This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/alQ3DEupveK5g3a_j5QqlJJsFRk.cer File: alQ3DEupveK5g3a_j5QqlJJsFRk.cer (raw, json) Hash identifier: 7KpQb+VOZVb8gkN0z86LqPR+ffLfJJRlgqW70mv/TlE= Subject key identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8CEF0B37D72D9AA16751DB7343C74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56656 IP: 31.134.96.0/21 IP: 2001:67c:222c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ce:f0:b3:7d:72:d9:aa:16:75:1d:b7:34:3c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a54370c4ba9bde2b98376bf8f942a94926c1519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:8d:a7:9a:16:08:42:fb:bf:e7:d0:48:fa: c7:30:3f:ad:13:f9:f4:9e:23:3a:6d:4f:d8:4b:22: 5b:0c:31:c0:82:62:39:05:85:44:46:af:70:b6:45: fd:a3:9b:26:b2:ab:a6:fa:69:59:49:8b:fe:47:3d: 80:91:be:54:88:ad:0e:f6:ed:ea:5e:23:1f:79:59: 8f:4e:c8:9c:8a:af:0d:6f:95:9e:b2:2d:cf:3d:ad: 01:a7:a6:8b:2c:07:63:e3:b5:47:0b:df:7c:dc:1c: bf:a4:e4:71:e3:d4:17:ed:13:4a:d7:25:32:64:e2: f6:cf:6c:3c:3b:b2:ab:b0:07:7a:e9:b4:7f:97:a3: 61:d2:8d:1f:db:45:f9:48:35:7b:29:3b:a8:97:e0: b8:cd:bf:dd:a5:11:a3:ae:01:42:3c:c6:68:d7:a3: cd:c4:76:e3:2e:28:87:22:c2:44:87:b6:b4:ed:85: cf:81:ea:81:47:13:fd:7e:47:6b:16:50:e5:0c:73: e4:73:18:02:12:b5:75:6d:20:64:5a:f8:df:78:1d: ee:6d:11:9f:6e:21:9b:10:ea:e3:f6:dc:47:9f:5b: 98:0d:d0:48:ca:ea:b2:db:fb:25:dd:4a:41:35:3c: 42:dd:f1:1d:54:c3:a0:16:1d:cf:56:b6:99:6c:d5: bc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:54:37:0C:4B:A9:BD:E2:B9:83:76:BF:8F:94:2A:94:92:6C:15:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/67603a-f529-4b18-99fb-503b99d5ad68/1/alQ3DEupveK5g3a_j5QqlJJsFRk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.134.96.0/21 IPv6: 2001:67c:222c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56656 Signature Algorithm: sha256WithRSAEncryption 8a:26:47:20:eb:2b:2f:a5:1a:76:1f:3c:73:bf:8c:58:bc:fd: cb:26:17:01:93:08:99:85:dd:c3:f7:b4:c7:51:f9:fc:31:9f: 1c:3d:b6:6b:a1:55:b4:1c:53:f9:98:36:f3:4f:7c:19:5f:70: b0:dd:7a:ee:5a:9b:1c:0d:d0:ff:20:73:5c:4d:c2:2c:2e:c6: fd:86:38:ea:70:58:06:2d:e5:14:c4:61:58:2f:23:12:23:0e: cd:fb:1b:c5:a8:14:82:5d:ec:3a:87:ba:fd:f4:05:13:ea:d4: b2:0b:47:86:18:86:7b:10:c7:fa:ca:6d:31:3d:d9:7f:3d:35: eb:41:27:e8:7a:66:b3:30:04:36:c5:2b:ca:16:be:0c:59:15: 1f:70:57:ba:01:7d:93:51:38:c0:49:c3:d7:73:39:1f:0f:b6: 31:88:6a:13:c5:9c:bc:f4:f2:ef:93:fb:e8:60:44:9a:9f:30: 64:15:8f:cb:4e:dd:b2:51:5f:eb:ba:af:ad:73:45:24:16:06: 4f:79:2f:98:04:8f:e9:b1:8b:cd:b1:f8:ea:4c:1e:7a:83:5d: 3e:23:f2:da:f2:69:b0:17:c5:6d:5c:45:41:b8:6d:26:95:ac: 9b:fd:5e:b7:6c:6d:7e:a3:6b:3e:24:af:71:d7:eb:0c:a3:90: d8:54:6f:60 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt6yM7ws31y2aoWdR23NDx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTU0MzcwYzRiYTliZGUyYjk4Mzc2YmY4Zjk0MmE5NDkyNmMxNTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGONp5oWCEL7v+fQSPrHMD+tE/n0 niM6bU/YSyJbDDHAgmI5BYVERq9wtkX9o5smsqum+mlZSYv+Rz2Akb5UiK0O9u3q XiMfeVmPTsiciq8Nb5Wesi3PPa0Bp6aLLAdj47VHC9983By/pORx49QX7RNK1yUy ZOL2z2w8O7KrsAd66bR/l6Nh0o0f20X5SDV7KTuol+C4zb/dpRGjrgFCPMZo16PN xHbjLiiHIsJEh7a07YXPgeqBRxP9fkdrFlDlDHPkcxgCErV1bSBkWvjfeB3ubRGf biGbEOrj9txHn1uYDdBIyuqy2/sl3UpBNTxC3fEdVMOgFh3PVraZbNW8HQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFGpUNwxLqb3iuYN2v4+UKpSSbBUZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzLzY3NjAz YS1mNTI5LTRiMTgtOTlmYi01MDNiOTlkNWFkNjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvNjc2MDNh LWY1MjktNGIxOC05OWZiLTUwM2I5OWQ1YWQ2OC8xL2FsUTNERXVwdmVLNWczYV9q NVFxbEpKc0ZSay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQDH4ZgMA8EAgACMAkDBwAgAQZ8IiwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAN1QMA0GCSqGSIb3DQEBCwUAA4IBAQCKJkcg6ysv pRp2Hzxzv4xYvP3LJhcBkwiZhd3D97THUfn8MZ8cPbZroVW0HFP5mDbzT3wZX3Cw 3XruWpscDdD/IHNcTcIsLsb9hjjqcFgGLeUUxGFYLyMSIw7N+xvFqBSCXew6h7r9 9AUT6tSyC0eGGIZ7EMf6ym0xPdl/PTXrQSfoemazMAQ2xSvKFr4MWRUfcFe6AX2T UTjAScPXczkfD7YxiGoTxZy89PLvk/voYESanzBkFY/LTt2yUV/ruq+tc0UkFgZP eS+YBI/psYvNsfjqTB56g10+I/La8mmwF8VtXEVBuG0mlayb/V63bG1+o2s+JK9x 1+sMo5DYVG9g -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:00 2026 by rpki-client