This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer File: aDCZAOZItlowenhgECv3ixb1XXU.cer (raw, json) Hash identifier: 1HHP/tW1JhDbBJFAj2QNRTTrOSjjtHnJUzsbhE94UB8= Subject key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3547E787A57445884BE8B94CD13C89 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199315 IP: 91.218.173.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:47:e7:87:a5:74:45:88:4b:e8:b9:4c:d1:3c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68309900e648b65a307a7860102bf78b16f55d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:6c:14:68:95:20:93:fc:b3:28:52:7a:44: 04:fa:ee:f7:4c:9d:90:07:a2:79:9d:4d:cd:48:8d: 7a:64:74:8c:57:41:44:33:ed:3b:ae:6f:1f:6f:57: e4:ff:6b:2a:28:4d:30:ef:70:27:62:42:c4:ff:be: 8e:38:d3:70:6f:26:12:7c:40:cf:26:2f:8b:e0:8c: 7b:c9:99:b5:33:39:59:54:1a:bf:73:83:fc:17:8b: ca:d2:36:f9:53:70:ca:94:c2:9a:b6:8c:6f:68:74: 6f:52:be:0e:06:4b:25:7e:fc:b7:60:53:87:2b:19: 10:b7:83:1d:fd:3e:3b:14:59:ec:c7:14:59:86:61: c0:92:52:cb:cc:54:b8:e4:8d:7e:26:21:ee:69:ca: d6:3f:0c:37:a6:03:75:ce:bf:4e:57:e8:8b:56:a1: 0d:e5:cc:90:a5:fd:16:1c:fc:f9:b3:f8:31:31:38: eb:40:59:ea:f9:f0:4a:29:ea:7c:dc:e2:f5:1d:3e: ec:34:c3:05:38:e4:0f:0c:c0:6f:92:84:0f:d9:7c: bb:4a:48:01:7e:cc:1f:37:3a:ec:9a:cd:72:22:d0: 6f:3c:43:2c:bc:af:c1:d4:ab:b9:08:a0:f8:9c:5d: 7d:54:f6:d6:dc:9a:46:bd:a3:ef:3e:4f:48:fd:d1: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.173.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199315 Signature Algorithm: sha256WithRSAEncryption 6b:17:8f:fb:44:78:e4:85:bf:06:ae:67:2d:6a:ef:90:9c:1c: bf:33:0b:2a:42:25:1f:fb:39:7a:fb:85:2b:55:f2:72:a4:6b: 5f:1e:c5:60:75:d3:e0:9b:e1:e0:6a:a9:e9:c9:21:ec:8c:bd: 3a:29:cd:52:de:e7:a0:03:95:37:e5:26:c1:af:38:b2:32:f6: 8b:ba:40:07:37:42:52:71:de:d9:7b:2c:e1:78:57:72:d4:36: 89:d0:bb:f8:de:e8:26:31:66:1c:e8:8b:56:a7:b5:19:a2:29: 17:fe:82:f0:5c:1e:f2:a9:fb:93:28:93:b3:7b:9e:2d:5d:a2: 10:46:ed:1c:dd:99:a1:5a:6e:0c:bf:1b:24:b8:fd:19:85:54: ca:a7:70:19:ab:51:35:0c:71:9c:07:67:d0:cb:00:b6:3a:78: b5:fa:1c:80:2f:bc:d0:b2:35:99:5c:56:48:0e:4a:78:ec:de: 08:6b:3c:5c:44:27:a4:cd:49:8a:63:8b:de:d5:fd:a4:78:f4: d2:bd:54:5d:7f:b6:21:7b:e0:5d:e6:75:1e:8e:dc:6d:56:72: 2f:a3:7a:ae:b8:d8:49:5f:40:d9:29:fa:04:d4:25:81:1f:b5: 5c:4c:ad:c4:71:70:dc:b4:80:ad:02:e9:f2:99:2d:a0:21:2c: f7:1e:53:c3 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NUfnh6V0RYhL6LlM0TyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODMwOTkwMGU2NDhiNjVhMzA3YTc4NjAxMDJiZjc4YjE2ZjU1ZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYhsFGiVIJP8syhSekQE+u73TJ2Q B6J5nU3NSI16ZHSMV0FEM+07rm8fb1fk/2sqKE0w73AnYkLE/76OONNwbyYSfEDP Ji+L4Ix7yZm1MzlZVBq/c4P8F4vK0jb5U3DKlMKatoxvaHRvUr4OBkslfvy3YFOH KxkQt4Md/T47FFnsxxRZhmHAklLLzFS45I1+JiHuacrWPww3pgN1zr9OV+iLVqEN 5cyQpf0WHPz5s/gxMTjrQFnq+fBKKep83OL1HT7sNMMFOOQPDMBvkoQP2Xy7SkgB fswfNzrsms1yItBvPEMsvK/B1Ku5CKD4nF19VPbW3JpGvaPvPk9I/dH+EQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGgwmQDmSLZaMHp4YBAr94sW9V11MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkL2Y1NGM1 Ny1kZWNhLTQ2ODUtODEwNi05ZmE3ODA3NTMzMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvZjU0YzU3 LWRlY2EtNDY4NS04MTA2LTlmYTc4MDc1MzMwYi8xL2FEQ1pBT1pJdGxvd2VuaGdF Q3YzaXhiMVhYVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9qtMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMKkzANBgkqhkiG9w0BAQsFAAOCAQEAaxeP+0R45IW/Bq5nLWrvkJwcvzMLKkIl H/s5evuFK1XycqRrXx7FYHXT4Jvh4Gqp6ckh7Iy9OinNUt7noAOVN+Umwa84sjL2 i7pABzdCUnHe2Xss4XhXctQ2idC7+N7oJjFmHOiLVqe1GaIpF/6C8Fwe8qn7kyiT s3ueLV2iEEbtHN2ZoVpuDL8bJLj9GYVUyqdwGatRNQxxnAdn0MsAtjp4tfocgC+8 0LI1mVxWSA5KeOzeCGs8XEQnpM1JimOL3tX9pHj00r1UXX+2IXvgXeZ1Ho7cbVZy L6N6rrjYSV9A2Sn6BNQlgR+1XEytxHFw3LSArQLp8pktoCEs9x5Tww== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:44 2026 by rpki-client