This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer File: ajEwrPv7qQF63e9jes0xL8djgpo.cer (raw, json) Hash identifier: ErgPDMFubcGfx0L4dFQdGmej9fQJ80jk9q2ZSuzYk6s= Subject key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775932819E1B828A9953CE6BDD414CEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:12 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211562 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:32:81:9e:1b:82:8a:99:53:ce:6b:dd:41:4c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a3130acfbfba9017addef637acd312fc763829a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:af:2d:05:5a:d7:85:bd:b1:5a:8b:d2:ca:16: 12:df:ca:31:01:04:39:89:1f:77:48:5f:88:7c:0f: 60:a5:49:f7:bd:8d:8d:b7:cc:11:a9:a9:20:ef:bb: f0:82:fe:97:19:85:19:4d:53:bb:6b:82:6e:6f:44: f4:1b:50:5c:9c:57:ba:e8:c9:84:05:9c:a2:4a:f9: 2f:eb:08:f6:b5:03:90:3e:c6:fa:c7:d1:83:9d:13: 85:2f:38:ef:61:b1:6e:43:6f:bb:9b:94:b9:4b:68: 9a:72:f1:97:aa:c1:52:82:73:51:f1:68:c4:fe:21: fc:13:0e:35:be:8b:aa:6d:92:21:a9:d5:b3:82:44: b6:c8:e6:a0:a4:17:24:39:a1:67:fa:cd:d9:82:0b: 7e:0e:d6:11:a4:98:c7:df:29:26:70:e2:c1:a2:14: d6:65:d0:5e:3a:d2:fb:64:e2:f9:fe:a5:fb:5b:96: 00:dc:dd:df:79:1b:5b:94:de:a2:74:cd:16:97:7a: e7:7b:b2:ee:64:63:97:80:9c:76:d2:e3:7b:f8:5b: 60:6c:63:65:6d:5f:d2:64:96:5c:c7:a2:54:25:79: d5:44:95:82:5d:50:10:ac:21:2b:fa:51:d6:15:24: 1e:6d:a8:94:8a:32:50:36:f9:09:e8:a7:20:f0:b4: 89:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211562 Signature Algorithm: sha256WithRSAEncryption 34:c2:ff:a4:91:7d:9d:55:55:4d:f8:e5:a0:d3:a7:e9:48:1f: 5e:c7:ce:de:cc:9d:21:7d:a2:53:0f:31:35:31:36:01:59:8d: ac:51:4f:48:7b:bd:17:2f:5b:9a:64:9e:3c:0b:54:29:60:6e: 05:73:d6:a5:7d:64:86:36:94:5f:a9:7a:b2:3d:8e:89:b4:14: 18:2b:48:6c:37:8d:16:8c:79:c0:60:5e:6c:1e:b7:87:e9:2c: fe:8b:6b:5c:2c:c2:5b:48:04:ee:53:ee:90:d5:12:8b:52:ba: 9b:26:23:e2:22:bb:e7:51:a3:1e:67:29:e1:97:d1:b6:a4:d1: 0a:bb:91:88:67:d9:19:0f:dc:42:b7:7d:1a:c8:ac:05:07:7d: 25:a8:6d:da:51:64:c6:77:cb:bf:ca:c1:6d:5b:99:1e:b1:fe: 84:9c:10:22:0d:11:1d:94:7a:79:8c:6a:e7:2e:ae:7e:a3:40: ca:cf:31:92:74:3c:49:92:67:0a:c4:8f:99:9d:1b:cc:ce:03: be:02:8a:1d:6f:58:9e:f4:b8:5e:13:79:0e:76:ad:9a:87:c7: ba:a4:e4:8a:5a:c5:b6:5f:18:51:5c:b0:05:66:82:20:9f:6c: e7:c6:6c:1f:4d:6b:bb:32:ae:26:9b:5c:96:45:19:9b:6e:14: 4d:a0:6f:70 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt3WTKBnhuCiplTzmvdQUzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTMxMzBhY2ZiZmJhOTAxN2FkZGVmNjM3YWNkMzEyZmM3NjM4MjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi68tBVrXhb2xWovSyhYS38oxAQQ5 iR93SF+IfA9gpUn3vY2Nt8wRqakg77vwgv6XGYUZTVO7a4Jub0T0G1BcnFe66MmE BZyiSvkv6wj2tQOQPsb6x9GDnROFLzjvYbFuQ2+7m5S5S2iacvGXqsFSgnNR8WjE /iH8Ew41vouqbZIhqdWzgkS2yOagpBckOaFn+s3Zggt+DtYRpJjH3ykmcOLBohTW ZdBeOtL7ZOL5/qX7W5YA3N3feRtblN6idM0Wl3rne7LuZGOXgJx20uN7+FtgbGNl bV/SZJZcx6JUJXnVRJWCXVAQrCEr+lHWFSQebaiUijJQNvkJ6Kcg8LSJvwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFGoxMKz7+6kBet3vY3rNMS/HY4KaMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyYTgw NjgyLWM1NGMtNGQ1YS05NDU2LWIyMzkyNTMwOTczMi8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMjJh ODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5NzMyLzEvNkEzMTMwQUNGQkZC QTkwMTdBRERFRjYzN0FDRDMxMkZDNzYzODI5QS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOmow DQYJKoZIhvcNAQELBQADggEBADTC/6SRfZ1VVU345aDTp+lIH17Hzt7MnSF9olMP MTUxNgFZjaxRT0h7vRcvW5pknjwLVClgbgVz1qV9ZIY2lF+perI9jom0FBgrSGw3 jRaMecBgXmwet4fpLP6La1wswltIBO5T7pDVEotSupsmI+Iiu+dRox5nKeGX0bak 0Qq7kYhn2RkP3EK3fRrIrAUHfSWobdpRZMZ3y7/KwW1bmR6x/oScECINER2UenmM aucurn6jQMrPMZJ0PEmSZwrEj5mdG8zOA74Cih1vWJ70uF4TeQ52rZqHx7qk5Ipa xbZfGFFcsAVmgiCfbOfGbB9Na7syriabXJZFGZtuFE2gb3A= -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:28 2026 by rpki-client