This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer File: AHddlHG4XZY_720oNZDi2ULdXCE.cer (raw, json) Hash identifier: WS1Jc/ty0ZypbFuyXQuJrN5xsZpc/AK+Uu+sUvjI00s= Subject key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14F44C83F04EE9B274C51C994737DA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21341 AS: 211990 IP: 62.220.96.0 -- 62.220.107.255 IP: 62.220.109.0 -- 62.220.127.255 IP: 81.12.0.0/17 IP: 87.107.0.0/16 IP: 185.60.136.0/22 IP: 2a00:1198::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f4:4c:83:f0:4e:e9:b2:74:c5:1c:99:47:37:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:f4:b7:b6:ef:f0:95:c7:d6:58:2d:5c:61: a0:bc:e7:9d:39:da:9d:ad:bd:8d:9a:2b:ff:ee:ad: c7:86:62:90:90:71:ce:7e:1b:bf:a8:44:50:bb:ad: 12:4c:1b:c5:51:d9:14:95:b3:5d:60:c2:13:f4:9e: bb:46:0e:c2:2f:77:63:d4:41:a5:b3:06:47:8d:f7: 07:53:13:b5:80:f8:1d:2f:aa:ce:18:72:64:de:a3: 51:98:fb:8e:0b:21:b6:af:4a:5d:51:01:04:bb:8e: 67:36:d4:b8:ef:1f:3a:9d:13:6d:a0:ec:27:73:16: 30:62:b5:ac:08:24:34:93:58:b8:ee:ff:8f:93:c9: 52:3a:82:78:89:a1:e6:a8:c7:44:67:2a:ce:ff:bc: 8b:fd:d8:b7:63:d6:7d:f1:ae:6d:7f:dc:58:e4:5f: d8:f5:2a:ae:49:60:70:7f:7e:e3:d1:2f:87:b3:3b: ee:ef:c8:88:d2:e8:9e:61:a2:a5:41:e6:4a:81:fe: 62:de:69:64:0c:31:b4:99:ae:e3:a8:a9:5b:f8:a1: 82:f8:f9:a6:b6:1a:06:2e:fa:b3:85:01:9c:ef:8d: 96:0c:82:06:d2:9d:fa:8a:fe:02:cd:ca:1b:c4:cf: 97:2e:98:39:2f:ab:ab:a3:28:3c:56:d9:8c:5a:17: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.96.0-62.220.107.255 62.220.109.0-62.220.127.255 81.12.0.0/17 87.107.0.0/16 185.60.136.0/22 IPv6: 2a00:1198::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21341 211990 Signature Algorithm: sha256WithRSAEncryption 98:fd:b3:e3:39:d5:47:40:a8:75:22:6a:1c:ff:c5:70:5d:8e: 57:55:41:b0:5f:49:b7:6f:64:bb:8a:57:9a:44:ae:7c:55:41: e7:d3:f0:c0:77:3c:02:59:5f:08:cd:2c:50:a8:d7:e4:85:ab: 9d:68:24:f7:99:20:ae:7d:2a:c5:68:8d:58:04:dd:d7:aa:1c: 1d:3c:c4:b9:10:e0:e5:de:e8:d3:0b:2b:33:30:b7:73:c5:b6: 15:98:23:7b:8d:07:53:4e:84:05:39:2c:9e:7b:85:8b:b8:de: 80:10:b2:74:da:43:30:b8:45:25:d5:b0:de:c9:11:21:91:fc: 2c:b2:7f:ea:fb:d3:33:9f:99:24:c0:1d:a3:d8:50:9f:55:b1: 2b:bb:57:cc:36:cc:4e:2d:5b:36:7c:bd:f3:e1:7c:6d:e2:4c: 7e:f7:06:28:b2:79:d9:0c:51:f6:87:64:18:24:07:90:80:0b: 94:54:b4:2e:4b:98:d5:10:d7:1a:5d:70:d3:52:37:2b:a3:95: ca:bc:a7:33:02:4a:e7:fa:14:ab:b8:7b:ba:a7:b6:b1:4c:c3: 6c:cf:21:ff:1b:80:7d:26:a4:8b:b6:f2:08:36:eb:a1:b5:1a: ab:12:60:7f:88:d8:91:ea:10:09:79:77:05:d9:8e:76:85:a4: f3:c2:d4:e5 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZt/FPRMg/BO6bJ0xRyZRzfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDc3NWQ5NDcxYjg1ZDk2M2ZlZjZkMjgzNTkwZTJkOTQyZGQ1YzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yL0t7bv8JXH1lgtXGGgvOedOdqd rb2Nmiv/7q3HhmKQkHHOfhu/qERQu60STBvFUdkUlbNdYMIT9J67Rg7CL3dj1EGl swZHjfcHUxO1gPgdL6rOGHJk3qNRmPuOCyG2r0pdUQEEu45nNtS47x86nRNtoOwn cxYwYrWsCCQ0k1i47v+Pk8lSOoJ4iaHmqMdEZyrO/7yL/di3Y9Z98a5tf9xY5F/Y 9SquSWBwf37j0S+Hszvu78iI0uieYaKlQeZKgf5i3mlkDDG0ma7jqKlb+KGC+Pmm thoGLvqzhQGc742WDIIG0p36iv4CzcobxM+XLpg5L6uroyg8VtmMWhcIYQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzYzNzYw Yy1lMjFiLTRiYWYtYTlhNC03NmIzM2U0Y2U4MjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNjM3NjBj LWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8xL0FIZGRsSEc0WFpZXzcyMG9O WkRpMlVMZFhDRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAzBAIAATAtMAwDBAU+3GADBAI+3GgwDAMEAD7cbQMEBz7cAAME B1EMAAMDAFdrAwQCuTyIMA0EAgACMAcDBQAqABGYMB4GCCsGAQUFBwEIAQH/BA8w DaALMAkCAlNdAgMDPBYwDQYJKoZIhvcNAQELBQADggEBAJj9s+M51UdAqHUiahz/ xXBdjldVQbBfSbdvZLuKV5pErnxVQefT8MB3PAJZXwjNLFCo1+SFq51oJPeZIK59 KsVojVgE3deqHB08xLkQ4OXe6NMLKzMwt3PFthWYI3uNB1NOhAU5LJ57hYu43oAQ snTaQzC4RSXVsN7JESGR/Cyyf+r70zOfmSTAHaPYUJ9VsSu7V8w2zE4tWzZ8vfPh fG3iTH73BiiyedkMUfaHZBgkB5CAC5RUtC5LmNUQ1xpdcNNSNyujlcq8pzMCSuf6 FKu4e7qntrFMw2zPIf8bgH0mpIu28gg266G1GqsSYH+I2JHqEAl5dwXZjnaFpPPC 1OU= -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:53 2026 by rpki-client