This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer File: Ahs-o17f3ROMFVBtdKdgIt03aUs.cer (raw, json) Hash identifier: moRRW2JB+umjtngI2U4s+GMUxGtCk3xRH028QBtjs/8= Subject key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA35C1718149B6729A494ADC7CDB284 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:17:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 553 IP: 129.69.0.0/16 IP: 129.143.0.0/16 IP: 141.58.0.0/16 IP: 141.70.0.0/16 IP: 192.67.189.0/24 IP: 192.67.208.0/24 IP: 192.100.96.0/23 IP: 192.108.35.0 -- 192.108.44.255 IP: 193.196.0.0/15 IP: 2001:7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:5c:17:18:14:9b:67:29:a4:94:ad:c7:cd:b2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=021b3ea35edfdd138c15506d74a76022dd37694b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:81:67:51:27:a5:3a:cf:b2:6b:54:89:5c: 41:56:ff:5e:93:eb:ae:ba:1e:7f:72:c7:d2:8c:46: 86:d2:2c:08:dd:56:f6:a8:b5:94:0a:02:18:33:7f: 75:df:e7:ee:a4:3b:a8:66:6b:7d:21:64:92:0d:28: 7c:1d:42:40:27:fa:da:d8:fd:5b:ae:72:45:45:fc: 76:3b:b8:7b:c4:e4:0a:38:0d:b2:94:c3:28:17:8a: a5:0d:9d:b7:d6:da:12:ec:6a:3a:86:ae:bb:50:09: 87:e9:f2:1a:d8:a6:c1:19:8a:c9:9b:57:ea:8d:1d: 60:f7:07:71:b9:5a:cf:10:2d:6d:14:be:b6:e7:af: b1:f2:87:72:c9:2b:d9:43:e3:34:92:89:ad:96:19: bc:48:fe:c0:c6:57:d2:c2:6a:22:d9:9a:43:be:70: e1:49:c1:a7:a0:c6:9a:c1:c5:42:7e:81:e8:92:6e: 63:a9:46:b4:f0:22:e7:4f:f3:79:a5:56:ab:93:50: 90:19:43:46:d5:19:9a:00:3c:83:12:8c:ae:99:e1: 74:54:8b:2e:29:fd:6c:49:1f:ae:c6:dd:91:10:90: af:6c:d1:e5:19:cb:2f:e2:c9:1e:fd:7f:96:85:57: a7:0f:34:4e:a7:30:79:3b:0e:11:cc:2c:89:9d:d3: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.69.0.0/16 129.143.0.0/16 141.58.0.0/16 141.70.0.0/16 192.67.189.0/24 192.67.208.0/24 192.100.96.0/23 192.108.35.0-192.108.44.255 193.196.0.0/15 IPv6: 2001:7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 553 Signature Algorithm: sha256WithRSAEncryption 67:8c:15:04:11:1e:b9:46:17:c2:30:f5:9a:c5:c2:f9:89:c6: 47:fa:2b:54:13:e6:d7:32:d4:00:28:f3:8c:91:50:22:72:3f: d8:33:ff:23:4d:ae:52:91:e6:d8:41:00:20:d3:a7:cf:51:b4: c5:89:67:86:7e:ef:7f:4e:8b:4d:69:b9:23:56:f1:f6:b2:41: 5b:4b:4a:4b:27:44:b5:e0:ec:f9:cb:71:2e:eb:75:e2:93:f9: 98:99:08:57:bc:18:28:43:84:e8:b8:1f:86:8f:c8:ce:56:d4: 54:e7:9c:bc:b3:28:d6:e4:1e:9f:37:bd:7b:a1:da:86:aa:4d: dd:27:ea:d9:d5:f2:2b:ce:26:07:84:55:0d:05:ea:c8:f3:b7: 90:f2:87:d1:a0:bd:00:67:a5:51:33:ed:fe:38:62:a0:62:8a: 42:2e:11:f1:3e:db:14:41:a1:b8:e6:ab:61:c9:78:3c:f0:a6: 1b:7b:ef:2d:44:8d:81:4c:d5:93:8e:48:66:a6:8f:38:36:98: 2e:be:60:b1:fb:b8:27:5b:bf:11:7e:a1:5c:26:1b:9f:8d:33: 39:8a:03:1a:2c:2e:87:9d:ab:ae:c4:17:c6:1a:71:da:74:dc: 15:4a:74:ee:b3:9d:e7:99:4f:17:3a:98:c8:42:4f:84:1d:e7: 58:5c:23:1e -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZt7o1wXGBSbZymklK3HzbKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjFiM2VhMzVlZGZkZDEzOGMxNTUwNmQ3NGE3NjAyMmRkMzc2OTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQqBZ1EnpTrPsmtUiVxBVv9ek+uu uh5/csfSjEaG0iwI3Vb2qLWUCgIYM3913+fupDuoZmt9IWSSDSh8HUJAJ/ra2P1b rnJFRfx2O7h7xOQKOA2ylMMoF4qlDZ231toS7Go6hq67UAmH6fIa2KbBGYrJm1fq jR1g9wdxuVrPEC1tFL6256+x8odyySvZQ+M0komtlhm8SP7AxlfSwmoi2ZpDvnDh ScGnoMaawcVCfoHokm5jqUa08CLnT/N5pVark1CQGUNG1RmaADyDEoyumeF0VIsu Kf1sSR+uxt2REJCvbNHlGcsv4ske/X+WhVenDzROpzB5Ow4RzCyJndMnDwIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFAIbPqNe390TjBVQbXSnYCLdN2lLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjL2Y4OWI2 NC04N2I3LTQ4ZjQtOGI2MC1jMzIwNGJkZTc3NzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvZjg5YjY0 LTg3YjctNDhmNC04YjYwLWMzMjA0YmRlNzc3My8xL0Focy1vMTdmM1JPTUZWQnRk S2RnSXQwM2FVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGEGCCsGAQUF BwEHAQH/BFIwUDA/BAIAATA5AwMAgUUDAwCBjwMDAI06AwMAjUYDBADAQ70DBADA Q9ADBAHAZGAwDAMEAMBsIwMEAMBsLAMDAcHEMA0EAgACMAcDBQMgAQfAMBkGCCsG AQUFBwEIAQH/BAowCKAGMAQCAgIpMA0GCSqGSIb3DQEBCwUAA4IBAQBnjBUEER65 RhfCMPWaxcL5icZH+itUE+bXMtQAKPOMkVAicj/YM/8jTa5SkebYQQAg06fPUbTF iWeGfu9/TotNabkjVvH2skFbS0pLJ0S14Oz5y3Eu63Xik/mYmQhXvBgoQ4TouB+G j8jOVtRU55y8syjW5B6fN717odqGqk3dJ+rZ1fIrziYHhFUNBerI87eQ8ofRoL0A Z6VRM+3+OGKgYopCLhHxPtsUQaG45qthyXg88KYbe+8tRI2BTNWTjkhmpo84Npgu vmCx+7gnW78RfqFcJhufjTM5igMaLC6HnauuxBfGGnHadNwVSnTus53nmU8XOpjI Qk+EHedYXCMe -----END CERTIFICATE-----Generated at Mon Jan 26 02:46:14 2026 by rpki-client