This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer File: aaEl4pJtOayGmYIrxXplgPX1F-k.cer (raw, json) Hash identifier: 7tEo4gTe1vfBk9CAs7hkUpS8TxflABaV3CeTHxPVfc8= Subject key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3617E0B895D8940E01BD94040C5A6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202788 IP: 185.154.184.0/22 IP: 2a07:8e80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:17:e0:b8:95:d8:94:0e:01:bd:94:04:0c:5a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69a125e2926d39ac8699822bc57a6580f5f517e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:1c:71:35:a2:66:77:38:f0:dd:ae:5e:7c: 6a:9e:62:53:17:26:4a:ae:84:bd:b0:87:22:b3:ba: 74:86:c8:f6:3c:b0:d0:28:0d:05:db:85:3f:72:77: ef:6b:54:05:db:80:09:86:0c:20:53:a1:1e:01:53: 19:e2:fe:3a:b8:f8:66:87:79:46:83:d0:cc:eb:bc: cc:e2:d8:28:34:f1:05:72:13:4f:c2:d0:ed:b5:88: aa:86:e6:f9:77:22:af:06:ce:67:1f:a9:b6:c4:d2: b3:de:db:6f:57:29:a7:8e:0f:f9:5c:d5:ed:fe:55: 55:67:f9:1f:38:ff:f9:d7:2f:c7:73:b1:ef:8d:b1: 61:50:f7:07:82:02:a5:3e:fe:49:0b:03:66:58:d7: 13:1f:ad:0a:e3:71:a1:20:06:a4:7f:74:c2:fe:43: 96:16:da:f8:f1:9e:10:86:b3:4f:10:a8:68:a2:1e: 90:65:cc:7b:44:21:b0:cf:e5:50:58:e8:0c:79:12: 15:ad:6e:5a:bf:ac:8c:ee:77:1d:01:a8:af:d9:b9: 6b:a8:a4:25:e3:3d:35:be:98:f2:e1:60:ec:00:b9: 63:b2:ef:fc:58:7e:75:bc:40:c2:6c:07:38:00:7e: a9:fa:ba:af:46:47:bf:db:44:af:e8:75:51:78:03: 64:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.184.0/22 IPv6: 2a07:8e80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202788 Signature Algorithm: sha256WithRSAEncryption 2a:73:5c:07:3d:09:1e:82:0f:0b:21:5a:dd:20:71:6f:3a:2a: f7:e2:6f:f9:19:c8:fe:0d:da:80:c3:47:5d:7d:e7:51:eb:15: 8c:13:df:80:4f:9a:a6:18:06:47:db:db:71:9d:54:38:54:36: 4e:68:f3:8d:fe:37:66:fa:2a:c6:b4:22:95:5a:bd:50:95:57: 7b:a4:c7:1e:77:7a:90:1a:c4:de:00:80:9f:e2:1f:e0:18:79: 26:0f:bd:70:d9:1c:f8:29:16:77:da:a7:49:95:7f:16:55:a3: a2:bc:f7:e3:63:7e:b4:0b:82:14:74:66:87:7e:06:cf:42:3b: 71:2e:cb:32:f5:d4:68:29:88:0d:e6:24:bb:03:dc:ab:f9:39: 6b:ab:d1:4d:a1:8a:22:1d:84:a4:c7:e4:a3:7b:3a:3d:1d:43: 41:ce:e1:c4:e3:21:7a:24:4d:e3:29:e6:7c:a8:fd:aa:eb:98: ab:de:df:ab:2f:bf:df:a8:33:9f:15:27:45:92:c9:95:d3:32: 9d:fc:6e:04:c6:46:94:c2:b4:de:68:0a:ad:f3:35:02:b8:c2: 3e:fe:ed:e8:ee:61:32:85:cf:2e:ff:b7:d8:c3:e1:49:61:9c: b6:b3:37:14:0c:a3:27:51:b5:73:cb:14:9f:05:37:5d:c5:fb: 71:15:32:10 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NhfguJXYlA4BvZQEDFpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWExMjVlMjkyNmQzOWFjODY5OTgyMmJjNTdhNjU4MGY1ZjUxN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOAccTWiZnc48N2uXnxqnmJTFyZK roS9sIcis7p0hsj2PLDQKA0F24U/cnfva1QF24AJhgwgU6EeAVMZ4v46uPhmh3lG g9DM67zM4tgoNPEFchNPwtDttYiqhub5dyKvBs5nH6m2xNKz3ttvVymnjg/5XNXt /lVVZ/kfOP/51y/Hc7HvjbFhUPcHggKlPv5JCwNmWNcTH60K43GhIAakf3TC/kOW Ftr48Z4QhrNPEKhooh6QZcx7RCGwz+VQWOgMeRIVrW5av6yM7ncdAaiv2blrqKQl 4z01vpjy4WDsALljsu/8WH51vEDCbAc4AH6p+rqvRke/20Sv6HVReANkRwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGmhJeKSbTmshpmCK8V6ZYD19RfpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdmLzdhYmIw Ni05N2U3LTRmYTUtYWM3ZC03YjU2N2M2MTg1ZjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2YvN2FiYjA2 LTk3ZTctNGZhNS1hYzdkLTdiNTY3YzYxODVmOS8xL2FhRWw0cEp0T2F5R21ZSXJ4 WHBsZ1BYMUYtay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZq4MA0EAgACMAcDBQMqB46AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMYJDANBgkqhkiG9w0BAQsFAAOCAQEAKnNcBz0JHoIP CyFa3SBxbzoq9+Jv+RnI/g3agMNHXX3nUesVjBPfgE+aphgGR9vbcZ1UOFQ2Tmjz jf43ZvoqxrQilVq9UJVXe6THHnd6kBrE3gCAn+If4Bh5Jg+9cNkc+CkWd9qnSZV/ FlWjorz342N+tAuCFHRmh34Gz0I7cS7LMvXUaCmIDeYkuwPcq/k5a6vRTaGKIh2E pMfko3s6PR1DQc7hxOMheiRN4ynmfKj9quuYq97fqy+/36gznxUnRZLJldMynfxu BMZGlMK03mgKrfM1ArjCPv7t6O5hMoXPLv+32MPhSWGctrM3FAyjJ1G1c8sUnwU3 XcX7cRUyEA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:43 2026 by rpki-client