This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer File: Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer (raw, json) Hash identifier: a3lxbxqxyx3ZvEQVzATZQSHvExsbazTUdzNpHLObqtI= Subject key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E7E73DFF679336EBF38F2D0854C3679 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 11:36:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49305 AS: 49870 AS: 208911 IP: 45.80.36.0/23 IP: 45.95.144.0/22 IP: 62.204.50.0/24 IP: 94.247.136.0/24 IP: 178.255.217.0/24 IP: 185.142.130.0/24 IP: 185.228.251.0/24 IP: 2a0e:3980::/29 IP: 2a0e:3ec0::/29 IP: 2a11:8280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:7e:73:df:f6:79:33:6e:bf:38:f2:d0:85:4c:36:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 11:36:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:89:b2:26:cb:89:73:7c:c5:74:28:15:67:a8: 1b:a6:4b:03:11:f5:0f:3b:27:cb:d3:77:f9:b0:08: 1d:2f:0a:9a:56:86:65:34:aa:d4:6a:36:2f:c2:5f: 8d:80:a4:d8:30:cc:38:71:0d:4d:ce:cb:74:c3:fb: a9:da:42:03:b5:2f:c6:3b:10:fd:88:cd:89:bd:4f: 36:e3:1a:38:fb:73:47:7a:38:6a:1d:9d:b2:5b:8d: ac:82:d8:30:40:dd:66:c4:a4:30:b0:3e:e4:86:33: 02:3e:8d:1a:b1:47:64:71:77:20:c6:6f:59:23:52: 0d:30:58:c8:ba:bb:99:6e:0f:d0:eb:7e:ba:6c:3b: 7f:6a:3d:c3:c1:24:1a:89:66:a7:2e:40:61:b9:26: 2d:48:02:08:38:cc:d3:b0:35:c2:b0:a8:3c:f8:55: 1f:4d:6c:e4:52:c1:8a:d8:cf:8c:f5:c2:0d:b5:af: df:b7:6a:1e:03:49:a6:3b:ce:a8:78:fc:fa:06:66: f6:f5:b1:53:a2:93:fc:cb:8e:f5:66:bc:5b:30:ed: ab:a0:33:95:73:57:f0:ed:42:07:28:36:ad:ef:c8: 3d:6c:b6:12:ee:be:a8:36:94:7c:f3:ce:a7:c2:dd: 6b:89:48:a1:8e:5f:0b:37:7b:22:31:00:f0:11:75: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.36.0/23 45.95.144.0/22 62.204.50.0/24 94.247.136.0/24 178.255.217.0/24 185.142.130.0/24 185.228.251.0/24 IPv6: 2a0e:3980::/29 2a0e:3ec0::/29 2a11:8280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49305 49870 208911 Signature Algorithm: sha256WithRSAEncryption 19:fa:4d:f0:20:c8:e6:c0:49:b4:c7:ad:40:ec:f2:11:d9:fb: 62:d3:29:af:20:5d:9f:55:88:03:4f:6c:f3:f1:8d:a7:63:45: dd:28:6a:9e:21:da:02:7e:66:13:b5:a6:4a:9a:e9:07:d1:55: 1a:20:2a:ca:1c:aa:bf:7b:7d:d7:4e:f9:90:2b:cc:53:1e:47: 55:94:d4:43:83:7c:4d:c5:14:58:2e:91:ba:04:07:1e:44:b2: d3:7d:50:44:55:e1:f8:80:41:4b:31:cb:73:d2:a7:eb:48:30: cc:83:aa:78:8d:07:e2:ba:27:90:75:90:24:ae:45:27:40:da: 37:1d:c9:ea:a5:78:71:94:20:e3:a9:a2:d2:dd:63:20:8f:a1: 93:19:80:11:22:5e:0a:86:bd:2c:b2:8a:94:cf:84:09:7d:5e: c1:f2:c8:3b:6c:1f:0e:3b:c7:0b:e9:32:50:e5:70:40:a3:fe: e2:d0:4a:db:2e:eb:67:8e:c3:d6:5b:cc:1c:4e:50:4d:ee:93: 84:8e:5e:2b:35:b3:10:b5:36:8f:37:25:54:6f:23:15:26:65: ca:3c:d8:2a:7d:2d:b9:58:16:5d:75:83:a1:98:65:00:a1:05: 16:a1:76:82:62:0a:e2:c2:fd:ab:3f:19:2f:cb:12:f2:cc:52: 32:af:78:e1 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZt+fnPf9nkzbr848tCFTDZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTEzNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjVmMmE5M2RiMTBmMmRkNWY2YTU1YmIyYTQ0MGY2NzQ4NmNkMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtomyJsuJc3zFdCgVZ6gbpksDEfUP OyfL03f5sAgdLwqaVoZlNKrUajYvwl+NgKTYMMw4cQ1Nzst0w/up2kIDtS/GOxD9 iM2JvU824xo4+3NHejhqHZ2yW42sgtgwQN1mxKQwsD7khjMCPo0asUdkcXcgxm9Z I1INMFjIuruZbg/Q6366bDt/aj3DwSQaiWanLkBhuSYtSAIIOMzTsDXCsKg8+FUf TWzkUsGK2M+M9cINta/ft2oeA0mmO86oePz6Bmb29bFTopP8y471ZrxbMO2roDOV c1fw7UIHKDat78g9bLYS7r6oNpR8886nwt1riUihjl8LN3siMQDwEXVKDwIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFAJfKpPbEPLdX2pVuypED2dIbNGjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzIwNWQy NC0wMDlmLTQ4NmEtOTc2Zi0yZWNkYTExZGUxNTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMjA1ZDI0 LTAwOWYtNDg2YS05NzZmLTJlY2RhMTFkZTE1My8xL0FsOHFrOXNROHQxZmFsVzdL a1FQWjBoczBhTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF BwEHAQH/BFEwTzAwBAIAATAqAwQBLVAkAwQCLV+QAwQAPswyAwQAXveIAwQAsv/Z AwQAuY6CAwQAueT7MBsEAgACMBUDBQMqDjmAAwUDKg4+wAMFAyoRgoAwJAYIKwYB BQUHAQgBAf8EFTAToBEwDwIDAMCZAgMAws4CAwMwDzANBgkqhkiG9w0BAQsFAAOC AQEAGfpN8CDI5sBJtMetQOzyEdn7YtMpryBdn1WIA09s8/GNp2NF3ShqniHaAn5m E7WmSprpB9FVGiAqyhyqv3t91075kCvMUx5HVZTUQ4N8TcUUWC6RugQHHkSy031Q RFXh+IBBSzHLc9Kn60gwzIOqeI0H4ronkHWQJK5FJ0DaNx3J6qV4cZQg46mi0t1j II+hkxmAESJeCoa9LLKKlM+ECX1ewfLIO2wfDjvHC+kyUOVwQKP+4tBK2y7rZ47D 1lvMHE5QTe6ThI5eKzWzELU2jzclVG8jFSZlyjzYKn0tuVgWXXWDoZhlAKEFFqF2 gmIK4sL9qz8ZL8sS8sxSMq944Q== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:30 2026 by rpki-client