This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer File: apWkz28PDDLNPf6Yh2ImC_zbpn4.cer (raw, json) Hash identifier: VCcLqmuqpPNPSdVoJj2GEoDWR+79oQnvQBs1dyBpeeo= Subject key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6A0BC5EFCF00A73B5283CF29EEF7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214230 IP: 147.234.26.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a0:bc:5e:fc:f0:0a:73:b5:28:3c:f2:9e:ef:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:ea:4e:b3:30:9b:5c:a9:e3:cc:3e:f0:2c: 68:67:43:ca:c6:db:e2:cf:a3:5f:98:d2:b6:fd:fe: 83:e1:c9:aa:36:2b:38:f4:d7:45:e1:04:31:6b:3a: f1:93:20:ab:08:c3:e6:11:2c:7b:8f:47:29:f3:be: 3c:2f:eb:be:54:43:5f:44:5e:48:5f:3b:61:19:22: e4:b9:cb:36:f9:11:7c:72:22:87:cf:ac:58:42:30: 9d:e2:a2:a2:be:23:dd:3b:ac:bb:b4:c6:26:a3:ec: aa:60:c7:ce:ea:4d:36:39:3d:2a:0a:83:bc:c1:d3: 7c:7a:02:43:1d:ea:33:16:7a:cd:d7:7e:c9:c9:bd: bb:b2:69:26:e3:58:ea:23:e4:60:14:9b:4d:f9:6c: c0:a9:f5:c2:7b:5d:2b:a8:ff:70:29:2f:1b:9c:bb: 18:9e:02:71:43:4e:f4:cd:ac:92:bd:33:40:18:4e: 6e:df:2e:db:ec:b7:3a:fc:7d:d0:63:77:ba:27:60: cb:97:6b:0c:b3:bd:c6:ad:b7:bb:3b:ee:9c:61:07: 49:e8:6c:41:32:5b:6a:76:08:03:e7:12:9b:90:ff: 20:3e:33:f8:41:ee:5a:d9:84:dd:70:50:76:82:38: 38:da:61:d8:86:2b:f0:0a:94:1e:6a:bc:80:db:95: 5a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.26.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214230 Signature Algorithm: sha256WithRSAEncryption ab:25:25:55:b0:67:2e:00:8a:8e:08:e6:03:db:7e:d5:97:06: c9:85:bc:1d:d2:e7:e1:9b:3a:dc:dc:c1:2a:f2:79:d0:27:ed: 96:81:bc:71:2e:1d:96:fc:4e:a9:b1:83:30:13:34:3c:93:1b: 68:e4:65:58:68:91:5b:06:57:f1:a9:91:94:6a:16:49:a0:02: 14:dc:8d:65:be:20:f2:0c:8f:be:7e:25:1a:7e:37:a7:3b:12: 08:8a:da:67:87:86:c0:ae:45:67:c2:23:e3:6a:aa:a4:42:72: 78:e3:20:02:6b:12:55:43:6c:51:1d:14:63:6e:66:f5:0c:30: ee:ea:35:7e:ff:05:6b:c0:63:78:6b:3a:2a:c4:43:31:f4:d4: 3b:23:1d:dd:fb:03:1a:49:8f:69:a0:81:d0:1e:6f:56:67:b9: 0e:4a:dc:81:cd:fa:69:3e:cb:00:9c:de:b7:c7:7e:df:2d:a8: ee:75:84:7c:39:02:f3:1a:41:f1:82:81:c5:a5:54:0d:60:e4: 8e:97:3d:aa:af:a5:f2:62:6a:e4:b5:76:75:85:de:a3:9f:e3: af:b6:50:20:cb:a6:48:13:57:f2:93:2e:83:ce:bd:f3:75:f3: 03:4c:16:e3:a7:6b:48:b2:64:60:f6:6c:07:1c:65:2c:d8:56: 09:41:69:55 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xqC8XvzwCnO1KDzynu9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTk1YTRjZjZmMGYwYzMyY2QzZGZlOTg4NzYyMjYwYmZjZGJhNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmzqTrMwm1yp48w+8CxoZ0PKxtvi z6NfmNK2/f6D4cmqNis49NdF4QQxazrxkyCrCMPmESx7j0cp8748L+u+VENfRF5I XzthGSLkucs2+RF8ciKHz6xYQjCd4qKiviPdO6y7tMYmo+yqYMfO6k02OT0qCoO8 wdN8egJDHeozFnrN137Jyb27smkm41jqI+RgFJtN+WzAqfXCe10rqP9wKS8bnLsY ngJxQ070zaySvTNAGE5u3y7b7Lc6/H3QY3e6J2DLl2sMs73Grbe7O+6cYQdJ6GxB MltqdggD5xKbkP8gPjP4Qe5a2YTdcFB2gjg42mHYhivwCpQearyA25VaSQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGqVpM9vDwwyzT3+mIdiJgv826Z+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3L2EwYWFk OS0zODY3LTQ0OWEtOTI0My05YWIyNGU3ZDI4ZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvYTBhYWQ5 LTM4NjctNDQ5YS05MjQzLTlhYjI0ZTdkMjhmZS8xL2FwV2t6MjhQRERMTlBmNllo MkltQ196YnBuNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAk+oaMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNE1jANBgkqhkiG9w0BAQsFAAOCAQEAqyUlVbBnLgCKjgjmA9t+1ZcGyYW8HdLn 4Zs63NzBKvJ50CftloG8cS4dlvxOqbGDMBM0PJMbaORlWGiRWwZX8amRlGoWSaAC FNyNZb4g8gyPvn4lGn43pzsSCIraZ4eGwK5FZ8Ij42qqpEJyeOMgAmsSVUNsUR0U Y25m9Qww7uo1fv8Fa8BjeGs6KsRDMfTUOyMd3fsDGkmPaaCB0B5vVme5Dkrcgc36 aT7LAJzet8d+3y2o7nWEfDkC8xpB8YKBxaVUDWDkjpc9qq+l8mJq5LV2dYXeo5/j r7ZQIMumSBNX8pMug86983XzA0wW46drSLJkYPZsBxxlLNhWCUFpVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:44 2026 by rpki-client