This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer File: Aq2woU5Vr3chH_18j80XsqMGSaA.cer (raw, json) Hash identifier: NrBrWBvA/KWUCM6v01qFHU/N+AAtHKhJh7Zd+eoFctk= Subject key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9C7207EC49A8E09BF33F7703CFACD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15932 IP: 185.142.240.0/22 IP: 213.230.160.0/19 IP: 2a02:2b48::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:c7:20:7e:c4:9a:8e:09:bf:33:f7:70:3c:fa:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:d1:30:5d:09:ef:04:9d:80:05:b7:48:ac: 4f:0c:f7:e7:3b:92:0b:49:75:e0:68:14:7b:49:f0: 7c:8d:62:20:ed:46:a6:19:bf:55:f4:a0:7a:6d:89: b6:11:e1:03:6f:9c:27:55:b3:84:56:bf:3b:71:84: 0e:77:e6:55:23:6a:1c:5e:bd:72:6d:70:8a:f5:86: 63:13:b6:f0:d7:15:5e:5b:9d:4c:8d:20:d7:90:0b: d9:c0:5f:1b:17:7b:eb:61:49:9e:bc:47:f6:78:31: 92:d5:06:81:9e:1c:d5:e5:7b:6b:46:fe:0e:72:f0: 22:47:c3:2b:e8:78:a5:e2:53:cc:f5:ff:a1:bf:ec: 25:41:25:9c:e1:88:d3:2e:40:b4:c5:e9:94:3f:60: 7d:d8:6a:47:8f:d4:eb:81:52:94:1c:44:b2:08:0b: 35:c1:65:a8:4e:df:53:ce:41:eb:76:29:d0:48:8e: f8:c7:6d:8c:c2:8c:e2:5c:97:fe:73:5d:83:a2:3e: 47:ff:80:b1:7c:a7:59:28:10:c0:ea:ab:dc:5c:19: d4:bc:9c:42:b9:f1:44:67:46:8f:2b:69:b6:c0:25: 4d:04:08:2a:c4:39:42:1e:bd:c9:b6:c6:6e:8e:b6: 7d:d1:23:9b:9e:a2:b4:53:9d:d5:31:76:a2:b7:0e: ce:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.240.0/22 213.230.160.0/19 IPv6: 2a02:2b48::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15932 Signature Algorithm: sha256WithRSAEncryption 52:c7:ae:14:d8:76:1b:6e:2c:f9:5b:4d:1e:05:f1:e9:f9:b0: 28:ac:ce:d9:2a:5d:87:6b:9a:12:65:02:2b:71:ff:11:33:74: a9:97:3e:c4:d9:26:ea:df:e2:0a:ad:e4:62:37:6a:cf:8e:96: 33:7e:68:c4:8e:e7:25:39:b0:3a:e5:b7:22:19:31:34:e3:81: c3:0a:fa:e0:64:07:f9:3e:9c:7e:82:fd:43:39:7d:81:b8:fa: a8:9a:79:a3:78:7c:fa:1d:d9:5c:da:16:63:5b:d1:36:02:e7: 40:33:75:3e:3a:ef:7f:dd:ac:0c:cc:eb:14:ed:39:63:5d:cf: 46:1e:20:d6:81:e0:c1:52:1c:6a:dd:67:88:d8:9d:6b:b3:bc: ae:e1:2e:ef:99:9f:f2:6e:4a:3d:23:25:fb:2f:cd:aa:e7:c1: 65:4d:f9:d4:e9:05:49:18:bb:75:58:bb:b4:4e:7b:9a:a5:f7: 3f:db:5d:00:06:c5:8e:5b:9f:6c:66:78:d2:27:61:91:c6:9a: aa:3f:b7:55:a8:6b:e7:b0:06:5c:26:bf:b0:6c:04:da:c7:82: 7a:39:fe:18:59:89:51:6b:80:38:3c:0b:91:e7:cb:2d:f3:72: 83:93:e5:db:7b:ee:c0:de:4f:cd:bd:64:82:6f:69:85:40:f0: a3:6a:11:79 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9yccgfsSajgm/M/dwPPrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmFkYjBhMTRlNTVhZjc3MjExZmZkN2M4ZmNkMTdiMmEzMDY0OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs33RMF0J7wSdgAW3SKxPDPfnO5IL SXXgaBR7SfB8jWIg7UamGb9V9KB6bYm2EeEDb5wnVbOEVr87cYQOd+ZVI2ocXr1y bXCK9YZjE7bw1xVeW51MjSDXkAvZwF8bF3vrYUmevEf2eDGS1QaBnhzV5XtrRv4O cvAiR8Mr6Hil4lPM9f+hv+wlQSWc4YjTLkC0xemUP2B92GpHj9TrgVKUHESyCAs1 wWWoTt9TzkHrdinQSI74x22MwoziXJf+c12Doj5H/4CxfKdZKBDA6qvcXBnUvJxC ufFEZ0aPK2m2wCVNBAgqxDlCHr3JtsZujrZ90SObnqK0U53VMXaitw7OnQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFAKtsKFOVa93IR/9fI/NF7KjBkmgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2MxMDM4 My1jZjZlLTQ2YzQtYjhlNi1jYTQxYzcyY2FmOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvYzEwMzgz LWNmNmUtNDZjNC1iOGU2LWNhNDFjNzJjYWY5Ni8xL0FxMndvVTVWcjNjaEhfMThq ODBYc3FNR1NhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuY7wAwQF1eagMA0EAgACMAcDBQMqAitIMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj48MA0GCSqGSIb3DQEBCwUAA4IBAQBSx64U 2HYbbiz5W00eBfHp+bAorM7ZKl2Ha5oSZQIrcf8RM3Splz7E2Sbq3+IKreRiN2rP jpYzfmjEjuclObA65bciGTE044HDCvrgZAf5Ppx+gv1DOX2BuPqomnmjeHz6Hdlc 2hZjW9E2AudAM3U+Ou9/3awMzOsU7TljXc9GHiDWgeDBUhxq3WeI2J1rs7yu4S7v mZ/ybko9IyX7L82q58FlTfnU6QVJGLt1WLu0Tnuapfc/210ABsWOW59sZnjSJ2GR xpqqP7dVqGvnsAZcJr+wbATax4J6Of4YWYlRa4A4PAuR58st83KDk+Xbe+7A3k/N vWSCb2mFQPCjahF5 -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:17 2026 by rpki-client