This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZbfqRr5HsxjhBKLGMUDoywoNxM.cer File: aZbfqRr5HsxjhBKLGMUDoywoNxM.cer (raw, json) Hash identifier: rWZWkw2b88rVg7KYIzI3HD3vuY1fzZLLQockHofarZ0= Subject key identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECA00807564989FB9248184A5049F6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.143.90.0/24 IP: 193.143.98.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a0:08:07:56:49:89:fb:92:48:18:4a:50:49:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6996dfa91af91ecc6384128b18c503a32c283713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c6:c1:0d:58:ff:18:5a:63:40:7b:dc:f8:7b: 58:61:3b:3b:0d:56:41:19:7c:3e:42:a1:ff:57:86: 4f:fe:7a:7e:d9:1f:d4:ab:87:3e:2e:9d:e5:1a:3b: 12:cf:da:97:1d:2c:84:fa:30:de:5c:68:d0:0c:d9: 7d:11:8c:83:96:ff:78:dd:bb:ee:49:e2:11:1b:80: e7:53:29:cc:49:c2:7a:7f:00:14:8a:5d:1f:13:39: c5:51:3c:c3:70:42:8f:ec:b1:fb:83:f6:3e:d4:23: bc:94:2c:65:19:8e:72:8a:7a:c9:3c:3b:8f:a8:83: c8:13:4f:28:5e:24:06:b1:22:d9:94:39:3b:9c:3e: ae:d6:85:80:31:86:d8:bb:cb:f7:fb:1c:d2:28:c9: 2f:9a:d7:a1:8c:1b:b7:10:0a:0b:03:ee:89:5f:21: b2:94:4f:e4:26:e2:03:56:b4:b6:b6:3b:86:ec:0a: 05:b5:51:a5:64:16:6a:2e:5d:a9:cf:29:c2:5e:65: 72:c3:4b:ea:1f:55:0c:03:67:ad:ab:ac:c9:57:b0: 92:16:b7:fa:4e:d6:05:bd:5d:72:96:da:fa:dc:aa: ae:05:fb:31:00:69:cc:4f:37:7a:ac:ee:f6:8a:43: 07:62:5c:20:6c:ab:16:7b:59:99:cc:ba:c0:fe:0b: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:96:DF:A9:1A:F9:1E:CC:63:84:12:8B:18:C5:03:A3:2C:28:37:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/684f74-e83f-45b6-aa32-8ad3c0d11565/1/aZbfqRr5HsxjhBKLGMUDoywoNxM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.90.0/24 193.143.98.0/24 Signature Algorithm: sha256WithRSAEncryption a9:54:ac:3b:a9:4a:c3:e8:e6:c1:08:1e:4f:63:04:5f:a6:d2: 16:ba:08:00:c0:4d:58:00:eb:d2:19:33:5e:50:41:02:9d:b6: 16:60:02:e1:13:93:7d:69:11:bc:9a:4f:6c:ba:7a:74:86:1f: ec:c0:16:d0:c4:c6:00:fd:9f:be:5a:06:c9:6b:91:6d:a7:f5: a5:db:fd:68:fb:68:d2:a1:c0:01:05:0b:13:1e:84:da:8d:eb: 6e:3a:96:b0:91:a7:db:6b:11:ff:4e:19:49:da:d3:c3:d8:57: 99:63:1f:b0:c1:89:c4:8a:5f:91:2b:33:e9:4c:54:d7:1c:51: 0e:c7:70:35:91:27:e0:02:a2:ba:db:f5:74:0d:0a:35:3b:29: b3:6b:2d:1f:e6:f9:af:68:e6:b7:55:19:b9:b4:b0:29:00:2f: 88:85:9e:bb:8b:e5:23:e0:87:c6:0f:43:5b:c7:9b:51:52:76: 5f:c7:ce:26:e4:5d:78:1c:1b:e7:64:2d:de:07:18:29:a7:8c: 47:10:20:5b:7c:83:17:e5:71:e8:6e:f0:cf:90:5d:09:c0:68: e3:30:3c:b1:f0:6f:ee:86:c3:0b:70:37:e8:2c:7b:a7:1b:d6: c2:d5:99:57:c5:0d:5c:cd:4f:86:2d:51:83:e8:26:ca:85:38: 89:76:8a:7c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt57KAIB1ZJifuSSBhKUEn2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk2ZGZhOTFhZjkxZWNjNjM4NDEyOGIxOGM1MDNhMzJjMjgzNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68bBDVj/GFpjQHvc+HtYYTs7DVZB GXw+QqH/V4ZP/np+2R/Uq4c+Lp3lGjsSz9qXHSyE+jDeXGjQDNl9EYyDlv943bvu SeIRG4DnUynMScJ6fwAUil0fEznFUTzDcEKP7LH7g/Y+1CO8lCxlGY5yinrJPDuP qIPIE08oXiQGsSLZlDk7nD6u1oWAMYbYu8v3+xzSKMkvmtehjBu3EAoLA+6JXyGy lE/kJuIDVrS2tjuG7AoFtVGlZBZqLl2pzynCXmVyw0vqH1UMA2etq6zJV7CSFrf6 TtYFvV1yltr63KquBfsxAGnMTzd6rO72ikMHYlwgbKsWe1mZzLrA/gtGlwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFGmW36ka+R7MY4QSixjFA6MsKDcTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzY4NGY3 NC1lODNmLTQ1YjYtYWEzMi04YWQzYzBkMTE1NjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvNjg0Zjc0 LWU4M2YtNDViNi1hYTMyLThhZDNjMGQxMTU2NS8xL2FaYmZxUnI1SHN4amhCS0xH TVVEb3l3b054TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwY9aAwQAwY9iMA0GCSqGSIb3DQEBCwUAA4IB AQCpVKw7qUrD6ObBCB5PYwRfptIWuggAwE1YAOvSGTNeUEECnbYWYALhE5N9aRG8 mk9sunp0hh/swBbQxMYA/Z++WgbJa5Ftp/Wl2/1o+2jSocABBQsTHoTajetuOpaw kafbaxH/ThlJ2tPD2FeZYx+wwYnEil+RKzPpTFTXHFEOx3A1kSfgAqK62/V0DQo1 Oymzay0f5vmvaOa3VRm5tLApAC+IhZ67i+Uj4IfGD0Nbx5tRUnZfx84m5F14HBvn ZC3eBxgpp4xHECBbfIMX5XHobvDPkF0JwGjjMDyx8G/uhsMLcDfoLHunG9bC1ZlX xQ1czU+GLVGD6CbKhTiJdop8 -----END CERTIFICATE-----Generated at Sun Jan 25 10:38:23 2026 by rpki-client