This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer File: ACQ0xzoO6iLG5EEHLpPbd8foovE.cer (raw, json) Hash identifier: Eg7Al+DNeNTcsQlfwnW4bNkfXpaHynmzP/Ub5l1Kd/Y= Subject key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7759025C75C4AA0D5EAEC546D7E7B3D1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43366 IP: 91.194.224.0/23 IP: 185.12.144.0/22 IP: 185.37.124.0/22 IP: 217.21.192.0/20 IP: 2a00:8080::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:02:5c:75:c4:aa:0d:5e:ae:c5:46:d7:e7:b3:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:3c:7a:8b:74:87:01:4c:4c:69:68:e9:16: b4:77:a3:7e:9f:85:9f:17:8b:d4:b9:89:7b:83:1c: 97:f9:81:76:b2:a9:0f:ed:c7:c8:42:3a:24:67:98: 5d:43:3d:ad:80:e5:5d:03:72:6d:f1:12:9e:06:9a: d8:29:a1:c2:d5:70:45:b6:80:2e:40:90:b8:12:1b: a6:52:5e:da:88:38:74:fc:78:fa:0f:ab:59:66:58: 0e:39:f1:eb:a0:39:cf:67:b3:81:05:c8:b4:1f:9c: 11:29:68:7c:37:41:cf:08:fc:80:a4:ca:f0:2a:12: a0:87:76:8a:1c:aa:73:5a:20:9a:e0:37:a9:a2:7f: 97:51:8e:27:1b:f9:19:34:fd:d2:ff:bf:3a:a8:c4: 51:cd:82:bf:fa:fc:70:33:74:2a:04:ba:f7:68:ed: b3:53:d2:58:de:5a:9a:13:ee:e4:a6:8e:e3:4f:3f: 0a:eb:4f:1b:ed:96:3f:76:b6:04:fa:b7:cc:9f:c7: 89:d4:10:ea:a7:21:f9:f4:9e:9b:f6:7b:ae:5c:3a: 6d:32:98:21:d7:17:60:ba:5a:e2:bb:0e:a9:f0:b2: 5c:6c:70:51:de:4f:3e:78:32:d3:bf:bf:70:0b:8a: fb:b8:af:04:13:a1:6e:17:a4:10:47:e8:a0:1f:70: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.224.0/23 185.12.144.0/22 185.37.124.0/22 217.21.192.0/20 IPv6: 2a00:8080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43366 Signature Algorithm: sha256WithRSAEncryption 85:f6:93:32:71:74:8c:4d:f5:69:b7:3a:87:72:04:87:84:55: a5:83:e1:c2:3a:d4:31:fb:d0:07:7e:9d:80:b3:ee:99:4d:12: c5:0b:5d:9a:7d:07:b8:50:fd:1b:1f:27:bf:d6:22:b8:55:d0: 48:5a:48:9a:ba:0d:09:a7:fa:36:1a:a1:5c:ca:a9:a6:0f:8c: 82:09:3a:cf:39:07:77:e6:dd:e9:b6:aa:2e:b5:bf:16:86:fc: 81:84:0d:8b:60:d2:f2:c9:d8:43:71:73:a1:d9:df:40:83:32: eb:61:c5:86:37:da:0f:90:4c:ce:fa:f2:77:1a:3e:2b:47:ee: 05:e1:e6:32:aa:d1:a9:3a:7a:f9:b8:f8:7c:0a:82:30:54:2b: e8:8f:7a:e0:55:e3:4b:fc:48:5b:bf:77:5a:2b:60:60:96:e5: 66:41:31:08:e1:3b:c3:8f:2a:89:2b:3d:d9:31:d7:01:bf:dc: 7f:c2:5e:ed:12:36:44:bd:c4:f8:13:49:50:38:1d:00:c7:72: 0c:67:04:06:29:0e:1f:28:c5:03:21:4b:8b:2e:8b:a7:be:ed: f3:10:8e:2a:94:8f:89:08:52:f2:85:f7:12:0f:a5:cb:b2:31: cb:a6:74:11:d1:87:71:68:e4:4c:ca:e8:74:06:48:c9:fd:c0: 69:ea:67:4b -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt3WQJcdcSqDV6uxUbX57PRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDI0MzRjNzNhMGVlYTIyYzZlNDQxMDcyZTkzZGI3N2M3ZThhMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx348eot0hwFMTGlo6Ra0d6N+n4Wf F4vUuYl7gxyX+YF2sqkP7cfIQjokZ5hdQz2tgOVdA3Jt8RKeBprYKaHC1XBFtoAu QJC4EhumUl7aiDh0/Hj6D6tZZlgOOfHroDnPZ7OBBci0H5wRKWh8N0HPCPyApMrw KhKgh3aKHKpzWiCa4Depon+XUY4nG/kZNP3S/786qMRRzYK/+vxwM3QqBLr3aO2z U9JY3lqaE+7kpo7jTz8K608b7ZY/drYE+rfMn8eJ1BDqpyH59J6b9nuuXDptMpgh 1xdgulriuw6p8LJcbHBR3k8+eDLTv79wC4r7uK8EE6FuF6QQR+igH3AZgQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFAAkNMc6DuoixuRBBy6T23fH6KLxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzQwM2Rk ZC1jMmQ1LTRiNTQtOTczYS0yYjdhNzk0ZDU3OTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvNDAzZGRk LWMyZDUtNGI1NC05NzNhLTJiN2E3OTRkNTc5NS8xL0FDUTB4em9PNmlMRzVFRUhM cFBiZDhmb292RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQBW8LgAwQCuQyQAwQCuSV8AwQE2RXAMA0EAgAC MAcDBQAqAICAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCpZjANBgkqhkiG9w0B AQsFAAOCAQEAhfaTMnF0jE31abc6h3IEh4RVpYPhwjrUMfvQB36dgLPumU0SxQtd mn0HuFD9Gx8nv9YiuFXQSFpImroNCaf6NhqhXMqppg+Mggk6zzkHd+bd6baqLrW/ Fob8gYQNi2DS8snYQ3FzodnfQIMy62HFhjfaD5BMzvrydxo+K0fuBeHmMqrRqTp6 +bj4fAqCMFQr6I964FXjS/xIW793WitgYJblZkExCOE7w48qiSs92THXAb/cf8Je 7RI2RL3E+BNJUDgdAMdyDGcEBikOHyjFAyFLiy6Lp77t8xCOKpSPiQhS8oX3Eg+l y7Ixy6Z0EdGHcWjkTMrodAZIyf3AaepnSw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:44 2026 by rpki-client