This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer File: APTMQSzDD7L598N8PjkL7F5iVrA.cer (raw, json) Hash identifier: Jed+Te0cr1DyWeS6h2LgZOP0hr5xSWFvck3HDUEOFfA= Subject key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78354AAAD30FDBEC583B6A7683192226 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8609 IP: 158.162.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4a:aa:d3:0f:db:ec:58:3b:6a:76:83:19:22:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:2a:06:b3:bd:99:01:2e:d1:a6:01:f4:f2: 72:72:94:14:e8:51:07:e4:a8:5d:09:86:48:64:c1: 9c:d6:72:d9:a1:d0:49:70:83:f0:97:0e:2f:41:d3: 2e:09:11:ee:4f:1c:3c:df:fd:32:b8:85:38:4d:05: 43:d6:b6:c6:6b:8c:f1:a0:0d:8e:2f:8d:57:6e:dd: 3a:6d:c7:a5:af:77:54:76:99:1e:d4:a9:74:c4:4f: 60:c8:cb:af:37:81:c9:d5:6b:1d:84:62:84:21:ed: 8f:dc:52:0e:20:14:f0:88:7c:1c:ca:ce:56:5c:6f: c4:84:64:af:4c:77:f2:65:7c:9c:4a:f8:44:5d:05: c9:ca:89:b1:e5:2c:82:f8:15:e9:6f:1a:4e:70:3c: 1d:27:34:92:7b:cc:f9:bd:49:16:f9:16:b6:96:15: f3:60:9a:93:17:8d:e9:3a:91:06:10:21:20:3f:42: aa:87:ce:e9:92:94:7f:74:a9:f5:c6:4f:36:71:e6: 5a:10:7e:01:b8:8f:41:a0:51:64:ed:3d:6c:ce:84: eb:b5:c2:13:24:b7:3e:6c:d6:8a:f5:78:5e:76:87: 36:a4:af:26:6b:73:46:43:cd:e4:e8:9f:a3:32:fb: 95:35:83:ff:97:2e:42:e7:bf:58:04:71:90:ec:72: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.162.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8609 Signature Algorithm: sha256WithRSAEncryption 67:47:e8:9e:20:66:84:c1:46:5d:7a:85:36:af:e3:01:63:70: 7f:87:4a:30:f4:cf:73:3c:33:fe:41:99:2e:94:ee:c4:a4:24: 5c:1c:89:e3:5d:33:3c:6b:31:1a:94:b9:ad:d7:9f:88:27:6f: 54:da:6a:8d:6e:16:82:53:a4:73:37:69:6f:f3:71:96:49:67: 4f:3a:6a:67:24:fd:3c:60:fa:17:63:4b:ed:2a:79:1e:48:e4: bb:76:d5:c3:59:3e:f0:72:c3:69:c7:86:15:b0:3c:a7:e0:1d: ea:5b:ca:dc:30:b9:97:91:bf:5b:52:6a:9e:8d:00:2b:9b:94: e6:cc:6c:5f:6e:fa:e9:1a:92:db:55:30:9f:42:91:d6:40:65: 08:de:83:00:fe:dc:bb:d2:b8:1e:54:41:c7:05:ea:ad:7b:3b: 80:e4:03:31:a6:66:2b:59:e7:44:1e:12:07:49:99:d8:38:9f: 21:ad:f5:77:82:ec:ce:52:d4:c6:fe:14:5c:09:42:4c:b2:5c: 92:c6:9e:fb:31:bb:15:20:fe:f7:7e:46:fe:a2:72:cd:c2:1e: ca:6e:71:7a:86:03:49:71:0f:5b:f1:d7:97:86:90:6c:5b:8e: 10:bd:87:cb:69:3b:17:38:1f:22:0d:36:58:a7:e7:ad:8c:97: 0b:1a:c3:9a -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt4NUqq0w/b7Fg7anaDGSImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGY0Y2M0MTJjYzMwZmIyZjlmN2MzN2MzZTM5MGJlYzVlNjI1NmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmMqBrO9mQEu0aYB9PJycpQU6FEH 5KhdCYZIZMGc1nLZodBJcIPwlw4vQdMuCRHuTxw83/0yuIU4TQVD1rbGa4zxoA2O L41Xbt06bcelr3dUdpke1Kl0xE9gyMuvN4HJ1WsdhGKEIe2P3FIOIBTwiHwcys5W XG/EhGSvTHfyZXycSvhEXQXJyomx5SyC+BXpbxpOcDwdJzSSe8z5vUkW+Ra2lhXz YJqTF43pOpEGECEgP0Kqh87pkpR/dKn1xk82ceZaEH4BuI9BoFFk7T1szoTrtcIT JLc+bNaK9Xhedoc2pK8ma3NGQ83k6J+jMvuVNYP/ly5C579YBHGQ7HK8oQIDAQAB o4ICnjCCApowHQYDVR0OBBYEFAD0zEEsww+y+ffDfD45C+xeYlawMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzljLzkzNzVh Mi0zZTZmLTQ1NzctODVkMS01ZjE0NWNmZDIwNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvOTM3NWEy LTNlNmYtNDU3Ny04NWQxLTVmMTQ1Y2ZkMjA3MC8xL0FQVE1RU3pERDdMNTk4TjhQ amtMN0Y1aVZyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAnqIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC IaEwDQYJKoZIhvcNAQELBQADggEBAGdH6J4gZoTBRl16hTav4wFjcH+HSjD0z3M8 M/5BmS6U7sSkJFwcieNdMzxrMRqUua3Xn4gnb1Taao1uFoJTpHM3aW/zcZZJZ086 amck/Txg+hdjS+0qeR5I5Lt21cNZPvByw2nHhhWwPKfgHepbytwwuZeRv1tSap6N ACublObMbF9u+ukakttVMJ9CkdZAZQjegwD+3LvSuB5UQccF6q17O4DkAzGmZitZ 50QeEgdJmdg4nyGt9XeC7M5S1Mb+FFwJQkyyXJLGnvsxuxUg/vd+Rv6ics3CHspu cXqGA0lxD1vx15eGkGxbjhC9h8tpOxc4HyINNlin562Mlwsaw5o= -----END CERTIFICATE-----Generated at Sun Jan 25 18:12:28 2026 by rpki-client