This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer File: aa9wvad8-FjhZNa3xwnoeP0aYEU.cer (raw, json) Hash identifier: j6UNAexZZkzczQ61M2AW+iQ/keM9/MXAXgEEPUGQ5wQ= Subject key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F831A0113AE6E43E98FB52E6E075F73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.177.160.0/23 IP: 194.53.72.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:1a:01:13:ae:6e:43:e9:8f:b5:2e:6e:07:5f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69af70bda77cf858e164d6b7c709e878fd1a6045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:eb:8c:dd:64:e2:9c:67:7e:4c:01:24:a9: 4a:fd:43:14:40:eb:0e:d2:0c:5b:82:53:ea:54:c3: 21:c0:58:24:c7:37:19:64:0d:fa:0f:94:b5:d9:1b: 74:c5:c1:e6:09:e4:9b:82:24:f7:0a:e8:42:7b:dd: 45:82:48:dc:fd:09:7a:f4:b2:4a:93:94:ab:c9:69: 2a:c5:e6:a7:e5:e9:0e:03:f2:b8:93:7e:1c:a3:e9: 75:ca:92:37:91:f0:03:2c:2d:05:34:91:59:97:03: 0d:c1:1b:49:7f:98:f7:04:17:0e:b1:49:ef:1b:f7: c8:fe:78:94:2d:3b:00:3b:6b:6d:a1:ad:a0:f0:00: f1:07:89:b5:79:31:97:b1:79:15:ba:a1:7c:a0:1d: 4f:dd:55:f3:41:f1:f3:5a:3e:74:a1:a3:b6:84:a3: 3a:47:48:51:5c:82:79:49:37:2a:f7:c6:90:16:d2: 07:c0:22:7e:9f:f0:33:63:a0:f1:9e:f3:49:0d:f3: 96:67:6c:1e:44:37:f8:86:64:d7:7c:bf:10:ac:3f: 79:d1:4f:3a:f7:9f:e9:42:e6:c2:52:02:22:2a:eb: 80:4c:32:ab:27:9f:a6:31:f5:ce:32:1f:85:36:e4: e5:1d:e5:b6:55:39:e4:fb:3d:87:e5:7d:e1:50:4e: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.160.0/23 194.53.72.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:fc:01:8e:2a:ea:59:21:45:62:0c:66:a2:f2:7a:22:24:f6: 25:b7:67:35:79:71:a0:87:84:d8:15:8a:49:b8:5e:65:99:18: b3:a9:07:18:79:fb:75:6c:76:88:9c:9b:e3:50:c7:c5:08:81: 12:22:ee:20:b6:30:30:a5:a3:3c:9d:bf:57:5f:ca:7a:3b:2a: 55:d6:04:cc:a0:e0:42:fe:8a:11:19:8e:94:81:f9:09:ad:10: 4c:1d:56:29:ed:55:28:eb:81:c7:36:13:52:65:af:5d:ed:55: 3a:cc:35:29:f6:b5:9d:5d:90:7b:04:de:03:b3:65:63:af:3d: af:97:46:d0:82:62:f3:b9:51:92:df:d2:dd:ff:ff:9b:a2:36: 25:5a:e9:9b:7d:82:1c:9e:21:72:16:3c:4d:31:bc:22:68:76: 93:a4:a1:5b:45:f8:22:fe:ca:82:12:c0:fe:b1:3a:f6:52:4b: c0:20:a3:73:ad:60:b7:68:88:00:4d:b2:e6:64:72:41:1d:60: 4e:b1:bd:ee:60:44:c3:62:a1:98:f7:f3:2b:23:bc:7f:5f:b2: ea:c0:6e:44:bf:92:59:f2:5d:bb:1a:9e:fd:44:28:ea:2e:74: e5:e5:f8:76:7d:b7:55:b7:34:7c:96:d2:79:fa:04:5d:04:0d: b2:47:94:79 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt/gxoBE65uQ+mPtS5uB19zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWFmNzBiZGE3N2NmODU4ZTE2NGQ2YjdjNzA5ZTg3OGZkMWE2MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GbrjN1k4pxnfkwBJKlK/UMUQOsO 0gxbglPqVMMhwFgkxzcZZA36D5S12Rt0xcHmCeSbgiT3CuhCe91Fgkjc/Ql69LJK k5SryWkqxean5ekOA/K4k34co+l1ypI3kfADLC0FNJFZlwMNwRtJf5j3BBcOsUnv G/fI/niULTsAO2ttoa2g8ADxB4m1eTGXsXkVuqF8oB1P3VXzQfHzWj50oaO2hKM6 R0hRXIJ5STcq98aQFtIHwCJ+n/AzY6DxnvNJDfOWZ2weRDf4hmTXfL8QrD950U86 95/pQubCUgIiKuuATDKrJ5+mMfXOMh+FNuTlHeW2VTnk+z2H5X3hUE6xkwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFGmvcL2nfPhY4WTWt8cJ6Hj9GmBFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2ZjOTky Ny02M2ZlLTRlM2ItYmYyOC02Mjg3N2ZlNDg2MTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZmM5OTI3 LTYzZmUtNGUzYi1iZjI4LTYyODc3ZmU0ODYxOC8xL2FhOXd2YWQ4LUZqaFpOYTN4 d25vZVAwYVlFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwbGgAwQCwjVIMA0GCSqGSIb3DQEBCwUAA4IB AQAc/AGOKupZIUViDGai8noiJPYlt2c1eXGgh4TYFYpJuF5lmRizqQcYeft1bHaI nJvjUMfFCIESIu4gtjAwpaM8nb9XX8p6OypV1gTMoOBC/ooRGY6UgfkJrRBMHVYp 7VUo64HHNhNSZa9d7VU6zDUp9rWdXZB7BN4Ds2Vjrz2vl0bQgmLzuVGS39Ld//+b ojYlWumbfYIcniFyFjxNMbwiaHaTpKFbRfgi/sqCEsD+sTr2UkvAIKNzrWC3aIgA TbLmZHJBHWBOsb3uYETDYqGY9/MrI7x/X7LqwG5Ev5JZ8l27Gp79RCjqLnTl5fh2 fbdVtzR8ltJ5+gRdBA2yR5R5 -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:40 2026 by rpki-client