This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYVKV6sNijySLI9qeaqP6KaiwJ4.cer File: aYVKV6sNijySLI9qeaqP6KaiwJ4.cer (raw, json) Hash identifier: vupb1SIEJbJOqsIDCxlMKhJce654HfVr5dtAZzQnkVM= Subject key identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3E20CA7F7C7815810B33E529CCDC7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.34.200.0/22 IP: 2a0c:bb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e2:0c:a7:f7:c7:81:58:10:b3:3e:52:9c:cd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69854a57ab0d8a3c922c8f6a79aa8fe8a6a2c09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:cb:c7:d3:5d:13:99:3a:b9:f6:fd:5e:18: 2e:a2:64:c0:c5:da:b8:dc:6d:54:be:a4:43:48:86: cc:c0:c7:98:4e:37:82:0b:fe:c4:1b:0c:90:ce:d0: 07:6e:ee:f1:59:b2:fc:7a:fb:8f:71:dd:40:06:10: 40:88:6f:79:4d:20:31:23:b2:a1:08:eb:2d:f5:0a: a7:0b:e8:9d:ad:74:d6:0c:30:35:1d:4c:40:e6:17: 46:b9:98:fc:05:70:77:07:e6:fb:7c:90:61:a4:61: d2:42:59:c2:bc:b9:31:a2:1d:31:d2:88:72:77:07: f9:16:c1:99:8b:0e:98:42:c4:4c:82:aa:15:37:a4: 54:62:9d:7b:29:36:58:f8:16:e0:08:b9:85:a1:37: 49:61:d5:49:3a:5c:4c:8a:a6:d6:2a:9f:be:6f:ad: de:65:6e:07:3d:89:26:ef:d3:e6:8f:c4:64:3b:7d: 17:27:a2:0d:c6:c9:31:e6:41:3e:98:18:66:ca:ab: 68:b3:20:be:83:6f:0c:db:e5:fa:02:85:1a:40:f1: 10:fa:6e:f5:85:2d:34:57:5d:94:d4:fa:13:10:67: b6:9e:79:6d:e7:c7:04:c9:03:3a:82:05:79:7f:55: 2b:35:59:b8:1e:d7:5a:89:8a:43:34:5a:9e:57:99: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:85:4A:57:AB:0D:8A:3C:92:2C:8F:6A:79:AA:8F:E8:A6:A2:C0:9E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3f8107-fc15-4c71-81d4-5238b03545ca/1/aYVKV6sNijySLI9qeaqP6KaiwJ4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.200.0/22 IPv6: 2a0c:bb40::/29 Signature Algorithm: sha256WithRSAEncryption 71:4c:1a:04:29:4f:4c:23:dc:78:57:04:c6:0b:f7:fd:3e:43: d9:96:28:f9:e2:d4:70:02:6c:0c:24:7c:57:6c:b9:77:9a:e4: 28:e0:54:87:7a:56:a4:43:78:86:11:7f:5b:be:06:2a:a7:0d: 89:54:5d:b2:8a:bd:8b:d1:81:ff:ab:7f:8b:c4:59:61:50:4d: 4a:69:7d:88:7f:fe:5b:2b:9b:f7:e7:02:5a:20:cf:8e:78:e0: 30:82:96:3f:8a:ef:e1:b0:fe:1e:bb:0e:07:30:4f:0a:18:7b: 42:6e:f0:bf:5e:4b:5e:b3:c5:39:b2:80:bd:dd:2f:b2:a8:2a: 95:2b:b8:9f:13:e4:09:dd:53:f7:bf:71:66:6e:8c:c3:ca:b4: 35:0d:be:ac:f2:62:6b:e6:72:ca:e0:ae:b4:30:a8:81:c4:5b: a7:ef:89:93:d5:2e:b8:f9:46:8c:de:70:5f:ef:79:82:40:c5: eb:f6:28:cb:3e:70:d7:6d:74:77:68:1a:ce:bf:ec:86:9b:e9: e9:f8:c7:b6:d3:dd:7e:ee:af:c5:01:b5:f1:4f:75:3a:0c:19: f8:7e:03:02:8d:bc:86:70:04:3f:1a:25:46:0f:3b:ee:5b:94: a0:46:01:2d:28:3d:53:02:9f:05:0a:33:69:e3:f0:39:9c:3d: 02:0c:c2:81 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt7o+IMp/fHgVgQsz5SnM3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTg1NGE1N2FiMGQ4YTNjOTIyYzhmNmE3OWFhOGZlOGE2YTJjMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CzLx9NdE5k6ufb9XhguomTAxdq4 3G1UvqRDSIbMwMeYTjeCC/7EGwyQztAHbu7xWbL8evuPcd1ABhBAiG95TSAxI7Kh COst9QqnC+idrXTWDDA1HUxA5hdGuZj8BXB3B+b7fJBhpGHSQlnCvLkxoh0x0ohy dwf5FsGZiw6YQsRMgqoVN6RUYp17KTZY+BbgCLmFoTdJYdVJOlxMiqbWKp++b63e ZW4HPYkm79Pmj8RkO30XJ6INxskx5kE+mBhmyqtosyC+g28M2+X6AoUaQPEQ+m71 hS00V12U1PoTEGe2nnlt58cEyQM6ggV5f1UrNVm4HtdaiYpDNFqeV5nJpQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGmFSlerDYo8kiyPanmqj+imosCeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxLzNmODEw Ny1mYzE1LTRjNzEtODFkNC01MjM4YjAzNTQ1Y2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvM2Y4MTA3 LWZjMTUtNGM3MS04MWQ0LTUyMzhiMDM1NDVjYS8xL2FZVktWNnNOaWp5U0xJOXFl YXFQNkthaXdKNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwiLIMA0EAgACMAcDBQMqDLtAMA0GCSqGSIb3 DQEBCwUAA4IBAQBxTBoEKU9MI9x4VwTGC/f9PkPZlij54tRwAmwMJHxXbLl3muQo 4FSHelakQ3iGEX9bvgYqpw2JVF2yir2L0YH/q3+LxFlhUE1KaX2If/5bK5v35wJa IM+OeOAwgpY/iu/hsP4euw4HME8KGHtCbvC/Xktes8U5soC93S+yqCqVK7ifE+QJ 3VP3v3FmbozDyrQ1Db6s8mJr5nLK4K60MKiBxFun74mT1S64+UaM3nBf73mCQMXr 9ijLPnDXbXR3aBrOv+yGm+np+Me2091+7q/FAbXxT3U6DBn4fgMCjbyGcAQ/GiVG DzvuW5SgRgEtKD1TAp8FCjNp4/A5nD0CDMKB -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:29 2026 by rpki-client