This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer File: tAqlFjSW4FOna21pzcRfdQBs2N8.cer (raw, json) Hash identifier: PjaH5BVwdeV8BWOAs6kzc83pL6QdXdjT1DCxkkjruK8= Subject key identifier: B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8ECAB844F02F199143019DC052653 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51509 IP: 91.217.92.0/23 IP: 2001:678:a88::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ec:ab:84:4f:02:f1:99:14:30:19:dc:05:26:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b40aa5163496e053a76b6d69cdc45f75006cd8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d7:5c:9f:30:81:79:2f:d8:a2:11:a1:11:72: a2:a1:de:60:4f:72:ea:4b:a2:ee:52:6b:15:8b:cc: a3:82:23:f8:f8:2f:5b:7d:76:d1:5a:27:e3:59:54: 33:69:71:b2:c2:e0:05:36:b0:c9:f0:85:35:4c:ec: 94:7a:8f:ef:b0:24:67:45:dc:44:5e:ee:ac:3a:5b: e8:53:92:1a:0e:eb:db:85:7c:8a:f1:d6:bb:3b:f6: bb:a8:55:89:90:6d:a1:62:29:27:9b:cd:3e:21:2e: 2f:ec:6a:c6:10:19:ca:f5:75:43:1f:04:26:ed:5e: fb:74:46:90:81:e7:9a:01:1c:7e:96:5a:b2:9d:0d: e0:ee:10:5d:0d:84:e3:04:cc:bb:06:62:89:bf:40: 9d:07:3f:28:6a:32:9f:9f:84:1b:86:a1:47:b3:f9: 58:13:b5:f3:70:27:dc:4e:71:28:2e:4c:d5:8d:e6: ac:13:53:f7:5d:34:57:43:a3:5a:8b:cc:fc:73:26: 9c:58:30:b3:4c:eb:53:eb:61:fa:ca:6d:ad:9e:f9: ed:5f:43:c6:dd:43:83:f0:ec:bb:40:15:90:98:60: a8:b2:f1:50:c6:09:f4:e8:1c:4d:60:d4:6a:3b:6e: 9e:1b:41:4f:b4:31:25:86:31:3e:66:7d:3b:c3:82: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.92.0/23 IPv6: 2001:678:a88::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51509 Signature Algorithm: sha256WithRSAEncryption 2e:1a:a3:6d:e5:b3:82:36:20:82:9f:2f:e9:69:47:8a:b9:2f: c2:48:f2:a8:e1:cf:4f:5d:fe:d9:8e:d1:5b:5c:19:c0:bb:89: b0:83:1e:f5:aa:99:b6:f4:df:d3:76:e6:d4:e0:7c:e0:fe:49: 62:bd:92:62:b5:08:aa:b1:fa:7a:de:16:05:6c:82:15:e2:a7: 55:d1:9d:bd:15:5b:6d:44:9e:f0:e7:54:dd:fa:08:17:52:c2: 9f:12:77:a3:d9:cf:31:2e:bb:6f:45:8d:ac:ca:d4:f7:53:d2: 8c:93:38:f6:90:05:42:f7:bc:2b:17:23:1c:b2:3b:ba:e4:f4: c5:29:c9:8d:af:43:85:fd:03:fb:ad:39:c2:f4:a2:3e:75:20: ba:ba:4c:b1:88:e6:91:4f:09:09:c2:b9:81:de:9a:37:2f:a3: ef:f7:2b:04:3b:fa:c6:e1:d4:e6:34:bd:4b:c5:3a:45:86:f0: e6:f2:d4:05:3a:bd:57:f6:f5:4f:fa:c0:58:0b:eb:a6:d6:fe: 52:b4:1e:00:d4:34:23:81:d4:01:07:af:4d:94:f7:3c:49:79: 96:cd:b8:de:e5:bb:f8:bf:04:e9:a9:f6:92:f8:d4:ba:47:10: 96:b0:5e:e0:de:5b:e3:83:e1:cb:6f:2d:b0:95:02:ff:42:15: 2a:83:db:4a -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt6yOyrhE8C8ZkUMBncBSZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDBhYTUxNjM0OTZlMDUzYTc2YjZkNjljZGM0NWY3NTAwNmNkOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkddcnzCBeS/YohGhEXKiod5gT3Lq S6LuUmsVi8yjgiP4+C9bfXbRWifjWVQzaXGywuAFNrDJ8IU1TOyUeo/vsCRnRdxE Xu6sOlvoU5IaDuvbhXyK8da7O/a7qFWJkG2hYiknm80+IS4v7GrGEBnK9XVDHwQm 7V77dEaQgeeaARx+llqynQ3g7hBdDYTjBMy7BmKJv0CdBz8oajKfn4QbhqFHs/lY E7XzcCfcTnEoLkzVjeasE1P3XTRXQ6Nai8z8cyacWDCzTOtT62H6ym2tnvntX0PG 3UOD8Oy7QBWQmGCosvFQxgn06BxNYNRqO26eG0FPtDElhjE+Zn07w4JJFQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFLQKpRY0luBTp2ttac3EX3UAbNjfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcwL2EyMGZi MC01YjhkLTQ1MTctYjQ2ZS1jNzJjYmFjMjg1ZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvYTIwZmIw LTViOGQtNDUxNy1iNDZlLWM3MmNiYWMyODVmOC8xL3RBcWxGalNXNEZPbmEyMXB6 Y1JmZFFCczJOOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBW9lcMA8EAgACMAkDBwAgAQZ4CogwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAMk1MA0GCSqGSIb3DQEBCwUAA4IBAQAuGqNt5bOC NiCCny/paUeKuS/CSPKo4c9PXf7ZjtFbXBnAu4mwgx71qpm29N/TdubU4Hzg/kli vZJitQiqsfp63hYFbIIV4qdV0Z29FVttRJ7w51Td+ggXUsKfEnej2c8xLrtvRY2s ytT3U9KMkzj2kAVC97wrFyMcsju65PTFKcmNr0OF/QP7rTnC9KI+dSC6ukyxiOaR TwkJwrmB3po3L6Pv9ysEO/rG4dTmNL1LxTpFhvDm8tQFOr1X9vVP+sBYC+um1v5S tB4A1DQjgdQBB69NlPc8SXmWzbje5bv4vwTpqfaS+NS6RxCWsF7g3lvjg+HLby2w lQL/QhUqg9tK -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:14 2026 by rpki-client