This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer File: aaUdRFt2erm2YncC5KKzkE0gP3c.cer (raw, json) Hash identifier: 34y7P7rgBpG86+mevb3DWYer6nmDZIiVti2tbpjpoS8= Subject key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8452D24B6AD647C045BED4AF358237 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.111.103.0/24 IP: 193.134.200.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:52:d2:4b:6a:d6:47:c0:45:be:d4:af:35:82:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69a51d445b767ab9b6627702e4a2b3904d203f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:65:88:e1:6b:c8:11:18:33:e0:05:52:c2: 97:5e:6e:5a:5d:82:65:ff:99:73:53:35:38:65:20: 15:d1:55:e9:0b:19:09:e9:4b:3e:52:4b:47:27:f9: f1:dc:0d:e3:51:d0:75:e9:d9:24:c2:d2:f2:49:0d: f3:bc:4b:0e:7e:91:78:eb:5d:c8:61:f8:12:78:22: fa:03:78:96:d9:37:d0:03:e9:1e:db:a3:76:da:c8: dd:34:18:66:d0:48:6d:8a:03:74:bd:fb:34:45:2f: ac:cb:64:12:b2:f7:c4:9a:aa:3b:40:40:af:8f:5a: 00:38:5e:e0:42:b2:ef:76:34:06:43:4a:64:1a:a2: e3:f2:24:7d:6f:f6:21:e7:cd:f4:01:09:97:ed:16: c0:47:fa:7e:be:08:7b:7a:1b:8d:4a:46:ed:00:7f: 2b:d8:fc:eb:12:99:18:a1:62:43:a9:b2:e7:f6:a2: 40:e1:f3:9f:05:1a:48:53:0f:97:e7:51:36:ec:cf: 6f:3c:29:a9:58:75:54:c3:10:5b:5d:df:74:51:d3: e6:04:51:f5:c8:02:19:36:49:59:18:d0:7a:b8:5f: 12:87:ba:9b:ad:c1:dd:63:8a:14:01:42:b0:6f:8b: b7:30:bc:f1:7a:df:4d:5f:3b:75:07:4f:12:2c:60: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.111.103.0/24 193.134.200.0/21 Signature Algorithm: sha256WithRSAEncryption 14:10:11:c4:e5:f6:c6:8d:df:72:f0:0a:d5:cf:34:bc:e2:7e: 88:36:75:8a:e8:0d:c6:a5:76:86:57:68:b8:db:60:b8:bd:2b: 12:20:a0:37:50:fa:a3:46:9a:f2:61:10:c4:49:6b:45:b4:de: 5d:1e:71:ad:6d:bb:50:2a:7a:89:c8:07:d2:b8:cd:5a:57:da: dd:9e:ae:ae:06:ff:93:d7:ee:41:34:13:d6:98:db:29:fc:d1: cb:c3:7e:53:a9:58:a2:2a:1d:cf:56:1d:52:86:0f:10:a7:5a: 4d:48:4b:19:99:3b:7c:fe:b8:f2:e9:05:ff:fb:35:0b:93:b6: f3:a3:4d:58:a3:30:d9:77:37:09:48:5e:8a:2d:bb:21:1e:36: fe:25:1c:92:77:d0:10:3b:6b:ae:14:8e:fe:fc:5b:ba:47:cb: da:bb:27:79:31:81:75:ea:e5:a7:ac:5f:5d:29:4f:c0:c5:f3: f5:18:92:34:bc:73:67:be:e1:8c:fe:22:8a:aa:86:31:3c:9e: db:75:7b:65:8f:f3:c7:c7:65:f1:e7:df:3a:1b:6f:45:fd:ef: d9:fb:4b:cd:bb:dc:43:f0:08:cb:f6:3b:ec:e1:83:c1:f2:34: 2f:55:48:b5:65:7c:e5:9f:bc:6f:39:e1:90:c2:89:76:bf:bb: 86:0e:72:c0 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt/hFLSS2rWR8BFvtSvNYI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWE1MWQ0NDViNzY3YWI5YjY2Mjc3MDJlNGEyYjM5MDRkMjAzZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTdliOFryBEYM+AFUsKXXm5aXYJl /5lzUzU4ZSAV0VXpCxkJ6Us+UktHJ/nx3A3jUdB16dkkwtLySQ3zvEsOfpF4613I YfgSeCL6A3iW2TfQA+ke26N22sjdNBhm0EhtigN0vfs0RS+sy2QSsvfEmqo7QECv j1oAOF7gQrLvdjQGQ0pkGqLj8iR9b/Yh5830AQmX7RbAR/p+vgh7ehuNSkbtAH8r 2PzrEpkYoWJDqbLn9qJA4fOfBRpIUw+X51E27M9vPCmpWHVUwxBbXd90UdPmBFH1 yAIZNklZGNB6uF8Sh7qbrcHdY4oUAUKwb4u3MLzxet9NXzt1B08SLGA2pQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFGmlHURbdnq5tmJ3AuSis5BNID93MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzJiYTY2 ZS01YjNlLTQxZmUtOGEwOS03MDUyMGVhNzYzNjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvMmJhNjZl LTViM2UtNDFmZS04YTA5LTcwNTIwZWE3NjM2OS8xL2FhVWRSRnQyZXJtMlluY0M1 S0t6a0UwZ1AzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwG9nAwQDwYbIMA0GCSqGSIb3DQEBCwUAA4IB AQAUEBHE5fbGjd9y8ArVzzS84n6INnWK6A3GpXaGV2i422C4vSsSIKA3UPqjRpry YRDESWtFtN5dHnGtbbtQKnqJyAfSuM1aV9rdnq6uBv+T1+5BNBPWmNsp/NHLw35T qViiKh3PVh1Shg8Qp1pNSEsZmTt8/rjy6QX/+zULk7bzo01YozDZdzcJSF6KLbsh Hjb+JRySd9AQO2uuFI7+/Fu6R8vauyd5MYF16uWnrF9dKU/AxfP1GJI0vHNnvuGM /iKKqoYxPJ7bdXtlj/PHx2Xx5986G29F/e/Z+0vNu9xD8AjL9jvs4YPB8jQvVUi1 ZXzln7xvOeGQwol2v7uGDnLA -----END CERTIFICATE-----Generated at Mon Jan 26 01:45:54 2026 by rpki-client