This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer (raw, json) Hash identifier: wmBI80v61m+rf/g9eVlgaZRHWVyu0ZX8tyj0PC7sH04= Subject key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED50B791ABAF6D880620F9FF94E079 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197631 IP: 93.187.48.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:50:b7:91:ab:af:6d:88:06:20:f9:ff:94:e0:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:34:e8:32:1c:bb:61:c0:a7:54:fe:22:16: f1:a4:7f:bb:d8:68:e6:21:29:b0:fc:20:e2:6a:35: ee:b9:52:17:b9:69:ec:ea:9e:e2:e8:1a:5a:46:d9: 0d:00:54:9c:a5:41:1c:d5:0c:09:8c:0f:cd:73:cb: 54:11:3b:b9:c0:e2:af:40:6e:0e:f8:4d:8a:e3:78: cd:e0:a4:42:ac:f6:fc:01:ea:45:0d:55:9e:97:0e: a9:0e:b4:af:2a:a1:5b:26:e5:34:6b:73:47:b4:a4: d6:07:a5:80:37:23:e9:cc:e7:30:92:8a:75:55:00: 16:ff:22:dd:3e:09:e8:08:23:c6:74:82:34:f8:21: 92:29:24:25:24:c2:97:0b:3a:b5:e4:03:8b:b0:5f: bb:9e:1c:4a:4d:f7:6f:11:11:02:51:40:fd:a3:fe: 3e:27:46:40:ad:a7:8b:c7:6d:a9:ae:97:65:d2:59: 5d:2f:de:cb:4b:fa:de:23:f1:0d:be:f0:7b:c7:8b: 43:f5:48:78:a8:d3:f8:c6:08:b6:62:38:ae:1d:08: e1:ca:52:9b:71:d6:36:9b:aa:08:f8:8c:fd:d4:90: 80:d7:6d:3d:5c:cf:e9:92:e6:31:c9:bd:35:83:f0: 21:ef:6c:af:02:52:0b:e0:cd:e1:22:6a:84:4f:6d: 78:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.187.48.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197631 Signature Algorithm: sha256WithRSAEncryption 23:b1:26:a8:66:14:4f:54:9d:32:ed:65:0f:f8:6e:b5:43:de: d8:78:9f:3f:d3:02:97:ca:72:ad:0e:36:d0:be:3a:5b:22:0c: 3d:bc:4b:7b:e5:b3:e4:c2:b8:0c:db:6a:e4:aa:84:dc:5a:dd: 79:3f:15:f2:0f:16:de:91:33:7c:25:7e:00:1c:f8:04:a8:8a: b6:f3:4d:63:86:fd:57:3f:07:9e:34:fc:d7:2a:84:32:a4:e8: e0:c6:94:42:cc:03:d9:e2:96:4e:2e:a6:17:f9:f5:d5:5c:ea: 36:cb:8d:f4:0a:79:84:3c:65:2e:46:f8:0a:93:4c:8a:8a:fa: 18:38:ab:e2:a4:51:c7:7d:95:32:01:f3:f2:da:ba:ea:da:fd: ab:82:65:cf:37:e8:be:ab:4d:68:40:b5:0b:25:92:d6:44:6b: dc:c7:39:e0:11:f8:96:34:d5:16:d6:7f:75:bd:03:8c:c7:f6: 21:a0:e3:0f:19:17:ab:79:20:f9:03:ee:51:6a:c9:8c:ad:2f: 23:7d:ef:6a:ce:45:9c:05:18:f0:59:4c:e6:16:31:33:1a:91: 09:ff:b1:d5:64:de:96:c8:80:a7:b9:98:4b:38:01:0a:32:a2: 40:76:9e:59:a4:8f:2d:01:bc:07:54:f9:13:c7:0a:0b:16:7d: c0:ee:92:af -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87VC3kauvbYgGIPn/lOB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmFmM2I2MzUzNTRiOTc1N2I5ZjJkNjhlYTVkNThjNTA3NDJhYWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWM06DIcu2HAp1T+IhbxpH+72Gjm ISmw/CDiajXuuVIXuWns6p7i6BpaRtkNAFScpUEc1QwJjA/Nc8tUETu5wOKvQG4O +E2K43jN4KRCrPb8AepFDVWelw6pDrSvKqFbJuU0a3NHtKTWB6WANyPpzOcwkop1 VQAW/yLdPgnoCCPGdII0+CGSKSQlJMKXCzq15AOLsF+7nhxKTfdvERECUUD9o/4+ J0ZAraeLx22prpdl0lldL97LS/reI/ENvvB7x4tD9Uh4qNP4xgi2YjiuHQjhylKb cdY2m6oI+Iz91JCA1209XM/pkuYxyb01g/Ah72yvAlIL4M3hImqET2145wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAKvO2NTVLl1e58taOpdWMUHQqqwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzQzZDRj YS04MmNiLTQxNGEtYjM5ZS04NmY4OGNlNDQ3OTMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNDNkNGNh LTgyY2ItNDE0YS1iMzllLTg2Zjg4Y2U0NDc5My8xL0FxODdZMU5VdVhWN255MW82 bDFZeFFkQ3FyQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDXbswMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMD/zANBgkqhkiG9w0BAQsFAAOCAQEAI7EmqGYUT1SdMu1lD/hutUPe2HifP9MC l8pyrQ420L46WyIMPbxLe+Wz5MK4DNtq5KqE3FrdeT8V8g8W3pEzfCV+ABz4BKiK tvNNY4b9Vz8HnjT81yqEMqTo4MaUQswD2eKWTi6mF/n11VzqNsuN9Ap5hDxlLkb4 CpNMior6GDir4qRRx32VMgHz8tq66tr9q4JlzzfovqtNaEC1CyWS1kRr3Mc54BH4 ljTVFtZ/db0DjMf2IaDjDxkXq3kg+QPuUWrJjK0vI33vas5FnAUY8FlM5hYxMxqR Cf+x1WTelsiAp7mYSzgBCjKiQHaeWaSPLQG8B1T5E8cKCxZ9wO6Srw== -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:33 2026 by rpki-client