This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AyudLeU3ELMVjkLyKIkQnixA9Ds.cer File: AyudLeU3ELMVjkLyKIkQnixA9Ds.cer (raw, json) Hash identifier: XsSvG7BIx73dViEbp/QiukQzp6sPvHvaLLqpW+r7+Lc= Subject key identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA56D8F0E3D6E1715CEAA735840294A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210022 IP: 185.158.20.0/22 IP: 2a0d:ad80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6d:8f:0e:3d:6e:17:15:ce:aa:73:58:40:29:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=032b9d2de53710b3158e42f22889109e2c40f43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f8:31:7f:8c:58:5e:a1:92:bd:8e:d3:be:d5: 66:02:14:fd:a8:91:83:0b:b5:14:a1:3e:83:ca:95: 67:f9:4f:6e:d7:1c:ea:5b:fd:29:ad:7e:49:7e:c6: 8d:a6:5e:b8:40:94:8d:a3:0f:97:e8:a0:90:cd:ab: 7a:37:4a:03:4e:3b:d1:5a:d4:06:2c:da:f2:bf:5c: ed:09:ef:f9:f0:9f:1e:77:66:51:5f:f2:8e:67:49: 9a:6d:3d:5a:80:72:db:82:13:30:eb:b4:98:6e:47: 6a:0c:8f:06:31:db:72:a5:22:15:3a:fc:24:ae:80: 27:9c:69:c7:53:72:3e:93:54:52:98:22:50:ec:17: a3:d8:ce:f5:a1:c0:e4:98:13:dc:69:19:4c:b6:52: dc:4e:66:90:68:34:71:aa:9d:cc:2b:17:14:0e:9c: a1:38:1a:e5:8c:d2:4d:6e:3d:c4:46:57:b7:c2:bb: a9:a0:17:a8:0a:30:3c:68:fc:e3:de:cc:f1:9c:a3: c5:b7:51:8a:0b:28:d9:38:4e:ed:e6:d3:4c:b8:d9: df:76:8e:73:9a:10:9c:7a:e5:35:09:2a:1b:74:97: 4f:94:09:10:8c:97:9d:3d:e1:f4:67:d2:02:24:a9: fc:27:00:63:17:a2:cf:31:30:5d:ae:bb:f7:ac:13: 09:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2B:9D:2D:E5:37:10:B3:15:8E:42:F2:28:89:10:9E:2C:40:F4:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/d6dc9d-eb33-4ca4-aa82-4d19a8de0aba/1/AyudLeU3ELMVjkLyKIkQnixA9Ds.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.20.0/22 IPv6: 2a0d:ad80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210022 Signature Algorithm: sha256WithRSAEncryption 46:96:73:60:bc:39:0f:72:01:d2:0c:31:81:50:09:61:ff:89: ab:4c:d5:1c:1e:c8:0d:67:66:b6:9c:0d:3b:fb:30:df:60:65: a6:d9:3e:46:7c:2f:d0:35:ad:83:82:b5:73:71:bb:a8:c1:e0: b5:ba:71:4d:17:28:46:82:6e:41:5a:fe:03:6a:c5:6f:24:fc: 96:f4:64:2a:03:38:71:d0:4b:ce:f4:22:32:98:ae:a5:8a:3a: 15:17:40:e7:f0:5c:8e:fb:82:c1:3f:0a:6f:73:61:76:68:fa: 14:e5:1f:06:ff:4d:93:60:95:ba:f1:00:14:f9:0b:93:a2:14: a7:ed:2f:cd:c6:98:c7:15:2d:5f:b4:e4:01:9a:50:7f:55:af: ee:90:bc:b0:68:f6:74:13:89:6c:3e:93:79:66:79:e5:6c:ae: bf:61:cd:c4:77:f5:cd:db:7b:9f:1d:d3:0c:07:13:87:89:4a: fe:f6:f5:96:26:81:8b:8f:0e:f7:32:00:0c:47:e7:50:2e:f8: 1d:e0:52:58:02:aa:2d:fc:62:cf:fe:2c:9f:28:16:0a:f6:c5: 73:34:db:af:a0:eb:67:3e:1e:3c:a8:0b:48:3e:52:be:26:96: 4e:09:bb:79:1a:46:be:1b:2d:4d:03:f9:96:da:75:cd:89:b3: 7f:d5:07:c9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+pW2PDj1uFxXOqnNYQClKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzJiOWQyZGU1MzcxMGIzMTU4ZTQyZjIyODg5MTA5ZTJjNDBmNDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPgxf4xYXqGSvY7TvtVmAhT9qJGD C7UUoT6DypVn+U9u1xzqW/0prX5JfsaNpl64QJSNow+X6KCQzat6N0oDTjvRWtQG LNryv1ztCe/58J8ed2ZRX/KOZ0mabT1agHLbghMw67SYbkdqDI8GMdtypSIVOvwk roAnnGnHU3I+k1RSmCJQ7Bej2M71ocDkmBPcaRlMtlLcTmaQaDRxqp3MKxcUDpyh OBrljNJNbj3ERle3wrupoBeoCjA8aPzj3szxnKPFt1GKCyjZOE7t5tNMuNnfdo5z mhCceuU1CSobdJdPlAkQjJedPeH0Z9ICJKn8JwBjF6LPMTBdrrv3rBMJkwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFAMrnS3lNxCzFY5C8iiJEJ4sQPQ7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2Q2ZGM5 ZC1lYjMzLTRjYTQtYWE4Mi00ZDE5YThkZTBhYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvZDZkYzlk LWViMzMtNGNhNC1hYTgyLTRkMTlhOGRlMGFiYS8xL0F5dWRMZVUzRUxNVmprTHlL SWtRbml4QTlEcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuZ4UMA0EAgACMAcDBQMqDa2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0ZjANBgkqhkiG9w0BAQsFAAOCAQEARpZzYLw5D3IB 0gwxgVAJYf+Jq0zVHB7IDWdmtpwNO/sw32Blptk+Rnwv0DWtg4K1c3G7qMHgtbpx TRcoRoJuQVr+A2rFbyT8lvRkKgM4cdBLzvQiMpiupYo6FRdA5/BcjvuCwT8Kb3Nh dmj6FOUfBv9Nk2CVuvEAFPkLk6IUp+0vzcaYxxUtX7TkAZpQf1Wv7pC8sGj2dBOJ bD6TeWZ55Wyuv2HNxHf1zdt7nx3TDAcTh4lK/vb1liaBi48O9zIADEfnUC74HeBS WAKqLfxiz/4snygWCvbFczTbr6DrZz4ePKgLSD5SviaWTgm7eRpGvhstTQP5ltp1 zYmzf9UHyQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:51 2026 by rpki-client