This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer File: aHuR7aFrbxsfoBddZ8eZT2kdjpc.cer (raw, json) Hash identifier: /LjjGYRciVBbUH2vYNCgVPjgBB2kN145+m/a9SicJN8= Subject key identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B9B2937F50A2E7E8F796FF486DA36 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.103.143.0/24 IP: 2a14:2480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:9b:29:37:f5:0a:2e:7e:8f:79:6f:f4:86:da:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=687b91eda16b6f1b1fa0175d67c7994f691d8e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:09:4f:60:bf:15:da:64:3b:0b:a4:c2:a4:43: a9:6e:2b:fd:33:65:64:76:18:67:9b:84:09:e9:dc: 5b:56:96:e2:b4:2e:5c:2f:d5:af:b9:ee:5f:fe:0b: b8:80:b7:1b:1e:01:96:6b:04:a2:ef:08:84:b2:86: 90:0f:9e:eb:42:99:bd:7b:bf:47:f2:f0:7e:fe:87: c0:8b:57:69:0f:3f:35:07:c0:3c:2b:2d:0a:96:d6: 1a:01:ab:df:18:22:cf:fa:e7:2e:dc:09:81:3c:70: 3f:4e:ca:21:27:29:d0:13:a6:d1:e0:e8:cf:91:79: cd:40:7e:2f:12:c5:eb:ad:78:bf:11:a4:67:12:be: 2e:f3:1e:44:4d:cf:90:46:50:46:b3:6a:98:98:f8: 3d:f9:fc:a9:3e:c0:af:f3:4a:ad:5d:bb:39:91:7e: b6:83:4e:d4:53:be:05:d2:41:f6:f7:60:59:b1:4d: bc:de:a6:07:43:01:a1:58:df:7f:d7:46:3b:46:24: f3:f2:8e:01:ef:e4:55:ee:23:29:8d:5a:c0:54:d3: 20:ea:33:bc:ff:85:ac:e7:ef:c9:9a:a0:ee:ba:9a: c1:fe:d8:44:95:bf:2f:2e:81:93:30:33:c4:00:36: 1e:08:22:d3:ad:b0:e3:6c:55:2a:03:2f:7a:ef:ff: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7B:91:ED:A1:6B:6F:1B:1F:A0:17:5D:67:C7:99:4F:69:1D:8E:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2fb8df-0e48-4665-a99b-dffe59023e89/1/aHuR7aFrbxsfoBddZ8eZT2kdjpc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.143.0/24 IPv6: 2a14:2480::/29 Signature Algorithm: sha256WithRSAEncryption 86:7e:6a:d0:fb:6f:8f:f1:2b:de:31:b1:a2:13:d9:be:eb:cd: 99:c1:60:a1:2d:30:59:16:83:f2:27:01:55:58:23:81:46:f2: bc:ac:de:8b:e2:a2:6e:19:1c:1f:77:77:a6:ea:e0:3f:fe:b9: 2c:77:08:56:e4:de:7b:16:5a:09:fa:a9:70:28:56:53:90:82: 27:b8:58:61:7b:f8:77:4e:e2:19:23:5a:79:45:5e:58:47:5f: 7f:0f:b3:b9:6e:ca:45:a7:5d:0e:33:67:88:bb:c8:54:d5:a8: 53:f6:ac:2e:1a:48:46:b2:68:36:12:1d:15:06:5c:de:57:1b: 68:b6:83:32:d4:43:bf:38:4b:00:e3:82:d6:8a:18:5b:22:90: 0a:74:a1:9a:b5:ad:4e:79:6d:ff:83:40:e9:a9:b8:9b:9b:45: bd:4a:7c:2b:41:3d:50:63:24:96:8b:c5:ad:b4:dd:9e:d9:70: ae:46:6b:6a:22:8b:86:14:e8:c3:25:4b:c2:17:25:de:5d:83: d4:1c:3b:86:cb:dd:21:7c:53:fd:d1:28:0d:5d:6f:f9:e9:8d: b1:9a:e5:5f:9d:db:3a:58:1f:80:92:5b:2f:b9:50:6c:2c:a2: e8:7d:49:cc:7e:8a:1d:dc:e8:dc:dc:07:e2:bc:59:0b:0b:0c: 57:e7:85:38 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9W5spN/UKLn6PeW/0hto2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODdiOTFlZGExNmI2ZjFiMWZhMDE3NWQ2N2M3OTk0ZjY5MWQ4ZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7glPYL8V2mQ7C6TCpEOpbiv9M2Vk dhhnm4QJ6dxbVpbitC5cL9Wvue5f/gu4gLcbHgGWawSi7wiEsoaQD57rQpm9e79H 8vB+/ofAi1dpDz81B8A8Ky0KltYaAavfGCLP+ucu3AmBPHA/TsohJynQE6bR4OjP kXnNQH4vEsXrrXi/EaRnEr4u8x5ETc+QRlBGs2qYmPg9+fypPsCv80qtXbs5kX62 g07UU74F0kH292BZsU283qYHQwGhWN9/10Y7RiTz8o4B7+RV7iMpjVrAVNMg6jO8 /4Ws5+/JmqDuuprB/thElb8vLoGTMDPEADYeCCLTrbDjbFUqAy967/9YfQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGh7ke2ha28bH6AXXWfHmU9pHY6XMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzJmYjhk Zi0wZTQ4LTQ2NjUtYTk5Yi1kZmZlNTkwMjNlODkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMmZiOGRm LTBlNDgtNDY2NS1hOTliLWRmZmU1OTAyM2U4OS8xL2FIdVI3YUZyYnhzZm9CZGRa OGVaVDJrZGpwYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW2ePMA0EAgACMAcDBQMqFCSAMA0GCSqGSIb3 DQEBCwUAA4IBAQCGfmrQ+2+P8SveMbGiE9m+682ZwWChLTBZFoPyJwFVWCOBRvK8 rN6L4qJuGRwfd3em6uA//rksdwhW5N57FloJ+qlwKFZTkIInuFhhe/h3TuIZI1p5 RV5YR19/D7O5bspFp10OM2eIu8hU1ahT9qwuGkhGsmg2Eh0VBlzeVxtotoMy1EO/ OEsA44LWihhbIpAKdKGata1OeW3/g0Dpqbibm0W9SnwrQT1QYySWi8WttN2e2XCu RmtqIouGFOjDJUvCFyXeXYPUHDuGy90hfFP90SgNXW/56Y2xmuVfnds6WB+Aklsv uVBsLKLofUnMfood3Ojc3AfivFkLCwxX54U4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:24 2026 by rpki-client