This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer File: axrGkUv4Rz0YC2A4e9CY8dN9rIA.cer (raw, json) Hash identifier: qnrT0SrwjYliEkguAMK03PyFHe2OzHWPPLe57Cfy1P8= Subject key identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA35DD41F2478D0D8D0DA11BC43F947 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202312 IP: 91.200.88.0/22 IP: 2a0c:69c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5d:d4:1f:24:78:d0:d8:d0:da:11:bc:43:f9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b1ac6914bf8473d180b60387bd098f1d37dac80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:eb:34:47:de:07:51:ab:f4:09:8c:e1:b4: 81:92:39:2e:90:71:9f:4f:5f:b8:39:21:87:19:21: 85:0e:8c:a7:4f:29:43:8d:fe:30:09:f6:0a:1c:b4: 38:9f:dd:a9:24:85:07:b5:f2:4c:3f:da:79:16:12: 81:6e:8c:62:2d:62:a3:32:13:ef:5f:06:12:33:8d: 7b:10:8b:b0:d9:2e:22:09:9d:af:2f:f3:36:ae:42: 1a:79:2b:36:42:58:25:84:6c:e9:fe:92:fc:30:47: 27:f5:cd:8e:07:2a:b3:66:e7:a9:d4:b3:2f:aa:69: ee:53:3c:c4:f5:ba:6b:e3:ad:00:1d:bb:fb:88:64: 7e:1b:d5:d9:09:7b:18:ef:04:53:62:96:41:ef:fa: c6:e6:fd:2a:79:0e:a5:06:f6:44:3d:be:ce:02:8e: cf:d3:71:33:27:b0:00:85:a7:47:1d:09:36:64:c3: 62:ad:07:40:01:52:c3:25:81:b1:d1:e3:c0:7a:ed: 8a:8b:ae:99:cd:d3:0c:c2:3d:b9:e4:b1:68:55:63: 6e:f9:f5:83:3f:2f:7e:b9:ac:3b:5e:02:72:7a:71: 0e:9e:d6:60:41:76:c9:12:a2:8b:9c:21:8b:50:c9: 7a:3f:5e:97:66:06:0c:53:da:a3:98:80:ca:10:95: 75:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1A:C6:91:4B:F8:47:3D:18:0B:60:38:7B:D0:98:F1:D3:7D:AC:80 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1ffebd-bd37-4393-a33d-48c03520faf7/1/axrGkUv4Rz0YC2A4e9CY8dN9rIA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.88.0/22 IPv6: 2a0c:69c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202312 Signature Algorithm: sha256WithRSAEncryption 4a:e7:24:a4:6c:fc:e4:16:06:e1:dc:21:b2:64:ee:cf:db:dd: d3:3b:71:5f:a1:9b:43:bb:47:9a:44:97:c3:65:51:1c:c6:54: 3d:8a:a1:4a:ef:76:12:93:dd:ae:d5:e4:98:b8:2e:de:27:a2: ae:da:bc:89:c6:ce:7e:81:11:1d:5d:d0:36:c9:b8:1a:4f:ea: b7:aa:9a:9e:b9:a5:29:34:8e:8f:fa:6e:34:a3:76:99:ac:8c: 42:c1:3a:07:80:fd:95:47:ce:67:65:8e:f1:f0:4e:9d:47:c5: e3:85:56:9c:e8:e9:01:cd:03:3a:13:a9:24:81:d3:d5:9a:a2: 6b:ee:cd:13:c2:db:a0:9a:1b:2b:c6:c4:99:24:10:9a:6b:2a: c0:14:a3:9f:c5:6e:49:d4:a4:a7:a8:c2:b8:cb:60:cc:2c:43: 38:57:01:3c:d4:1d:fe:9d:46:6b:16:41:29:6d:3d:99:a6:8d: a9:ad:03:0e:61:32:57:a8:de:32:f1:3f:35:25:e5:64:df:3f: 04:33:20:14:ed:f9:8c:6e:c7:e4:e6:d1:a9:a3:c4:9f:98:31: 6a:26:1f:c8:e9:8c:39:4c:b4:79:2c:20:53:26:e1:60:76:a7: 01:f4:79:7f:9f:ea:44:ce:09:6c:4c:3a:ea:a3:f0:54:f2:c3: 2a:e1:69:6c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7o13UHyR40NjQ2hG8Q/lHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFhYzY5MTRiZjg0NzNkMTgwYjYwMzg3YmQwOThmMWQzN2RhYzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nPrNEfeB1Gr9AmM4bSBkjkukHGf T1+4OSGHGSGFDoynTylDjf4wCfYKHLQ4n92pJIUHtfJMP9p5FhKBboxiLWKjMhPv XwYSM417EIuw2S4iCZ2vL/M2rkIaeSs2QlglhGzp/pL8MEcn9c2OByqzZuep1LMv qmnuUzzE9bpr460AHbv7iGR+G9XZCXsY7wRTYpZB7/rG5v0qeQ6lBvZEPb7OAo7P 03EzJ7AAhadHHQk2ZMNirQdAAVLDJYGx0ePAeu2Ki66ZzdMMwj255LFoVWNu+fWD Py9+uaw7XgJyenEOntZgQXbJEqKLnCGLUMl6P16XZgYMU9qjmIDKEJV1SQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGsaxpFL+Ec9GAtgOHvQmPHTfayAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzFmZmVi ZC1iZDM3LTQzOTMtYTMzZC00OGMwMzUyMGZhZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMWZmZWJk LWJkMzctNDM5My1hMzNkLTQ4YzAzNTIwZmFmNy8xL2F4ckdrVXY0UnowWUMyQTRl OUNZOGROOXJJQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCW8hYMA0EAgACMAcDBQAqDGnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWSDANBgkqhkiG9w0BAQsFAAOCAQEASuckpGz85BYG 4dwhsmTuz9vd0ztxX6GbQ7tHmkSXw2VRHMZUPYqhSu92EpPdrtXkmLgu3ieirtq8 icbOfoERHV3QNsm4Gk/qt6qanrmlKTSOj/puNKN2mayMQsE6B4D9lUfOZ2WO8fBO nUfF44VWnOjpAc0DOhOpJIHT1Zqia+7NE8LboJobK8bEmSQQmmsqwBSjn8VuSdSk p6jCuMtgzCxDOFcBPNQd/p1GaxZBKW09maaNqa0DDmEyV6jeMvE/NSXlZN8/BDMg FO35jG7H5ObRqaPEn5gxaiYfyOmMOUy0eSwgUybhYHanAfR5f5/qRM4JbEw66qPw VPLDKuFpbA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:51 2026 by rpki-client