This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer File: AkHvRDYUJQbyZZODwW69oeKbT4Y.cer (raw, json) Hash identifier: zcWfIqp7vsmeJiDh0+JMlzEqx9kUXkZgN054bzyA14Q= Subject key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C80D8DE7C7864B9C3B2E3F720AE075B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31398 IP: 193.164.14.0/24 IP: 195.47.207.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d8:de:7c:78:64:b9:c3:b2:e3:f7:20:ae:07:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0241ef4436142506f2659383c16ebda1e29b4f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:a0:85:d5:bb:38:6d:b6:71:06:f8:41:82: 3b:8d:57:45:a2:d9:6c:25:03:36:d9:ac:a3:42:0d: 6c:fd:b2:71:7a:d6:04:4c:76:1f:66:b2:45:37:0c: 9d:c8:bf:21:5f:7c:8b:c8:57:ed:ca:15:d8:6b:e1: 86:39:a6:5f:03:13:00:03:3e:a9:27:e0:d4:70:4d: fa:97:a3:0e:5f:ca:a6:38:fc:35:af:dd:f7:e3:45: f8:f7:ee:31:70:62:de:9d:0c:ad:e7:3a:44:cb:8c: b7:02:9a:4a:4e:f0:19:a2:73:76:19:f6:0d:e4:b5: af:97:d6:2b:08:a2:3d:a1:42:b4:66:47:9b:28:7e: 09:40:5d:30:88:eb:40:f9:34:21:98:30:a1:48:07: 4b:4d:6c:11:3e:d7:3a:38:a0:84:33:ad:9a:77:f6: e2:e9:61:5f:d2:66:a6:20:2b:2a:18:4f:40:8a:ca: 18:f9:e6:3d:7a:9e:aa:13:b6:16:14:a9:af:df:0e: 50:59:c8:8c:db:3b:e3:e0:1a:c2:e2:50:f3:d4:4b: 45:d1:e6:f1:31:73:4b:72:06:80:04:2f:6f:fe:cf: 59:c3:eb:44:42:68:3e:4c:92:20:38:69:87:9c:f0: 5d:f0:87:61:78:d1:ca:05:8b:64:b0:ec:0f:fe:89: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.14.0/24 195.47.207.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31398 Signature Algorithm: sha256WithRSAEncryption 29:c9:3c:83:05:05:1f:7a:38:46:10:fe:ad:a8:20:d5:aa:4c: c3:f4:b7:4c:f7:d2:40:83:28:53:3c:64:c4:50:17:69:dd:c4: 49:ce:8e:27:27:06:57:bb:3a:2a:b1:04:27:39:6b:a4:42:89: 5a:f3:57:4f:c5:06:46:2b:80:77:70:91:e4:39:7e:20:47:f9: 4e:f0:98:d6:3f:5a:1a:d7:f9:be:ff:ec:05:23:2e:90:2c:ea: 84:21:39:05:17:48:88:32:06:fd:d7:bc:be:04:ee:27:4c:3f: ee:a7:15:8e:a8:67:eb:54:6c:09:10:8a:f1:5a:aa:ef:48:de: 60:e2:c8:a0:5a:0d:ab:b3:29:81:b1:f1:30:00:63:bf:2c:3a: 85:31:2b:9c:62:aa:06:f4:55:9d:9a:1e:55:b9:33:24:77:d0: b3:f9:eb:23:fa:15:25:02:44:a3:e3:d3:31:1a:b1:0b:ca:be: e1:27:f0:2d:b6:ba:b6:32:72:aa:47:cc:86:5b:dd:81:ab:95: 24:62:68:9c:0b:f2:be:6b:85:2a:87:6d:d2:9f:43:86:e7:84: 5a:b8:91:7e:0b:19:ba:1b:87:e3:e6:68:d1:ae:76:d7:37:39: 6d:75:e5:4f:0c:42:d2:be:e7:b3:7d:1a:00:b2:34:bb:be:1c: f7:6b:ac:ee -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgISAZt8gNjefHhkucOy4/cgrgdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjQxZWY0NDM2MTQyNTA2ZjI2NTkzODNjMTZlYmRhMWUyOWI0Zjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqghdW7OG22cQb4QYI7jVdFotls JQM22ayjQg1s/bJxetYETHYfZrJFNwydyL8hX3yLyFftyhXYa+GGOaZfAxMAAz6p J+DUcE36l6MOX8qmOPw1r93340X49+4xcGLenQyt5zpEy4y3AppKTvAZonN2GfYN 5LWvl9YrCKI9oUK0ZkebKH4JQF0wiOtA+TQhmDChSAdLTWwRPtc6OKCEM62ad/bi 6WFf0mamICsqGE9AisoY+eY9ep6qE7YWFKmv3w5QWciM2zvj4BrC4lDz1EtF0ebx MXNLcgaABC9v/s9Zw+tEQmg+TJIgOGmHnPBd8IdheNHKBYtksOwP/omtrwIDAQAB o4ICpTCCAqEwHQYDVR0OBBYEFAJB70Q2FCUG8mWTg8FuvaHim0+GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzllZTIw Mi1iOWIzLTQ3ZjAtOGM5YS05ZmRmNGMxNWY5YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvOWVlMjAy LWI5YjMtNDdmMC04YzlhLTlmZGY0YzE1ZjlhNi8xL0FrSHZSRFlVSlFieVpaT0R3 VzY5b2VLYlQ0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwaQOAwQAwy/PMBkGCCsGAQUFBwEIAQH/BAow CKAGMAQCAnqmMA0GCSqGSIb3DQEBCwUAA4IBAQApyTyDBQUfejhGEP6tqCDVqkzD 9LdM99JAgyhTPGTEUBdp3cRJzo4nJwZXuzoqsQQnOWukQola81dPxQZGK4B3cJHk OX4gR/lO8JjWP1oa1/m+/+wFIy6QLOqEITkFF0iIMgb917y+BO4nTD/upxWOqGfr VGwJEIrxWqrvSN5g4sigWg2rsymBsfEwAGO/LDqFMSucYqoG9FWdmh5VuTMkd9Cz +esj+hUlAkSj49MxGrELyr7hJ/Attrq2MnKqR8yGW92Bq5UkYmicC/K+a4Uqh23S n0OG54RauJF+Cxm6G4fj5mjRrnbXNzltdeVPDELSvuezfRoAsjS7vhz3a6zu -----END CERTIFICATE-----Generated at Mon Jan 26 05:53:42 2026 by rpki-client