This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ap2Z4esn7Hq76TViechBGkEw_co.cer File: ap2Z4esn7Hq76TViechBGkEw_co.cer (raw, json) Hash identifier: GRZ4ucnw9ADF80umMP+S93dV0hKslwoiLmMS9IfKb9M= Subject key identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15BADB94185BD81E1DA75894DF6F31 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44100 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ba:db:94:18:5b:d8:1e:1d:a7:58:94:df:6f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a9d99e1eb27ec7abbe9356279c8411a4130fdca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:d8:d4:fa:84:b9:93:5d:4c:12:c8:aa:4b: 2e:d5:04:41:98:de:89:14:45:81:a3:c7:f7:99:f2: 1c:09:e2:d0:86:a9:55:6f:fe:6f:7b:76:3a:4f:d9: d9:e8:91:d6:33:1d:95:3e:f1:f6:56:cf:08:db:5c: f6:ee:f9:5e:a6:d1:1b:1e:fd:2f:24:8c:56:ff:ae: 93:df:f0:64:b1:04:19:44:75:0a:b1:46:59:4e:cd: fc:cb:50:9c:65:2b:2d:4e:87:ab:25:b4:76:d2:16: 9e:35:7a:23:0f:7c:07:fc:be:5c:be:31:df:39:c1: 6f:6c:c9:e7:21:bd:6c:c7:c6:0c:57:fc:ac:88:6c: 7a:13:30:bd:bc:9e:f3:73:84:75:5c:28:00:ba:10: da:42:16:47:a8:a5:c0:98:a7:ab:7d:5c:a1:6f:54: cf:02:57:7a:fe:21:b0:06:cb:ec:8d:20:a5:66:2e: 52:b7:35:06:50:c3:c4:05:cb:9f:80:2c:7e:6d:13: e9:ef:60:05:20:be:81:4c:24:3b:38:24:9e:e9:5e: 24:4c:1c:3c:98:c1:15:37:ba:89:33:11:57:ab:68: f4:4e:b6:1b:ba:3f:02:68:d7:c8:51:4c:1d:bd:dd: 3d:7d:b9:4d:c2:00:1a:fe:b9:fc:35:75:9f:a4:2d: 91:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9D:99:E1:EB:27:EC:7A:BB:E9:35:62:79:C8:41:1A:41:30:FD:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/73c8f0-7a5a-4adb-a12d-b7daf2e60f6f/1/ap2Z4esn7Hq76TViechBGkEw_co.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 44100 Signature Algorithm: sha256WithRSAEncryption 14:86:fa:b2:32:51:9f:98:2f:25:56:6d:97:74:6d:f5:d5:9e: 2c:85:2c:37:81:24:9d:99:06:f2:49:15:d0:64:1e:75:74:32: 83:44:8c:8c:a7:6f:f8:fa:5a:c6:61:35:3f:c6:8f:7c:da:a0: 8a:ec:6f:51:07:2d:3a:b3:c1:5d:b0:43:a3:ea:1e:99:15:ba: e7:37:ea:c8:31:6d:26:0c:d6:88:5d:f4:38:02:4c:1e:f4:e7: 1e:53:67:08:67:3b:5e:ec:6d:44:17:5d:80:ec:5d:8c:f9:cd: 44:1b:d9:9a:c8:ac:91:bc:20:d1:12:cc:76:a3:e5:da:ed:8b: dc:05:f8:f0:14:d1:37:68:3e:35:7f:97:8e:dc:00:7f:aa:ff: 3f:d4:28:46:e7:39:16:b2:04:d1:1e:f2:64:38:52:18:fe:35: d4:e5:21:bc:09:ea:10:bd:2a:27:6b:7c:7a:e7:25:91:a5:2c: 6b:38:ee:bb:8c:28:81:af:f4:b5:78:2c:10:87:0a:1d:88:9a: d2:b8:66:de:48:46:8a:c2:5a:c4:a0:1d:33:5a:0f:c8:bf:56: e1:a4:18:b0:b9:45:e6:23:dc:b9:39:b3:4a:8f:b9:33:33:69: 9e:cc:b7:2c:4c:f4:f6:a6:60:d1:20:4b:1e:64:99:92:1f:80: 26:38:11:97 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/FbrblBhb2B4dp1iU328xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTlkOTllMWViMjdlYzdhYmJlOTM1NjI3OWM4NDExYTQxMzBmZGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto/Y1PqEuZNdTBLIqksu1QRBmN6J FEWBo8f3mfIcCeLQhqlVb/5ve3Y6T9nZ6JHWMx2VPvH2Vs8I21z27vleptEbHv0v JIxW/66T3/BksQQZRHUKsUZZTs38y1CcZSstToerJbR20haeNXojD3wH/L5cvjHf OcFvbMnnIb1sx8YMV/ysiGx6EzC9vJ7zc4R1XCgAuhDaQhZHqKXAmKerfVyhb1TP Ald6/iGwBsvsjSClZi5StzUGUMPEBcufgCx+bRPp72AFIL6BTCQ7OCSe6V4kTBw8 mMEVN7qJMxFXq2j0TrYbuj8CaNfIUUwdvd09fblNwgAa/rn8NXWfpC2RWQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGqdmeHrJ+x6u+k1YnnIQRpBMP3KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzczYzhm MC03YTVhLTRhZGItYTEyZC1iN2RhZjJlNjBmNmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNzNjOGYw LTdhNWEtNGFkYi1hMTJkLWI3ZGFmMmU2MGY2Zi8xL2FwMlo0ZXNuN0hxNzZUVmll Y2hCR2tFd19jby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCsRDANBgkqhkiG9w0BAQsFAAOCAQEAFIb6sjJRn5gv JVZtl3Rt9dWeLIUsN4EknZkG8kkV0GQedXQyg0SMjKdv+PpaxmE1P8aPfNqgiuxv UQctOrPBXbBDo+oemRW65zfqyDFtJgzWiF30OAJMHvTnHlNnCGc7XuxtRBddgOxd jPnNRBvZmsiskbwg0RLMdqPl2u2L3AX48BTRN2g+NX+XjtwAf6r/P9QoRuc5FrIE 0R7yZDhSGP411OUhvAnqEL0qJ2t8euclkaUsazjuu4woga/0tXgsEIcKHYia0rhm 3khGisJaxKAdM1oPyL9W4aQYsLlF5iPcuTmzSo+5MzNpnsy3LEz09qZg0SBLHmSZ kh+AJjgRlw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:01 2026 by rpki-client