This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer File: axBPHkq67B7_gPJixi-WwlQ4yOE.cer (raw, json) Hash identifier: GPnbkZPS++855LXdmA3PzhlhCu+Jq3vVmZ1+w/xPiHg= Subject key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39170CFAD7F665DD5D97C635D166CF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42881 AS: 49443 AS: 201813 AS: 203950 AS: 204794 AS: 204868 AS: 204872 AS: 205301 AS: 205745 AS: 205770 AS: 205884 AS: 206005 AS: 206127 AS: 206305 AS: 206340 AS: 206413 AS: 206535 AS: 206560 AS: 206582 AS: 206590 AS: 206623 AS: 206644 AS: 206744 AS: 206750 AS: 208317 AS: 209375 AS: 209396 AS: 209868 AS: 209883 AS: 209889 AS: 209896 AS: 209944 AS: 209961 AS: 209963 AS: 209982 AS: 213137 IP: 62.68.73.0/24 IP: 153.51.128.0/18 IP: 2a0b:2dc0::/29 IP: 2a12:1c0::/29 IP: 2a12:f9c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:17:0c:fa:d7:f6:65:dd:5d:97:c6:35:d1:66:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:4f:09:f0:7b:e0:da:c3:01:22:08:2c:f4: a2:24:40:8f:55:6e:9a:de:f2:a0:c4:ba:45:30:03: 78:5c:01:c9:00:95:55:21:f6:2b:da:67:c4:4b:a8: 37:19:e4:94:77:1f:b8:1d:b0:94:12:90:74:d3:10: c4:69:62:fc:79:fe:59:5e:ac:39:2e:8b:63:83:4c: 53:8a:d6:77:36:fd:24:b0:97:b2:75:19:84:22:49: a4:a3:a8:28:d4:53:ff:f6:d8:7f:c4:1a:cf:39:99: 7e:bc:d6:50:10:ca:0b:32:90:ff:4d:2d:2d:d8:9e: 10:78:fc:c2:6e:f7:46:fb:2d:25:33:fc:9b:a1:86: 14:72:17:20:dc:e7:47:78:ff:de:04:ea:06:c4:ef: 7f:fd:ce:4f:a6:d4:95:8f:d5:19:86:4e:03:02:fd: 47:ed:8d:e5:ba:c0:a8:90:6e:3f:f5:0f:bf:47:00: 8a:aa:69:90:53:4f:cb:dd:c9:55:c0:c4:80:a0:b3: 31:86:35:08:bd:26:00:0d:20:3b:a3:18:c5:63:97: 75:e2:52:93:5d:dc:28:ac:84:af:69:03:21:1a:89: 1f:af:a9:55:63:97:2b:b8:09:85:0d:3b:93:92:a7: 19:87:44:1c:ee:16:31:89:50:bd:27:2f:ba:11:19: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.73.0/24 153.51.128.0/18 IPv6: 2a0b:2dc0::/29 2a12:1c0::/29 2a12:f9c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42881 49443 201813 203950 204794 204868 204872 205301 205745 205770 205884 206005 206127 206305 206340 206413 206535 206560 206582 206590 206623 206644 206744 206750 208317 209375 209396 209868 209883 209889 209896 209944 209961 209963 209982 213137 Signature Algorithm: sha256WithRSAEncryption ab:6a:1b:0b:56:e7:b4:99:03:40:1a:b0:b4:89:ef:84:5f:0c: 17:d8:62:10:9d:42:37:a4:79:5b:6e:fc:d2:3c:fc:c7:94:57: fd:59:46:a9:8e:a3:e1:8c:18:2c:2f:71:06:4f:5e:87:8e:fc: 