This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer File: Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer (raw, json) Hash identifier: V16FZIIpca2OKfFmYyLFMvw7fFqPUJz1YHYgr0+7GMk= Subject key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797DDCAC86532B6B33016A5EBDA4DE39 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.113.117.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:dc:ac:86:53:2b:6b:33:01:6a:5e:bd:a4:de:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=028fdf719d47a10033451a83384a6db68dbd5b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:32:38:ad:c2:eb:b5:b4:22:36:61:74:4d: c5:61:27:a9:a9:94:43:49:4f:5b:d3:a5:c5:a5:71: c1:1a:1b:86:cd:f4:3b:88:91:ad:e4:fd:87:00:3d: 6d:f0:52:d3:2f:b3:b2:98:d9:4c:fb:27:ed:98:ef: a0:e8:df:8b:bc:ba:0d:a4:ae:dc:fe:f9:6e:58:92: a4:b3:e5:30:83:e5:63:55:4a:42:71:e7:cf:ed:8a: 00:4b:bb:3a:9d:d1:ed:27:16:18:2f:2f:c4:67:c1: df:53:8e:11:95:29:d6:ab:ee:09:c4:4b:27:c8:3f: dd:29:1a:76:e8:09:e4:ab:a1:c3:2c:f9:16:25:00: e9:e4:27:f8:0b:a7:30:d8:46:47:9a:64:81:e5:da: 93:ba:d0:9f:0d:f8:25:52:9d:b5:42:05:74:c0:ea: 32:c8:01:8d:bb:25:5b:1c:f8:85:11:f6:2f:8a:b2: c6:a4:50:28:bb:4b:d9:d7:fa:a3:12:7c:8f:8d:e8: 49:89:0f:2c:59:65:c4:ea:88:8d:05:1a:94:30:d5: 82:3c:f1:3a:d8:90:19:a4:1b:5f:1f:19:e4:43:40: 9f:8b:e8:df:3b:73:d8:cb:73:87:53:80:3f:1d:c3: 65:0a:57:02:76:b8:7c:b0:5a:c7:9f:3c:8c:55:c3: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.117.0/24 Signature Algorithm: sha256WithRSAEncryption 07:92:95:bb:ff:39:36:af:95:c5:8f:e0:6f:e1:89:0b:30:29: 40:b4:24:1e:fa:c3:49:dc:17:34:d5:b5:be:df:67:18:c6:d1: 67:92:07:e1:20:7b:1f:29:71:1e:59:7f:fa:4b:70:20:88:b0: c1:d6:66:19:6c:ea:ca:3c:f3:45:40:12:33:be:46:cb:ec:84: 0c:ac:41:80:72:76:a5:0a:37:11:47:a5:82:5a:dd:73:04:07: 32:b6:68:70:dd:99:57:4a:41:0f:33:ff:5c:1f:85:d2:e7:ec: f5:19:5c:95:0f:bf:6b:7c:26:ad:b4:02:85:d3:b3:0a:82:cb: 1b:c5:68:f9:6e:68:ef:fb:4c:21:8d:15:db:08:00:13:e2:39: cf:1b:7e:68:d3:05:98:dc:89:a0:ab:6c:56:a3:dc:b1:a9:a1: 0b:b6:b8:58:b3:23:12:06:ad:fd:62:4a:46:69:96:bc:06:c5: d4:64:39:e5:62:a8:20:4b:f0:50:3d:1c:a3:e8:dd:da:5d:c2: e3:4d:74:4d:cf:45:fe:89:f5:81:d8:7b:fe:3f:d7:2e:5e:74: df:75:d8:db:29:1a:ab:03:6d:81:1e:8c:c8:0e:c5:a4:95:0b: c6:98:3f:ee:05:70:bc:eb:0d:35:0e:f7:a4:6d:fc:a2:d6:77: bd:1c:86:71 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5fdyshlMrazMBal69pN45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjhmZGY3MTlkNDdhMTAwMzM0NTFhODMzODRhNmRiNjhkYmQ1YjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaIyOK3C67W0IjZhdE3FYSepqZRD SU9b06XFpXHBGhuGzfQ7iJGt5P2HAD1t8FLTL7OymNlM+yftmO+g6N+LvLoNpK7c /vluWJKks+Uwg+VjVUpCcefP7YoAS7s6ndHtJxYYLy/EZ8HfU44RlSnWq+4JxEsn yD/dKRp26Ankq6HDLPkWJQDp5Cf4C6cw2EZHmmSB5dqTutCfDfglUp21QgV0wOoy yAGNuyVbHPiFEfYvirLGpFAou0vZ1/qjEnyPjehJiQ8sWWXE6oiNBRqUMNWCPPE6 2JAZpBtfHxnkQ0Cfi+jfO3PYy3OHU4A/HcNlClcCdrh8sFrHnzyMVcN2iwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAKP33GdR6EAM0UagzhKbbaNvVsPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiL2Q0OWQ1 Mi01MGIxLTQ5NDgtYjFmNy0wNTVhOWNhZDhkZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvZDQ5ZDUy LTUwYjEtNDk0OC1iMWY3LTA1NWE5Y2FkOGRmNy8xL0FvX2ZjWjFIb1FBelJScURP RXB0dG8yOVd3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwnF1MA0GCSqGSIb3DQEBCwUAA4IBAQAHkpW7 /zk2r5XFj+Bv4YkLMClAtCQe+sNJ3Bc01bW+32cYxtFnkgfhIHsfKXEeWX/6S3Ag iLDB1mYZbOrKPPNFQBIzvkbL7IQMrEGAcnalCjcRR6WCWt1zBAcytmhw3ZlXSkEP M/9cH4XS5+z1GVyVD79rfCattAKF07MKgssbxWj5bmjv+0whjRXbCAAT4jnPG35o 0wWY3Imgq2xWo9yxqaELtrhYsyMSBq39YkpGaZa8BsXUZDnlYqggS/BQPRyj6N3a XcLjTXRNz0X+ifWB2Hv+P9cuXnTfddjbKRqrA22BHozIDsWklQvGmD/uBXC86w01 Dvekbfyi1ne9HIZx -----END CERTIFICATE-----Generated at Mon Jan 26 20:27:47 2026 by rpki-client