This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer File: akq-io-jeJUa-mhZc1u-axgUi1c.cer (raw, json) Hash identifier: WiPLRaBGb0c1Q4XD04GC5AANulxp54wvlJvC6rgNtoY= Subject key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8560B78861AA3AE5851C9E507019DC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203367 IP: 185.137.84.0/22 IP: 2a07:2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:60:b7:88:61:aa:3a:e5:85:1c:9e:50:70:19:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:33:5d:72:20:25:cd:df:ed:1b:03:44:d6:81: bf:18:f3:13:f4:21:b9:83:09:0e:52:87:c1:7c:bf: a4:93:74:4a:b5:69:bf:59:c7:ec:7d:e3:70:75:f5: 37:39:25:99:ad:0c:af:eb:87:55:10:e6:1f:62:50: 28:ba:64:b6:38:cf:b0:19:c0:df:13:0d:42:b2:e7: 2d:04:1f:9c:88:35:50:84:6c:79:0b:6b:99:63:1d: fa:cd:ed:36:dc:c5:37:40:83:7b:50:37:23:b8:a0: 0c:eb:82:ce:a2:8a:c5:46:1b:35:74:ea:0e:ca:76: f2:a8:be:39:08:58:e3:fe:a7:bd:74:22:bf:ca:d4: 42:2f:1f:74:33:b8:99:ee:c9:58:35:a6:8e:f3:b4: 80:c7:40:10:37:d1:dc:5f:13:44:c2:2a:61:62:a8: 52:c8:b0:f6:f9:73:ad:1a:15:9a:56:ce:ef:d8:98: 45:48:9d:14:9a:6f:38:7e:b8:5f:99:34:fe:11:59: d5:e9:eb:15:e8:ad:df:b9:94:86:32:44:f6:0e:94: f5:94:a0:e2:61:43:2f:d2:a7:d8:ef:4c:27:d5:ff: 02:5c:4d:e7:04:b7:eb:34:16:72:27:6d:e7:4f:88: 5a:78:eb:d4:ff:77:17:78:0d:3a:ca:30:c4:d8:8e: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.84.0/22 IPv6: 2a07:2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203367 Signature Algorithm: sha256WithRSAEncryption 3b:33:08:cb:d8:50:e9:21:6a:01:b9:0d:67:af:a7:38:ce:65: 30:73:5f:b6:cf:9f:92:df:df:fb:5d:c0:da:44:df:23:0d:dd: 59:5c:66:a5:43:e9:7f:e4:64:de:56:54:2e:64:54:76:43:03: 73:42:7c:e0:d6:5e:0d:3a:74:8f:e1:6f:a4:81:67:ff:0e:10: 4a:6f:39:97:bd:c2:76:73:fb:ea:94:4f:c0:e6:5d:83:ba:4b: d3:fe:fd:62:48:2c:2d:e8:f5:83:87:41:80:63:b1:fd:39:3f: 57:92:84:51:c3:63:04:bc:f0:46:52:66:af:28:27:c1:0f:b9: 55:08:88:30:ea:03:4e:19:b0:17:27:46:d8:fa:e1:eb:54:a2: b4:e9:a9:31:da:92:04:7e:3f:60:da:4c:cd:a1:17:1d:be:92: cc:69:93:db:9d:91:9d:2a:7f:bb:53:66:37:18:ca:ce:2f:ef: 64:83:6b:d7:4b:cc:ee:bd:7b:8b:79:e0:c8:40:46:8a:02:2e: ca:be:88:77:5c:97:d1:43:65:58:f2:42:bb:a1:ef:4e:bd:dd: 93:00:bb:5f:09:89:73:c2:19:71:e7:16:76:4e:d9:cf:2b:69: a1:90:37:e1:8b:17:8f:86:cf:2e:4e:30:30:78:06:1f:b5:02: d3:7b:ac:eb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hWC3iGGqOuWFHJ5QcBncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTRhYmU4YThmYTM3ODk1MWFmYTY4NTk3MzViYmU2YjE4MTQ4YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzNdciAlzd/tGwNE1oG/GPMT9CG5 gwkOUofBfL+kk3RKtWm/WcfsfeNwdfU3OSWZrQyv64dVEOYfYlAoumS2OM+wGcDf Ew1CsuctBB+ciDVQhGx5C2uZYx36ze023MU3QIN7UDcjuKAM64LOoorFRhs1dOoO ynbyqL45CFjj/qe9dCK/ytRCLx90M7iZ7slYNaaO87SAx0AQN9HcXxNEwiphYqhS yLD2+XOtGhWaVs7v2JhFSJ0Umm84frhfmTT+EVnV6esV6K3fuZSGMkT2DpT1lKDi YUMv0qfY70wn1f8CXE3nBLfrNBZyJ23nT4haeOvU/3cXeA06yjDE2I62qwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGpKvoqPo3iVGvpoWXNbvmsYFItXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q3L2IwMjhi Ni00NzgyLTRjN2YtYjZhMi04N2ViNDQ4ZTkyZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcvYjAyOGI2 LTQ3ODItNGM3Zi1iNmEyLTg3ZWI0NDhlOTJlZC8xL2FrcS1pby1qZUpVYS1taFpj MXUtYXhnVWkxYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuYlUMA0EAgACMAcDBQMqBwLAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMaZzANBgkqhkiG9w0BAQsFAAOCAQEAOzMIy9hQ6SFq AbkNZ6+nOM5lMHNfts+fkt/f+13A2kTfIw3dWVxmpUPpf+Rk3lZULmRUdkMDc0J8 4NZeDTp0j+FvpIFn/w4QSm85l73CdnP76pRPwOZdg7pL0/79YkgsLej1g4dBgGOx /Tk/V5KEUcNjBLzwRlJmrygnwQ+5VQiIMOoDThmwFydG2Prh61SitOmpMdqSBH4/ YNpMzaEXHb6SzGmT252RnSp/u1NmNxjKzi/vZINr10vM7r17i3ngyEBGigIuyr6I d1yX0UNlWPJCu6HvTr3dkwC7XwmJc8IZcecWdk7ZzytpoZA34YsXj4bPLk4wMHgG H7UC03us6w== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:56 2026 by rpki-client