This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer (raw, json) Hash identifier: ulLJikJ3FYxy1zx1UWakuZXpt5A680ZLsgxfTkpPSGE= Subject key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F80BBEB8FF212635F6B81ADA08DCDF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:18:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202025 AS: 204602 IP: 5.8.252.0/22 IP: 37.98.204.0/22 IP: 93.119.16.0/22 IP: 185.66.44.0/22 IP: 185.72.112.0/22 IP: 185.125.28.0/22 IP: 188.240.192.0/22 IP: 195.189.208.0/23 IP: 2a04:7540::/29 IP: 2a05:340::/29 IP: 2a05:3900::/29 IP: 2a0c:ee80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:bb:eb:8f:f2:12:63:5f:6b:81:ad:a0:8d:cd:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00642b607b94a143ff41c554c913bd5a651f8c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:06:f2:e1:f3:5d:16:c1:84:49:84:5a:21: f0:04:39:74:bd:7a:2a:6a:03:f2:f3:3f:65:6c:d8: 21:4e:9a:97:0d:bc:3a:14:6d:29:c7:7e:74:6f:33: 15:a4:0e:d7:a2:77:8f:bb:9f:41:ed:22:c5:23:4e: 5c:67:85:3f:93:57:37:d9:bc:0b:91:1a:68:be:5a: 24:17:95:90:97:74:9e:72:14:4c:f5:e1:a5:09:d3: 12:0e:57:3b:46:51:53:aa:0b:13:fc:08:c7:9f:b3: a5:7f:08:c8:d2:02:31:a9:45:29:09:5b:55:49:4d: 24:f5:5f:a7:37:bf:0d:8b:a2:f3:72:01:2e:2a:ad: 35:a0:6f:94:d4:d0:57:ef:1f:46:5d:a0:b9:25:ad: f4:03:c2:84:94:01:1f:40:88:25:04:b6:8a:50:f3: 0e:4c:44:d2:29:ff:72:40:c3:f9:5b:a1:14:1f:dd: a8:b9:ee:22:33:df:b7:88:58:d7:1d:40:49:0b:ab: 11:04:05:92:f7:73:71:37:8a:65:d1:a5:82:fe:db: a7:aa:6b:8f:9c:c7:0b:6e:5d:c1:06:4d:78:ce:08: 35:51:b1:e2:f1:45:40:c1:4d:a4:14:06:3e:32:45: 80:3f:85:81:0d:bf:6d:0f:1a:87:b7:d1:16:69:ca: c2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.252.0/22 37.98.204.0/22 93.119.16.0/22 185.66.44.0/22 185.72.112.0/22 185.125.28.0/22 188.240.192.0/22 195.189.208.0/23 IPv6: 2a04:7540::/29 2a05:340::/29 2a05:3900::/29 2a0c:ee80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202025 204602 Signature Algorithm: sha256WithRSAEncryption 66:41:0f:85:3b:4e:d0:b4:59:8f:a9:94:40:15:06:ab:eb:3f: 22:ff:0a:f1:ce:50:68:eb:20:b1:be:fa:c7:b8:c1:06:14:35: 07:f4:95:95:b3:a7:ca:e5:cf:d7:6d:37:bc:4b:f9:f1:e9:e0: 3d:90:cd:d2:bb:ac:a0:48:58:2e:2f:00:8c:8a:25:50:1b:86: 11:ce:b8:4c:79:95:8e:79:ff:0f:1f:a9:2f:80:a3:48:0b:18: 96:b8:d4:99:0e:6d:4f:a3:bc:12:b5:ce:a8:95:10:5f:a7:e8: 76:18:66:da:e7:da:e4:f0:55:fc:ae:20:b4:4b:22:89:11:a6: 35:c5:a0:c6:33:87:9a:de:7e:f6:f8:14:1a:d5:a2:47:f3:40: 2c:56:ba:7b:0d:d3:65:fc:89:ed:99:a4:1c:5e:40:cd:a1:2a: f6:c6:97:8e:30:93:94:fc:a3:dd:b2:da:25:21:b1:69:14:e0: 74:a4:30:af:ea:00:b8:3e:8a:b5:08:d8:36:77:80:f8:bd:11: 43:94:b8:35:47:fa:32:fa:8c:a7:27:f2:1f:d8:c7:a5:ee:30: 73:ed:ef:83:23:5b:45:e6:3f:be:90:80:19:e7:41:f0:f3:b4: 52:3c:11:65:34:d6:55:3f:85:4d:5d:f6:8b:50:95:bb:62:ef: b8:72:57:3f -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgISAZt/gLvrj/ISY19rga2gjc35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDY0MmI2MDdiOTRhMTQzZmY0MWM1NTRjOTEzYmQ1YTY1MWY4YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzgG8uHzXRbBhEmEWiHwBDl0vXoq agPy8z9lbNghTpqXDbw6FG0px350bzMVpA7XonePu59B7SLFI05cZ4U/k1c32bwL kRpovlokF5WQl3SechRM9eGlCdMSDlc7RlFTqgsT/AjHn7OlfwjI0gIxqUUpCVtV SU0k9V+nN78Ni6LzcgEuKq01oG+U1NBX7x9GXaC5Ja30A8KElAEfQIglBLaKUPMO TETSKf9yQMP5W6EUH92oue4iM9+3iFjXHUBJC6sRBAWS93NxN4pl0aWC/tunqmuP nMcLbl3BBk14zgg1UbHi8UVAwU2kFAY+MkWAP4WBDb9tDxqHt9EWacrCxQIDAQAB o4IC8zCCAu8wHQYDVR0OBBYEFABkK2B7lKFD/0HFVMkTvVplH4wFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2FjOWFi YS05NzM1LTRiOWQtOGVhZS0xOWJjN2JkY2NiYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvYWM5YWJh LTk3MzUtNGI5ZC04ZWFlLTE5YmM3YmRjY2JjMS8xL0FHUXJZSHVVb1VQX1FjVlV5 Uk85V21VZmpBVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG0GCCsGAQUF BwEHAQH/BF4wXDA2BAIAATAwAwQCBQj8AwQCJWLMAwQCXXcQAwQCuUIsAwQCuUhw AwQCuX0cAwQCvPDAAwQBw73QMCIEAgACMBwDBQMqBHVAAwUDKgUDQAMFAyoFOQAD BQMqDO6AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMVKQIDAx86MA0GCSqGSIb3 DQEBCwUAA4IBAQBmQQ+FO07QtFmPqZRAFQar6z8i/wrxzlBo6yCxvvrHuMEGFDUH 9JWVs6fK5c/XbTe8S/nx6eA9kM3Su6ygSFguLwCMiiVQG4YRzrhMeZWOef8PH6kv gKNICxiWuNSZDm1Po7wStc6olRBfp+h2GGba59rk8FX8riC0SyKJEaY1xaDGM4ea 3n72+BQa1aJH80AsVrp7DdNl/IntmaQcXkDNoSr2xpeOMJOU/KPdstolIbFpFOB0 pDCv6gC4Poq1CNg2d4D4vRFDlLg1R/oy+oynJ/If2Mel7jBz7e+DI1tF5j++kIAZ 50Hw87RSPBFlNNZVP4VNXfaLUJW7Yu+4clc/ -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:19 2026 by rpki-client