This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer File: abfzv44Ke1kKD_qhycCsWAoLEZ4.cer (raw, json) Hash identifier: SL3KlCjUABjCgvGBMcU3EiZxSjK+q4TKSd7gz6DyuSY= Subject key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B37B90BEE794BABF5E0E3FE8C9AD5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.210.140.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:37:b9:0b:ee:79:4b:ab:f5:e0:e3:fe:8c:9a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:06:d2:8c:a2:2c:e5:66:eb:af:dc:20:bf:86: 2c:37:2e:97:67:af:20:f5:39:d1:f9:7d:24:b8:7e: 81:62:e4:d6:a8:b5:c0:0d:19:08:d5:38:51:c1:f6: 94:1a:bf:c5:1b:1c:4e:2d:20:3c:33:8e:03:2c:aa: 58:17:e5:da:9f:ba:45:61:0d:8b:f4:08:96:b0:e6: 97:7b:59:d5:30:80:48:d3:ce:9d:87:eb:fb:f0:ec: 75:5a:6a:f9:2d:15:9e:8b:64:aa:07:53:f1:16:e5: 4f:d8:de:6f:95:18:94:7e:6d:f4:b4:f0:28:66:40: 12:7e:c3:57:b2:62:12:32:d4:40:76:e9:ff:ab:6d: fd:7a:c9:0d:16:57:4f:03:c3:5e:dd:be:aa:fd:dd: e8:c2:76:c0:e9:1f:2c:c2:cc:38:40:34:fb:91:53: f2:04:3a:28:28:e4:9f:d5:35:26:8e:82:42:51:8c: 5f:df:19:b5:eb:46:49:c5:f4:34:1f:85:15:81:23: 2d:9a:e3:5a:28:4f:8a:cf:46:98:ec:89:6a:88:69: f4:50:8e:f0:66:25:c3:dc:f5:3e:ea:86:ca:dc:dc: 94:0a:f7:72:3a:30:48:7f:da:d3:e0:ad:ea:86:9e: a4:59:89:7d:40:5c:f7:30:bc:ff:45:c3:9d:d0:8f: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.210.140.0/22 Signature Algorithm: sha256WithRSAEncryption 34:ce:cb:de:1b:54:7b:fc:28:ab:a6:58:0e:5b:a8:ea:fa:36: cb:04:15:d3:a2:6a:1b:05:f2:a9:97:a1:be:81:86:9a:d8:28: a5:26:c3:07:c0:01:ce:c0:b2:9f:18:98:a1:fe:77:cf:cc:42: 84:de:a0:bc:30:12:99:c6:30:26:b7:d0:87:c6:41:e6:23:f8: fe:76:42:66:1b:02:90:a6:9d:fc:e8:59:a2:b4:69:3d:84:66: 45:5e:02:7f:93:1e:66:d6:d4:08:45:19:60:0b:3f:74:92:e6: d6:c5:67:bd:ff:00:2e:73:00:4c:af:eb:bc:8a:59:30:f1:d7: 13:eb:67:b9:1b:85:2e:47:78:29:94:74:22:0f:0e:31:06:cc: de:f0:9e:89:e0:c3:e5:e3:d7:eb:d3:29:a7:63:f6:e6:2b:0f: 91:89:3e:e8:e0:ea:ec:e2:a6:2c:16:99:59:4d:89:19:97:19: 38:c2:cf:76:b2:48:45:df:61:5f:94:04:46:11:5c:65:f3:b1: 4b:99:56:0e:0c:65:ad:79:ce:43:ef:60:af:19:f0:9b:b5:c0: 05:c3:d2:c3:49:fb:92:df:8f:92:10:64:1e:25:67:86:84:46: 0f:59:e2:a2:57:15:60:0c:11:54:46:15:8a:2b:63:af:e0:16: 29:b7:d8:6f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6Wze5C+55S6v14OP+jJrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWI3ZjNiZjhlMGE3YjU5MGEwZmZhYTFjOWMwYWM1ODBhMGIxMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AbSjKIs5Wbrr9wgv4YsNy6XZ68g 9TnR+X0kuH6BYuTWqLXADRkI1ThRwfaUGr/FGxxOLSA8M44DLKpYF+Xan7pFYQ2L 9AiWsOaXe1nVMIBI086dh+v78Ox1Wmr5LRWei2SqB1PxFuVP2N5vlRiUfm30tPAo ZkASfsNXsmISMtRAdun/q239eskNFldPA8Ne3b6q/d3ownbA6R8swsw4QDT7kVPy BDooKOSf1TUmjoJCUYxf3xm160ZJxfQ0H4UVgSMtmuNaKE+Kz0aY7IlqiGn0UI7w ZiXD3PU+6obK3NyUCvdyOjBIf9rT4K3qhp6kWYl9QFz3MLz/RcOd0I+7BQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGm387+OCntZCg/6ocnArFgKCxGeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ5LzE2ZDg1 Zi04NWI1LTQyZTMtYWQ5Zi1lZWMwNWY0OWFjODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMTZkODVm LTg1YjUtNDJlMy1hZDlmLWVlYzA1ZjQ5YWM4Ni8xL2FiZnp2NDRLZTFrS0RfcWh5 Y0NzV0FvTEVaNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW9KMMA0GCSqGSIb3DQEBCwUAA4IBAQA0zsve G1R7/CirplgOW6jq+jbLBBXTomobBfKpl6G+gYaa2CilJsMHwAHOwLKfGJih/nfP zEKE3qC8MBKZxjAmt9CHxkHmI/j+dkJmGwKQpp386FmitGk9hGZFXgJ/kx5m1tQI RRlgCz90kubWxWe9/wAucwBMr+u8ilkw8dcT62e5G4UuR3gplHQiDw4xBsze8J6J 4MPl49fr0ymnY/bmKw+RiT7o4Ors4qYsFplZTYkZlxk4ws92skhF32FflARGEVxl 87FLmVYODGWtec5D72CvGfCbtcAFw9LDSfuS34+SEGQeJWeGhEYPWeKiVxVgDBFU RhWKK2Ov4BYpt9hv -----END CERTIFICATE-----Generated at Mon Jan 26 23:03:10 2026 by rpki-client