This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer (raw, json) Hash identifier: 2RDa7fOpAdMTeniyzpaLOkbttUyox1W6lXC9w5LCJJo= Subject key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7EF912FF02341C7CF41FB1EC77B80F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216074 IP: 185.116.112.0/24 IP: 2a14:600::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f9:12:ff:02:34:1c:7c:f4:1f:b1:ec:77:b8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:c0:19:59:5e:ed:0c:aa:82:c7:06:4a:e5: 0a:54:f5:70:7d:29:28:d2:f0:59:04:26:08:0d:21: a1:2f:a2:bb:18:1f:22:89:e1:fb:a0:02:25:e1:7c: a2:98:5a:a5:1a:97:1b:4b:ba:c0:2b:63:62:f9:13: 76:04:eb:04:21:5e:e7:97:70:5a:84:89:0a:21:35: c4:4f:1c:19:0c:80:5b:ab:75:7c:ee:83:e9:b7:94: 5a:72:ff:bb:73:cf:97:a2:5e:31:da:e7:01:76:39: 18:9f:1d:98:b4:48:77:0f:ad:d6:d9:b0:27:29:95: 80:67:d7:87:d9:24:59:5a:57:fd:76:c7:06:52:d3: 5b:d1:d7:0b:b0:03:e2:b0:cd:3c:80:d4:09:9f:a3: fe:a8:02:b3:74:d5:1c:cc:4d:7f:9a:f2:5f:01:9f: c2:c8:08:81:87:29:df:cb:76:ea:04:26:90:4d:26: a3:2c:fd:c9:d0:96:21:e9:6d:0d:91:6c:a3:ac:7b: 5d:04:78:12:50:dc:85:61:38:8c:9d:fc:f5:93:51: 29:4a:a6:33:ce:3e:03:ca:6f:26:35:2e:a4:94:16: 3f:99:d1:f2:5c:a9:af:57:71:5f:93:e5:07:72:02: fa:eb:7c:78:69:72:d4:77:3c:ea:c7:c3:7b:df:38: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.112.0/24 IPv6: 2a14:600::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216074 Signature Algorithm: sha256WithRSAEncryption 55:2e:25:3c:1f:9d:8d:7b:76:81:6f:f4:f2:44:71:bb:c8:8a: 9c:a7:50:03:03:0d:e8:73:88:47:4e:66:dc:f0:ac:e3:cb:25: 88:84:42:46:b2:68:7c:42:71:02:d6:c4:39:76:b2:5e:cb:61: 81:87:7c:6a:33:f7:f6:7b:04:17:62:ee:21:06:a1:91:a1:70: 5a:fb:29:21:5a:1d:d7:91:5b:ea:8a:45:5b:13:ba:57:7e:0f: 26:ac:1a:e0:aa:f8:25:25:98:40:17:02:a0:64:a7:09:04:07: 45:cf:a4:ea:3c:1c:5d:30:ac:a5:5b:75:9f:68:4d:3b:e5:54: b7:48:d1:dd:07:d6:ad:33:7f:ca:21:f0:66:00:6b:3a:b7:3c: 35:6a:a6:44:35:dc:6b:d8:59:38:cb:8f:ec:e2:f1:55:3f:a0: 6f:16:a1:b2:c1:cd:67:25:51:31:f3:35:b2:12:c1:52:3f:4d: 38:63:d9:df:5f:ca:ea:69:ed:e2:d4:4b:d2:4c:f8:c0:a1:9f: 6c:2d:28:3d:ea:0c:fb:2b:86:e5:57:bf:ac:19:e8:aa:9b:de: 45:03:28:b4:56:6a:e5:3b:8c:2e:01:65:ca:e0:5f:58:02:1d: 98:6a:d6:62:8c:5f:86:ec:86:4f:89:97:23:94:71:a2:b7:bd: 81:79:16:77 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8fvkS/wI0HHz0H7Hsd7gPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGY4M2UyYTM0MTQ1YWQ0N2UwY2MyYjNjNzlmYzYzMTJiYWUyYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRLAGVle7QyqgscGSuUKVPVwfSko 0vBZBCYIDSGhL6K7GB8iieH7oAIl4XyimFqlGpcbS7rAK2Ni+RN2BOsEIV7nl3Ba hIkKITXETxwZDIBbq3V87oPpt5Racv+7c8+Xol4x2ucBdjkYnx2YtEh3D63W2bAn KZWAZ9eH2SRZWlf9dscGUtNb0dcLsAPisM08gNQJn6P+qAKzdNUczE1/mvJfAZ/C yAiBhynfy3bqBCaQTSajLP3J0JYh6W0NkWyjrHtdBHgSUNyFYTiMnfz1k1EpSqYz zj4Dym8mNS6klBY/mdHyXKmvV3Ffk+UHcgL663x4aXLUdzzqx8N73zj94wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGj4Pio0FFrUfgzCs8efxjErrixxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAzLzVlOWY5 MC1hNmIwLTRmZDgtYjhkZC03OTI4MDJjNDM5MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMvNWU5Zjkw LWE2YjAtNGZkOC1iOGRkLTc5MjgwMmM0MzkyNS8xL2FQZy1LalFVV3RSLURNS3p4 NV9HTVN1dUxIRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuXRwMA0EAgACMAcDBQMqFAYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNMCjANBgkqhkiG9w0BAQsFAAOCAQEAVS4lPB+djXt2 gW/08kRxu8iKnKdQAwMN6HOIR05m3PCs48sliIRCRrJofEJxAtbEOXayXsthgYd8 ajP39nsEF2LuIQahkaFwWvspIVod15Fb6opFWxO6V34PJqwa4Kr4JSWYQBcCoGSn CQQHRc+k6jwcXTCspVt1n2hNO+VUt0jR3QfWrTN/yiHwZgBrOrc8NWqmRDXca9hZ OMuP7OLxVT+gbxahssHNZyVRMfM1shLBUj9NOGPZ31/K6mnt4tRL0kz4wKGfbC0o PeoM+yuG5Ve/rBnoqpveRQMotFZq5TuMLgFlyuBfWAIdmGrWYoxfhuyGT4mXI5Rx ore9gXkWdw== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:50 2026 by rpki-client