This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer File: gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer (raw, json) Hash identifier: dt/2jnUFhuw27DYMVlpUBnvdralIMY5xXSu9QQfFNa0= Subject key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1885A12146CA248EBA9F8EE1B98E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209448 IP: 5.253.164.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:18:85:a1:21:46:ca:24:8e:ba:9f:8e:e1:b9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:b8:68:e7:0d:ff:ac:5c:0d:09:1a:40:ad: c8:e9:61:2a:15:af:85:16:2b:5f:8c:d5:b6:b2:51: 4c:fe:66:c9:eb:a2:c2:a6:65:bd:71:e4:c7:31:8b: ed:fc:4e:db:ef:a7:5f:92:d6:38:ad:7f:f5:1c:ea: 81:dd:6c:ca:fa:ae:58:93:10:c6:fe:02:85:c8:2f: fc:12:c0:26:bb:78:93:a8:1e:ad:41:b7:ec:e2:41: 3b:a6:66:d7:be:da:50:3c:76:7c:fe:a0:8a:1e:bc: df:81:9e:56:a0:d3:05:c2:c1:10:63:c0:7b:35:d2: 3c:88:4c:02:34:88:09:5f:a3:53:01:8f:d6:15:24: 6a:ca:40:43:2f:4c:e0:d2:2f:1f:f7:37:3e:39:91: e0:32:bb:2d:8d:67:11:2f:17:8a:ed:6e:3f:96:d7: 12:11:67:9a:0b:9a:12:bf:e7:6a:5c:cc:5d:3f:bb: 70:e8:76:78:d9:f8:e6:3a:80:e8:f2:18:a2:16:91: 55:6a:51:b9:58:1d:73:14:de:8c:6f:eb:66:c7:7f: 0a:52:75:b6:0f:67:38:9c:88:3e:9d:cf:b7:35:50: 9d:f1:3c:20:95:9f:e9:08:e7:03:f8:3d:b3:49:1d: b2:ff:5e:f7:6f:28:a5:ae:30:d0:ae:d8:aa:4b:61: d3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.164.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209448 Signature Algorithm: sha256WithRSAEncryption 5a:c7:ea:24:88:74:51:64:57:ff:f1:09:51:81:78:d9:57:0d: 8f:68:d2:b5:f1:60:80:44:ba:e4:fc:7f:95:1f:73:a8:25:94: 8c:81:f1:d7:39:ee:6a:3c:6f:f4:03:04:94:4d:02:21:62:31: b7:0d:00:d7:ca:be:d4:2c:bd:80:9d:fd:8a:0b:15:22:49:64: 93:67:71:d5:37:15:3c:4b:fb:e7:5c:a6:89:c6:d6:93:00:0d: bd:72:7a:3d:a8:52:03:85:fa:9d:94:3d:38:f2:6c:b8:2b:81: 86:2d:5c:02:4a:cf:b3:c3:e8:da:e7:17:f8:60:5f:39:62:ab: 2a:72:04:2f:f8:37:67:a6:37:da:26:95:6a:ca:f5:40:d0:b3: a1:5b:32:b2:8e:4c:13:38:64:f4:e4:f7:1a:d0:4a:5c:fb:5b: ee:5c:b6:09:90:5b:5f:3b:54:55:e9:0f:2f:01:78:23:74:57: 48:a7:52:a0:fc:3b:fe:75:29:a4:6f:76:57:1a:f0:4e:16:14: aa:2c:a9:d6:d0:1c:9f:71:f6:2a:ff:53:c3:3f:bd:a1:18:1b: 8f:f6:29:a0:0f:4c:01:3c:a6:19:b8:32:fa:b1:d3:73:85:e9: 59:23:c1:57:7a:b5:72:a9:2f:2a:d3:4b:dd:69:48:08:54:b3: d8:92:f4:03 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87hiFoSFGyiSOup+O4bmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWEwMjFkNTQwZWQ3ZDgyYzY5MGFkYzA0ZmJkOWRkNmVlNTBlOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8S4aOcN/6xcDQkaQK3I6WEqFa+F FitfjNW2slFM/mbJ66LCpmW9ceTHMYvt/E7b76dfktY4rX/1HOqB3WzK+q5YkxDG /gKFyC/8EsAmu3iTqB6tQbfs4kE7pmbXvtpQPHZ8/qCKHrzfgZ5WoNMFwsEQY8B7 NdI8iEwCNIgJX6NTAY/WFSRqykBDL0zg0i8f9zc+OZHgMrstjWcRLxeK7W4/ltcS EWeaC5oSv+dqXMxdP7tw6HZ42fjmOoDo8hiiFpFValG5WB1zFN6Mb+tmx38KUnW2 D2c4nIg+nc+3NVCd8TwglZ/pCOcD+D2zSR2y/173byilrjDQrtiqS2HTCwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFIGgIdVA7X2CxpCtwE+9ndbuUOjVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI5L2UyYjk0 Ni0xYjRhLTQyMTQtOTIzNC1hZDAyNzMyN2Y5ZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkvZTJiOTQ2 LTFiNGEtNDIxNC05MjM0LWFkMDI3MzI3ZjlkOC8xL2dhQWgxVUR0ZllMR2tLM0FU NzJkMXU1UTZOVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCBf2kMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMyKDANBgkqhkiG9w0BAQsFAAOCAQEAWsfqJIh0UWRX//EJUYF42VcNj2jStfFg gES65Px/lR9zqCWUjIHx1znuajxv9AMElE0CIWIxtw0A18q+1Cy9gJ39igsVIklk k2dx1TcVPEv751ymicbWkwANvXJ6PahSA4X6nZQ9OPJsuCuBhi1cAkrPs8Po2ucX +GBfOWKrKnIEL/g3Z6Y32iaVasr1QNCzoVsyso5MEzhk9OT3GtBKXPtb7ly2CZBb XztUVekPLwF4I3RXSKdSoPw7/nUppG92VxrwThYUqiyp1tAcn3H2Kv9Twz+9oRgb j/YpoA9MATymGbgy+rHTc4XpWSPBV3q1cqkvKtNL3WlICFSz2JL0Aw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:48 2026 by rpki-client