This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer File: aaTWkWuTFZqoCYSps3dGg7tVDr0.cer (raw, json) Hash identifier: CdXQLTPJtwbnoIji7dejdXt2HUMbRrmEBozDox9MJVs= Subject key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C126C7D1D91DB1774289FF1650CE854 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 6903 AS: 30968 AS: 41535 AS: 205952 IP: 46.183.166.0/23 IP: 62.113.80.0/22 IP: 62.113.86.0/24 IP: 62.113.89.0 -- 62.113.90.255 IP: 62.113.95.0/24 IP: 62.113.120.0/21 IP: 62.213.72.0 -- 62.213.81.255 IP: 62.213.86.0/24 IP: 62.213.94.0/23 IP: 62.213.102.0/23 IP: 62.213.112.0/23 IP: 62.213.116.0/24 IP: 77.221.128.0/22 IP: 89.253.192.0/18 IP: 109.120.160.0/20 IP: 185.48.236.0/22 IP: 193.32.198.0/23 IP: 195.2.64.0/23 IP: 195.2.68.0/23 IP: 195.2.72.0/24 IP: 195.2.77.0/24 IP: 195.2.82.0/23 IP: 195.2.87.0 -- 195.2.91.255 IP: 195.2.94.0/23 IP: 212.24.37.0/24 IP: 212.24.39.0 -- 212.24.40.255 IP: 212.24.43.0/24 IP: 212.24.50.0/24 IP: 212.24.57.0/24 IP: 212.158.168.0/24 IP: 212.158.170.0/23 IP: 212.158.174.0/23 IP: 213.189.192.0/24 IP: 213.189.196.0 -- 213.189.198.255 IP: 213.189.200.0/24 IP: 213.189.207.0 -- 213.189.209.255 IP: 213.189.211.0 -- 213.189.214.255 IP: 217.23.129.0/24 IP: 217.23.139.0/24 IP: 217.23.152.0/21 IP: 2a01:9860::/32 IP: 2a02:440::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6c:7d:1d:91:db:17:74:28:9f:f1:65:0c:e8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69a4d6916b93159aa80984a9b3774683bb550ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:61:29:29:9e:a7:14:b2:d3:6c:3c:ae:e1:bf: 40:77:1e:3a:16:02:dc:6a:c7:64:16:68:ba:0c:4f: 7a:e8:a6:7c:3e:d7:84:13:99:1a:a6:11:d4:f8:da: 5a:17:ee:c9:9b:33:94:27:75:1f:eb:f0:0b:3a:ff: 4c:6b:23:73:e6:c5:53:30:53:d9:7a:d4:7e:7c:73: 39:69:c4:03:a4:3f:02:d4:66:a4:99:bc:6d:e2:83: 55:99:b8:fd:68:35:98:5d:ba:8a:d0:00:2b:f1:9f: ba:8c:31:3f:19:a7:ce:2a:a7:f8:5f:f3:d1:64:77: 5d:67:c6:f3:ad:ee:8f:87:d1:be:f9:2e:6f:37:7f: 0c:6e:1b:ec:66:2b:f1:f8:6a:f9:53:d3:7e:69:de: 66:e6:27:4b:97:1b:05:38:c6:5d:f6:97:e4:96:1d: e9:12:94:e0:88:24:4a:90:a0:94:d9:ca:7a:33:96: 31:d4:21:17:92:20:94:62:d9:cd:cd:9a:22:ac:75: 66:9d:9b:fd:98:61:49:4e:35:36:f5:90:4b:cc:e7: f0:4e:48:c3:f5:f8:6f:5f:2d:0e:53:d2:59:07:d0: 16:fd:0b:f3:dc:ad:4b:39:92:8e:10:6e:7f:d4:a5: 3d:dc:7e:38:b2:cb:01:6e:5a:6a:ee:27:71:60:53: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.166.0/23 62.113.80.0/22 62.113.86.0/24 62.113.89.0-62.113.90.255 62.113.95.0/24 62.113.120.0/21 62.213.72.0-62.213.81.255 62.213.86.0/24 62.213.94.0/23 62.213.102.0/23 62.213.112.0/23 62.213.116.0/24 77.221.128.0/22 89.253.192.0/18 109.120.160.0/20 185.48.236.0/22 193.32.198.0/23 195.2.64.0/23 195.2.68.0/23 195.2.72.0/24 195.2.77.0/24 195.2.82.0/23 195.2.87.0-195.2.91.255 195.2.94.0/23 212.24.37.0/24 212.24.39.0-212.24.40.255 212.24.43.0/24 212.24.50.0/24 212.24.57.0/24 212.158.168.0/24 212.158.170.0/23 212.158.174.0/23 213.189.192.0/24 213.189.196.0-213.189.198.255 213.189.200.0/24 