This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axpX8G73IAfdYZP5YKYWNEtzMB8.cer File: axpX8G73IAfdYZP5YKYWNEtzMB8.cer (raw, json) Hash identifier: TkGObN/smS6HGEhbdLvsgRbYnD00CAt0ySTFImPo80A= Subject key identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC7BD2EFE951BA5AF3ED0CFAEEFCB74 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203052 IP: 185.146.140.0/22 IP: 2a07:5100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bd:2e:fe:95:1b:a5:af:3e:d0:cf:ae:ef:cb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1a57f06ef72007dd6193f960a616344b73301f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:08:7f:20:3c:b1:28:6f:89:7b:d5:23:f3:6e: f0:2e:dd:ef:c5:ed:54:bf:81:45:63:2b:bd:1a:e2: 09:6b:88:b8:30:63:ed:1a:fa:09:a5:d3:d5:0d:06: 7a:cd:27:57:7c:03:7d:3a:46:a6:fa:6c:78:8a:55: 7d:08:59:36:29:04:3e:a6:01:51:01:f9:d9:e0:a2: b4:5e:8d:86:49:ac:50:98:55:ba:93:21:4e:80:68: 60:88:ac:9d:5f:98:db:57:da:7d:1d:4b:ce:92:67: 52:7b:34:05:62:0d:07:5a:f2:df:ff:f2:9d:55:41: d0:03:11:d3:13:02:c4:0a:8b:4a:4f:30:c2:9e:71: 5d:cc:5d:d5:50:bd:af:d6:e7:db:2e:39:db:d5:52: 2e:88:eb:3a:a1:f0:44:7b:18:83:c6:f0:44:fc:08: 40:4d:44:1c:d7:8d:a1:01:bb:a1:81:4a:93:64:a6: 8d:44:b1:16:a5:b5:85:c4:40:51:03:48:2d:f6:c8: a1:c9:34:4d:fd:40:79:9f:2f:4e:fb:55:38:05:54: d6:9e:ed:e1:ad:8c:49:5e:e3:8b:e0:17:e1:9a:1e: 99:c6:58:58:6a:f7:7a:0e:79:ad:da:a3:d5:c6:3d: 8a:44:54:db:76:52:75:cd:6a:40:c4:40:9b:42:01: cf:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1A:57:F0:6E:F7:20:07:DD:61:93:F9:60:A6:16:34:4B:73:30:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c96247-e979-4e58-89f6-eebdcbd3aee8/1/axpX8G73IAfdYZP5YKYWNEtzMB8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.140.0/22 IPv6: 2a07:5100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203052 Signature Algorithm: sha256WithRSAEncryption 06:8f:30:ae:d5:32:77:c1:77:51:ef:b1:57:67:3c:b9:4c:72: 1a:a5:31:26:2e:99:8e:d1:68:eb:d6:64:eb:96:78:f7:fb:fd: 48:32:ae:d2:2b:8c:65:9c:bc:87:91:24:fc:89:f5:6c:e7:75: 81:c1:2e:27:2a:85:07:ed:44:cc:ee:ed:d8:53:05:38:66:44: 2e:d2:51:35:a4:c7:e1:2e:c5:f0:5e:8b:83:36:df:09:e8:e8: 3a:59:e8:4f:77:ee:5c:a2:8c:80:b6:b3:bc:22:16:2b:71:6b: d6:62:55:1c:08:77:92:f9:6e:c3:40:b0:72:9e:20:29:f3:28: 26:61:cc:e1:39:49:04:0b:9c:00:75:20:ba:08:94:58:a4:aa: 82:19:19:e4:e5:83:46:49:e4:45:30:b6:45:e8:31:42:07:d5: a9:28:f1:8b:ba:cd:4f:15:3d:c2:05:68:d9:f5:69:31:85:99: 7b:db:0c:46:5c:95:fb:c2:28:93:db:9f:aa:61:d1:cf:d0:04: ce:9a:ad:73:52:c7:1e:0b:ba:35:eb:98:3e:10:a6:cf:ba:97: be:db:81:23:a0:c0:20:ed:21:88:6a:0f:bb:34:b6:fd:f5:cb: d0:62:f0:54:41:c6:1c:17:06:6c:aa:2b:19:d8:00:a5:b7:f1: 07:fb:a8:5a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6x70u/pUbpa8+0M+u78t0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFhNTdmMDZlZjcyMDA3ZGQ2MTkzZjk2MGE2MTYzNDRiNzMzMDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ah/IDyxKG+Je9Uj827wLt3vxe1U v4FFYyu9GuIJa4i4MGPtGvoJpdPVDQZ6zSdXfAN9Okam+mx4ilV9CFk2KQQ+pgFR AfnZ4KK0Xo2GSaxQmFW6kyFOgGhgiKydX5jbV9p9HUvOkmdSezQFYg0HWvLf//Kd VUHQAxHTEwLECotKTzDCnnFdzF3VUL2v1ufbLjnb1VIuiOs6ofBEexiDxvBE/AhA TUQc142hAbuhgUqTZKaNRLEWpbWFxEBRA0gt9sihyTRN/UB5ny9O+1U4BVTWnu3h rYxJXuOL4Bfhmh6ZxlhYavd6Dnmt2qPVxj2KRFTbdlJ1zWpAxECbQgHPdQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGsaV/Bu9yAH3WGT+WCmFjRLczAfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2M5NjI0 Ny1lOTc5LTRlNTgtODlmNi1lZWJkY2JkM2FlZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYzk2MjQ3 LWU5NzktNGU1OC04OWY2LWVlYmRjYmQzYWVlOC8xL2F4cFg4RzczSUFmZFlaUDVZ S1lXTkV0ek1COC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZKMMA0EAgACMAcDBQMqB1EAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZLDANBgkqhkiG9w0BAQsFAAOCAQEABo8wrtUyd8F3 Ue+xV2c8uUxyGqUxJi6ZjtFo69Zk65Z49/v9SDKu0iuMZZy8h5Ek/In1bOd1gcEu JyqFB+1EzO7t2FMFOGZELtJRNaTH4S7F8F6LgzbfCejoOlnoT3fuXKKMgLazvCIW K3Fr1mJVHAh3kvluw0Cwcp4gKfMoJmHM4TlJBAucAHUgugiUWKSqghkZ5OWDRknk RTC2RegxQgfVqSjxi7rNTxU9wgVo2fVpMYWZe9sMRlyV+8Iok9ufqmHRz9AEzpqt c1LHHgu6NeuYPhCmz7qXvtuBI6DAIO0hiGoPuzS2/fXL0GLwVEHGHBcGbKorGdgA pbfxB/uoWg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:04 2026 by rpki-client