This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer File: AjmuERiAiFR-s-UjSDzKmFVsEVs.cer (raw, json) Hash identifier: hby2M3DLHT+C7l2uAriZHWX0K8eS8b65Oz0NocuR518= Subject key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88B2361CD3E4908CB91926A136464 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52126 AS: 196689 IP: 37.26.240.0/21 IP: 77.83.208.0/22 IP: 95.130.8.0/21 IP: 147.78.36.0/22 IP: 152.89.112.0/22 IP: 185.12.32.0/22 IP: 185.32.216.0/22 IP: 2a02:a80::/29 IP: 2a02:ebc0::/29 IP: 2a10:7340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8b:23:61:cd:3e:49:08:cb:91:92:6a:13:64:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0239ae11188088547eb3e523483cca98556c115b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7a:23:b4:3a:89:f8:94:50:ec:1d:67:6e:56: d6:c4:2b:8c:d9:d7:0d:59:7c:00:21:5f:42:d5:4a: de:81:e4:05:e5:3a:cb:e6:ce:1a:ab:3d:5a:18:a3: 01:50:e0:41:04:c4:6e:5c:ef:56:20:15:29:bf:8f: fc:5e:e7:16:e3:68:4b:62:c4:59:5c:23:25:91:b3: ec:7f:36:1c:39:54:81:a0:4a:4b:d8:ad:4d:70:60: d1:6d:9f:f6:dc:5d:3a:1a:16:19:1c:3b:ea:f2:23: 7d:7e:72:cd:bb:8e:b7:37:95:49:ec:6c:63:e7:6d: 96:ec:f6:e9:ae:21:60:9e:f9:6e:a5:ad:9c:64:96: 00:81:2d:d0:9b:3c:37:e2:e4:d9:69:c3:a5:a9:08: ae:7b:66:34:77:89:74:94:10:bf:2c:aa:e9:73:aa: 4f:87:02:6a:8a:24:12:2c:2a:2f:ed:18:6e:0e:9a: d2:a3:4e:44:f0:aa:2b:cc:a5:ea:8f:28:99:b7:57: 9d:f5:12:df:ab:d2:6b:e1:9e:53:47:85:cc:bc:b1: e1:c9:ba:08:41:b3:c3:ba:67:96:1c:12:d0:d6:31: 19:ca:51:45:2f:34:70:85:21:62:8a:e0:3d:4e:a4: 26:c8:83:fa:8b:fa:c3:86:4e:1f:09:ee:a2:d1:fd: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.240.0/21 77.83.208.0/22 95.130.8.0/21 147.78.36.0/22 152.89.112.0/22 185.12.32.0/22 185.32.216.0/22 IPv6: 2a02:a80::/29 2a02:ebc0::/29 2a10:7340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52126 196689 Signature Algorithm: sha256WithRSAEncryption 0c:bf:52:0b:80:c7:ce:66:39:00:5c:f5:ab:c2:0b:e5:fb:f0: 5d:15:da:d2:9f:c3:92:c9:8d:59:47:ec:8b:ff:94:26:25:04: f0:84:51:1b:fc:43:4a:b2:47:82:76:ed:64:2d:89:58:27:7a: 59:51:f2:85:a4:44:31:59:8c:4f:68:df:cc:0b:df:25:0e:1e: d1:c3:cf:5e:96:9e:47:77:b9:a9:13:81:bb:b1:1b:e2:da:9c: 96:eb:c0:25:32:77:60:f7:62:50:b4:86:2c:94:24:bf:6b:e5: f4:b3:78:b6:1b:d7:52:31:16:b7:89:31:63:6b:a7:76:c6:d4: e9:c6:70:c5:58:dd:63:22:c2:82:97:5a:ef:f8:ba:af:97:1a: 04:f7:0f:25:4b:87:75:f0:19:c1:08:a7:e9:55:39:19:54:4c: d2:88:5b:ac:f4:e7:5f:f8:cf:55:96:26:be:5d:5e:22:a3:44: b8:93:83:3a:0a:01:dd:b6:33:52:8a:ea:aa:4b:9a:ac:a6:6e: 78:08:81:73:c1:03:67:03:9e:94:19:65:8c:da:be:c6:5a:65: d3:30:83:4d:02:83:c3:cf:d5:10:0b:ac:e4:df:58:ba:3c:94: 97:7b:5a:5f:42:0b:04:17:d2:00:ef:76:6f:58:3e:3a:fd:16: 51:2f:b1:b2 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgISAZt6yIsjYc0+SQjLkZJqE2RkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjM5YWUxMTE4ODA4ODU0N2ViM2U1MjM0ODNjY2E5ODU1NmMxMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nojtDqJ+JRQ7B1nblbWxCuM2dcN WXwAIV9C1UregeQF5TrL5s4aqz1aGKMBUOBBBMRuXO9WIBUpv4/8XucW42hLYsRZ XCMlkbPsfzYcOVSBoEpL2K1NcGDRbZ/23F06GhYZHDvq8iN9fnLNu463N5VJ7Gxj 522W7PbpriFgnvlupa2cZJYAgS3Qmzw34uTZacOlqQiue2Y0d4l0lBC/LKrpc6pP hwJqiiQSLCov7RhuDprSo05E8KorzKXqjyiZt1ed9RLfq9Jr4Z5TR4XMvLHhyboI QbPDumeWHBLQ1jEZylFFLzRwhSFiiuA9TqQmyIP6i/rDhk4fCe6i0f0EqwIDAQAB o4IC5jCCAuIwHQYDVR0OBBYEFAI5rhEYgIhUfrPlI0g8yphVbBFbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzAzNjQz NC1lOTVlLTQ0MjYtOGQxYy02NzI4MGM4YmJhYjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvMDM2NDM0 LWU5NWUtNDQyNi04ZDFjLTY3MjgwYzhiYmFiOC8xL0FqbXVFUmlBaUZSLXMtVWpT RHpLbUZWc0VWcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzAwBAIAATAqAwQDJRrwAwQCTVPQAwQDX4IIAwQCk04kAwQCmFlw AwQCuQwgAwQCuSDYMBsEAgACMBUDBQMqAgqAAwUDKgLrwAMFAyoQc0AwHwYIKwYB BQUHAQgBAf8EEDAOoAwwCgIDAMueAgMDAFEwDQYJKoZIhvcNAQELBQADggEBAAy/ UguAx85mOQBc9avCC+X78F0V2tKfw5LJjVlH7Iv/lCYlBPCEURv8Q0qyR4J27WQt iVgnellR8oWkRDFZjE9o38wL3yUOHtHDz16Wnkd3uakTgbuxG+LanJbrwCUyd2D3 YlC0hiyUJL9r5fSzeLYb11IxFreJMWNrp3bG1OnGcMVY3WMiwoKXWu/4uq+XGgT3 DyVLh3XwGcEIp+lVORlUTNKIW6z051/4z1WWJr5dXiKjRLiTgzoKAd22M1KK6qpL mqymbngIgXPBA2cDnpQZZYzavsZaZdMwg00Cg8PP1RALrOTfWLo8lJd7Wl9CCwQX 0gDvdm9YPjr9FlEvsbI= -----END CERTIFICATE-----Generated at Sun Jan 25 10:42:09 2026 by rpki-client