This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer File: aLReYLH18sssYUoANB6BmW2U0TQ.cer (raw, json) Hash identifier: MsCY3rNcPpEMQeCNDuA7EpWs0X6gxqxgHlsxkrU66E4= Subject key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79114568B02B0BAD49CED3BDA8285088 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211914 IP: 94.158.208.0/21 IP: 2001:67c:db4::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:45:68:b0:2b:0b:ad:49:ce:d3:bd:a8:28:50:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fe:9b:bd:a8:3c:78:aa:5e:57:13:0f:53:9f: ba:73:c8:fa:90:04:f0:64:de:7b:05:5f:55:3a:76: b6:9f:15:60:5c:ae:f9:8f:29:44:e6:ee:8c:1e:d2: 67:b0:64:be:6b:3b:74:44:74:6a:99:53:1f:16:c1: 1f:07:f6:3e:d8:54:0c:f8:c1:11:26:73:1d:d7:b5: 3d:ca:dc:06:bb:3e:a8:04:9a:21:60:9b:b2:ea:b9: 7c:c0:54:87:38:5f:56:86:fd:a0:42:74:49:03:46: f0:1c:fe:88:f5:ce:e3:c8:7b:7a:1a:68:1a:f3:0d: 57:d6:69:88:9f:56:44:84:28:25:93:59:bf:52:cf: 3b:6e:d2:84:65:a6:fb:7a:0e:16:72:c3:3c:bc:42: 02:33:46:fd:ed:68:4f:6b:41:d1:1d:d5:90:db:32: 79:28:f5:fa:b7:3d:7d:3e:c0:b1:f4:fb:f1:0f:71: 2d:de:c5:f2:d2:f3:af:29:56:cc:7f:ea:81:51:f1: 9a:3a:da:46:df:ca:09:32:fa:fa:dd:2d:ed:52:41: 75:38:0f:b8:29:e6:10:d3:10:14:22:a1:62:bf:02: a1:ed:47:1d:cd:89:4b:44:4c:da:3c:7d:d5:12:56: d3:ac:6c:b7:b6:68:9b:5a:46:73:ef:89:7a:8d:a6: 10:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.158.208.0/21 IPv6: 2001:67c:db4::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211914 Signature Algorithm: sha256WithRSAEncryption 13:44:4e:cd:8a:d5:b2:fa:71:9b:b3:94:09:1b:38:2a:77:a3: 42:ec:c1:88:07:e6:73:c2:f2:7d:bf:2d:de:29:8f:d5:ed:d9: 03:5e:a8:01:17:a7:25:8c:67:98:c5:91:b1:c4:5a:d3:f7:27: 7f:de:8d:5a:9a:fe:76:f8:29:64:e1:8c:cd:a7:3e:d2:26:2e: d9:e2:ef:cb:cb:e6:da:e7:03:25:f6:e0:f9:33:d0:80:95:8c: 36:c1:e8:20:2f:96:8c:5d:60:e3:3f:47:83:e0:70:81:4c:1a: 04:6c:81:2e:8a:04:b7:04:c7:5d:67:8f:fe:34:7f:65:5e:db: 1d:28:4a:38:e9:18:00:66:53:ff:04:3f:73:3f:12:aa:02:60: 42:26:78:7d:0c:03:32:3a:7f:a2:5e:17:3a:75:54:53:bc:0d: 75:77:4b:15:b2:4e:e6:3f:60:85:4c:d6:14:ae:fc:79:0b:56: 4d:a4:53:9f:74:20:c2:69:9f:43:be:52:64:b8:26:3d:19:9e: 90:da:7c:40:82:49:8a:f2:48:03:ee:71:cf:16:eb:73:13:f5: 04:b8:35:f5:7c:ce:fe:5c:1e:22:4c:c0:86:1e:e2:85:83:ba: aa:83:98:99:6c:d1:c0:e0:cb:81:0d:31:59:0d:c1:c4:52:c3: 86:4f:1f:86 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt5EUVosCsLrUnO072oKFCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGI0NWU2MGIxZjVmMmNiMmM2MTRhMDAzNDFlODE5OTZkOTRkMTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP6bvag8eKpeVxMPU5+6c8j6kATw ZN57BV9VOna2nxVgXK75jylE5u6MHtJnsGS+azt0RHRqmVMfFsEfB/Y+2FQM+MER JnMd17U9ytwGuz6oBJohYJuy6rl8wFSHOF9Whv2gQnRJA0bwHP6I9c7jyHt6Gmga 8w1X1mmIn1ZEhCglk1m/Us87btKEZab7eg4WcsM8vEICM0b97WhPa0HRHdWQ2zJ5 KPX6tz19PsCx9PvxD3Et3sXy0vOvKVbMf+qBUfGaOtpG38oJMvr63S3tUkF1OA+4 KeYQ0xAUIqFivwKh7UcdzYlLREzaPH3VElbTrGy3tmibWkZz74l6jaYQLQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFGi0XmCx9fLLLGFKADQegZltlNE0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzA4N2E1 Ni0wYzYzLTQ3MzgtOTlmYy1lM2M1NWJiNzcyOGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMDg3YTU2 LTBjNjMtNDczOC05OWZjLWUzYzU1YmI3NzI4ZS8xL2FMUmVZTEgxOHNzc1lVb0FO QjZCbVcyVTBUUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQDXp7QMA8EAgACMAkDBwAgAQZ8DbQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAzvKMA0GCSqGSIb3DQEBCwUAA4IBAQATRE7NitWy +nGbs5QJGzgqd6NC7MGIB+ZzwvJ9vy3eKY/V7dkDXqgBF6cljGeYxZGxxFrT9yd/ 3o1amv52+Clk4YzNpz7SJi7Z4u/Ly+ba5wMl9uD5M9CAlYw2weggL5aMXWDjP0eD 4HCBTBoEbIEuigS3BMddZ4/+NH9lXtsdKEo46RgAZlP/BD9zPxKqAmBCJnh9DAMy On+iXhc6dVRTvA11d0sVsk7mP2CFTNYUrvx5C1ZNpFOfdCDCaZ9DvlJkuCY9GZ6Q 2nxAgkmK8kgD7nHPFutzE/UEuDX1fM7+XB4iTMCGHuKFg7qqg5iZbNHA4MuBDTFZ DcHEUsOGTx+G -----END CERTIFICATE-----Generated at Sun Jan 11 11:22:27 2026 by rpki-client