This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer File: avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer (raw, json) Hash identifier: ilcX20BvexAKtgw9l9WqEhpvwh264MME3aPeBUJfjoA= Subject key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C118C492AA50494D0501D2574D38289 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211442 IP: 193.37.250.0/24 IP: 2a10:e1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:8c:49:2a:a5:04:94:d0:50:1d:25:74:d3:82:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6af9c540b146bb44c8219d01375c10124920ae9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:7b:b5:4b:6d:31:5c:b8:38:f4:3d:b5:55: 1e:56:88:33:19:c8:39:ff:6e:30:3f:1e:3d:bc:12: f1:38:ca:61:fe:1a:4f:a3:f6:69:c4:b4:74:ef:a8: 6b:13:f2:44:47:32:37:ea:9f:06:4c:f9:7c:fe:1e: 5f:2e:54:b7:31:9d:ae:0e:c9:23:47:23:21:8b:ca: e7:d5:4a:2b:8d:09:b3:1c:84:36:97:dc:25:06:59: 35:70:18:ed:33:e1:0f:46:90:65:95:0c:1f:28:a8: ad:ef:88:97:a8:38:7d:cb:ec:ed:6c:ef:e6:23:97: 61:0e:74:7e:ac:44:7d:d3:bd:d3:7b:2f:9a:2e:41: 64:b1:fd:c4:74:8a:3f:e2:71:58:54:2b:84:2d:cf: 47:1f:27:16:38:90:d2:30:93:ff:9d:b5:25:c5:1c: e1:0f:34:32:03:ec:be:95:dc:13:48:ee:6a:10:1a: 45:f0:bf:c1:e4:b7:7b:32:0e:53:43:51:e4:00:1b: 1a:95:18:c1:68:96:c1:fd:5a:e2:cd:4a:16:5c:66: a7:a5:93:e6:fd:cd:e3:bd:3a:b8:fc:16:93:80:a5: 18:3b:d3:33:a0:bf:3e:61:38:5d:37:71:73:60:a1: ac:de:ec:5d:69:e6:da:fd:43:1e:e3:c6:9d:5a:40: 64:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.250.0/24 IPv6: 2a10:e1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211442 Signature Algorithm: sha256WithRSAEncryption 25:cc:2a:f5:04:e3:d5:bd:11:4d:e9:23:b7:9f:16:cc:6b:55: df:f2:ac:d4:00:8c:d6:70:9b:23:31:c5:b8:4c:d3:88:66:06: bf:f3:13:b7:37:c5:85:05:a3:4e:ed:cd:06:61:59:b3:b9:b1: 5a:35:47:5e:92:ac:e8:41:4e:28:02:84:64:d8:dc:14:68:64: fd:2c:3d:52:48:c1:74:d9:4c:42:70:d1:0c:6a:8d:84:a2:8c: 8f:ae:1a:15:aa:b3:42:bc:b6:65:a1:b0:68:c5:ab:8a:d1:dd: 7d:9f:63:be:d7:a4:bb:36:b6:2c:b5:9b:3a:2d:25:10:7f:fe: 01:52:cd:f1:ef:ea:8b:07:4f:01:25:78:0f:ee:8f:cd:b4:8c: 99:fc:c5:46:aa:45:7f:2d:e2:49:2f:de:24:d5:a1:b4:8d:75: 04:e2:a3:94:8c:e3:cc:42:d9:89:b0:a6:1b:20:84:06:4f:f4: c1:f7:f7:ac:04:f5:63:da:7d:a3:b4:f4:e3:01:ad:02:f8:68: bf:a4:d7:af:5f:a2:c2:a8:6f:b2:c8:ef:2e:9b:0a:de:b5:53: 06:3e:8a:62:3f:b2:6b:c8:b2:75:72:cf:c0:89:e3:e2:f6:a8: cb:10:75:e5:c7:3a:c8:32:11:c8:10:d3:8d:35:94:59:a5:4a: 8b:1d:e0:27 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8EYxJKqUElNBQHSV004KJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWY5YzU0MGIxNDZiYjQ0YzgyMTlkMDEzNzVjMTAxMjQ5MjBhZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzd7tUttMVy4OPQ9tVUeVogzGcg5 /24wPx49vBLxOMph/hpPo/ZpxLR076hrE/JERzI36p8GTPl8/h5fLlS3MZ2uDskj RyMhi8rn1UorjQmzHIQ2l9wlBlk1cBjtM+EPRpBllQwfKKit74iXqDh9y+ztbO/m I5dhDnR+rER9073Tey+aLkFksf3EdIo/4nFYVCuELc9HHycWOJDSMJP/nbUlxRzh DzQyA+y+ldwTSO5qEBpF8L/B5Ld7Mg5TQ1HkABsalRjBaJbB/VrizUoWXGanpZPm /c3jvTq4/BaTgKUYO9MzoL8+YThdN3FzYKGs3uxdaeba/UMe48adWkBkoQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGr5xUCxRrtEyCGdATdcEBJJIK6fMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzM3OTUy OS1mNDY5LTQzNjMtOGI4Ny00MjFhOTliZGQ3OGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvMzc5NTI5 LWY0NjktNDM2My04Yjg3LTQyMWE5OWJkZDc4Zi8xL2F2bkZRTEZHdTBUSUlaMEJO MXdRRWtrZ3JwOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwSX6MA0EAgACMAcDBQMqEOHAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM58jANBgkqhkiG9w0BAQsFAAOCAQEAJcwq9QTj1b0R Tekjt58WzGtV3/Ks1ACM1nCbIzHFuEzTiGYGv/MTtzfFhQWjTu3NBmFZs7mxWjVH XpKs6EFOKAKEZNjcFGhk/Sw9UkjBdNlMQnDRDGqNhKKMj64aFaqzQry2ZaGwaMWr itHdfZ9jvtekuza2LLWbOi0lEH/+AVLN8e/qiwdPASV4D+6PzbSMmfzFRqpFfy3i SS/eJNWhtI11BOKjlIzjzELZibCmGyCEBk/0wff3rAT1Y9p9o7T04wGtAvhov6TX r1+iwqhvssjvLpsK3rVTBj6KYj+ya8iydXLPwInj4vaoyxB15cc6yDIRyBDTjTWU WaVKix3gJw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:02 2026 by rpki-client