This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer File: 34laPuIhG27i33IC8JpCZoDWYmk.cer (raw, json) Hash identifier: JHZPm8PjYFRq9fVezgfbUqOH2XYyEQ9RvRgfvZAXrHE= Subject key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BC127B0A65B32B5184CB449928CE9C08C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 15 Jan 2026 10:16:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42031 AS: 56862 AS: 215102 AS: 215972 IP: 77.105.128.0/21 IP: 77.105.144.0/24 IP: 77.105.160.0 -- 77.105.164.255 IP: 91.193.43.0/24 IP: 92.42.102.0/24 IP: 94.142.250.0/24 IP: 185.80.91.0/24 IP: 185.225.202.0/23 IP: 193.163.170.0/24 IP: 194.50.153.0/24 IP: 194.117.80.0/24 IP: 195.20.16.0/24 IP: 2a00:f9a0::/32 IP: 2a12:5940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:27:b0:a6:5b:32:b5:18:4c:b4:49:92:8c:e9:c0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 15 10:16:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:8e:7d:de:51:1b:9d:fb:7b:36:1d:60:af: eb:4e:49:74:02:0c:6f:67:06:80:4b:43:5a:c4:7a: 73:94:a8:ce:ea:9e:1f:98:5c:b7:ee:a4:d8:ce:0a: 50:9d:d8:b7:bb:1f:8d:a5:69:1f:38:38:c2:3e:fc: e7:24:85:1d:53:dd:67:ce:56:b7:6b:52:81:6d:da: 9f:b5:35:93:39:9d:b9:00:d7:fd:7e:bc:15:1b:08: 2a:4e:72:84:31:74:42:b2:97:1b:ff:c1:ad:96:90: 14:ac:9f:b6:67:6f:bc:6d:ef:7d:3c:67:29:04:ca: 28:75:15:5e:a7:8f:af:28:5a:50:78:46:33:59:04: 10:e5:c3:34:02:ba:bd:31:fc:34:3f:2f:ad:6b:84: cf:2b:a0:ed:11:3d:f3:c6:14:60:78:67:0d:c5:20: 5a:d1:33:cc:72:f8:a8:c9:ef:ef:9a:e3:8b:e8:aa: b9:35:58:94:84:ed:a0:e7:58:70:fa:bf:66:57:1e: 1d:94:57:bf:99:fe:43:6a:24:5f:8d:f9:d0:79:d8: 23:b5:8a:d9:dc:e3:c7:3f:cc:9e:1d:35:04:0b:d4: e3:ea:1c:0c:40:53:f4:e2:d2:92:ba:b7:10:bd:2b: b1:b4:ea:da:08:cd:6e:e1:e6:b2:9e:f0:77:2e:89: 03:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.128.0/21 77.105.144.0/24 77.105.160.0-77.105.164.255 91.193.43.0/24 92.42.102.0/24 94.142.250.0/24 185.80.91.0/24 185.225.202.0/23 193.163.170.0/24 194.50.153.0/24 194.117.80.0/24 195.20.16.0/24 IPv6: 2a00:f9a0::/32 2a12:5940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42031 56862 215102 215972 Signature Algorithm: sha256WithRSAEncryption 0c:6b:38:4c:44:19:92:1c:fc:8b:46:f0:52:c2:f8:5e:5d:d2: 1c:c3:21:b0:8a:2c:3d:2b:ba:f5:a3:ca:5d:e2:e7:0e:23:d5: 67:d6:ec:42:9a:58:e3:df:1c:5a:11:f4:be:32:c4:e7:88:48: 