This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer File: AK-d2jB8tSU4XvkPUG0NV7udK_I.cer (raw, json) Hash identifier: hmO5UyRmzRFJXHXORaCuPrafP4Y6CUCI6fbK5rGx1AE= Subject key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3807EE29DE308E1711B66769780B21 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.40.208.0/22 IP: 2a04:86c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:07:ee:29:de:30:8e:17:11:b6:67:69:78:0b:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:da:d1:e8:2a:a9:49:40:ec:9f:d6:57:cb: ba:1b:69:c8:8b:32:0b:90:b0:4c:9f:1d:fb:6d:f7: cb:69:50:ac:94:dd:bc:1c:ce:0e:8d:1a:0d:06:33: 3a:5c:c5:9e:25:94:55:cd:42:fa:43:80:06:71:e4: 81:b6:70:d2:a8:40:55:d8:56:d4:cd:0a:6d:80:c9: 4f:a8:89:0e:15:00:05:9b:30:97:3f:ca:8c:d5:e4: 26:1c:53:9e:32:ff:1c:a3:a9:d4:ca:a3:b3:d9:07: 16:ad:47:68:cc:34:78:84:24:4b:9a:f0:c4:7a:de: 7a:34:59:6c:c1:bc:b4:f1:11:a1:18:66:7a:98:72: 5f:a8:7c:af:e7:69:87:19:ca:9e:de:52:79:03:f9: 48:36:48:33:02:e2:aa:d6:62:db:dc:c5:9c:fa:58: 52:bb:56:a1:02:64:4c:d3:04:ac:70:01:56:0e:e2: c7:33:f0:23:05:66:7f:a2:82:0f:7e:d2:47:6e:1e: 32:b0:8e:f1:7f:7c:ca:a2:cb:07:dc:7b:31:00:eb: 55:d5:2c:35:e9:b7:21:c3:42:c7:3a:48:14:6b:8c: cb:8e:82:c4:05:19:0d:e3:9f:9b:ff:40:89:b4:2d: f5:6c:44:5f:b1:36:83:67:9d:f0:73:c2:8e:03:bf: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.208.0/22 IPv6: 2a04:86c0::/29 Signature Algorithm: sha256WithRSAEncryption 32:39:fd:cf:80:19:b7:8f:7d:79:0a:83:bc:ce:c9:78:0f:ce: 8e:34:c6:73:9b:00:6b:2d:da:f9:dc:47:40:13:cd:d3:90:f1: 2b:ad:f7:22:cb:a8:5a:60:1e:51:bf:da:c9:df:d3:a8:d9:2b: c5:35:66:92:d6:2d:58:49:af:ab:31:34:93:78:3a:75:b1:7b: c0:4b:c6:8e:8c:71:25:2e:91:0f:9a:95:fa:60:b7:19:a2:2c: 75:f1:bf:bd:29:9e:22:61:b1:fa:34:5b:89:7a:50:2a:b8:c1: 1d:16:70:11:35:ee:dd:8d:f9:07:16:38:72:e6:5c:34:3f:2f: 95:97:1e:60:e1:3e:89:1e:b9:d9:b7:1e:35:48:12:5d:7f:fc: 13:7a:31:3f:79:6c:c3:f1:e9:5c:ab:76:9a:61:88:bd:b3:f6: 72:42:05:c2:d1:ae:91:a1:9e:a9:7a:62:d5:11:4f:af:94:1d: ef:78:fd:ae:ce:36:d7:bc:10:32:03:93:2d:7a:18:9d:04:5f: 43:d5:f8:ac:95:33:8e:66:d8:91:1a:40:da:1a:16:98:0b:2d: fb:70:33:40:d5:4d:de:c1:a5:91:07:28:e1:6f:e5:45:40:28: 5e:ac:02:bb:fa:84:31:04:9e:6c:25:4c:84:1d:6a:c2:b0:03: e1:a5:7f:2f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OAfuKd4wjhcRtmdpeAshMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGFmOWRkYTMwN2NiNTI1Mzg1ZWY5MGY1MDZkMGQ1N2JiOWQyYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskDa0egqqUlA7J/WV8u6G2nIizIL kLBMnx37bffLaVCslN28HM4OjRoNBjM6XMWeJZRVzUL6Q4AGceSBtnDSqEBV2FbU zQptgMlPqIkOFQAFmzCXP8qM1eQmHFOeMv8co6nUyqOz2QcWrUdozDR4hCRLmvDE et56NFlswby08RGhGGZ6mHJfqHyv52mHGcqe3lJ5A/lINkgzAuKq1mLb3MWc+lhS u1ahAmRM0wSscAFWDuLHM/AjBWZ/ooIPftJHbh4ysI7xf3zKossH3HsxAOtV1Sw1 6bchw0LHOkgUa4zLjoLEBRkN45+b/0CJtC31bERfsTaDZ53wc8KOA78MSQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFACvndowfLUlOF75D1BtDVe7nSvyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhL2QwZTJm NC1iNjBhLTQwYjItOTJlOS05MGVhY2U5ZTA1OWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDBlMmY0 LWI2MGEtNDBiMi05MmU5LTkwZWFjZTllMDU5ZS8xL0FLLWQyakI4dFNVNFh2a1BV RzBOVjd1ZEtfSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSjQMA0EAgACMAcDBQMqBIbAMA0GCSqGSIb3 DQEBCwUAA4IBAQAyOf3PgBm3j315CoO8zsl4D86ONMZzmwBrLdr53EdAE83TkPEr rfciy6haYB5Rv9rJ39Oo2SvFNWaS1i1YSa+rMTSTeDp1sXvAS8aOjHElLpEPmpX6 YLcZoix18b+9KZ4iYbH6NFuJelAquMEdFnARNe7djfkHFjhy5lw0Py+Vlx5g4T6J HrnZtx41SBJdf/wTejE/eWzD8elcq3aaYYi9s/ZyQgXC0a6RoZ6pemLVEU+vlB3v eP2uzjbXvBAyA5MtehidBF9D1fislTOOZtiRGkDaGhaYCy37cDNA1U3ewaWRByjh b+VFQCherAK7+oQxBJ5sJUyEHWrCsAPhpX8v -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:51 2026 by rpki-client