This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer File: agFtrScwR7GIhmkUhd7dlxccTWg.cer (raw, json) Hash identifier: vwM+dpjOb497uQnETxjQ/tWjiruhnFxE9XgIi0hCR0Y= Subject key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6493B35FE3AB5B136FECAFE477121 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.1.164.0 -- 194.1.166.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:49:3b:35:fe:3a:b5:b1:36:fe:ca:fe:47:71:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a016dad273047b18886691485dedd97171c4d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:7c:5f:a6:cb:5d:09:32:ab:19:cd:0e:a4: 7d:d2:2f:03:0a:37:45:64:58:ac:ba:1d:f9:da:7f: 92:fa:c8:30:2a:55:85:9c:64:8b:56:ff:59:41:8b: 4a:00:05:d9:ee:d0:22:5e:3e:49:35:7b:ec:6e:6b: 90:44:4c:f0:6f:c3:7c:14:ed:c9:f8:f1:a0:81:7d: 31:bc:31:5f:3c:ec:2a:34:ae:69:c5:b5:d0:ac:b2: 73:e8:c8:05:be:0b:17:f0:8c:14:fd:84:42:d6:ff: e3:cb:8e:df:2d:8c:ae:73:96:7f:8d:93:90:c2:13: 6e:9f:67:30:f7:d1:e5:37:a6:81:b5:a2:6c:0a:59: cc:00:e8:8d:67:a4:ae:c0:47:9e:bd:53:ef:51:ed: f8:c1:6b:eb:c0:eb:71:ef:c5:4d:c4:37:03:e0:88: 5d:c8:67:66:67:88:c3:27:e8:d5:1c:e5:ba:48:29: 5d:a4:4b:d9:78:b2:14:72:5c:9a:60:f8:86:b8:03: e7:fa:da:9c:4e:40:d6:16:33:b7:2c:81:7d:06:6c: b7:6a:10:40:ed:f9:fa:fc:0e:21:c2:4c:12:fe:51: 5f:78:b9:80:ed:d1:f2:c9:4e:f3:15:09:4a:85:f6: 6e:71:36:05:fb:6a:49:84:24:aa:39:86:63:47:59: 4b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.164.0-194.1.166.255 Signature Algorithm: sha256WithRSAEncryption 9a:ef:4e:9c:7e:79:4e:49:ef:ce:02:38:c2:a3:9f:bb:39:80: 76:f6:95:14:01:d8:a2:fa:75:27:8a:fa:97:d9:d5:f5:6f:f8: a0:d4:9c:c2:bf:3f:f7:b3:27:94:bd:16:33:cf:86:cf:1c:78: df:49:7b:4e:f4:97:bd:2d:f4:b6:3e:b4:af:26:c7:af:61:64: 45:ce:27:09:85:9e:be:e7:31:8e:a7:e1:fc:32:16:f5:21:b5: b9:96:ad:c4:d2:33:5e:29:89:1f:c4:63:d6:88:42:09:5c:2f: 49:f7:47:4b:95:8f:aa:09:00:18:2f:7e:6f:67:20:23:b2:29: f0:51:41:0b:08:27:3d:69:7c:d2:8b:35:d3:a7:66:cc:07:70: 7e:d5:c5:e5:e9:ff:7a:c8:b8:64:cd:a1:27:de:c9:54:c7:b4: be:61:70:e8:10:e9:65:3a:e1:d4:88:ce:a9:bc:7c:52:0b:05: eb:1f:e3:f0:35:30:b8:a6:50:44:a5:81:78:26:92:4f:31:80: d1:34:7c:78:1b:e4:75:99:ba:18:82:ae:a6:d4:4e:fb:77:6d: 81:e1:8d:fa:b9:0c:ba:0c:cc:81:ae:49:ce:6d:0d:6a:95:33: fb:6e:b8:0a:43:49:5f:8a:ad:24:53:22:29:17:7b:7a:43:b6: e9:eb:cc:cb -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt+pkk7Nf46tbE2/sr+R3EhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTAxNmRhZDI3MzA0N2IxODg4NjY5MTQ4NWRlZGQ5NzE3MWM0ZDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sh8X6bLXQkyqxnNDqR90i8DCjdF ZFisuh352n+S+sgwKlWFnGSLVv9ZQYtKAAXZ7tAiXj5JNXvsbmuQREzwb8N8FO3J +PGggX0xvDFfPOwqNK5pxbXQrLJz6MgFvgsX8IwU/YRC1v/jy47fLYyuc5Z/jZOQ whNun2cw99HlN6aBtaJsClnMAOiNZ6SuwEeevVPvUe34wWvrwOtx78VNxDcD4Ihd yGdmZ4jDJ+jVHOW6SCldpEvZeLIUclyaYPiGuAPn+tqcTkDWFjO3LIF9Bmy3ahBA 7fn6/A4hwkwS/lFfeLmA7dHyyU7zFQlKhfZucTYF+2pJhCSqOYZjR1lLtQIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFGoBba0nMEexiIZpFIXe3ZcXHE1oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwLzQ1Yzlh ZC1jNGE3LTQ2NTItYWFkMy1jOTUyODA0OTMyYzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvNDVjOWFk LWM0YTctNDY1Mi1hYWQzLWM5NTI4MDQ5MzJjMi8xL2FnRnRyU2N3UjdHSWhta1Vo ZDdkbHhjY1RXZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBALCAaQDBADCAaYwDQYJKoZIhvcNAQELBQAD ggEBAJrvTpx+eU5J784COMKjn7s5gHb2lRQB2KL6dSeK+pfZ1fVv+KDUnMK/P/ez J5S9FjPPhs8ceN9Je070l70t9LY+tK8mx69hZEXOJwmFnr7nMY6n4fwyFvUhtbmW rcTSM14piR/EY9aIQglcL0n3R0uVj6oJABgvfm9nICOyKfBRQQsIJz1pfNKLNdOn ZswHcH7VxeXp/3rIuGTNoSfeyVTHtL5hcOgQ6WU64dSIzqm8fFILBesf4/A1MLim UESlgXgmkk8xgNE0fHgb5HWZuhiCrqbUTvt3bYHhjfq5DLoMzIGuSc5tDWqVM/tu uApDSV+KrSRTIikXe3pDtunrzMs= -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:09 2026 by rpki-client