This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer File: ATNUQlFNUkm1FDz9-CEha7XFKUA.cer (raw, json) Hash identifier: +JfYr7ANnmdM62aEtpT5RqQr4rD/JYMwiyQrcl+Z2Pk= Subject key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED4D6A6291200A49393F8835F860E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39134 IP: 23.105.224.0/19 IP: 23.111.32.0/19 IP: 23.111.96.0/19 IP: 23.111.192.0/19 IP: 88.212.192.0/18 IP: 185.206.100.0/22 IP: 2a02:2100::/30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4d:6a:62:91:20:0a:49:39:3f:88:35:f8:60:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01335442514d5249b5143cfdf821216bb5c52940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:72:51:fe:97:47:a2:3e:00:5b:39:9e:60: 62:f5:f5:57:80:b7:41:78:c7:ac:f3:39:74:16:0c: 28:a2:14:ff:3d:21:0e:80:1b:85:6e:df:8f:3e:f0: 25:ab:dd:33:8e:a7:a5:c3:8f:ff:2d:02:e5:fd:2b: 27:31:12:d8:1e:f7:ed:eb:f2:7d:65:05:17:af:be: 06:09:44:3b:92:9f:3c:de:33:5e:6a:cb:10:2c:7c: c2:77:c3:6e:88:5c:0c:d2:11:08:fd:22:5d:07:74: 37:f1:59:39:89:aa:9a:5f:3f:b1:f3:ae:c1:2e:d0: e8:c5:32:12:95:37:15:bd:3c:3e:bb:a7:8e:0a:66: eb:01:65:80:2f:9c:31:50:68:fd:5a:03:eb:4d:8f: 52:77:60:68:76:78:e8:3b:5b:69:6d:39:2d:40:ae: 35:7b:0c:9f:11:98:ec:54:60:8c:42:06:5c:d7:67: 71:7a:73:63:45:29:8c:49:76:8c:21:13:21:74:26: e9:85:f7:5d:c5:38:59:8d:29:b4:e0:f7:27:53:68: 2d:18:05:9e:ee:b4:76:9d:c0:18:f1:c4:32:8f:bf: 7c:47:34:7c:4b:05:9d:e1:98:e5:b1:67:95:e9:6a: f4:64:e6:60:3f:29:ef:a5:cc:2c:fa:4a:10:ea:22: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.105.224.0/19 23.111.32.0/19 23.111.96.0/19 23.111.192.0/19 88.212.192.0/18 185.206.100.0/22 IPv6: 2a02:2100::/30 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39134 Signature Algorithm: sha256WithRSAEncryption 46:d8:47:65:d9:43:7f:24:4c:af:f2:93:17:1d:a1:d2:12:58: 41:86:c6:c5:f5:b7:10:e0:96:36:0b:2a:9e:24:55:15:0a:15: 30:c0:27:30:49:d1:64:4e:cf:4a:36:cb:3d:83:22:e1:ce:e7: 89:15:d9:0a:3d:d3:a7:68:ba:e6:44:e0:36:fa:3b:aa:21:92: 0c:72:76:70:b3:ce:a4:8b:54:57:57:e4:35:7c:9b:62:35:1b: a8:76:24:82:97:3b:8e:e5:a2:dd:16:1d:51:5b:9d:86:35:9a: 76:17:a9:20:a1:8a:18:e6:7d:01:d1:00:69:66:f9:93:1e:bb: 49:5c:7a:88:38:7e:f2:39:81:66:80:d0:4b:0a:b2:81:2b:a5: f8:0b:56:32:e4:ac:c3:d9:bb:2a:f5:f3:d3:87:f8:a4:b3:a7: 98:df:09:93:ab:39:21:ea:ea:8b:cf:93:7b:43:53:07:c5:bf: f4:af:c7:fe:eb:a1:bb:98:86:b5:4c:ef:aa:c9:18:66:e3:c7: bf:ef:00:2e:ed:e6:55:97:a9:7c:d1:f1:ad:dc:76:6f:b2:bc: 1a:d5:05:7d:4f:3d:2f:01:85:1c:95:83:37:c2:24:51:62:4e: 5b:ac:69:75:d3:e6:22:f8:bf:45:e6:df:15:40:b5:db:d3:c5: 66:1c:08:f5 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt87U1qYpEgCkk5P4g1+GDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTMzNTQ0MjUxNGQ1MjQ5YjUxNDNjZmRmODIxMjE2YmI1YzUyOTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshlyUf6XR6I+AFs5nmBi9fVXgLdB eMes8zl0FgwoohT/PSEOgBuFbt+PPvAlq90zjqelw4//LQLl/SsnMRLYHvft6/J9 ZQUXr74GCUQ7kp883jNeassQLHzCd8NuiFwM0hEI/SJdB3Q38Vk5iaqaXz+x867B LtDoxTISlTcVvTw+u6eOCmbrAWWAL5wxUGj9WgPrTY9Sd2BodnjoO1tpbTktQK41 ewyfEZjsVGCMQgZc12dxenNjRSmMSXaMIRMhdCbphfddxThZjSm04PcnU2gtGAWe 7rR2ncAY8cQyj798RzR8SwWd4ZjlsWeV6Wr0ZOZgPynvpcws+koQ6iLUtQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFAEzVEJRTVJJtRQ8/fghIWu1xSlAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IwL2M3YTY4 Zi03YmY4LTRmODAtYTlhMi04MTVkMmMwMjY2NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAvYzdhNjhm LTdiZjgtNGY4MC1hOWEyLTgxNWQyYzAyNjY0Ni8xL0FUTlVRbEZOVWttMUZEejkt Q0VoYTdYRktVQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQFF2ngAwQFF28gAwQFF29gAwQFF2/AAwQGWNTA AwQCuc5kMA0EAgACMAcDBQIqAiEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCY 3jANBgkqhkiG9w0BAQsFAAOCAQEARthHZdlDfyRMr/KTFx2h0hJYQYbGxfW3EOCW NgsqniRVFQoVMMAnMEnRZE7PSjbLPYMi4c7niRXZCj3Tp2i65kTgNvo7qiGSDHJ2 cLPOpItUV1fkNXybYjUbqHYkgpc7juWi3RYdUVudhjWadhepIKGKGOZ9AdEAaWb5 kx67SVx6iDh+8jmBZoDQSwqygSul+AtWMuSsw9m7KvXz04f4pLOnmN8Jk6s5Ierq i8+Te0NTB8W/9K/H/uuhu5iGtUzvqskYZuPHv+8ALu3mVZepfNHxrdx2b7K8GtUF fU89LwGFHJWDN8IkUWJOW6xpddPmIvi/RebfFUC129PFZhwI9Q== -----END CERTIFICATE-----Generated at Mon Jan 26 19:38:19 2026 by rpki-client