This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer File: ajXs8V8abbPIJhCSrr4iEyWRNc4.cer (raw, json) Hash identifier: 0jJId/vbGG3Tx9ILBE5htjthhWFGhb63kCcnab85muM= Subject key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA45A3D375286E8359D9F9B5C10B465 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213423 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:5a:3d:37:52:86:e8:35:9d:9f:9b:5c:10:b4:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:b5:31:df:ff:7f:50:8d:95:80:09:1e:f3: 67:7c:fa:12:74:d1:4f:ff:ff:1e:36:63:9b:aa:16: 9e:99:f7:bc:fe:a9:3b:de:94:c2:98:a0:e7:6e:0a: c0:7e:0e:f3:ec:b1:91:2c:8c:e0:5e:bc:0c:e6:f0: 52:9a:7a:f8:28:21:d0:de:ec:90:1e:2d:b2:35:0f: 19:01:f6:43:94:36:98:da:2e:82:9b:36:a1:85:77: 2f:91:55:60:29:7f:41:0b:f3:eb:87:f0:9b:0f:1e: 61:ae:74:33:f1:b9:b3:2e:86:c2:df:5b:12:5e:3d: 0e:48:0e:8a:35:fa:56:25:af:74:d1:1a:f4:18:8b: 57:82:b5:03:3c:99:29:50:b9:a5:96:1d:d1:93:c1: fc:02:bb:35:6d:7f:00:27:df:33:c3:a1:46:d9:0a: 17:19:91:96:1d:76:9f:4f:53:3a:f8:86:de:37:4a: be:7b:2c:5a:4d:75:18:13:b1:ef:cc:70:fe:2e:c2: 28:c3:12:25:b0:e8:bb:2b:76:c1:9e:e0:8f:e6:a3: 69:cc:68:7e:ce:54:bc:39:36:32:da:b7:56:c0:74: a2:a2:5e:93:be:7c:22:44:0b:8c:07:3e:f8:d9:b4: fe:5b:ff:28:53:8c:57:79:41:5d:16:03:cc:87:8c: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213423 Signature Algorithm: sha256WithRSAEncryption 9a:32:3e:74:55:e9:10:ee:e2:de:67:d6:ad:d4:6c:9f:f7:84: 11:5e:e3:15:25:00:c0:93:e8:74:bd:49:7c:ab:e0:bf:6d:be: 24:b6:96:59:f1:0f:2c:7e:a7:e8:62:4f:e0:32:13:31:39:20: a3:50:9c:e2:88:19:66:42:58:36:c7:81:0d:70:45:b5:a6:06: 14:0e:df:41:6a:03:d4:54:fc:89:ab:9a:de:02:97:b0:39:1b: 0f:06:56:03:3f:77:84:86:17:48:d6:a0:33:86:76:2b:d5:cf: 2f:f9:db:1b:e9:d4:b0:0e:82:88:20:62:dd:e2:e8:89:20:f1: be:e5:e3:b0:ff:2b:f7:a8:11:0b:ff:25:69:7a:af:18:26:a7: a6:6f:5d:34:3a:b8:fa:35:c5:d8:66:80:c0:75:d0:1e:33:ea: b0:09:7e:4d:cc:43:d8:34:ac:a1:08:64:89:b4:a7:60:18:46: 3e:93:29:55:05:00:ef:3f:0e:08:c9:6a:8e:87:a4:fc:44:6e: 10:ef:53:c6:e9:5d:17:09:89:04:e2:f0:13:7a:6b:c9:d4:60: 1f:b3:46:63:ec:68:23:71:53:6f:7c:b6:2e:a5:28:18:b1:d6: 83:79:3a:77:dc:02:3f:9f:c7:b3:4e:c3:8c:c0:e5:da:58:31: 5e:44:d2:6b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+pFo9N1KG6DWdn5tcELRlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTM1ZWNmMTVmMWE2ZGIzYzgyNjEwOTJhZWJlMjIxMzI1OTEzNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQu1Md//f1CNlYAJHvNnfPoSdNFP //8eNmObqhaemfe8/qk73pTCmKDnbgrAfg7z7LGRLIzgXrwM5vBSmnr4KCHQ3uyQ Hi2yNQ8ZAfZDlDaY2i6CmzahhXcvkVVgKX9BC/Prh/CbDx5hrnQz8bmzLobC31sS Xj0OSA6KNfpWJa900Rr0GItXgrUDPJkpULmllh3Rk8H8Ars1bX8AJ98zw6FG2QoX GZGWHXafT1M6+IbeN0q+eyxaTXUYE7HvzHD+LsIowxIlsOi7K3bBnuCP5qNpzGh+ zlS8OTYy2rdWwHSiol6TvnwiRAuMBz742bT+W/8oU4xXeUFdFgPMh4w2aQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGo17PFfGm2zyCYQkq6+IhMlkTXOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzJhNjk0 My0xMDYwLTRiYWUtYTdhNC03YTI4ODQ5NmVkNjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvMmE2OTQz LTEwNjAtNGJhZS1hN2E0LTdhMjg4NDk2ZWQ2Ni8xL2FqWHM4VjhhYmJQSUpoQ1Ny cjRpRXlXUk5jNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBrzANBgkqhkiG9w0BAQsFAAOCAQEAmjI+dFXpEO7i 3mfWrdRsn/eEEV7jFSUAwJPodL1JfKvgv22+JLaWWfEPLH6n6GJP4DITMTkgo1Cc 4ogZZkJYNseBDXBFtaYGFA7fQWoD1FT8iaua3gKXsDkbDwZWAz93hIYXSNagM4Z2 K9XPL/nbG+nUsA6CiCBi3eLoiSDxvuXjsP8r96gRC/8laXqvGCanpm9dNDq4+jXF 2GaAwHXQHjPqsAl+TcxD2DSsoQhkibSnYBhGPpMpVQUA7z8OCMlqjoek/ERuEO9T xuldFwmJBOLwE3prydRgH7NGY+xoI3FTb3y2LqUoGLHWg3k6d9wCP5/Hs07DjMDl 2lgxXkTSaw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:10:46 2026 by rpki-client