This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer File: AUa0KfjElhH8_qHvoaUbnA7dtuc.cer (raw, json) Hash identifier: xHTci1jNdH6sUWy1hayg1H1Dciib0a5X41CQCNlCBsI= Subject key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E387CF306BB08EBC61038635089AFDB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50369 IP: 31.14.222.0/23 IP: 89.33.10.0/23 IP: 89.33.202.0/23 IP: 89.36.152.0/23 IP: 89.41.174.0/23 IP: 89.42.176.0/23 IP: 89.42.234.0/23 IP: 89.45.64.0/23 IP: 89.45.160.0/23 IP: 89.46.168.0/21 IP: 89.47.92.0/23 IP: 93.114.140.0/24 IP: 185.135.64.0/22 IP: 188.213.200.0/23 IP: 188.241.210.0/24 IP: 193.105.71.0/24 IP: 194.150.216.0/23 IP: 195.200.86.0/23 IP: 2a07:c1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7c:f3:06:bb:08:eb:c6:10:38:63:50:89:af:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ce:97:9f:89:08:e5:37:92:60:18:94:2b:f7: 7a:fb:74:a4:a4:df:95:9c:81:61:23:49:34:5b:c7: 86:eb:f2:57:c9:ee:43:f7:24:c5:85:7d:21:ca:8d: ff:bd:99:00:c7:44:c8:82:6f:ad:81:de:4d:9e:3d: 0d:c6:8d:35:b1:a4:2f:95:1d:48:f5:d2:b1:95:9d: 1f:da:64:c5:ac:9c:3b:fd:d4:24:57:2a:b7:56:95: 70:f6:2c:52:00:05:b4:c7:af:72:a0:a1:02:b6:da: d1:1a:97:65:c3:76:c3:7e:6b:da:e3:2f:fb:72:cb: 8b:31:e5:44:30:56:6a:09:f5:3e:8e:d8:9a:c1:49: 57:59:6e:48:e1:7b:b8:29:e2:cf:86:26:78:a6:ab: 08:cd:ff:63:07:d1:a7:82:fb:7d:20:61:12:d3:ff: 0e:0d:fc:c2:77:47:50:a4:9e:18:40:5c:73:3c:2c: ed:9a:93:fd:6a:53:61:1b:7c:fe:19:45:38:fd:22: 32:ec:a3:1e:e8:f0:41:31:59:7a:ff:37:10:2b:b2: 2c:60:de:ae:f3:59:c3:bb:e4:ce:c3:22:f5:45:9a: 3e:1f:47:54:31:14:29:6a:b1:ea:89:73:90:11:0a: e3:29:6c:cf:34:ee:c6:6a:d1:14:27:cf:4c:71:7e: ae:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.222.0/23 89.33.10.0/23 89.33.202.0/23 89.36.152.0/23 89.41.174.0/23 89.42.176.0/23 89.42.234.0/23 89.45.64.0/23 89.45.160.0/23 89.46.168.0/21 89.47.92.0/23 93.114.140.0/24 185.135.64.0/22 188.213.200.0/23 188.241.210.0/24 193.105.71.0/24 194.150.216.0/23 195.200.86.0/23 IPv6: 2a07:c1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50369 Signature Algorithm: sha256WithRSAEncryption 54:f8:30:5b:1e:2d:cb:3a:7e:20:f7:d9:de:de:a1:0f:86:59: 53:72:b8:8e:63:de:92:60:75:2a:31:21:ed:ac:59:fd:2a:73: e2:2e:44:16:d5:ce:8a:a8:de:14:e1:cb:c1:fc:9d:2f:58:5a: 