This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer File: agTKSpZhYxxOxhWjptFdIgMNz0k.cer (raw, json) Hash identifier: ftEtoYHz9b1eG+I8vZQzApk7kUTQiAO9C6Y66UDRHt8= Subject key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FA02051E646E482A432D48EDBE226 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 59586 IP: 91.240.252.0/23 IP: 185.148.140.0/22 IP: 2001:67c:1ba4::/48 IP: 2a07:6000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a0:20:51:e6:46:e4:82:a4:32:d4:8e:db:e2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:4e:21:b4:f6:17:27:43:1b:6e:c8:1e:48: 51:e4:65:60:80:97:a4:7f:32:39:66:bf:f0:59:cc: 01:0f:0e:71:24:09:25:af:00:ef:17:cc:99:8c:17: 49:1c:e7:c5:33:fb:6e:a4:90:4c:10:91:55:ac:bd: 64:01:ca:7c:0a:12:b9:7d:cc:97:d0:79:fc:f8:b9: 2c:04:b4:6e:29:20:4e:13:98:44:52:e1:bf:fd:89: 2a:88:b7:53:b0:82:5d:3a:d0:e0:04:c7:71:e6:08: 1c:d0:2d:e4:51:b9:1e:93:fb:9c:4e:65:bb:04:1b: 64:61:8f:15:95:1d:14:80:16:e1:63:9c:e3:f9:cc: 42:b1:ee:86:b1:96:34:8a:b1:2c:6e:98:5d:0a:38: 56:ef:4b:cf:12:24:87:16:cc:84:6f:9e:b3:9b:e6: 4c:fd:41:f1:4d:59:a5:98:75:8b:f7:57:fb:b8:ad: 0c:ef:c7:2c:2b:26:68:d8:19:51:95:18:06:01:68: 53:00:45:02:5c:f3:ff:7d:87:5b:5f:69:e6:a6:95: d9:c5:5f:d5:ce:96:9d:ab:da:45:60:b3:29:68:bd: ae:70:1b:e2:c6:b0:c4:4f:8f:59:91:6f:87:ea:f9: 22:37:02:94:f9:70:98:3e:68:4b:eb:10:88:33:90: e8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.240.252.0/23 185.148.140.0/22 IPv6: 2001:67c:1ba4::/48 2a07:6000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59586 Signature Algorithm: sha256WithRSAEncryption 4c:44:0d:47:9d:c8:33:e1:1c:b3:a5:71:78:71:7f:eb:4f:f1: ef:e7:cf:30:99:3f:e7:14:e2:ff:0f:f8:26:e7:07:4f:a8:cf: 0e:d2:aa:40:69:a4:9a:1b:e1:77:2a:c9:45:26:c6:3e:3c:5a: 7e:6d:c5:72:de:e1:75:23:a5:27:3b:a2:93:38:58:3c:6f:66: 1e:cf:85:c1:0e:24:24:ca:50:7f:fb:af:e0:7b:6f:a7:52:a1: 79:79:6b:d1:f1:9a:76:18:fd:34:80:88:68:b6:01:93:82:b2: 78:1c:25:1b:cd:79:1d:ac:1e:f6:26:c7:d8:80:77:57:12:2f: 88:07:20:7b:ab:f2:c1:fb:2a:5d:2f:6d:65:60:31:ff:d4:bd: 28:00:f6:e0:80:52:d8:c1:fa:61:65:c7:3a:d5:e3:ec:f7:b5: 01:ca:6b:84:3c:9e:0d:83:13:92:78:2a:b2:bc:38:18:15:91: 67:78:a8:0c:8a:3f:74:9f:86:d2:13:cf:43:0c:8a:89:9f:59: d7:ee:d0:c6:88:42:db:dc:d7:a7:3b:e1:66:c4:95:64:de:84: 22:c6:81:ae:0c:77:06:e6:22:e5:6c:b4:0a:d2:ef:37:b5:0a: c3:c1:6f:2b:52:91:9e:ae:dd:8d:84:20:48:4d:e8:bf:99:75: 57:7d:7e:91 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt8f6AgUeZG5IKkMtSO2+ImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTA0Y2E0YTk2NjE2MzFjNGVjNjE1YTNhNmQxNWQyMjAzMGRjZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwVOIbT2FydDG27IHkhR5GVggJek fzI5Zr/wWcwBDw5xJAklrwDvF8yZjBdJHOfFM/tupJBMEJFVrL1kAcp8ChK5fcyX 0Hn8+LksBLRuKSBOE5hEUuG//YkqiLdTsIJdOtDgBMdx5ggc0C3kUbkek/ucTmW7 BBtkYY8VlR0UgBbhY5zj+cxCse6GsZY0irEsbphdCjhW70vPEiSHFsyEb56zm+ZM /UHxTVmlmHWL91f7uK0M78csKyZo2BlRlRgGAWhTAEUCXPP/fYdbX2nmppXZxV/V zpadq9pFYLMpaL2ucBvixrDET49ZkW+H6vkiNwKU+XCYPmhL6xCIM5DobQIDAQAB o4ICvjCCArowHQYDVR0OBBYEFGoEykqWYWMcTsYVo6bRXSIDDc9JMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2ZhNGU2 OS01NzVlLTQ2ZWItYjljMy04MTEzZGE2N2VmNzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvZmE0ZTY5 LTU3NWUtNDZlYi1iOWMzLTgxMTNkYTY3ZWY3NS8xL2FnVEtTcFpoWXh4T3hoV2pw dEZkSWdNTnoway5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDASBAIAATAMAwQBW/D8AwQCuZSMMBYEAgACMBADBwAgAQZ8G6QD BQMqB2AAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDowjANBgkqhkiG9w0BAQsF AAOCAQEATEQNR53IM+Ecs6VxeHF/60/x7+fPMJk/5xTi/w/4JucHT6jPDtKqQGmk mhvhdyrJRSbGPjxafm3Fct7hdSOlJzuikzhYPG9mHs+FwQ4kJMpQf/uv4Htvp1Kh eXlr0fGadhj9NICIaLYBk4KyeBwlG815Hawe9ibH2IB3VxIviAcge6vywfsqXS9t ZWAx/9S9KAD24IBS2MH6YWXHOtXj7Pe1AcprhDyeDYMTkngqsrw4GBWRZ3ioDIo/ dJ+G0hPPQwyKiZ9Z1+7QxohC29zXpzvhZsSVZN6EIsaBrgx3BuYi5Wy0CtLvN7UK w8FvK1KRnq7djYQgSE3ov5l1V31+kQ== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:38 2026 by rpki-client