This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer File: AH5rWqQ302kxUVAqIRSW431K4sU.cer (raw, json) Hash identifier: GdDegDhKkX8zlJdpqD/D2izx5atXt9nDpiOi5YmGgDs= Subject key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3612BF1993C3585C3BF4E6181449A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 5630 AS: 8677 AS: 41233 IP: 89.106.184.0/21 IP: 160.92.0.0/16 IP: 192.136.30.0/24 IP: 193.16.186.0 -- 193.16.191.255 IP: 193.56.46.0/24 IP: 193.56.115.0/24 IP: 193.58.80.0/21 IP: 193.201.76.0/23 IP: 2a01:20::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:12:bf:19:93:c3:58:5c:3b:f4:e6:18:14:49:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=007e6b5aa437d3693151502a211496e37d4ae2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:cb:87:90:f6:c5:5b:d3:33:d6:c3:a3:57: c2:78:1a:c3:7c:b2:59:87:ba:db:d4:00:60:46:aa: 02:84:e9:38:c2:bc:2d:a7:0d:c7:70:33:a6:0b:4c: 00:ac:b0:77:4d:1b:43:da:6a:a9:91:cd:2e:65:1c: ce:7f:90:1c:a1:32:f6:ee:70:23:7d:8b:03:f9:49: 23:89:3e:cb:a1:b2:93:ef:a0:3a:c6:2c:d7:ab:37: cf:71:4b:32:96:ce:8c:fb:9d:33:1b:5c:d0:1a:82: 4b:7c:b7:67:68:16:ec:90:8b:09:1b:9c:10:35:13: df:09:23:80:f6:dd:34:5a:cf:9b:52:3d:4e:f4:0b: 7e:83:a3:52:87:a3:0e:4e:96:3c:63:4d:39:2c:53: f7:48:31:17:ae:c3:3b:8b:05:bf:c2:76:dd:12:b6: ae:b7:a8:dc:66:68:5d:7d:2b:8c:ab:7e:5c:dd:b1: ae:8b:aa:c9:08:86:da:62:71:b1:aa:4f:e4:c3:00: 65:c5:48:62:4f:e0:ab:24:b1:3d:59:0a:5c:31:a0: e3:19:06:f7:ee:34:ae:e0:0d:c1:ff:b1:4a:00:4b: f8:f2:8d:d8:ff:f9:8e:a8:eb:2e:d5:32:de:11:5e: bc:b5:8b:92:4a:7e:27:43:81:22:5c:7e:57:75:81: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.184.0/21 160.92.0.0/16 192.136.30.0/24 193.16.186.0-193.16.191.255 193.56.46.0/24 193.56.115.0/24 193.58.80.0/21 193.201.76.0/23 IPv6: 2a01:20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5630 8677 41233 Signature Algorithm: sha256WithRSAEncryption 73:28:85:ad:be:01:38:61:59:8a:69:1f:1d:e9:61:c8:7e:ef: a6:c6:c7:e0:b7:40:52:23:6c:f8:da:d3:e9:7d:4c:22:49:ef: 5c:53:3e:83:eb:ea:40:64:ab:87:2d:55:8c:d9:af:10:81:11: 2f:bd:af:a0:fb:d2:1b:c0:95:47:a8:01:70:99:25:ce:3d:ef: 79:f1:2c:60:2a:ed:ac:c2:00:de:0c:32:df:06:d3:3c:3e:ad: b9:b8:f8:f0:f3:00:31:67:e2:d3:07:58:b5:dd:ee:c3:7b:ea: 94:ab:6d:c3:64:b7:52:6d:ae:13:56:ef:6e:78:6a:26:9c:12: 77:fb:98:0a:72:ba:7f:30:41:46:1e:82:69:1b:9d:73:f3:22: be:0c:4a:12:9e:d2:ab:8b:00:56:5c:cf:c7:5b:3f:ae:a3:a1: fc:de:04:b8:eb:f1:6b:ee:19:88:9b:6d:b1:ea:b7:1e:e7:de: c0:c8:49:00:ef:19:b2:0b:a2:85:b3:a4:22:04:62:f7:20:e3: a0:ca:da:f7:48:6c:e9:74:d8:7c:70:f4:0e:91:ad:c5:8c:64: 48:69:27:e8:3e:a2:43:38:e9:b0:f1:85:7a:ce:4c:d5:71:02: 1f:eb:01:57:35:a0:a6:9d:55:3d:02:bd:94:06:27:71:f9:ea: eb:c9:af:73 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgISAZt7NhK/GZPDWFw79OYYFEmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDdlNmI1YWE0MzdkMzY5MzE1MTUwMmEyMTE0OTZlMzdkNGFlMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D/Lh5D2xVvTM9bDo1fCeBrDfLJZ h7rb1ABgRqoChOk4wrwtpw3HcDOmC0wArLB3TRtD2mqpkc0uZRzOf5AcoTL27nAj fYsD+UkjiT7LobKT76A6xizXqzfPcUsyls6M+50zG1zQGoJLfLdnaBbskIsJG5wQ NRPfCSOA9t00Ws+bUj1O9At+g6NSh6MOTpY8Y005LFP3SDEXrsM7iwW/wnbdErau t6jcZmhdfSuMq35c3bGui6rJCIbaYnGxqk/kwwBlxUhiT+CrJLE9WQpcMaDjGQb3 7jSu4A3B/7FKAEv48o3Y//mOqOsu1TLeEV68tYuSSn4nQ4EiXH5XdYEr3QIDAQAB o4IC6DCCAuQwHQYDVR0OBBYEFAB+a1qkN9NpMVFQKiEUluN9SuLFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzUxOGZh Yi03NjA2LTQ4MzItYWE2Ni01YThjNjc4NDIzODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvNTE4ZmFi LTc2MDYtNDgzMi1hYTY2LTVhOGM2Nzg0MjM4OS8xL0FINXJXcVEzMDJreFVWQXFJ UlNXNDMxSzRzVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA9BAIAATA3AwQDWWq4AwMAoFwDBADAiB4wDAMEAcEQugMEBsEQ gAMEAME4LgMEAME4cwMEA8E6UAMEAcHJTDANBAIAAjAHAwUAKgEAIDAiBggrBgEF BQcBCAEB/wQTMBGgDzANAgIV/gICIeUCAwChETANBgkqhkiG9w0BAQsFAAOCAQEA cyiFrb4BOGFZimkfHelhyH7vpsbH4LdAUiNs+NrT6X1MIknvXFM+g+vqQGSrhy1V jNmvEIERL72voPvSG8CVR6gBcJklzj3vefEsYCrtrMIA3gwy3wbTPD6tubj48PMA MWfi0wdYtd3uw3vqlKttw2S3Um2uE1bvbnhqJpwSd/uYCnK6fzBBRh6CaRudc/Mi vgxKEp7Sq4sAVlzPx1s/rqOh/N4EuOvxa+4ZiJttseq3HufewMhJAO8ZsguihbOk IgRi9yDjoMra90hs6XTYfHD0DpGtxYxkSGkn6D6iQzjpsPGFes5M1XECH+sBVzWg pp1VPQK9lAYncfnq68mvcw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:06:27 2026 by rpki-client