This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer File: afKVoxCPXPHTJv_pv2EPvPGNct8.cer (raw, json) Hash identifier: X5c5txZYReOBt35sCOp2pBK6L/aTf3FHR7DtHpSWfog= Subject key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35DF978E03C8F36025CD5F8B3CC04D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 40987 AS: 49534 IP: 185.223.44.0/22 IP: 192.138.183.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:df:97:8e:03:c8:f3:60:25:cd:5f:8b:3c:c0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:88:3c:1d:2b:6d:b9:b2:3b:8f:95:d3:a4: 8e:58:69:1d:5a:47:d2:71:38:88:3b:0e:a1:76:53: 25:f1:7f:20:9a:30:f5:4f:ca:09:85:e9:b6:e1:5e: 9f:8c:e4:d3:24:78:1c:ab:49:79:9f:ea:68:4b:22: 0e:d0:96:1f:5b:cb:c5:98:ea:8e:25:9b:b6:ac:4d: 29:d6:45:0a:3a:be:cc:42:4d:52:a2:8a:bf:b4:39: 27:b9:65:5e:16:34:ff:ab:39:08:6d:e3:f6:df:dc: 3d:02:3a:fb:90:39:70:9a:96:c9:41:83:a4:47:fa: 6c:71:c9:b6:d7:e4:da:b7:57:c2:18:12:45:4b:3e: 46:3a:fd:f7:90:00:43:69:23:ae:d5:5a:54:0a:d8: 5d:ee:70:27:36:9e:17:c8:fc:7b:d4:e1:e6:ed:d5: 55:46:f4:04:a8:78:1c:22:d6:c0:59:ad:00:a2:0f: ce:00:e3:de:1f:c4:3c:22:2e:2a:98:89:2b:99:95: 7a:65:d2:86:f7:aa:73:8f:71:ef:26:66:a7:93:bc: 3f:f5:4b:01:f8:b6:52:86:25:3f:2a:58:9f:f0:4c: 8e:25:4d:45:03:4b:3e:a7:6a:ec:fc:ba:97:a6:3a: b7:a9:db:1d:ed:43:62:5e:5d:65:76:44:8a:0a:36: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.44.0/22 192.138.183.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40987 49534 Signature Algorithm: sha256WithRSAEncryption 52:6b:59:d5:66:b5:d5:7d:1b:a3:c7:be:18:b8:e2:89:64:7e: 62:27:6f:40:35:a0:82:21:87:77:ed:56:e3:ed:24:33:27:fc: b4:f1:e8:7b:91:e1:f0:bc:95:76:16:4e:35:74:64:f4:e3:93: 1e:8a:7e:98:52:16:57:59:3f:40:df:e7:fd:d1:f9:39:c2:8a: 09:be:a2:56:b4:fe:23:d4:78:03:64:da:d7:65:2a:6b:fb:ec: 7d:70:4f:97:ac:e8:d6:52:87:3f:7f:dd:60:5e:60:a6:d3:64: 84:49:05:f7:f5:b2:60:f9:5a:b8:7b:e9:20:da:61:17:69:02: bd:64:96:4e:7f:c7:12:f6:47:9a:ea:ff:1b:7f:1c:5c:9c:0f: 97:01:cc:a4:4f:5f:b2:99:e2:4b:2e:3e:17:af:c8:41:01:4c: 7f:e7:ed:00:34:ab:45:3e:51:1c:56:e0:60:6d:bd:1f:8f:cc: f9:9d:0e:ed:38:c3:7f:eb:d0:9d:1b:3b:c7:ab:be:fa:94:79: 35:9e:71:2d:34:99:a0:71:b8:3a:82:8b:ca:cc:04:b9:54:37: 15:4a:62:09:27:96:2b:52:97:34:0f:98:e3:56:79:86:5b:42: da:33:5d:6e:77:e3:5c:8e:06:9a:64:e0:a3:cd:9a:74:cf:fa: e9:96:9b:06 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt7Nd+XjgPI82AlzV+LPMBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWYyOTVhMzEwOGY1Y2YxZDMyNmZmZTliZjYxMGZiY2YxOGQ3MmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04mIPB0rbbmyO4+V06SOWGkdWkfS cTiIOw6hdlMl8X8gmjD1T8oJhem24V6fjOTTJHgcq0l5n+poSyIO0JYfW8vFmOqO JZu2rE0p1kUKOr7MQk1Sooq/tDknuWVeFjT/qzkIbeP239w9Ajr7kDlwmpbJQYOk R/psccm21+Tat1fCGBJFSz5GOv33kABDaSOu1VpUCthd7nAnNp4XyPx71OHm7dVV RvQEqHgcItbAWa0Aog/OAOPeH8Q8Ii4qmIkrmZV6ZdKG96pzj3HvJmank7w/9UsB +LZShiU/Klif8EyOJU1FA0s+p2rs/LqXpjq3qdsd7UNiXl1ldkSKCjYuVwIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFGnylaMQj1zx0yb/6b9hD7zxjXLfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzQzMGNm Ny00NDA3LTQyNDctYjJkYS01YTEwZDE5Y2YxZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNDMwY2Y3 LTQ0MDctNDI0Ny1iMmRhLTVhMTBkMTljZjFmMy8xL2FmS1ZveENQWFBIVEp2X3B2 MkVQdlBHTmN0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCud8sAwQAwIq3MB8GCCsGAQUFBwEIAQH/BBAw DqAMMAoCAwCgGwIDAMF+MA0GCSqGSIb3DQEBCwUAA4IBAQBSa1nVZrXVfRujx74Y uOKJZH5iJ29ANaCCIYd37Vbj7SQzJ/y08eh7keHwvJV2Fk41dGT045Mein6YUhZX WT9A3+f90fk5wooJvqJWtP4j1HgDZNrXZSpr++x9cE+XrOjWUoc/f91gXmCm02SE SQX39bJg+Vq4e+kg2mEXaQK9ZJZOf8cS9kea6v8bfxxcnA+XAcykT1+ymeJLLj4X r8hBAUx/5+0ANKtFPlEcVuBgbb0fj8z5nQ7tOMN/69CdGzvHq776lHk1nnEtNJmg cbg6govKzAS5VDcVSmIJJ5YrUpc0D5jjVnmGW0LaM11ud+NcjgaaZOCjzZp0z/rp lpsG -----END CERTIFICATE-----Generated at Mon Jan 26 18:56:42 2026 by rpki-client