67:4d:42:e8:2d:69:62:77:23:ca:88:50:40:c3:c2:88:e9:53: 07:6a:bc:24:01:85:b6:a2:1e:35:9a:44:8d:02:a0:3f:7c:b4: 08:80:1c:38:7a:c6:58:d1:3e:a7:f3:d3:08:bb:18:be:0f:94: df:61:a6:48:83:71:5f:2c:a0:45:bb:aa:4b:e5:80:7e:89:07: a9:68:36:03:db:d4:47:ff:c4:6a:dd:6b:4c:ea:c3:a9:7d:92: 4f:0d:05:7e:46:e6:cb:a5:d5:05:6f:c7:99:ce:f1:a5:7c:bb: b8:7d:8c:b8:e4:9c:f1:f0:44:06:35:4a:f4:21:d6:34:22:e1: 48:b4:47:6d:bc:de:30:9d:7a:60:73:a3:06:b3:1c:a0:15:a7: ad:31:61:d6:a7:ab:dc:4b:0f:d0:07:6d:5f:28:c2:26:4a:14: d9:73:4a:7a:c2:26:98:33:e5:2d:3c:90:35:6c:1a:96:9f:0f: 59:9f:39:e0:8f:6b:01:12:24:ef:69:ad:a4:ea:88:2b:03:25: d0:48:00:5b -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZvBJ7CmWzK1GEy0SZKM6cCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE1MTAxNjAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjg5NWEzZWUyMjExYjZlZTJkZjcyMDJmMDlhNDI2NjgwZDY2MjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoOOfd5RG537ezYdYK/rTkl0Agxv ZwaAS0NaxHpzlKjO6p4fmFy37qTYzgpQndi3ux+NpWkfODjCPvznJIUdU91nzla3 a1KBbdqftTWTOZ25ANf9frwVGwgqTnKEMXRCspcb/8GtlpAUrJ+2Z2+8be99PGcp BMoodRVep4+vKFpQeEYzWQQQ5cM0Arq9Mfw0Py+ta4TPK6DtET3zxhRgeGcNxSBa 0TPMcvioye/vmuOL6Kq5NViUhO2g51hw+r9mVx4dlFe/mf5DaiRfjfnQedgjtYrZ 3OPHP8yeHTUEC9Tj6hwMQFP04tKSurcQvSuxtOraCM1u4eaynvB3LokDPQIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFN+JWj7iIRtu4t9yAvCaQmaA1mJpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwLzFhNzJh Ny0yNzdkLTQ0ZjUtODdkZS03MGIyZWJkNTE0MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvMWE3MmE3 LTI3N2QtNDRmNS04N2RlLTcwYjJlYmQ1MTQzOC8xLzM0bGFQdUloRzI3aTMzSUM4 SnBDWm9EV1ltay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH8GCCsGAQUF BwEHAQH/BHAwbjBWBAIAATBQAwQDTWmAAwQATWmQMAwDBAVNaaADBABNaaQDBABb wSsDBABcKmYDBABejvoDBAC5UFsDBAG54coDBADBo6oDBADCMpkDBADCdVADBADD FBAwFAQCAAIwDgMFACoA+aADBQMqEllAMCkGCCsGAQUFBwEIAQH/BBowGKAWMBQC AwCkLwIDAN4eAgMDSD4CAwNLpDANBgkqhkiG9w0BAQsFAAOCAQEADGs4TEQZkhz8 i0bwUsL4Xl3SHMMhsIosPSu69aPKXeLnDiPVZ9bsQppY498cWhH0vjLE54hIZ01C 6C1pYncjyohQQMPCiOlTB2q8JAGFtqIeNZpEjQKgP3y0CIAcOHrGWNE+p/PTCLsY vg+U32GmSINxXyygRbuqS+WAfokHqWg2A9vUR//Eat1rTOrDqX2STw0Ffkbmy6XV BW/Hmc7xpXy7uH2MuOSc8fBEBjVK9CHWNCLhSLRHbbzeMJ16YHOjBrMcoBWnrTFh 1qer3EsP0AdtXyjCJkoU2XNKesImmDPlLTyQNWwalp8PWZ854I9rARIk72mtpOqI KwMl0EgAWw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:07:12 2026 by rpki-client