213.189.207.0-213.189.209.255 213.189.211.0-213.189.214.255 217.23.129.0/24 217.23.139.0/24 217.23.152.0/21 IPv6: 2a01:9860::/32 2a02:440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6903 30968 41535 205952 Signature Algorithm: sha256WithRSAEncryption 47:eb:3f:8d:92:7e:11:f1:c4:e7:44:dd:6f:f7:05:16:2c:c8: 6d:85:19:9b:e2:ac:0b:2d:1b:1d:65:86:76:0d:56:a5:56:b5: e4:63:59:bb:14:ff:4a:1a:cf:33:87:90:e2:5c:29:1d:32:ae: 2f:b2:80:2c:ed:3f:b4:79:74:6c:d9:cc:82:52:35:c2:81:07: 95:a3:06:df:cf:20:2c:17:57:72:fc:99:5e:5f:5a:4e:be:73: 3f:8d:6e:4f:aa:cd:8b:6f:58:0c:8f:4b:eb:b4:f0:46:6f:45: 8d:e8:a8:10:e7:dd:f2:f4:45:44:d3:6a:76:fc:57:21:e5:f3: 2f:dc:5a:05:25:f2:dc:88:ab:c7:6e:31:be:f7:52:ec:ac:5f: 4a:34:71:86:34:e7:c4:49:5f:9f:27:30:38:d7:e7:1d:de:d8: d7:b0:e3:49:3e:9a:6d:4d:ed:77:00:69:2f:6a:60:c9:bf:8b: 38:96:de:bb:c2:54:c0:60:92:de:df:c1:b2:f3:4b:24:ff:ab: be:1e:ed:87:07:f6:21:85:47:3a:2a:35:8f:92:c3:03:6f:73: 88:a5:11:a7:b7:20:e9:7b:d3:4a:4b:cc:8e:b7:61:d4:ae:9a: 85:1c:2c:19:09:8e:ad:17:5b:0c:d6:5b:c5:5c:4b:a3:15:cc: 8f:81:e5:cc -----BEGIN CERTIFICATE----- MIIG4zCCBcugAwIBAgISAZt8Emx9HZHbF3Qon/FlDOhUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWE0ZDY5MTZiOTMxNTlhYTgwOTg0YTliMzc3NDY4M2JiNTUwZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2EpKZ6nFLLTbDyu4b9Adx46FgLc asdkFmi6DE966KZ8PteEE5kaphHU+NpaF+7JmzOUJ3Uf6/ALOv9MayNz5sVTMFPZ etR+fHM5acQDpD8C1Gakmbxt4oNVmbj9aDWYXbqK0AAr8Z+6jDE/GafOKqf4X/PR ZHddZ8bzre6Ph9G++S5vN38MbhvsZivx+Gr5U9N+ad5m5idLlxsFOMZd9pfklh3p EpTgiCRKkKCU2cp6M5Yx1CEXkiCUYtnNzZoirHVmnZv9mGFJTjU29ZBLzOfwTkjD 9fhvXy0OU9JZB9AW/Qvz3K1LOZKOEG5/1KU93H44sssBblpq7idxYFNB4wIDAQAB o4ID7zCCA+swHQYDVR0OBBYEFGmk1pFrkxWaqAmEqbN3RoO7VQ69MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0L2MwMzFl NS1mYzY3LTQxZjUtOGViZS0zMTk3MTEwMDk3YzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvYzAzMWU1 LWZjNjctNDFmNS04ZWJlLTMxOTcxMTAwOTdjOS8xL2FhVFdrV3VURlpxb0NZU3Bz M2RHZzd0VkRyMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBXwYIKwYB BQUHAQcBAf8EggFOMIIBSjCCATAEAgABMIIBKAMEAS63pgMEAj5xUAMEAD5xVjAM AwQAPnFZAwQAPnFaAwQAPnFfAwQDPnF4MAwDBAM+1UgDBAE+1VADBAA+1VYDBAE+ 1V4DBAE+1WYDBAE+1XADBAA+1XQDBAJN3YADBAZZ/cADBARteKADBAK5MOwDBAHB IMYDBAHDAkADBAHDAkQDBADDAkgDBADDAk0DBAHDAlIwDAMEAMMCVwMEAsMCWAME AcMCXgMEANQYJTAMAwQA1BgnAwQA1BgoAwQA1BgrAwQA1BgyAwQA1Bg5AwQA1J6o AwQB1J6qAwQB1J6uAwQA1b3AMAwDBALVvcQDBADVvcYDBADVvcgwDAMEANW9zwME AdW90DAMAwQA1b3TAwQA1b3WAwQA2ReBAwQA2ReLAwQD2ReYMBQEAgACMA4DBQAq AZhgAwUAKgIEQDAnBggrBgEFBQcBCAEB/wQYMBagFDASAgIa9wICePgCAwCiPwID AySAMA0GCSqGSIb3DQEBCwUAA4IBAQBH6z+Nkn4R8cTnRN1v9wUWLMhthRmb4qwL LRsdZYZ2DValVrXkY1m7FP9KGs8zh5DiXCkdMq4vsoAs7T+0eXRs2cyCUjXCgQeV owbfzyAsF1dy/JleX1pOvnM/jW5Pqs2Lb1gMj0vrtPBGb0WN6KgQ593y9EVE02p2 /Fch5fMv3FoFJfLciKvHbjG+91LsrF9KNHGGNOfESV+fJzA41+cd3tjXsONJPppt Te13AGkvamDJv4s4lt67wlTAYJLe38Gy80sk/6u+Hu2HB/YhhUc6KjWPksMDb3OI pRGntyDpe9NKS8yOt2HUrpqFHCwZCY6tF1sM1lvFXEujFcyPgeXM -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:36 2026 by rpki-client