1d:45:19:66:4e:e2:de:ab:91:88:12:a5:fc:91:ec:01:8b:ef: 1a:66:cf:17:4e:1b:7f:68:46:c0:ad:08:27:97:99:0b:03:d4: e7:1f:56:24:4c:79:ad:61:25:9c:f6:04:5f:1d:0b:1a:b6:b6: 73:26:84:77:f4:77:32:6c:ef:27:e2:79:72:cc:c6:a0:d7:10: 46:8d:36:28:72:0a:0d:3d:8c:d4:c9:ce:56:c8:56:69:ba:1b: d2:a8:37:17:97:30:92:ad:3a:7f:02:8b:e2:79:90:d8:7a:2e: ec:20:55:9f:49:4d:55:d5:2b:62:c9:3b:f2:71:64:73:73:86: fa:81:17:7c:76:67:a1:5c:f4:d5:67:34:6c:79:94:61:7d:19: 86:6a:69:6b:8b:0a:90:a6:45:e9:64:df:71:46:01:71:e5:7d: f6:b5:a1:d3:59:57:a5:40:b9:23:62:ad:55:c7:ed:ac:b0:15: 5b:6b:96:38:e2:05:2f:bd:e4:44:76:d1:71:8b:8f:d7:91:13: 33:ff:c7:a7 -----BEGIN CERTIFICATE----- MIIGDDCCBPSgAwIBAgISAZt+OHzzBrsI68YQOGNQia/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTQ2YjQyOWY4YzQ5NjExZmNmZWExZWZhMWE1MWI5YzBlZGRiNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhM6Xn4kI5TeSYBiUK/d6+3SkpN+V nIFhI0k0W8eG6/JXye5D9yTFhX0hyo3/vZkAx0TIgm+tgd5Nnj0Nxo01saQvlR1I 9dKxlZ0f2mTFrJw7/dQkVyq3VpVw9ixSAAW0x69yoKECttrRGpdlw3bDfmva4y/7 csuLMeVEMFZqCfU+jtiawUlXWW5I4Xu4KeLPhiZ4pqsIzf9jB9Gngvt9IGES0/8O DfzCd0dQpJ4YQFxzPCztmpP9alNhG3z+GUU4/SIy7KMe6PBBMVl6/zcQK7IsYN6u 81nDu+TOwyL1RZo+H0dUMRQparHqiXOQEQrjKWzPNO7GatEUJ89McX6uWwIDAQAB o4IDGDCCAxQwHQYDVR0OBBYEFAFGtCn4xJYR/P6h76GlG5wO3bbnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2U1ZTM3 OS02NTZkLTQ2MjItYTdiYy1lYTI2ZTc0NmEwYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvZTVlMzc5 LTY1NmQtNDYyMi1hN2JjLWVhMjZlNzQ2YTBhZC8xL0FVYTBLZmpFbGhIOF9xSHZv YVVibkE3ZHR1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGWBggrBgEF BQcBBwEB/wSBhjCBgzByBAIAATBsAwQBHw7eAwQBWSEKAwQBWSHKAwQBWSSYAwQB WSmuAwQBWSqwAwQBWSrqAwQBWS1AAwQBWS2gAwQDWS6oAwQBWS9cAwQAXXKMAwQC uYdAAwQBvNXIAwQAvPHSAwQAwWlHAwQBwpbYAwQBw8hWMA0EAgACMAcDBQMqB8HA MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDEwTANBgkqhkiG9w0BAQsFAAOCAQEA VPgwWx4tyzp+IPfZ3t6hD4ZZU3K4jmPekmB1KjEh7axZ/Spz4i5EFtXOiqjeFOHL wfydL1haHUUZZk7i3quRiBKl/JHsAYvvGmbPF04bf2hGwK0IJ5eZCwPU5x9WJEx5 rWElnPYEXx0LGra2cyaEd/R3MmzvJ+J5cszGoNcQRo02KHIKDT2M1MnOVshWabob 0qg3F5cwkq06fwKL4nmQ2Hou7CBVn0lNVdUrYsk78nFkc3OG+oEXfHZnoVz01Wc0 bHmUYX0Zhmppa4sKkKZF6WTfcUYBceV99rWh01lXpUC5I2KtVcftrLAVW2uWOOIF L73kRHbRcYuP15ETM//Hpw== -----END CERTIFICATE-----Generated at Mon Jan 26 06:05:55 2026 by rpki-client