3f:61:d5:70:de:f0:e4:b9:1a:b2:ac:74:af:82:e4:65:30:5b: 1a:e7:1a:fe:49:41:4f:30:c5:7d:07:8b:01:0d:f8:b1:bd:47: 7e:02:7b:eb:00:76:d6:1a:c4:a4:cd:ed:af:0f:04:dd:4c:53: ad:c7:bb:21:21:9e:ac:64:0a:3c:52:81:66:5a:12:3b:f9:4a: 95:bb:ba:82:9f:2b:21:0a:80:68:49:e5:bd:8d:ae:67:b2:d4: 89:85:c0:04:f4:e4:34:b2:66:2c:2f:85:01:ea:2d:2e:c6:84: 7e:78:3d:a4:3f:de:ba:c7:54:20:f3:22:a2:87:d5:d7:90:55: 73:36:26:e6:66:96:cd:c7:87:8c:c2:4d:47:98:4e:83:ff:1d: f8:aa:09:f5:9c:e9:63:8a:67:7a:cf:89:22:9d:7f:ad:ba:4d: 21:d1:7f:be:92:70:84:f2:d7:e4:b8:96:8d:a4:ba:02:d3:1e: 17:f5:53:33:47:2e:ec:ea:03:01:12:35:13:54:46:c8:4c:03: c2:d5:b4:1d -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISAZt+ORcM+tf2Zd1dl8Y10WbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjEwNGYxZTRhYmFlYzFlZmY4MGYyNjJjNjJmOTZjMjU0MzhjOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1PCfB74NrDASIILPSiJECPVW6a 3vKgxLpFMAN4XAHJAJVVIfYr2mfES6g3GeSUdx+4HbCUEpB00xDEaWL8ef5ZXqw5 Lotjg0xTitZ3Nv0ksJeydRmEIkmko6go1FP/9th/xBrPOZl+vNZQEMoLMpD/TS0t 2J4QePzCbvdG+y0lM/yboYYUchcg3OdHeP/eBOoGxO9//c5PptSVj9UZhk4DAv1H 7Y3lusCokG4/9Q+/RwCKqmmQU0/L3clVwMSAoLMxhjUIvSYADSA7oxjFY5d14lKT XdworISvaQMhGokfr6lVY5cruAmFDTuTkqcZh0Qc7hYxiVC9Jy+6ERmLiwIDAQAB o4IDdzCCA3MwHQYDVR0OBBYEFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzY1M2My NC02OGU1LTRhZDgtYjc2My0zMGM5ZGUyMDVhZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvNjUzYzI0 LTY4ZTUtNGFkOC1iNzYzLTMwYzlkZTIwNWFmYy8xL2F4QlBIa3E2N0I3X2dQSml4 aS1Xd2xRNHlPRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTASBAIAATAMAwQAPkRJAwQGmTOAMBsEAgACMBUDBQMqCy3AAwUD KhIBwAMFAyoS+cAwgc0GCCsGAQUFBwEIAQH/BIG9MIG6oIG3MIG0AgMAp4ECAwDB IwIDAxRVAgMDHK4CAwMf+gIDAyBEAgMDIEgCAwMh9QIDAyOxAgMDI8oCAwMkPAID AyS1AgMDJS8CAwMl4QIDAyYEAgMDJk0CAwMmxwIDAybgAgMDJvYCAwMm/gIDAycf AgMDJzQCAwMnmAIDAyeeAgMDLb0CAwMx3wIDAzH0AgMDM8wCAwMz2wIDAzPhAgMD M+gCAwM0GAIDAzQpAgMDNCsCAwM0PgIDA0CRMA0GCSqGSIb3DQEBCwUAA4IBAQCr ahsLVue0mQNAGrC0ie+EXwwX2GIQnUI3pHlbbvzSPPzHlFf9WUapjqPhjBgsL3EG T16Hjvw/YdVw3vDkuRqyrHSvguRlMFsa5xr+SUFPMMV9B4sBDfixvUd+AnvrAHbW GsSkze2vDwTdTFOtx7shIZ6sZAo8UoFmWhI7+UqVu7qCnyshCoBoSeW9ja5nstSJ hcAE9OQ0smYsL4UB6i0uxoR+eD2kP966x1Qg8yKih9XXkFVzNibmZpbNx4eMwk1H mE6D/x34qgn1nOljimd6z4kinX+tuk0h0X++knCE8tfkuJaNpLoC0x4X9VMzRy7s 6gMBEjUTVEbITAPC1bQd -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:35 2026 by rpki-client