This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer File: AslIBM_MfvJY1G_DJMFnZEdgPvY.cer (raw, json) Hash identifier: hg/ksacGldk+UiKOUnDztf0eK7xaHKj6vB1aag15vYg= Subject key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB5C8B55CB1558A1ED61C013B009EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 89.254.0.0/21 IP: 89.254.16.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5c:8b:55:cb:15:58:a1:ed:61:c0:13:b0:09:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02c94804cfcc7ef258d46fc324c1676447603ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:17:31:46:31:73:57:36:7a:1e:25:e9:a4: 91:ec:e0:90:64:0c:6f:a3:ff:8a:f3:95:f7:ff:ae: 7e:b7:5f:6c:6a:12:ac:1c:72:79:72:9c:26:ed:79: 24:a4:6d:6c:f1:19:d6:bc:b5:11:b5:bd:a1:4f:03: a3:ed:35:95:27:28:e4:0a:f4:a8:78:e1:32:00:cf: 60:35:1c:e8:de:dc:2f:15:4f:56:50:55:d0:12:77: 2c:9f:91:0f:9e:2d:f8:86:7c:7b:7f:24:05:da:2c: 74:62:36:3c:7a:6e:ae:29:a0:35:47:af:51:01:a9: 9c:f6:96:79:7e:00:12:01:84:1b:a7:35:af:38:8a: 23:1e:8f:24:1e:24:50:b1:38:c9:43:87:97:96:6c: 19:52:48:b1:3b:f5:f6:e7:49:41:de:36:05:37:4a: 4b:5e:2e:58:da:b9:b8:2c:10:65:2c:b5:05:45:9f: 52:b9:55:33:bb:fc:f1:f4:d4:87:4a:cd:b6:06:0a: 83:bd:65:f3:0b:b4:0b:e7:25:c6:db:f5:41:1b:e6: 9a:c9:d2:cc:bc:d6:ab:4a:33:f9:23:da:a8:24:6e: 41:b9:a4:77:b8:17:4c:5b:11:db:8a:5a:2b:3d:55: 06:fb:11:8a:df:ab:d3:c4:c4:0e:0e:87:a8:08:5a: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.254.0.0/21 89.254.16.0/20 Signature Algorithm: sha256WithRSAEncryption 83:e5:66:79:3b:2a:ad:08:8a:b4:59:11:eb:51:8b:cf:24:a6: a5:53:13:87:5f:80:b6:12:4a:4a:a3:6d:f7:18:5a:44:9e:3f: 32:a4:c6:31:49:4a:f5:65:e9:e3:26:a6:cc:9f:10:14:b7:84: b9:6a:72:b6:df:79:54:17:63:80:43:8e:39:5d:2e:b6:33:bd: 51:0d:84:25:ed:e3:92:59:ac:60:94:04:84:a5:7e:46:05:ad: b7:d9:92:82:f7:71:9d:33:33:22:18:04:a5:11:97:d9:97:de: 7a:93:64:ef:8a:f9:26:68:fe:f2:65:28:76:b7:09:3d:2c:0a: f7:3a:c0:8b:c7:c6:6c:32:c7:4b:4b:74:55:d5:44:35:90:7e: 37:7d:b7:ba:5a:17:9b:7e:1c:52:0b:a2:e5:eb:79:12:d6:d9: 22:82:27:19:79:d8:5e:67:aa:04:d8:2c:e2:b8:07:40:d4:e3: 90:a4:03:a7:84:88:93:29:fa:c3:52:31:f0:f5:d1:ca:6e:af: 37:8a:6f:df:ea:e2:3e:ed:62:b2:66:f7:5c:bc:0e:21:ec:4e: 8f:32:c3:86:bd:1d:d3:f4:02:85:01:77:c5:ae:aa:b7:eb:a2: 9c:d2:7f:10:69:85:2a:22:59:eb:93:ac:bd:d7:1b:2c:11:41: 08:eb:1a:fc -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt261yLVcsVWKHtYcATsAnuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmM5NDgwNGNmY2M3ZWYyNThkNDZmYzMyNGMxNjc2NDQ3NjAzZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3gXMUYxc1c2eh4l6aSR7OCQZAxv o/+K85X3/65+t19sahKsHHJ5cpwm7XkkpG1s8RnWvLURtb2hTwOj7TWVJyjkCvSo eOEyAM9gNRzo3twvFU9WUFXQEncsn5EPni34hnx7fyQF2ix0YjY8em6uKaA1R69R Aamc9pZ5fgASAYQbpzWvOIojHo8kHiRQsTjJQ4eXlmwZUkixO/X250lB3jYFN0pL Xi5Y2rm4LBBlLLUFRZ9SuVUzu/zx9NSHSs22BgqDvWXzC7QL5yXG2/VBG+aaydLM vNarSjP5I9qoJG5BuaR3uBdMWxHbilorPVUG+xGK36vTxMQODoeoCFqtqwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFALJSATPzH7yWNRvwyTBZ2RHYD72MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzg1ZmYw YS0yMmFiLTQxOTAtOWI3My0yNTliZTlmYmMxZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvODVmZjBh LTIyYWItNDE5MC05YjczLTI1OWJlOWZiYzFmMS8xL0FzbElCTV9NZnZKWTFHX0RK TUZuWkVkZ1B2WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQDWf4AAwQEWf4QMA0GCSqGSIb3DQEBCwUAA4IB AQCD5WZ5OyqtCIq0WRHrUYvPJKalUxOHX4C2EkpKo233GFpEnj8ypMYxSUr1Zenj JqbMnxAUt4S5anK233lUF2OAQ445XS62M71RDYQl7eOSWaxglASEpX5GBa232ZKC 93GdMzMiGASlEZfZl956k2TvivkmaP7yZSh2twk9LAr3OsCLx8ZsMsdLS3RV1UQ1 kH43fbe6WhebfhxSC6Ll63kS1tkigicZedheZ6oE2CziuAdA1OOQpAOnhIiTKfrD UjHw9dHKbq83im/f6uI+7WKyZvdcvA4h7E6PMsOGvR3T9AKFAXfFrqq366Kc0n8Q aYUqIlnrk6y91xssEUEI6xr8 -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:34 2026 by rpki-client