This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer File: agyGfJeYccetsJ98Yhm6WwZFkxw.cer (raw, json) Hash identifier: uGr+ECymHhL6ls+3v9dHDBb8BwoM6lsuCuwRA0Y9U8s= Subject key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3628F6A57E1C1AEC211D95E95DD75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 62434 IP: 193.28.107.0 -- 193.28.143.255 IP: 194.15.198.0 -- 194.15.207.255 IP: 194.49.128.0/17 IP: 2001:67c:194c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:62:8f:6a:57:e1:c1:ae:c2:11:d9:5e:95:dd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6f:4d:1f:0a:a2:6c:b7:f6:8e:77:44:96:46: 1b:85:06:6c:2f:47:38:bf:1f:17:06:8c:7c:7d:70: 6c:06:85:87:27:e0:ea:df:48:f2:46:f6:e5:de:5e: 3c:11:73:73:dd:44:ea:33:8e:f5:e3:1e:a2:58:0d: ec:32:a8:ee:f8:48:c4:c5:e5:67:12:20:cf:1b:71: b1:d2:c7:d0:c2:06:e7:fa:e3:08:a4:5a:3d:b2:e3: 82:80:48:c4:5d:6a:6c:28:6f:c4:04:17:50:72:51: 35:8e:04:97:71:68:81:d6:ac:f1:0a:4a:7b:a2:93: 1a:e5:25:07:eb:af:75:1d:5c:e5:69:c7:01:76:8c: 39:30:e2:9a:90:42:06:5d:e0:75:40:eb:3d:aa:7a: f2:93:03:10:3a:a7:e5:eb:41:71:6d:ce:79:be:1f: 51:b8:bc:9c:1e:68:b3:be:84:fb:57:59:c3:5e:93: 8b:ad:f5:68:05:d3:6a:c0:80:c8:9e:70:09:c1:93: 2a:a8:0b:62:3d:af:84:6a:e7:9c:9a:7b:bb:8c:43: ca:7b:78:80:99:62:02:9d:3b:ac:f0:85:40:42:88: 57:dd:db:29:47:de:25:cb:7a:30:4d:fd:81:8d:20: 8a:49:c4:90:bd:25:91:6e:87:d4:e6:80:fd:80:be: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.107.0-193.28.143.255 194.15.198.0-194.15.207.255 194.49.128.0/17 IPv6: 2001:67c:194c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62434 Signature Algorithm: sha256WithRSAEncryption af:a6:e5:a0:bb:1b:ce:05:e3:43:07:23:ae:d6:97:81:39:c6: 73:ce:d4:ef:70:9f:95:a5:2d:bf:10:aa:b8:06:48:5a:87:8c: 08:05:7a:a9:85:a0:90:86:4e:19:63:6d:3b:05:77:78:22:0f: bf:49:40:54:bf:65:ae:43:60:ac:91:1a:1d:d2:69:75:75:1d: ea:d1:a9:d3:6e:d7:5f:62:89:af:92:64:59:14:1b:f6:f1:97: b9:b9:f9:fb:25:6f:cd:21:fc:91:85:d8:0f:88:12:bb:d0:23: 93:fe:e7:9a:33:ad:c0:2d:c6:a6:0a:44:d5:eb:b3:dd:d7:c4: e5:15:62:8e:31:d6:6b:d2:f7:09:aa:0a:9b:50:32:a8:67:b5: c0:2c:58:11:c4:15:ec:de:d7:ae:9a:2c:ec:57:13:e8:c3:0f: 0a:d8:8b:61:61:74:6d:fd:e1:48:69:f3:7c:aa:a5:52:9f:ac: 0a:44:a0:53:c4:97:55:09:55:44:4c:0e:ec:8c:44:fd:71:be: 76:ac:ca:27:ff:67:3f:ed:a5:f7:c7:89:f4:f2:57:37:16:48: c7:d2:55:95:08:fb:a1:fe:c9:c7:62:05:88:ae:db:5e:76:ef: d5:4b:64:99:f4:5f:b4:1e:64:43:88:b8:b5:28:1d:84:ac:62: 94:10:a5:2b -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt7o2KPalfhwa7CEdleld11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTBjODY3Yzk3OTg3MWM3YWRiMDlmN2M2MjE5YmE1YjA2NDU5MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA629NHwqibLf2jndElkYbhQZsL0c4 vx8XBox8fXBsBoWHJ+Dq30jyRvbl3l48EXNz3UTqM4714x6iWA3sMqju+EjExeVn EiDPG3Gx0sfQwgbn+uMIpFo9suOCgEjEXWpsKG/EBBdQclE1jgSXcWiB1qzxCkp7 opMa5SUH6691HVzlaccBdow5MOKakEIGXeB1QOs9qnrykwMQOqfl60Fxbc55vh9R uLycHmizvoT7V1nDXpOLrfVoBdNqwIDInnAJwZMqqAtiPa+Eauecmnu7jEPKe3iA mWICnTus8IVAQohX3dspR94ly3owTf2BjSCKScSQvSWRbofU5oD9gL7l+QIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFGoMhnyXmHHHrbCffGIZulsGRZMcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzFlMDFk Mi0xYTFkLTRkYzEtYThkNS1lNDU4NjNlYWMyYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMWUwMWQy LTFhMWQtNGRjMS1hOGQ1LWU0NTg2M2VhYzJiNC8xL2FneUdmSmVZY2NldHNKOThZ aG02V3daRmt4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAoBAIAATAiMAwDBADBHGsDBATBHIAwDAMEAcIPxgMEBMIPwAME B8IxgDAPBAIAAjAJAwcAIAEGfBlMMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDz 4jANBgkqhkiG9w0BAQsFAAOCAQEAr6bloLsbzgXjQwcjrtaXgTnGc87U73CflaUt vxCquAZIWoeMCAV6qYWgkIZOGWNtOwV3eCIPv0lAVL9lrkNgrJEaHdJpdXUd6tGp 027XX2KJr5JkWRQb9vGXubn5+yVvzSH8kYXYD4gSu9Ajk/7nmjOtwC3GpgpE1euz 3dfE5RVijjHWa9L3CaoKm1AyqGe1wCxYEcQV7N7Xrpos7FcT6MMPCtiLYWF0bf3h SGnzfKqlUp+sCkSgU8SXVQlVREwO7IxE/XG+dqzKJ/9nP+2l98eJ9PJXNxZIx9JV lQj7of7Jx2IFiK7bXnbv1UtkmfRftB5kQ4i4tSgdhKxilBClKw== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:15 2026 by rpki-client