This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aAONTKy9QZGZUus3CcFlM4OJAOM.cer File: aAONTKy9QZGZUus3CcFlM4OJAOM.cer (raw, json) Hash identifier: gEhSnLMIFsA39A0cHzX4m1zibapzxMuZPblbOY9c3T4= Subject key identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F151EC164FCEC087CDD72A1E4995898 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211476 IP: 185.182.68.0/22 IP: 2a0f:3680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:1e:c1:64:fc:ec:08:7c:dd:72:a1:e4:99:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68038d4cacbd41919952eb3709c16533838900e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:92:a5:41:99:04:4f:4f:3c:47:fe:79:c8: 50:28:5c:3b:2d:05:c3:3d:2d:16:2a:73:41:a5:7e: 9b:ed:6d:90:18:af:d7:84:89:fe:bc:a0:2b:ab:71: 42:1e:54:c9:fc:c1:c5:d8:42:ec:72:7b:f4:f7:77: 7c:03:f7:66:76:6b:99:24:50:96:64:75:62:2a:28: 2e:b7:b2:42:24:d0:95:fe:4c:39:6a:b4:63:5e:83: 0f:c3:40:71:14:44:4e:70:33:8d:ac:71:36:2e:03: 0f:f8:21:c6:66:41:f1:7b:86:04:b6:44:4b:5b:c3: 9f:ea:f5:ba:97:c7:37:61:db:aa:93:44:a2:ac:a3: fa:fb:8f:09:95:e1:a3:e5:07:ad:7a:7b:7c:e3:ac: 07:9d:d5:09:ef:98:cb:f0:b1:cc:f8:75:55:b9:f2: 29:84:e8:70:2e:f0:08:44:ed:a0:25:8e:af:b5:52: 40:48:e2:85:2d:c1:21:b4:c8:01:5c:52:a0:df:2b: 99:77:8e:6e:c2:f9:51:17:4d:7c:69:e6:e3:d3:30: c1:6c:ce:7e:c0:3c:6b:ed:ef:e1:cd:89:3d:df:13: f0:2c:e8:b3:9e:3e:e1:cc:63:37:ed:95:a3:6f:8e: f1:04:97:0a:9b:33:ba:06:e8:0b:e7:2d:3f:9b:3f: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:03:8D:4C:AC:BD:41:91:99:52:EB:37:09:C1:65:33:83:89:00:E3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/207167-d551-41ba-86a8-2f50ea27213c/1/aAONTKy9QZGZUus3CcFlM4OJAOM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.182.68.0/22 IPv6: 2a0f:3680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211476 Signature Algorithm: sha256WithRSAEncryption 03:53:8d:24:35:41:da:89:f6:b9:79:ae:00:c0:03:d2:40:23: 46:d9:e8:22:80:d3:1b:08:e0:e3:ef:61:22:94:55:27:4c:e3: 51:ba:31:d7:d0:6e:15:d9:8d:ef:10:8d:bd:0c:25:53:95:75: 0c:f1:d6:ee:d7:06:75:53:dc:36:bb:cb:db:9a:c8:18:9a:8c: 97:35:56:29:ca:b7:21:97:68:e8:e6:8a:16:52:c5:75:ce:56: 45:e0:7c:76:4b:26:d3:76:dd:b8:68:87:25:28:40:1b:54:8c: ab:fb:1e:e4:30:48:58:5b:1a:19:51:39:ad:e4:b7:ab:e0:70: 05:a4:f6:d0:48:9a:97:63:a5:68:27:8d:d0:e7:7c:e1:ef:95: 93:ba:72:12:b0:74:7d:c8:e4:80:a8:42:cf:c2:f4:df:5d:f1: 16:1b:23:bd:8d:13:4b:4d:10:30:b0:8d:1b:37:8a:53:56:9b: c1:55:35:10:92:b5:f0:c5:72:bd:a0:e1:43:ec:e9:52:57:a8: f8:03:13:6c:7c:22:38:45:11:61:75:11:fb:08:ad:83:f6:d9: e8:7c:81:f3:59:a3:cf:9e:eb:bf:43:fd:a5:0e:7a:89:ac:8d: 00:5d:38:ad:d0:67:eb:e5:45:bf:2e:8d:89:46:87:17:8b:62: 3b:ab:bc:0b -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/FR7BZPzsCHzdcqHkmViYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODAzOGQ0Y2FjYmQ0MTkxOTk1MmViMzcwOWMxNjUzMzgzODkwMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvCSpUGZBE9PPEf+echQKFw7LQXD PS0WKnNBpX6b7W2QGK/XhIn+vKArq3FCHlTJ/MHF2ELscnv093d8A/dmdmuZJFCW ZHViKigut7JCJNCV/kw5arRjXoMPw0BxFEROcDONrHE2LgMP+CHGZkHxe4YEtkRL W8Of6vW6l8c3Yduqk0SirKP6+48JleGj5Qetent846wHndUJ75jL8LHM+HVVufIp hOhwLvAIRO2gJY6vtVJASOKFLcEhtMgBXFKg3yuZd45uwvlRF018aebj0zDBbM5+ wDxr7e/hzYk93xPwLOiznj7hzGM37ZWjb47xBJcKmzO6BugL5y0/mz8OUQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGgDjUysvUGRmVLrNwnBZTODiQDjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzIwNzE2 Ny1kNTUxLTQxYmEtODZhOC0yZjUwZWEyNzIxM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvMjA3MTY3 LWQ1NTEtNDFiYS04NmE4LTJmNTBlYTI3MjEzYy8xL2FBT05US3k5UVpHWlV1czND Y0ZsTTRPSkFPTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCubZEMA0EAgACMAcDBQMqDzaAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM6FDANBgkqhkiG9w0BAQsFAAOCAQEAA1ONJDVB2on2 uXmuAMAD0kAjRtnoIoDTGwjg4+9hIpRVJ0zjUbox19BuFdmN7xCNvQwlU5V1DPHW 7tcGdVPcNrvL25rIGJqMlzVWKcq3IZdo6OaKFlLFdc5WReB8dksm03bduGiHJShA G1SMq/se5DBIWFsaGVE5reS3q+BwBaT20Eial2OlaCeN0Od84e+Vk7pyErB0fcjk gKhCz8L0313xFhsjvY0TS00QMLCNGzeKU1abwVU1EJK18MVyvaDhQ+zpUleo+AMT bHwiOEURYXUR+witg/bZ6HyB81mjz57rv0P9pQ56iayNAF04rdBn6+VFvy6NiUaH F4tiO6u8Cw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:37 2026 by rpki-client