This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aEZbnPs2jGnssOP-o7VCupxzAfQ.cer File: aEZbnPs2jGnssOP-o7VCupxzAfQ.cer (raw, json) Hash identifier: eIKhHs50w1BZ2d5lBIJ4kilemYC5ULnbeHEZyYHkSXg= Subject key identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6FB7ABB8BC014AD85CEAA08575E6E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212865 IP: 5.183.0.0/22 IP: 185.71.139.0/24 IP: 2a0d:d00::/29 IP: 2a0e:2400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fb:7a:bb:8b:c0:14:ad:85:ce:aa:08:57:5e:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68465b9cfb368c69ecb0e3fea3b542ba9c7301f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:88:cc:ff:f9:d7:52:d6:6a:38:54:90:a0: df:2e:f9:1a:0e:11:e8:25:f4:71:33:d7:c1:5a:4c: 9a:42:be:c6:6d:ac:d4:60:0f:9d:c8:29:12:7e:82: 77:5d:31:17:f9:26:18:cd:37:cd:92:dc:15:eb:9a: d4:b1:34:bd:b5:22:8e:d7:a4:a5:67:29:bd:00:30: a2:73:8e:cf:2f:c3:53:ab:2a:74:97:6a:81:ee:4f: 33:ea:0f:78:49:12:23:65:0b:98:c0:ac:96:e8:df: 8f:78:90:b5:b1:df:2b:f8:b9:33:33:24:2c:fc:1b: 86:ef:28:83:1e:9d:85:45:d0:a5:00:01:81:76:1d: 31:3d:ba:9b:ba:eb:3e:0d:3a:5d:75:4f:39:ff:87: 27:1e:a0:b9:15:48:39:8d:b7:01:e9:a9:b7:f8:46: 5b:97:58:e8:6e:60:0c:03:d9:fb:61:48:9f:06:36: 4a:c2:c4:dd:fc:59:08:8f:d8:fb:bb:bb:b6:c0:8c: 41:d7:1e:92:e3:04:b3:c9:5b:dc:42:52:aa:63:9b: 74:67:bc:99:dd:93:a1:5b:6f:77:23:71:dd:31:7d: 89:0b:ef:54:f3:db:ba:ae:04:ff:f2:5d:3a:0e:0c: d9:99:54:36:3a:4c:06:f8:45:cd:c0:2b:e5:09:2d: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:5B:9C:FB:36:8C:69:EC:B0:E3:FE:A3:B5:42:BA:9C:73:01:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/267f9e-cccc-443f-beac-1aea5be150fa/1/aEZbnPs2jGnssOP-o7VCupxzAfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.0.0/22 185.71.139.0/24 IPv6: 2a0d:d00::/29 2a0e:2400::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212865 Signature Algorithm: sha256WithRSAEncryption 51:d7:67:91:3f:e8:56:14:24:6e:ec:c4:72:f4:7d:77:c9:d8: c4:89:5e:9a:aa:ed:95:d6:a8:25:94:73:a5:97:b6:29:8c:63: c8:cb:f5:60:c7:02:d7:ef:63:3f:bf:0a:d6:8b:6e:f2:a6:fd: 35:e7:db:2c:3d:2e:1e:5f:a3:85:41:c7:ad:ac:c5:b5:42:62: 41:54:ef:6d:82:ea:d5:74:43:5e:63:03:35:89:1e:19:ce:70: 0b:0f:db:29:be:b4:40:54:0e:da:53:b2:e8:2c:7a:5d:8f:d3: 75:c5:9b:5b:45:72:c4:6b:e8:93:40:2f:f2:31:cc:44:8d:aa: 42:ad:03:d7:f3:e3:16:97:85:1b:15:c0:75:53:1c:ea:1c:21: 57:ba:01:9d:95:fa:88:20:04:25:67:d9:67:55:46:bf:2e:67: 91:37:fd:c4:a8:0a:e9:92:86:35:be:cb:25:10:ca:a8:56:a0: 8e:35:9c:e2:be:05:06:51:46:b1:ae:17:52:27:a6:85:d2:7d: fa:85:bd:56:a2:6a:a6:85:21:15:a5:e4:01:cc:c6:c0:fe:3e: fe:86:57:20:fe:8b:df:a2:2e:36:ba:ed:9d:a1:19:4e:15:b4: 41:45:75:bf:fc:c1:ce:c6:0e:3c:4b:5c:ff:7b:6f:31:2a:6f: e8:a2:6c:fb -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt3xvt6u4vAFK2FzqoIV15uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODQ2NWI5Y2ZiMzY4YzY5ZWNiMGUzZmVhM2I1NDJiYTljNzMwMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspqIzP/511LWajhUkKDfLvkaDhHo JfRxM9fBWkyaQr7GbazUYA+dyCkSfoJ3XTEX+SYYzTfNktwV65rUsTS9tSKO16Sl Zym9ADCic47PL8NTqyp0l2qB7k8z6g94SRIjZQuYwKyW6N+PeJC1sd8r+LkzMyQs /BuG7yiDHp2FRdClAAGBdh0xPbqbuus+DTpddU85/4cnHqC5FUg5jbcB6am3+EZb l1jobmAMA9n7YUifBjZKwsTd/FkIj9j7u7u2wIxB1x6S4wSzyVvcQlKqY5t0Z7yZ 3ZOhW293I3HdMX2JC+9U89u6rgT/8l06DgzZmVQ2OkwG+EXNwCvlCS1gXwIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFGhGW5z7Noxp7LDj/qO1QrqccwH0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzI2N2Y5 ZS1jY2NjLTQ0M2YtYmVhYy0xYWVhNWJlMTUwZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvMjY3Zjll LWNjY2MtNDQzZi1iZWFjLTFhZWE1YmUxNTBmYS8xL2FFWmJuUHMyakduc3NPUC1v N1ZDdXB4ekFmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCBbcAAwQAuUeLMBQEAgACMA4DBQMqDQ0AAwUD Kg4kADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDP4EwDQYJKoZIhvcNAQELBQAD ggEBAFHXZ5E/6FYUJG7sxHL0fXfJ2MSJXpqq7ZXWqCWUc6WXtimMY8jL9WDHAtfv Yz+/CtaLbvKm/TXn2yw9Lh5fo4VBx62sxbVCYkFU722C6tV0Q15jAzWJHhnOcAsP 2ym+tEBUDtpTsugsel2P03XFm1tFcsRr6JNAL/IxzESNqkKtA9fz4xaXhRsVwHVT HOocIVe6AZ2V+oggBCVn2WdVRr8uZ5E3/cSoCumShjW+yyUQyqhWoI41nOK+BQZR RrGuF1InpoXSffqFvVaiaqaFIRWl5AHMxsD+Pv6GVyD+i9+iLja67Z2hGU4VtEFF db/8wc7GDjxLXP97bzEqb+iibPs= -----END CERTIFICATE-----Generated at Mon Jan 26 01:18:15 2026 by rpki-client