This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer File: 34h388VbUo4aKds9eZIGVvDGaus.cer (raw, json) Hash identifier: t6LpYFMpXDVuXFCK1cRLRFShypoz4NPAWNhkhbKTifQ= Subject key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8F8FDCC18F85B45787C363314B63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21183 AS: 50973 IP: 66.186.194.0/23 IP: 66.186.198.0/23 IP: 79.171.48.0/21 IP: 80.78.64.0/20 IP: 91.132.172.0/22 IP: 94.137.144.0/21 IP: 109.69.0.0/21 IP: 141.98.140.0/22 IP: 185.62.172.0/22 IP: 185.200.212.0/22 IP: 188.172.96.0/20 IP: 217.73.128.0/20 IP: 2a04:eb40::/29 IP: 2a09:ca80::/29 IP: 2a0a:a0c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8f:8f:dc:c1:8f:85:b4:57:87:c3:63:31:4b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:0a:c0:09:e7:88:b4:68:a9:15:42:40:54: df:d7:45:95:7a:a7:d5:bc:b4:5c:a0:d2:e0:70:68: 6e:d0:a3:1a:73:f4:c1:e0:fe:33:c3:19:75:27:f2: f8:6f:21:7c:0f:ae:e1:73:5e:1d:1d:d6:71:de:89: 5a:d5:b7:ea:63:c1:50:52:e4:cb:fd:c5:e1:bc:58: 8e:57:c5:3e:8e:a2:8d:02:8c:d1:33:44:1e:c0:f2: 89:a5:7f:7c:94:ed:97:70:41:10:74:41:95:69:bb: 20:8a:6b:d5:3d:51:b0:67:4e:8c:87:cf:1a:32:1d: 03:fc:10:6e:22:0e:fb:67:b5:44:f9:ff:a7:3d:62: 45:98:53:99:de:6f:a4:0e:70:3f:f1:f8:a8:e8:6f: 78:fb:b1:1c:2e:3f:40:1a:0a:cf:49:fa:a8:c7:78: 90:6f:3a:f4:48:e3:9c:e1:e1:7b:c9:59:8b:34:eb: ad:b1:4d:77:ec:39:79:f1:fe:2b:84:73:51:7c:5f: d6:c5:42:89:65:99:7c:fe:39:ac:46:3a:a1:ff:62: c3:a3:f8:db:09:c9:d1:58:8e:c1:49:73:89:57:5a: 05:5a:98:85:ee:fe:cf:db:4c:74:e2:96:b4:3d:1d: a6:f9:43:4a:e7:63:1e:72:46:76:40:01:0f:c2:fe: a9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.186.194.0/23 66.186.198.0/23 79.171.48.0/21 80.78.64.0/20 91.132.172.0/22 94.137.144.0/21 109.69.0.0/21 141.98.140.0/22 185.62.172.0/22 185.200.212.0/22 188.172.96.0/20 217.73.128.0/20 IPv6: 2a04:eb40::/29 2a09:ca80::/29 2a0a:a0c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21183 50973 Signature Algorithm: sha256WithRSAEncryption 01:7b:7a:ec:9d:39:55:28:76:e2:d0:7e:7c:0a:13:de:03:da: 7a:c8:89:0c:b0:a2:40:72:00:b1:b4:3e:94:62:07:7f:4d:cf: 55:64:84:36:8e:2e:f5:e5:b5:88:1b:51:db:f0:11:79:64:0f: 33:3c:35:0c:dd:78:a6:46:a6:d9:e0:fb:3b:32:d5:2e:ae:77: 90:81:a4:41:db:1b:4a:75:a7:4f:4b:16:bd:d7:a5:aa:e6:c5: 74:f8:54:7d:5a:0b:ac:d6:ff:bb:4a:ef:ea:b3:2a:ec:c7:42: d0:81:e7:36:b1:91:6d:d0:c0:01:03:95:af:33:b5:4f:0a:69: 2a:82:95:ff:0a:15:d3:57:e4:9e:e3:0c:23:26:7c:cc:8e:0a: 72:06:9f:2a:06:37:f3:0c:93:50:2d:ca:1b:fd:b7:98:ff:9a: 37:c9:59:ce:6d:2f:78:be:fc:80:3a:3d:81:78:0f:fe:2b:5f: 45:5e:90:a8:43:87:d2:77:3e:05:81:83:57:bf:25:b7:71:6c: f4:12:53:aa:b6:7b:39:2a:e1:e8:64:fc:d7:ed:38:9a:60:db: 8b:a3:92:c1:26:87:2c:83:26:1a:75:31:10:b8:2d:a3:c1:6f: 93:a6:74:7c:58:5a:49:e0:43:51:a2:ee:e5:f1:2d:80:76:9d: 31:21:63:e1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZt6Wo+P3MGPhbRXh8NjMUtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjg4NzdmM2M1NWI1MjhlMWEyOWRiM2Q3OTkyMDY1NmYwYzY2YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO4KwAnniLRoqRVCQFTf10WVeqfV vLRcoNLgcGhu0KMac/TB4P4zwxl1J/L4byF8D67hc14dHdZx3ola1bfqY8FQUuTL /cXhvFiOV8U+jqKNAozRM0QewPKJpX98lO2XcEEQdEGVabsgimvVPVGwZ06Mh88a Mh0D/BBuIg77Z7VE+f+nPWJFmFOZ3m+kDnA/8fio6G94+7EcLj9AGgrPSfqox3iQ bzr0SOOc4eF7yVmLNOutsU137Dl58f4rhHNRfF/WxUKJZZl8/jmsRjqh/2LDo/jb CcnRWI7BSXOJV1oFWpiF7v7P20x04pa0PR2m+UNK52MeckZ2QAEPwv6pvQIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFN+Id/PFW1KOGinbPXmSBlbwxmrrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1L2QyMWQ2 MC0yMTBmLTQwYjMtOWQ4OS0yNTQ1NWE4ZGRkNDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvZDIxZDYw LTIxMGYtNDBiMy05ZDg5LTI1NDU1YThkZGQ0NS8xLzM0aDM4OFZiVW80YUtkczll WklHVnZER2F1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH4GCCsGAQUF BwEHAQH/BG8wbTBOBAIAATBIAwQBQrrCAwQBQrrGAwQDT6swAwQEUE5AAwQCW4Ss AwQDXomQAwQDbUUAAwQCjWKMAwQCuT6sAwQCucjUAwQEvKxgAwQE2UmAMBsEAgAC MBUDBQMqBOtAAwUDKgnKgAMFAyoKoMAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC Ur8CAwDHHTANBgkqhkiG9w0BAQsFAAOCAQEAAXt67J05VSh24tB+fAoT3gPaesiJ DLCiQHIAsbQ+lGIHf03PVWSENo4u9eW1iBtR2/AReWQPMzw1DN14pkam2eD7OzLV Lq53kIGkQdsbSnWnT0sWvdelqubFdPhUfVoLrNb/u0rv6rMq7MdC0IHnNrGRbdDA AQOVrzO1TwppKoKV/woV01fknuMMIyZ8zI4KcgafKgY38wyTUC3KG/23mP+aN8lZ zm0veL78gDo9gXgP/itfRV6QqEOH0nc+BYGDV78lt3Fs9BJTqrZ7OSrh6GT81+04 mmDbi6OSwSaHLIMmGnUxELgto8Fvk6Z0fFhaSeBDUaLu5fEtgHadMSFj4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 09:28:16 2026 by rpki-client