This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer File: afc1LQcTViPjP1p-YpJdS6tyL8Y.cer (raw, json) Hash identifier: dktzHdih+ndeBlB/qbFGmn+PdMvTR+hipsfiiCxCg3U= Subject key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C667587B4BD6FCEF6E14C177639A0E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210094 IP: 178.251.20.0/22 IP: 2a0d:5d40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:67:58:7b:4b:d6:fc:ef:6e:14:c1:77:63:9a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:4c:6e:d6:71:04:c5:99:fc:da:e1:21:f2: 4e:5b:0f:c5:9e:e1:67:94:ac:9b:15:51:8e:80:5b: da:6c:f4:69:0e:b8:a7:84:d0:93:c8:82:45:51:5f: 60:cc:36:ba:40:38:bd:ed:7a:72:df:d5:21:1b:1d: 26:f4:d1:c3:fc:5e:44:d3:d8:4d:91:68:73:4c:53: 73:f8:29:55:ac:9f:0d:f9:a2:4a:a1:ee:1d:55:bb: 9c:59:93:39:93:b0:9b:20:03:6d:c5:bf:d0:e0:1f: c4:29:4b:91:0a:48:6f:ee:a5:cf:1d:c4:77:cf:4c: 51:62:1b:ce:1b:fe:81:36:e2:29:2d:3b:2c:d3:39: 5b:41:a2:e8:e8:f5:de:e2:a8:83:ca:e6:df:2a:2b: 36:16:45:e2:5b:69:65:10:bf:98:80:80:af:31:8c: b9:fe:48:4d:50:cc:54:bd:40:c4:6c:41:88:71:18: 72:cc:91:6d:f4:f0:c6:e8:e1:86:34:8e:06:73:9b: cf:2d:c0:37:b8:63:2e:91:80:16:de:11:c8:d2:77: ea:36:40:b9:7f:7f:44:bb:9a:09:1f:c9:1c:4a:3e: ef:98:d7:29:43:6c:b6:f9:44:66:08:0c:96:dc:05: 62:1d:4d:88:c0:bb:99:1e:17:27:69:fd:8a:d1:d5: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.20.0/22 IPv6: 2a0d:5d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210094 Signature Algorithm: sha256WithRSAEncryption 00:94:1a:ec:c6:04:c7:90:de:f0:48:7d:86:1b:32:b2:8d:e1: a0:da:56:2b:ca:49:3c:fe:c0:d0:c0:93:3e:52:ae:eb:4d:9f: 5f:30:2b:09:b1:ae:75:92:61:c9:4b:87:33:5d:ec:ac:bf:6a: 45:a6:07:05:a6:e7:23:44:90:be:ef:d8:4b:87:17:bd:94:46: 6f:ff:49:37:be:9e:ce:1b:7e:84:b6:35:b7:3a:01:30:52:d2: 77:04:fd:91:02:02:22:d6:28:fb:21:37:47:88:25:bb:a5:51: 74:35:14:19:a8:65:7a:20:45:04:65:79:e9:44:5e:a7:b1:ef: 84:d3:54:bf:5a:f7:50:a3:23:01:ef:31:b0:fc:8c:03:73:7e: 61:94:f0:9f:ab:5b:3a:9c:03:2f:88:4f:1e:14:be:8f:90:e8: 34:a6:e6:93:7d:03:30:ff:3d:ec:91:e4:0c:76:ae:88:58:3c: 9f:7a:97:de:3c:69:62:0a:8b:5e:0d:bc:34:54:18:33:18:31: ac:c4:bd:b0:af:53:4f:93:13:46:25:e3:f1:63:90:ee:b4:c6: a0:d1:8d:d0:06:6c:b7:09:64:e8:27:76:c5:d8:09:64:12:50: fe:72:93:57:fc:a8:fb:f3:54:3e:81:7f:af:4c:9d:73:e9:52: 50:fa:08:ad -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xmdYe0vW/O9uFMF3Y5oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWY3MzUyZDA3MTM1NjIzZTMzZjVhN2U2MjkyNWQ0YmFiNzIyZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a5MbtZxBMWZ/NrhIfJOWw/FnuFn lKybFVGOgFvabPRpDrinhNCTyIJFUV9gzDa6QDi97Xpy39UhGx0m9NHD/F5E09hN kWhzTFNz+ClVrJ8N+aJKoe4dVbucWZM5k7CbIANtxb/Q4B/EKUuRCkhv7qXPHcR3 z0xRYhvOG/6BNuIpLTss0zlbQaLo6PXe4qiDyubfKis2FkXiW2llEL+YgICvMYy5 /khNUMxUvUDEbEGIcRhyzJFt9PDG6OGGNI4Gc5vPLcA3uGMukYAW3hHI0nfqNkC5 f39Eu5oJH8kcSj7vmNcpQ2y2+URmCAyW3AViHU2IwLuZHhcnaf2K0dW53wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGn3NS0HE1Yj4z9afmKSXUurci/GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNkLzExOGUy NC03NDJiLTQzOTItOGRmYS0wNzE1MThlMDU3M2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMTE4ZTI0 LTc0MmItNDM5Mi04ZGZhLTA3MTUxOGUwNTczZS8xL2FmYzFMUWNUVmlQalAxcC1Z cEpkUzZ0eUw4WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCsvsUMA0EAgACMAcDBQAqDV1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM0rjANBgkqhkiG9w0BAQsFAAOCAQEAAJQa7MYEx5De 8Eh9hhsyso3hoNpWK8pJPP7A0MCTPlKu602fXzArCbGudZJhyUuHM13srL9qRaYH BabnI0SQvu/YS4cXvZRGb/9JN76ezht+hLY1tzoBMFLSdwT9kQICItYo+yE3R4gl u6VRdDUUGahleiBFBGV56URep7HvhNNUv1r3UKMjAe8xsPyMA3N+YZTwn6tbOpwD L4hPHhS+j5DoNKbmk30DMP897JHkDHauiFg8n3qX3jxpYgqLXg28NFQYMxgxrMS9 sK9TT5MTRiXj8WOQ7rTGoNGN0AZstwlk6Cd2xdgJZBJQ/nKTV/yo+/NUPoF/r0yd c+lSUPoIrQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:56 2026 by rpki-client