This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer File: aajmjRKuKTryNpBDzVmgINrCQGI.cer (raw, json) Hash identifier: 5tFZRQqCYEyyWMfAS/v4MXg+MdxtyQZFpVVhpYO8uQk= Subject key identifier: 69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AF82B253E1E6FE1A993A497CEFDB9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.200.177.0/24 IP: 2a07:2880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f8:2b:25:3e:1e:6f:e1:a9:93:a4:97:ce:fd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69a8e68d12ae293af2369043cd59a020dac24062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:83:41:b4:53:03:7e:28:f8:b4:c9:7d:e5:25: fc:fb:a6:f1:3f:82:c2:e5:0e:8a:98:3e:af:b3:e3: 35:c2:e7:aa:25:f5:28:d1:a5:63:78:2d:42:19:54: 95:1a:cc:49:9a:e7:b6:af:0f:c4:4b:60:99:50:1c: 1f:14:33:00:24:f2:8c:bf:4e:5e:2a:eb:39:a4:66: 0d:7b:19:28:3a:48:28:d1:24:56:f1:79:47:a6:a2: 6f:81:5c:be:e2:ac:6b:89:ed:e8:fe:05:b8:a6:92: 72:ac:61:5c:d1:53:83:16:c9:47:fa:42:01:8e:af: 63:cf:87:77:e9:65:5b:3a:6c:eb:bd:11:dd:28:d6: e4:fe:a8:f9:f7:e1:60:6b:25:6b:3f:35:db:67:d1: 79:4e:d9:dc:f0:fb:93:81:4b:b4:7a:50:70:2d:4b: 5a:7e:f3:10:4d:98:c2:0a:2d:38:59:17:18:8a:a7: 46:19:7a:1b:6c:f8:07:24:a1:d8:90:01:a8:02:08: 62:29:e2:de:b1:68:b3:3d:20:8e:6c:90:c0:bd:34: 75:88:9b:f2:d8:19:fd:1d:63:43:28:a7:09:6b:41: ac:4c:b7:20:8c:cf:4a:88:51:d7:98:ee:e6:38:b2: a5:09:35:a3:ef:ec:55:4d:0c:fa:d8:b4:8c:fe:f0: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.177.0/24 IPv6: 2a07:2880::/29 Signature Algorithm: sha256WithRSAEncryption 75:66:8f:79:9d:b6:af:b6:69:7a:c9:b8:cc:be:ea:24:7b:a0: 8a:b1:d9:f7:65:33:be:85:b8:3b:ab:dd:95:47:ec:64:e2:b3: 6c:32:40:50:98:ef:78:bc:22:d4:36:e0:6d:3b:e3:cc:e5:32: 08:cb:37:53:b7:61:6c:bd:09:63:f4:ae:7a:46:e8:df:9a:96: 72:6d:17:8e:af:e5:e6:c5:62:4b:2a:c0:e5:be:35:ea:b9:41: 9c:d2:c2:0e:d7:f2:73:74:60:dc:c1:13:46:cf:a2:da:8a:47: b3:d2:54:81:d0:08:b1:77:3d:fc:be:64:fa:69:f2:ba:e0:f7: 08:a3:9a:4e:4c:bd:af:2a:2c:9a:fd:d4:ce:3e:6d:93:9d:96: 80:f7:c6:d3:70:f3:9e:1c:2b:bf:72:72:1d:3c:1f:92:dc:b4: 94:13:48:b3:e4:cf:ed:a6:67:16:0a:a8:51:8f:9f:89:12:0c: ff:ee:bd:79:ba:b9:c2:80:1b:16:49:65:20:0e:d2:e2:52:16: 9c:f4:8b:ec:92:e6:dc:27:c7:be:15:b2:d4:34:60:8f:95:55: a3:39:2e:4f:98:68:8f:fa:bc:47:4e:ed:2d:49:9f:42:a2:03: 77:94:0f:43:2f:57:e0:0e:92:c9:17:00:8b:ac:c8:4a:90:f0: db:56:c4:1f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt6WvgrJT4eb+Gpk6SXzv25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWE4ZTY4ZDEyYWUyOTNhZjIzNjkwNDNjZDU5YTAyMGRhYzI0MDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuINBtFMDfij4tMl95SX8+6bxP4LC 5Q6KmD6vs+M1wueqJfUo0aVjeC1CGVSVGsxJmue2rw/ES2CZUBwfFDMAJPKMv05e Kus5pGYNexkoOkgo0SRW8XlHpqJvgVy+4qxrie3o/gW4ppJyrGFc0VODFslH+kIB jq9jz4d36WVbOmzrvRHdKNbk/qj59+FgayVrPzXbZ9F5Ttnc8PuTgUu0elBwLUta fvMQTZjCCi04WRcYiqdGGXobbPgHJKHYkAGoAghiKeLesWizPSCObJDAvTR1iJvy 2Bn9HWNDKKcJa0GsTLcgjM9KiFHXmO7mOLKlCTWj7+xVTQz62LSM/vA67wIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGmo5o0Srik68jaQQ81ZoCDawkBiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzI0MmZh YS1lYWUzLTQ2YTUtYjc3NC0zODgyMDU0ODc1NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvMjQyZmFh LWVhZTMtNDZhNS1iNzc0LTM4ODIwNTQ4NzU1Yy8xL2Fham1qUkt1S1RyeU5wQkR6 Vm1nSU5yQ1FHSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW8ixMA0EAgACMAcDBQMqByiAMA0GCSqGSIb3 DQEBCwUAA4IBAQB1Zo95nbavtml6ybjMvuoke6CKsdn3ZTO+hbg7q92VR+xk4rNs MkBQmO94vCLUNuBtO+PM5TIIyzdTt2FsvQlj9K56RujfmpZybReOr+XmxWJLKsDl vjXquUGc0sIO1/JzdGDcwRNGz6Laikez0lSB0Aixdz38vmT6afK64PcIo5pOTL2v Kiya/dTOPm2TnZaA98bTcPOeHCu/cnIdPB+S3LSUE0iz5M/tpmcWCqhRj5+JEgz/ 7r15urnCgBsWSWUgDtLiUhac9IvskubcJ8e+FbLUNGCPlVWjOS5PmGiP+rxHTu0t SZ9CogN3lA9DL1fgDpLJFwCLrMhKkPDbVsQf -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:50 2026 by rpki-client