This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aescHUkwv7_iXqfwpF19C2Eef2I.cer File: aescHUkwv7_iXqfwpF19C2Eef2I.cer (raw, json) Hash identifier: ObldykW4+Zy8X/rkyRlq3HDgjKTtDWMyo0mI4H7NJMc= Subject key identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35ADFC66F571D6BC1803C4E39C4616 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29647 IP: 193.105.193.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ad:fc:66:f5:71:d6:bc:18:03:c4:e3:9c:46:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69eb1c1d4930bfbfe25ea7f0a45d7d0b611e7f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:38:0b:53:09:fb:8a:fc:a6:72:03:ca:ce: f2:92:93:ac:76:e7:75:8d:cd:6c:7b:90:bc:f9:b5: 4a:96:b0:ff:9f:f4:a5:3f:d8:16:b8:10:63:5a:e2: d3:29:f4:41:ab:f8:5f:fb:60:a4:8a:0c:52:25:4f: 0d:9e:e3:7c:cd:6b:22:ee:25:de:dc:1b:98:9b:1a: 34:37:d5:b4:2c:52:fd:28:79:a8:ab:91:64:da:c7: 70:1d:94:26:97:22:f4:5d:23:4f:58:fd:27:bf:24: c6:01:21:67:98:05:fd:31:ef:0c:2f:27:7e:b4:38: 3c:94:ff:6e:44:2d:db:d1:dd:0e:f3:d5:7a:ee:be: cb:54:14:6c:71:0a:e0:84:c6:c9:9a:ac:0a:9f:ae: 98:bf:83:10:26:5f:ef:78:ad:fb:87:5d:a9:e6:b2: 70:af:7e:cf:e2:3c:8b:4d:a2:91:9e:f4:63:60:20: 1b:f9:10:2b:45:3b:ee:74:0f:a6:ee:1a:bc:8c:b0: 31:9e:39:3b:0c:97:fd:8c:ad:a2:9b:f1:f2:c3:11: 75:45:6d:e2:ea:22:53:ee:b8:04:dc:7a:2c:b5:70: e7:4f:0a:88:66:cd:7d:37:68:18:8d:59:fd:ad:ca: 12:03:91:7a:8f:81:f1:bd:cb:ec:52:46:6e:a4:80: 65:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EB:1C:1D:49:30:BF:BF:E2:5E:A7:F0:A4:5D:7D:0B:61:1E:7F:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4c0dcf-6439-411f-a104-e99ab2605a90/1/aescHUkwv7_iXqfwpF19C2Eef2I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.193.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29647 Signature Algorithm: sha256WithRSAEncryption 28:75:97:0c:af:cb:cb:df:0f:b4:f1:65:0c:00:00:23:86:91: 67:e0:25:5f:40:82:79:7d:0f:19:f7:8e:4f:aa:d8:84:3e:d7: da:21:97:6d:12:10:a8:90:fc:0d:94:db:7c:1f:96:e3:07:e9: 55:65:22:46:9c:2e:e6:bd:76:ce:be:80:cb:26:fd:88:21:bf: f8:fb:00:41:d8:3a:92:aa:d2:d1:88:56:9b:11:86:65:01:ce: 81:0b:af:14:f1:1c:e6:9c:99:7a:72:2a:5c:ba:f4:15:47:08: 80:1a:17:7c:aa:4d:70:d1:3a:be:7e:a4:9c:19:97:a2:7a:c7: 99:d0:56:82:bb:05:2d:69:6a:f3:05:20:39:f4:d4:85:34:36: 3c:ac:14:58:c4:0f:3f:bb:b9:52:9e:2e:2a:43:0e:bb:75:ed: c7:09:f0:d2:a2:32:43:0d:cc:36:9c:c5:bf:21:57:84:37:f3: 17:6f:96:1b:fa:58:60:95:be:2c:84:e6:14:5a:68:14:32:66: 05:29:d1:f1:a1:6c:09:6f:d4:9a:53:de:da:bc:69:74:a0:a3: 42:cd:ea:06:30:f2:17:a6:2d:3b:04:f5:47:bc:74:64:ba:da: 86:11:e1:0c:4a:77:b1:88:e2:ac:2a:33:a2:b1:c8:ab:6f:be: d7:53:38:11 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7Na38ZvVx1rwYA8TjnEYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWViMWMxZDQ5MzBiZmJmZTI1ZWE3ZjBhNDVkN2QwYjYxMWU3ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf04C1MJ+4r8pnIDys7ykpOsdud1 jc1se5C8+bVKlrD/n/SlP9gWuBBjWuLTKfRBq/hf+2CkigxSJU8NnuN8zWsi7iXe 3BuYmxo0N9W0LFL9KHmoq5Fk2sdwHZQmlyL0XSNPWP0nvyTGASFnmAX9Me8MLyd+ tDg8lP9uRC3b0d0O89V67r7LVBRscQrghMbJmqwKn66Yv4MQJl/veK37h12p5rJw r37P4jyLTaKRnvRjYCAb+RArRTvudA+m7hq8jLAxnjk7DJf9jK2im/HywxF1RW3i 6iJT7rgE3HostXDnTwqIZs19N2gYjVn9rcoSA5F6j4HxvcvsUkZupIBlEQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFGnrHB1JML+/4l6n8KRdfQthHn9iMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZlLzRjMGRj Zi02NDM5LTQxMWYtYTEwNC1lOTlhYjI2MDVhOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUvNGMwZGNm LTY0MzktNDExZi1hMTA0LWU5OWFiMjYwNWE5MC8xL2Flc2NIVWt3djdfaVhxZndw RjE5QzJFZWYySS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWnBMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AnPPMA0GCSqGSIb3DQEBCwUAA4IBAQAodZcMr8vL3w+08WUMAAAjhpFn4CVfQIJ5 fQ8Z945PqtiEPtfaIZdtEhCokPwNlNt8H5bjB+lVZSJGnC7mvXbOvoDLJv2IIb/4 +wBB2DqSqtLRiFabEYZlAc6BC68U8RzmnJl6cipcuvQVRwiAGhd8qk1w0Tq+fqSc GZeieseZ0FaCuwUtaWrzBSA59NSFNDY8rBRYxA8/u7lSni4qQw67de3HCfDSojJD Dcw2nMW/IVeEN/MXb5Yb+lhglb4shOYUWmgUMmYFKdHxoWwJb9SaU97avGl0oKNC zeoGMPIXpi07BPVHvHRkutqGEeEMSnexiOKsKjOiscirb77XUzgR -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:00 2026 by rpki-client