This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer (raw, json) Hash identifier: RmawFq4ZlgkqJU/fh9moBUlpOGLeqbalfG+z6blbrGY= Subject key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3571BB37E3CF6D6E1B81E6A20CB5B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.30.111.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:71:bb:37:e3:cf:6d:6e:1b:81:e6:a2:0c:b5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=699710a1693710ac835f0b6745f90d2d680a1200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:58:f5:5f:05:8b:b6:be:57:7a:c1:5d:45:6e: be:45:12:22:ab:eb:30:ab:6a:ab:55:8f:6f:9a:c2: 18:da:ef:d5:5e:a1:37:4c:3f:8f:85:5c:cd:88:b2: 88:79:80:41:b8:a8:7e:cd:52:c7:3d:a5:21:d3:9c: 53:da:a0:45:02:b9:24:21:3e:57:03:15:35:af:48: 5e:33:6a:d1:28:37:47:74:2e:fc:76:a1:3f:47:46: 4b:d0:cb:69:02:68:9a:3d:f3:3c:2b:1c:fe:9d:6c: 29:a6:05:d3:df:1e:16:f5:4e:67:34:44:4f:cb:8d: 0e:58:be:d0:4a:99:83:5f:da:b2:b6:af:81:5e:9a: 6d:c7:41:9b:ce:83:0e:ac:9b:f8:b4:31:05:ee:b2: d3:76:86:cf:cd:c1:b8:8e:a8:2b:1a:bd:fe:8b:5b: 77:03:80:21:27:c1:4f:6e:4b:16:a1:65:9f:7a:f4: 18:1d:e6:a2:1f:1b:ff:12:27:8f:e7:d4:38:2f:ec: 7d:99:10:ac:c6:16:7d:f5:a3:91:63:1d:df:c3:3c: 4a:d3:15:ea:29:a7:ac:9e:94:38:92:c3:aa:d7:b5: 6a:7d:fa:dd:25:67:d8:07:37:f0:fd:3d:ef:16:46: 65:0e:60:c9:e0:32:28:fc:b9:5f:ac:2a:63:0c:2d: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.111.0/24 Signature Algorithm: sha256WithRSAEncryption a9:f6:7f:e6:e0:01:b4:74:ae:61:16:a7:fc:af:b8:c1:4c:c2: 58:8b:3d:43:be:25:f0:fb:c5:7a:3c:3c:97:64:bf:33:66:03: a4:a5:8d:9b:ef:98:16:64:b5:43:a2:7e:01:63:e1:86:2a:06: cc:33:01:e0:aa:b4:27:ec:a7:cb:e3:9a:ac:43:22:14:47:0f: 71:28:9e:81:3d:ec:64:95:c1:d7:ec:53:c3:1f:6e:8d:c3:41: d3:9b:89:a0:21:59:f1:c1:a5:02:89:72:45:e1:5b:7b:e1:75: 30:c2:89:c5:c2:cf:8d:34:d2:3d:f9:6f:ca:03:d2:88:65:5f: 4b:86:19:5e:a0:3a:60:f2:cb:56:e5:8c:20:ad:b3:f0:25:1e: 98:62:f9:8a:95:2e:f0:1a:15:9d:c6:5e:28:32:7b:7b:48:30: 9b:58:41:94:9e:4f:88:23:fd:ca:95:f8:98:f1:f7:d6:19:85: 48:bf:83:25:f1:7e:d6:a9:02:9c:e7:eb:af:3b:eb:a8:96:2e: af:35:ed:b4:51:e4:b1:33:ed:1d:3f:20:fa:4e:ad:9b:73:0d: e1:c6:0a:52:09:7c:e4:77:ce:f7:6e:d2:a9:97:e2:a1:e7:5c: 12:d2:63:4a:47:f1:e3:da:ae:1f:ef:62:21:9b:0c:5d:3c:13: a2:fb:1e:2b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt7NXG7N+PPbW4bgeaiDLWzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTk3MTBhMTY5MzcxMGFjODM1ZjBiNjc0NWY5MGQyZDY4MGExMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1j1XwWLtr5XesFdRW6+RRIiq+sw q2qrVY9vmsIY2u/VXqE3TD+PhVzNiLKIeYBBuKh+zVLHPaUh05xT2qBFArkkIT5X AxU1r0heM2rRKDdHdC78dqE/R0ZL0MtpAmiaPfM8Kxz+nWwppgXT3x4W9U5nNERP y40OWL7QSpmDX9qytq+BXpptx0GbzoMOrJv4tDEF7rLTdobPzcG4jqgrGr3+i1t3 A4AhJ8FPbksWoWWfevQYHeaiHxv/EieP59Q4L+x9mRCsxhZ99aORYx3fwzxK0xXq KaesnpQ4ksOq17VqffrdJWfYBzfw/T3vFkZlDmDJ4DIo/LlfrCpjDC3e/QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGmXEKFpNxCsg18LZ0X5DS1oChIAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzA3NzQ1 Yy00N2MxLTQwMDItOTUwZi0yOWI5OGVjZGZmMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvMDc3NDVj LTQ3YzEtNDAwMi05NTBmLTI5Yjk4ZWNkZmYxMi8xL2FaY1FvV2szRUt5RFh3dG5S ZmtOTFdnS0VnQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwR5vMA0GCSqGSIb3DQEBCwUAA4IBAQCp9n/m 4AG0dK5hFqf8r7jBTMJYiz1DviXw+8V6PDyXZL8zZgOkpY2b75gWZLVDon4BY+GG KgbMMwHgqrQn7KfL45qsQyIURw9xKJ6BPexklcHX7FPDH26Nw0HTm4mgIVnxwaUC iXJF4Vt74XUwwonFws+NNNI9+W/KA9KIZV9LhhleoDpg8stW5YwgrbPwJR6YYvmK lS7wGhWdxl4oMnt7SDCbWEGUnk+II/3KlfiY8ffWGYVIv4Ml8X7WqQKc5+uvO+uo li6vNe20UeSxM+0dPyD6Tq2bcw3hxgpSCXzkd873btKpl+Kh51wS0mNKR/Hj2q4f 72IhmwxdPBOi+x4r -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:15 2026 by rpki-client