This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer File: AyHqOVCODhemUf6SrCnqOIMtC_8.cer (raw, json) Hash identifier: /xFs95D3QSLaSmrFtzHw7YQ19um24KN5kDT0EbGk2qE= Subject key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791129F6CE9E74DFE58A636D0BDD6C5B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 78.31.32.0/21 IP: 85.202.64.0/20 IP: 91.198.144.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:29:f6:ce:9e:74:df:e5:8a:63:6d:0b:dd:6c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:25:35:66:d7:03:47:49:ec:91:52:17:03:45: e0:ec:41:53:6b:58:c2:21:ab:d9:84:8b:ee:2e:78: 84:ba:6f:ad:b4:5b:5e:98:9b:b5:9c:a2:0a:44:7f: a1:2c:7b:9b:9f:f7:86:6d:06:8c:bb:49:05:fb:87: 0e:f5:6a:94:7b:43:37:6e:89:8d:7b:73:5b:92:f8: af:e6:12:43:7f:46:84:62:13:98:8f:aa:be:6c:a6: 19:07:d3:b1:d4:90:e3:3a:cd:b4:ec:88:2f:53:a7: d8:be:c5:f3:9b:cc:3a:14:d9:4e:1a:b1:2c:5c:18: 8d:bf:f0:ab:e3:0f:f1:5f:d7:b7:46:f6:11:47:99: c3:7a:a2:43:a4:78:fe:7c:f1:65:87:1d:ce:13:0e: 2e:02:9f:24:dd:94:11:67:9a:9d:78:41:74:1b:2b: 00:b7:4e:06:79:23:b8:84:a1:9c:1b:16:dc:6c:c8: 94:17:e7:64:ab:61:b5:74:82:bc:8a:9a:3d:f0:42: ac:fc:aa:8b:51:cd:99:a9:ae:7b:dd:20:1e:34:92: 25:2e:4c:d5:2f:31:35:07:04:3f:0a:12:f6:22:78: f4:0e:47:e6:4f:a5:28:68:c6:0b:18:0d:4a:97:4b: 56:bb:d1:0e:af:ca:e0:90:74:7d:2f:57:3f:b9:2f: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.32.0/21 85.202.64.0/20 91.198.144.0/24 Signature Algorithm: sha256WithRSAEncryption 13:15:70:7b:b1:9a:14:a6:4e:ac:06:23:31:a3:94:61:ef:67: 21:69:ca:01:b0:e9:45:73:a6:ff:45:bf:ae:22:2c:44:34:8a: c4:a5:99:64:e6:7f:7b:02:b9:d6:02:63:bf:68:10:92:3b:07: 37:ce:08:c0:a2:81:16:1a:8d:1a:ca:d6:6c:40:14:4c:6f:fe: fc:48:37:ab:93:e4:ab:26:87:13:76:f2:3c:09:84:c5:81:7d: 6e:3c:77:79:53:fb:31:80:78:a5:00:12:be:04:16:ba:e0:11: c6:72:28:5f:5c:75:d6:9d:62:17:86:e5:75:5a:c0:0a:83:df: c1:56:a4:45:73:5a:06:58:87:f6:3b:8c:ea:b5:da:b5:46:2a: 3b:80:be:27:ad:ef:de:91:fa:8f:a9:6d:50:56:07:bc:d3:34: c7:aa:2e:d5:1a:5d:85:d6:00:c7:c6:10:21:80:e7:18:91:82: 5c:8f:28:6a:24:91:13:19:d4:b1:a6:b8:ec:55:50:16:62:29: 9a:c9:6e:e7:fb:56:1e:d7:04:92:b7:5a:8f:ff:cd:06:71:61: c0:51:4e:5f:38:5f:b4:c1:1e:88:a2:2b:7d:c9:8b:6d:14:2d: 15:e9:c8:55:da:e2:ef:d8:9b:06:89:56:bf:48:88:1c:ee:fd: cc:48:45:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt5ESn2zp503+WKY20L3WxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzIxZWEzOTUwOGUwZTE3YTY1MWZlOTJhYzI5ZWEzODgzMmQwYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviU1ZtcDR0nskVIXA0Xg7EFTa1jC IavZhIvuLniEum+ttFtemJu1nKIKRH+hLHubn/eGbQaMu0kF+4cO9WqUe0M3bomN e3Nbkviv5hJDf0aEYhOYj6q+bKYZB9Ox1JDjOs207IgvU6fYvsXzm8w6FNlOGrEs XBiNv/Cr4w/xX9e3RvYRR5nDeqJDpHj+fPFlhx3OEw4uAp8k3ZQRZ5qdeEF0GysA t04GeSO4hKGcGxbcbMiUF+dkq2G1dIK8ipo98EKs/KqLUc2Zqa573SAeNJIlLkzV LzE1BwQ/ChL2Inj0DkfmT6UoaMYLGA1Kl0tWu9EOr8rgkHR9L1c/uS9++QIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFAMh6jlQjg4XplH+kqwp6jiDLQv/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjL2M0ODE3 ZS04MjgxLTQyZjctOWY0ZC04Y2Y4MDU1MTEwMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvYzQ4MTdl LTgyODEtNDJmNy05ZjRkLThjZjgwNTUxMTAwMi8xL0F5SHFPVkNPRGhlbVVmNlNy Q25xT0lNdENfOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQDTh8gAwQEVcpAAwQAW8aQMA0GCSqGSIb3DQEB CwUAA4IBAQATFXB7sZoUpk6sBiMxo5Rh72chacoBsOlFc6b/Rb+uIixENIrEpZlk 5n97ArnWAmO/aBCSOwc3zgjAooEWGo0aytZsQBRMb/78SDerk+SrJocTdvI8CYTF gX1uPHd5U/sxgHilABK+BBa64BHGcihfXHXWnWIXhuV1WsAKg9/BVqRFc1oGWIf2 O4zqtdq1Rio7gL4nre/ekfqPqW1QVge80zTHqi7VGl2F1gDHxhAhgOcYkYJcjyhq JJETGdSxprjsVVAWYimayW7n+1Ye1wSSt1qP/80GcWHAUU5fOF+0wR6Ioit9yYtt FC0V6chV2uLv2JsGiVa/SIgc7v3MSEUw -----END CERTIFICATE-----Generated at Mon Jan 26 02:06:05 2026 by rpki-client