This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer File: aJbZwUqKtdiwtAgYfs4VoNI87hw.cer (raw, json) Hash identifier: r3w9IMj0QOws3jxY+FT/6h74ng7dftQfSvXB3TuB1wc= Subject key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA523977D16003F227F8A119A6BE9C4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 192.109.36.0/24 IP: 2001:678:b10::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:23:97:7d:16:00:3f:22:7f:8a:11:9a:6b:e9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1d:6e:f3:2a:6d:c0:09:b0:10:af:c1:94:44: 15:62:28:7c:d7:fe:84:7c:64:7b:3c:d5:88:68:ae: 52:7d:45:dc:f7:b2:82:3d:52:81:33:27:36:b4:c6: bb:0e:82:71:1f:67:f7:8f:48:b8:90:94:2a:08:98: 39:6e:5d:58:8a:a7:77:57:ae:1f:d7:aa:cb:6e:7e: f3:23:4f:09:8f:93:53:5c:ba:de:b1:f4:86:6c:7a: 8a:9e:65:94:7f:95:37:f2:57:bb:40:45:8d:e6:19: 61:3b:a5:4c:ae:6a:60:47:44:d9:92:4d:bd:5b:95: 5b:8f:75:16:5b:1f:a6:e3:a7:8c:e5:e7:d3:20:19: 7e:29:c4:2a:d8:80:79:39:0c:3c:62:9d:cc:62:26: 5e:5b:29:f8:ce:2d:ca:6b:b1:30:8d:44:b4:88:67: bf:d6:26:ed:3a:8c:39:f5:25:43:16:fb:e3:88:f1: 4c:85:54:21:26:b6:90:a8:9d:ce:30:f5:59:cb:9e: d9:65:b7:c6:36:05:05:46:45:44:79:5f:de:64:9d: 73:a5:71:42:8a:d1:0e:93:49:4e:d3:20:66:01:b9: b4:e8:0e:7b:d9:2a:f1:fd:86:77:4f:5d:6c:00:b3: 4f:96:f1:72:12:6e:62:ee:e4:56:ce:ea:f1:e4:be: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.36.0/24 IPv6: 2001:678:b10::/48 Signature Algorithm: sha256WithRSAEncryption aa:63:43:86:43:26:8c:68:a0:59:4e:53:31:96:57:41:ca:f9: 9b:9d:70:c3:de:f7:61:34:c0:7a:2e:3b:f8:42:0d:49:be:59: 1d:8d:a3:33:6e:93:b9:17:8d:b3:9b:e5:ad:1b:9e:4e:cb:d7: 3c:cf:89:b2:b1:5a:f4:a9:a6:bf:d6:14:73:77:33:b9:81:ae: 1c:43:97:e6:7e:49:47:a8:2d:40:9a:7e:0c:ee:95:d8:77:35: 59:b7:fe:c0:60:21:49:3a:28:44:a6:5b:ed:83:31:7d:ee:68: 33:ab:77:e9:ad:29:a7:a9:6c:df:4e:8b:56:cd:9e:fe:e0:b3: 86:60:d4:ba:c7:fb:b7:37:73:03:fc:ca:1b:62:bd:22:0a:55: e4:b4:be:9a:23:f9:cc:fe:74:7e:06:db:f7:40:5d:9f:eb:15: db:21:c4:01:e6:53:c2:07:4c:4a:d1:82:96:ae:77:d0:54:e5: 89:57:d7:49:0d:29:e3:6a:d3:1c:96:64:70:95:0d:20:08:da: 1d:5f:aa:e9:fd:24:4e:8b:3f:9e:95:38:54:f9:30:f2:17:26: b1:9a:b8:54:04:ca:39:6b:ba:c6:a0:a2:09:8d:86:d2:9f:ac: 69:85:90:53:67:1e:ca:5e:8f:69:65:07:7c:f1:7e:22:51:22: 6f:34:d3:9c -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt7pSOXfRYAPyJ/ihGaa+nEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODk2ZDljMTRhOGFiNWQ4YjBiNDA4MTg3ZWNlMTVhMGQyM2NlZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB1u8yptwAmwEK/BlEQVYih81/6E fGR7PNWIaK5SfUXc97KCPVKBMyc2tMa7DoJxH2f3j0i4kJQqCJg5bl1Yiqd3V64f 16rLbn7zI08Jj5NTXLresfSGbHqKnmWUf5U38le7QEWN5hlhO6VMrmpgR0TZkk29 W5Vbj3UWWx+m46eM5efTIBl+KcQq2IB5OQw8Yp3MYiZeWyn4zi3Ka7EwjUS0iGe/ 1ibtOow59SVDFvvjiPFMhVQhJraQqJ3OMPVZy57ZZbfGNgUFRkVEeV/eZJ1zpXFC itEOk0lO0yBmAbm06A572Srx/YZ3T11sALNPlvFyEm5i7uRWzurx5L4IiwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFGiW2cFKirXYsLQIGH7OFaDSPO4cMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2FhN2Q4 Ny00ZGNlLTQ0YTMtYWE1NC1mODVlMzNkZDg5NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvYWE3ZDg3 LTRkY2UtNDRhMy1hYTU0LWY4NWUzM2RkODk0Ni8xL2FKYlp3VXFLdGRpd3RBZ1lm czRWb05JODdody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwG0kMA8EAgACMAkDBwAgAQZ4CxAwDQYJKoZI hvcNAQELBQADggEBAKpjQ4ZDJoxooFlOUzGWV0HK+ZudcMPe92E0wHouO/hCDUm+ WR2NozNuk7kXjbOb5a0bnk7L1zzPibKxWvSppr/WFHN3M7mBrhxDl+Z+SUeoLUCa fgzuldh3NVm3/sBgIUk6KESmW+2DMX3uaDOrd+mtKaepbN9Oi1bNnv7gs4Zg1LrH +7c3cwP8yhtivSIKVeS0vpoj+cz+dH4G2/dAXZ/rFdshxAHmU8IHTErRgpaud9BU 5YlX10kNKeNq0xyWZHCVDSAI2h1fqun9JE6LP56VOFT5MPIXJrGauFQEyjlrusag ogmNhtKfrGmFkFNnHspej2llB3zxfiJRIm8005w= -----END CERTIFICATE-----Generated at Mon Jan 12 16:00:58 2026 by rpki-client