This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer (raw, json) Hash identifier: ZdpFZKSkKXpkNHPOHymBMxKSrI3bYW5DcdZVO52Den8= Subject key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9FBC3474643FCBA15B9C33CE9C031 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44218 AS: 44516 AS: 49209 IP: 5.10.136.0/21 IP: 5.154.128.0/19 IP: 79.139.0.0/20 IP: 81.173.16.0/20 IP: 87.120.16.0/20 IP: 95.130.192.0/21 IP: 145.14.64.0/19 IP: 185.75.172.0/22 IP: 2a04:f580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:fb:c3:47:46:43:fc:ba:15:b9:c3:3c:e9:c0:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:1a:f7:12:10:15:af:55:55:56:2c:44:a4: 98:6a:51:ea:a5:60:c3:58:8d:08:7d:13:28:d9:12: 4c:7e:93:30:20:c1:51:dd:2c:16:e1:1c:f8:78:ee: dd:42:5a:9b:ba:5f:43:56:db:ff:ad:84:5e:90:1c: 15:b0:ad:cd:01:92:fb:49:c2:fe:fe:0b:b3:6b:2a: b1:4b:7f:f5:dd:29:b7:72:fe:b7:67:dc:90:13:28: 9f:18:f4:5d:d5:e2:5d:f2:42:15:d2:a2:31:5b:4d: 12:4d:2a:05:12:09:39:ce:fd:77:f1:45:e6:98:e2: 5e:6b:a4:b0:91:da:0d:a1:e2:7d:4b:6e:09:c1:bc: c8:e8:b9:a1:9b:46:c9:3f:5b:9a:95:1c:59:55:92: 05:83:3b:48:4b:a6:bf:cb:7c:8d:64:f2:81:05:8e: be:4a:e4:17:a9:b7:d0:23:b2:4d:38:b8:8c:a2:00: 18:f2:e4:aa:fa:bc:2f:34:da:b4:6d:0a:83:50:6b: 20:2b:36:65:fb:99:1e:50:37:b9:5e:1d:20:b5:77: a2:30:2d:91:e7:03:32:ed:1b:91:d0:71:38:6e:b3: 66:27:bf:7b:33:66:4f:ab:29:29:81:98:2d:aa:c4: ad:d0:8e:ac:5e:9e:d4:bd:62:7b:9f:a0:8c:34:2a: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.136.0/21 5.154.128.0/19 79.139.0.0/20 81.173.16.0/20 87.120.16.0/20 95.130.192.0/21 145.14.64.0/19 185.75.172.0/22 IPv6: 2a04:f580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44218 44516 49209 Signature Algorithm: sha256WithRSAEncryption 01:eb:da:60:8d:a4:c6:d8:9c:7c:28:0d:5f:d9:5e:d7:8a:cd: 0e:d9:de:3b:d7:6b:86:82:86:ac:d2:da:1f:2d:6a:3e:1a:92: 1b:e7:ce:7b:8a:25:54:38:1c:c9:fc:7d:40:8d:61:d0:6c:9d: 7c:0c:a2:22:77:30:49:35:47:2a:ba:79:46:2a:02:bb:91:71: 06:63:d2:2b:0f:39:71:dd:97:7a:62:1c:02:89:35:90:8b:ba: fe:06:48:65:a6:1d:1c:63:33:9a:cf:fd:6f:cd:f3:95:f2:e5: 5b:ff:de:6a:d9:44:3d:62:9c:a9:27:61:40:3f:50:bb:cb:61: bb:e9:5c:80:9b:f9:42:69:19:69:4f:b4:89:fe:d6:7d:20:c6: 55:75:54:50:1d:2f:e6:ff:2a:06:79:a9:fe:46:0c:a4:c9:1c: 00:c2:8d:98:bf:e9:b1:af:65:d9:34:39:1c:80:7c:f0:17:21: ab:6a:6a:2c:db:8c:52:16:a2:64:13:cc:11:c2:6d:4a:89:1e: c8:3f:78:31:65:b6:0d:71:d7:16:66:7f:f7:5d:94:6f:9b:af: b5:c0:b7:ed:6a:1e:f5:c6:8b:c5:1a:f4:69:07:e9:ac:cc:49: 8c:42:c4:9e:99:d9:7e:c1:09:e1:0b:69:93:e7:59:d0:ff:44: 28:c0:70:b8 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgISAZt9yfvDR0ZD/LoVucM86cAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMWYzZWYzZTBlYTk1YTk3NTUzN2Q1YzI1ZDkzY2I3NmFmNjg3MjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUQa9xIQFa9VVVYsRKSYalHqpWDD WI0IfRMo2RJMfpMwIMFR3SwW4Rz4eO7dQlqbul9DVtv/rYRekBwVsK3NAZL7ScL+ /guzayqxS3/13Sm3cv63Z9yQEyifGPRd1eJd8kIV0qIxW00STSoFEgk5zv138UXm mOJea6SwkdoNoeJ9S24JwbzI6Lmhm0bJP1ualRxZVZIFgztIS6a/y3yNZPKBBY6+ SuQXqbfQI7JNOLiMogAY8uSq+rwvNNq0bQqDUGsgKzZl+5keUDe5Xh0gtXeiMC2R 5wMy7RuR0HE4brNmJ797M2ZPqykpgZgtqsSt0I6sXp7UvWJ7n6CMNCqLAwIDAQAB o4IC4zCCAt8wHQYDVR0OBBYEFAHz7z4OqVqXVTfVwl2Ty3avaHI0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ1Lzg0MTdh MC0wNzc3LTQ0NmUtOTdlMS0zNTNiM2E2MzNhZGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvODQxN2Ew LTA3NzctNDQ2ZS05N2UxLTM1M2IzYTYzM2FkYS8xL0FmUHZQZzZwV3BkVk45WENY WlBMZHE5b2NqUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF BwEHAQH/BEkwRzA2BAIAATAwAwQDBQqIAwQFBZqAAwQET4sAAwQEUa0QAwQEV3gQ AwQDX4LAAwQFkQ5AAwQCuUusMA0EAgACMAcDBQMqBPWAMCQGCCsGAQUFBwEIAQH/ BBUwE6ARMA8CAwCsugIDAK3kAgMAwDkwDQYJKoZIhvcNAQELBQADggEBAAHr2mCN pMbYnHwoDV/ZXteKzQ7Z3jvXa4aChqzS2h8taj4akhvnznuKJVQ4HMn8fUCNYdBs nXwMoiJ3MEk1Ryq6eUYqAruRcQZj0isPOXHdl3piHAKJNZCLuv4GSGWmHRxjM5rP /W/N85Xy5Vv/3mrZRD1inKknYUA/ULvLYbvpXICb+UJpGWlPtIn+1n0gxlV1VFAd L+b/KgZ5qf5GDKTJHADCjZi/6bGvZdk0ORyAfPAXIatqaizbjFIWomQTzBHCbUqJ Hsg/eDFltg1x1xZmf/ddlG+br7XAt+1qHvXGi8Ua9GkH6azMSYxCxJ6Z2X7BCeEL aZPnWdD/RCjAcLg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:17:10 2026 by rpki-client