This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ayKtTPZHpItjH_hPIn6gJSEwVS0.cer File: ayKtTPZHpItjH_hPIn6gJSEwVS0.cer (raw, json) Hash identifier: SoxtM00mRUMbUCpB5VTVl4UrrlSBgR5ULZTc7KJrvLA= Subject key identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910B73EFA4B33B57CD7808976F5EDEC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212083 IP: 91.218.183.0/24 IP: 147.189.161.0/24 IP: 193.247.144.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b7:3e:fa:4b:33:b5:7c:d7:80:89:76:f5:ed:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b22ad4cf647a48b631ff84f227ea0252130552d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:d0:8c:73:6f:4c:f2:62:9a:c0:64:6e:c2: 8f:af:e5:10:7b:9d:89:25:79:88:e6:3f:53:43:eb: bd:db:ff:d4:ba:f7:48:ba:cf:2a:76:1c:9d:16:1f: b1:77:59:b6:ff:51:0b:69:7c:0f:66:a8:93:00:17: ff:33:df:4a:ec:52:a5:7f:cc:fd:2f:4e:39:a9:15: 18:bb:61:91:13:b2:8b:7e:fd:dd:e8:62:fe:f8:6e: 41:35:29:04:d2:02:67:cc:52:3c:24:27:14:a2:cc: a8:38:65:38:05:d8:34:ab:73:f8:2a:d5:63:a0:df: 16:f5:3b:73:ef:e6:2e:23:43:7f:88:c8:7c:27:fc: 3d:b2:27:f4:c8:e9:57:4c:04:aa:a1:e6:6c:11:cd: f8:40:8d:3d:4c:dd:57:d7:f4:a3:70:1b:e8:e1:6c: 47:76:83:15:f9:ad:44:32:93:b2:ac:3b:1e:45:7d: 46:66:2a:5e:cb:2d:fe:3d:4a:c4:61:4c:67:65:12: 3d:88:8a:2f:44:26:22:30:f4:47:7e:71:57:4c:27: 82:c1:0a:7e:a2:62:d6:1d:43:84:67:4e:f3:a0:66: a3:13:96:3d:d3:d8:9a:1e:9e:95:88:5f:f6:44:12: 17:76:ff:81:f7:ce:2e:d2:07:70:bf:f7:8e:28:89: c7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:22:AD:4C:F6:47:A4:8B:63:1F:F8:4F:22:7E:A0:25:21:30:55:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/595024-8bff-4f18-8ccb-69a44f048db8/1/ayKtTPZHpItjH_hPIn6gJSEwVS0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.183.0/24 147.189.161.0/24 193.247.144.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212083 Signature Algorithm: sha256WithRSAEncryption a8:37:69:ee:94:5a:bf:1a:d0:70:2b:9f:c0:e5:c2:67:93:99: 43:20:be:0c:b2:84:23:e9:99:65:61:d9:27:a9:e6:fd:53:1a: 2c:27:d2:36:85:42:4c:cf:36:f9:b6:59:bc:e7:86:72:ff:e3: e5:5f:90:18:85:82:0c:b9:81:0a:7b:2c:61:da:1f:90:a1:a8: 38:86:63:6d:e5:47:87:92:bd:1f:be:be:41:25:fb:b0:e7:59: 13:6c:42:94:b7:ed:26:a4:24:e3:8f:64:e0:55:8d:40:5b:99: 29:81:91:dc:59:cf:37:0a:cd:f4:0d:12:45:42:b4:51:a1:97: c4:f5:44:eb:58:b2:20:d6:2a:6d:15:42:f7:34:48:f9:d1:08: 4b:7e:03:63:ab:2f:83:4b:f0:77:c5:12:b3:88:b0:a5:ea:c3: 59:64:67:33:fd:a2:60:34:33:6c:a5:22:31:08:c3:c4:28:2a: 66:af:ff:13:0a:33:4f:05:f1:05:95:ac:d5:ae:ce:32:c8:11: 97:c8:e9:0b:12:d7:bf:75:3c:bb:a4:a5:ba:d8:55:86:48:de: b0:8e:09:c2:7a:3b:00:d1:2f:d2:c6:3b:2a:f3:8e:fd:6a:8b: e9:40:1e:ec:29:a6:fb:5c:b8:c4:60:f1:5e:99:92:2b:ba:0e: fc:01:7f:a9 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt5ELc++ksztXzXgIl29e3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjIyYWQ0Y2Y2NDdhNDhiNjMxZmY4NGYyMjdlYTAyNTIxMzA1NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbPQjHNvTPJimsBkbsKPr+UQe52J JXmI5j9TQ+u92//UuvdIus8qdhydFh+xd1m2/1ELaXwPZqiTABf/M99K7FKlf8z9 L045qRUYu2GRE7KLfv3d6GL++G5BNSkE0gJnzFI8JCcUosyoOGU4Bdg0q3P4KtVj oN8W9Ttz7+YuI0N/iMh8J/w9sif0yOlXTASqoeZsEc34QI09TN1X1/SjcBvo4WxH doMV+a1EMpOyrDseRX1GZipeyy3+PUrEYUxnZRI9iIovRCYiMPRHfnFXTCeCwQp+ omLWHUOEZ07zoGajE5Y909iaHp6ViF/2RBIXdv+B984u0gdwv/eOKInHPQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFGsirUz2R6SLYx/4TyJ+oCUhMFUtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzU5NTAy NC04YmZmLTRmMTgtOGNjYi02OWE0NGYwNDhkYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvNTk1MDI0 LThiZmYtNGYxOC04Y2NiLTY5YTQ0ZjA0OGRiOC8xL2F5S3RUUFpIcEl0akhfaFBJ bjZnSlNFd1ZTMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAW9q3AwQAk72hAwQAwfeQMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwM8czANBgkqhkiG9w0BAQsFAAOCAQEAqDdp7pRavxrQcCuf wOXCZ5OZQyC+DLKEI+mZZWHZJ6nm/VMaLCfSNoVCTM82+bZZvOeGcv/j5V+QGIWC DLmBCnssYdofkKGoOIZjbeVHh5K9H76+QSX7sOdZE2xClLftJqQk449k4FWNQFuZ KYGR3FnPNwrN9A0SRUK0UaGXxPVE61iyINYqbRVC9zRI+dEIS34DY6svg0vwd8US s4iwperDWWRnM/2iYDQzbKUiMQjDxCgqZq//EwozTwXxBZWs1a7OMsgRl8jpCxLX v3U8u6SluthVhkjesI4Jwno7ANEv0sY7KvOO/WqL6UAe7Cmm+1y4xGDxXpmSK7oO /AF/qQ== -----END CERTIFICATE-----Generated at Wed Jan 21 13:51:18 2026 by rpki-client