This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer File: AU79_QZHzLpzSyoFZgEk64wGdWc.cer (raw, json) Hash identifier: W6EcSL2tkE4o3Gn5Qzo+g/C7AGyIBuJ951JVNzUn9qk= Subject key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7835472DDC6A19138AD18C8E31489C65 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48940 IP: 46.148.96.0/20 IP: 62.122.96.0/21 IP: 94.231.160.0/20 IP: 176.115.32.0/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:47:2d:dc:6a:19:13:8a:d1:8c:8e:31:48:9c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=014efdfd0647ccba734b2a05660124eb8c067567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:fc:d3:a1:48:ad:88:65:4c:8b:fd:5e:0b: 1d:fc:9f:a4:74:4d:35:64:7f:bb:c5:d5:ec:b0:fa: c6:f9:2d:78:08:df:83:20:18:56:83:fe:53:28:c8: a4:33:ec:ff:b9:a4:8e:59:e5:0f:5f:67:77:7b:37: 48:a2:c9:ae:cc:f7:ed:88:01:89:79:27:03:ff:39: 82:78:e9:e3:68:0c:4b:fe:11:ef:c3:f7:55:3a:e3: 23:ae:c1:59:60:b9:18:48:96:b6:12:2d:00:2e:c0: a5:04:32:d7:2f:a0:fa:63:a7:6a:46:85:cb:e1:eb: 97:44:ac:0d:1b:e8:5f:16:8f:08:e2:52:d0:51:78: 5e:54:6a:e2:88:1a:c0:61:a6:52:97:36:30:eb:39: 1a:8e:dc:af:a9:ed:11:a4:fa:22:77:a6:44:b2:bd: 4d:b0:16:ac:70:b4:dd:0c:bf:b0:bd:57:28:e5:d8: 93:c9:5e:46:a3:e4:9a:a4:5e:fd:7d:17:4a:b9:95: 42:b7:f5:9c:06:84:ba:ee:a1:b0:9f:9d:0c:46:c9: df:18:72:3a:cb:e9:c4:14:a7:bb:e8:96:72:48:2a: b7:18:34:08:42:1e:6e:50:ff:14:95:6d:8b:20:57: 37:0f:1a:cd:3c:19:f4:81:cf:8f:7c:12:77:57:54: a6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.96.0/20 62.122.96.0/21 94.231.160.0/20 176.115.32.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48940 Signature Algorithm: sha256WithRSAEncryption 74:88:09:36:a7:73:2f:4f:e9:33:ca:df:23:eb:d2:9f:b3:5f: 9f:40:9d:ac:7f:f6:f3:e4:91:01:9a:d3:a8:de:02:b3:53:ef: 6b:53:cf:21:15:94:3d:ad:94:04:37:64:6b:e8:33:dd:6e:56: 29:01:ec:df:6b:fa:59:54:64:89:21:d7:94:ea:cf:d8:b6:6e: f1:06:4f:ad:f7:d2:cc:d4:ce:fc:64:b8:7b:25:a2:05:5b:9c: e7:0a:82:8f:30:f8:f6:ce:a1:fd:8b:de:57:ed:7b:8a:c1:66: 55:66:f2:89:c0:70:dd:ed:da:70:81:6c:ac:4c:9f:b4:7a:15: 72:e0:d9:e5:9b:ef:89:ee:01:ee:a5:89:25:79:fa:84:f4:c9: 00:b3:f8:f5:b6:89:33:10:96:16:55:03:cf:25:2b:fd:47:49: ff:fc:39:17:da:b9:a0:4a:47:91:a1:cf:0c:0b:95:6c:6a:81: 1c:5a:e2:eb:56:62:8e:c6:5f:4d:58:dd:ed:b3:a8:fa:a2:f8: 9e:95:dc:d5:ec:f4:57:20:5b:fd:ce:86:0b:aa:87:c8:ad:48: 56:ba:cb:5b:db:8e:24:4d:f8:00:39:0c:9f:64:24:04:cd:4a: c2:8e:8d:f6:b1:dc:64:c0:33:a9:77:cc:d9:e6:f1:6c:a6:88: e3:36:9d:82 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt4NUct3GoZE4rRjI4xSJxlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTRlZmRmZDA2NDdjY2JhNzM0YjJhMDU2NjAxMjRlYjhjMDY3NTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMf806FIrYhlTIv9Xgsd/J+kdE01 ZH+7xdXssPrG+S14CN+DIBhWg/5TKMikM+z/uaSOWeUPX2d3ezdIosmuzPftiAGJ eScD/zmCeOnjaAxL/hHvw/dVOuMjrsFZYLkYSJa2Ei0ALsClBDLXL6D6Y6dqRoXL 4euXRKwNG+hfFo8I4lLQUXheVGriiBrAYaZSlzYw6zkajtyvqe0RpPoid6ZEsr1N sBascLTdDL+wvVco5diTyV5Go+SapF79fRdKuZVCt/WcBoS67qGwn50MRsnfGHI6 y+nEFKe76JZySCq3GDQIQh5uUP8UlW2LIFc3DxrNPBn0gc+PfBJ3V1Sm3wIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFAFO/f0GR8y6c0sqBWYBJOuMBnVnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UxL2Y5Yzc2 Yi00YzY2LTQzNDYtOGFkZS1mYzZjZGFhZjI1MGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEvZjljNzZi LTRjNjYtNDM0Ni04YWRlLWZjNmNkYWFmMjUwYi8xL0FVNzlfUVpIekxwelN5b0Za Z0VrNjR3R2RXYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQELpRgAwQDPnpgAwQEXuegAwQFsHMgMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwC/LDANBgkqhkiG9w0BAQsFAAOCAQEAdIgJNqdz L0/pM8rfI+vSn7Nfn0CdrH/28+SRAZrTqN4Cs1Pva1PPIRWUPa2UBDdka+gz3W5W KQHs32v6WVRkiSHXlOrP2LZu8QZPrffSzNTO/GS4eyWiBVuc5wqCjzD49s6h/Yve V+17isFmVWbyicBw3e3acIFsrEyftHoVcuDZ5Zvvie4B7qWJJXn6hPTJALP49baJ MxCWFlUDzyUr/UdJ//w5F9q5oEpHkaHPDAuVbGqBHFri61ZijsZfTVjd7bOo+qL4 npXc1ez0VyBb/c6GC6qHyK1IVrrLW9uOJE34ADkMn2QkBM1Kwo6N9rHcZMAzqXfM 2ebxbKaI4zadgg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:39 2026 by rpki-client