fl OC0wY2I3LTRlMTQtOGE1Yi0xODkwMjhmMzM5NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvMDU3YWU4 LTBjYjctNGUxNC04YTViLTE4OTAyOGYzMzk2Yy8xL2FaaFFCQUxJSVZ6MWNRYzZT VnpjZ01kQzhzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDHw0IAwQCTfOYAwQCuZjkMA0EAgACMAcDBQAq A+8AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMEmDANBgkqhkiG9w0BAQsFAAOC AQEAY3JXJnQD6DctuHITvhj3hojAwMZBc/5GkiVNMxZvCgvD3F/RcyI8h7fq/ZK3 LxuzJYla0pO5/rlYZZsNgJ+6aiMPWtr0D+j/QfB0MoecNsVVAH8M7+32nVRBdvpW Q0XsJD+UUq89BF5nEDb4F7cVSIalQiZZ1IrDBOxl6hjeYEJWrPp8c7FzNyPiiDek 1JFia/l6ZlicsNasMczmR6Wa8U/pyrfxFKUg0PX8n0UBZASdcLmrekcospek+Xmm HDExAhrKMJf8aFpjwhcn/IXEwYK4ywkA5knacwoyhVdLD6L4iTjq/+kDtIvdIAoC lAVHrjb/GctL1mFKHQgZBmwA5w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:51 2026 by rpki-client