This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer File: 32GikiI62a68itgsKlZHX72XqDQ.cer (raw, json) Hash identifier: O2PX2Dg6ORFvOyMJ+pe/j1webx9SwaV/lUhhcUJxmas= Subject key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6D2B3194D8116E9B8CD0B74AADC28 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206485 IP: 45.129.136.0/22 IP: 2a10:9140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d2:b3:19:4d:81:16:e9:b8:cd:0b:74:aa:dc:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:48:ff:82:bf:8c:a4:0a:17:81:26:e8:14: 05:40:20:fc:20:f0:15:ec:2e:62:61:ec:70:90:38: 8c:3f:2c:fb:60:43:96:83:1d:2b:54:8b:0d:6c:31: 3d:a0:9c:f0:14:4e:b2:0c:a3:07:a7:4c:6d:34:e3: ad:f6:5c:09:95:11:93:7b:4b:64:6f:b2:bc:8c:e7: 90:d6:03:ad:5a:77:85:a9:ca:18:c8:6b:2c:ee:37: a0:4c:c5:02:56:c0:a1:74:2f:f9:e5:14:9d:d9:d2: 17:eb:23:87:8c:85:cb:71:73:30:f6:b4:f9:a7:b3: 12:5f:4b:6c:33:60:24:ba:ba:39:fe:d7:ba:d7:c8: cd:b3:d5:39:9a:eb:4f:2c:47:59:ed:89:ff:57:d4: dd:f9:17:70:57:53:3d:99:3e:c3:c2:a7:30:2a:25: 4b:0c:17:6b:c4:b9:9d:a9:97:ec:32:67:c2:8a:dd: 39:f2:c9:4d:e1:5f:14:b3:07:3d:a4:a6:f1:47:44: 7a:ae:d8:ed:78:ad:7e:92:b5:5e:bd:7f:13:34:e4: 96:2e:7c:3d:49:4d:5a:a9:af:a5:21:4d:ee:e2:d9: d8:35:99:b7:1b:36:57:f8:ac:9f:23:b2:4a:e4:3e: b8:69:7a:7c:0e:bb:df:13:93:65:a2:29:96:81:d6: e9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.136.0/22 IPv6: 2a10:9140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206485 Signature Algorithm: sha256WithRSAEncryption 99:81:47:e0:a6:aa:9a:d7:0e:11:e8:eb:6d:61:92:dc:73:8d: 80:a1:6a:bd:00:82:41:65:33:ba:a2:d4:74:16:07:b7:fe:d9: dd:9c:59:30:51:78:61:6a:bb:7c:cd:14:e4:50:37:24:37:9c: b4:7d:a6:a0:65:1a:26:35:7b:14:ad:31:7d:5b:fe:d2:8c:7a: b7:28:e5:73:e5:84:fb:51:1a:1a:5d:eb:3c:8e:27:2c:2c:71: 82:9f:de:c6:d8:58:2d:35:92:f6:aa:ac:da:38:8d:09:72:b6: 46:72:01:ed:ca:4c:4b:be:9e:d5:0c:d4:4f:f0:15:c4:b4:94: d4:b4:94:9b:aa:11:2c:e3:da:b2:c4:bd:62:1c:7c:44:97:e9: e3:27:31:56:6c:f0:30:81:3d:3a:41:42:49:84:37:03:21:de: f1:cb:cb:b7:89:81:6c:ff:1d:f3:2b:2d:24:e3:40:91:41:76: 5a:c9:24:c0:f9:96:01:1b:a7:97:3e:1b:99:86:a7:d8:60:0e: 0d:ae:a1:4c:46:b8:5d:68:7d:1f:ea:e7:ca:14:f4:f1:7a:05: 26:31:f3:74:d0:db:d8:b1:08:79:f9:18:6a:02:c0:0e:64:6a: 42:e7:8a:d3:b4:7c:e4:af:92:e9:12:2d:63:7e:ff:db:53:30: 58:e2:fb:5c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+ptKzGU2BFum4zQt0qtwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjYxYTI5MjIyM2FkOWFlYmM4YWQ4MmMyYTU2NDc1ZmJkOTdhODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVFI/4K/jKQKF4Em6BQFQCD8IPAV 7C5iYexwkDiMPyz7YEOWgx0rVIsNbDE9oJzwFE6yDKMHp0xtNOOt9lwJlRGTe0tk b7K8jOeQ1gOtWneFqcoYyGss7jegTMUCVsChdC/55RSd2dIX6yOHjIXLcXMw9rT5 p7MSX0tsM2Akuro5/te618jNs9U5mutPLEdZ7Yn/V9Td+RdwV1M9mT7DwqcwKiVL DBdrxLmdqZfsMmfCit058slN4V8Uswc9pKbxR0R6rtjteK1+krVevX8TNOSWLnw9 SU1aqa+lIU3u4tnYNZm3GzZX+KyfI7JK5D64aXp8DrvfE5NloimWgdbptwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN9hopIiOtmuvIrYLCpWR1+9l6g0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1L2I3ZDg3 NS1iMTJjLTRlZDgtYjgwZi00MTQ4N2Y0ZDQxNzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvYjdkODc1 LWIxMmMtNGVkOC1iODBmLTQxNDg3ZjRkNDE3MS8xLzMyR2lraUk2MmE2OGl0Z3NL bFpIWDcyWHFEUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYGIMA0EAgACMAcDBQMqEJFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMmlTANBgkqhkiG9w0BAQsFAAOCAQEAmYFH4KaqmtcO EejrbWGS3HONgKFqvQCCQWUzuqLUdBYHt/7Z3ZxZMFF4YWq7fM0U5FA3JDectH2m oGUaJjV7FK0xfVv+0ox6tyjlc+WE+1EaGl3rPI4nLCxxgp/exthYLTWS9qqs2jiN CXK2RnIB7cpMS76e1QzUT/AVxLSU1LSUm6oRLOPassS9Yhx8RJfp4ycxVmzwMIE9 OkFCSYQ3AyHe8cvLt4mBbP8d8ystJONAkUF2WskkwPmWARunlz4bmYan2GAODa6h TEa4XWh9H+rnyhT08XoFJjHzdNDb2LEIefkYagLADmRqQueK07R85K+S6RItY37/ 21MwWOL7XA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:46:46 2026 by rpki-client