This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.cer (raw, json) Hash identifier: lJ61/IXB1xbRXy4pa+bNAsORM0PT5LG0K9kdSH/AhDg= Subject key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED2D82F2D11F89DAF4667BDCD44209 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 44356 IP: 31.13.152.0/21 IP: 79.99.192.0/21 IP: 2a00:1538::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:2d:82:f2:d1:1f:89:da:f4:66:7b:dc:d4:42:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:42:95:07:6c:63:8b:c7:4e:1e:df:4e:aa:f1: 94:b7:d9:25:db:1c:6f:1c:a6:d8:e4:62:a9:8d:27: 5f:20:a7:b1:91:bd:d3:ca:80:d1:e7:f3:03:1a:97: 22:40:dc:ae:46:3b:4e:af:f6:2b:3d:7e:90:cd:8a: 11:be:b4:3b:a9:f2:c6:c0:32:2f:f3:3c:e5:f0:2d: cf:27:87:7f:dc:e4:7e:01:51:53:9f:23:fd:80:f7: 5a:3f:b0:0c:53:bb:f6:d6:87:29:c4:8d:39:b4:8e: ac:e4:33:81:0d:f5:65:ca:d2:2b:3b:81:24:f8:76: a4:8e:9e:e1:71:46:fe:51:b0:f0:82:d6:db:2a:ae: 34:72:1e:a6:af:9e:c4:c2:16:66:19:a8:6b:b0:bd: 9b:0a:6f:5e:3a:94:17:f1:0f:ae:aa:23:4e:fd:16: 46:20:80:14:bc:aa:fe:83:64:1f:69:fb:38:bc:e4: 0a:86:46:95:a6:10:bf:4d:a1:a8:d6:71:c8:c5:35: 9b:39:85:26:c1:ca:b3:b3:83:ad:11:86:f4:10:dd: 91:2d:30:c9:0b:63:a1:60:85:d9:75:94:1e:35:e8: ad:f6:87:a2:8a:6e:89:49:19:d8:94:f6:4c:ce:0b: 16:41:d1:38:e9:0e:a2:a4:a4:ba:6d:56:1d:f7:d1: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.152.0/21 79.99.192.0/21 IPv6: 2a00:1538::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 44356 Signature Algorithm: sha256WithRSAEncryption 26:55:91:f7:96:ae:f2:c3:27:9d:ee:8c:dc:a7:55:01:a3:22: fe:1c:6d:7b:f3:f4:63:aa:ac:00:91:96:f9:bb:c0:d2:85:36: fc:d3:0a:75:8b:9e:3a:39:9d:15:e4:12:1e:32:71:ef:61:a9: b1:67:eb:ea:34:2f:38:b8:f1:1f:fa:f6:2a:f6:10:bc:ce:b3: fe:ec:07:f1:09:7a:d8:1e:fa:08:47:05:3c:bf:b7:72:49:d1: ae:e5:de:9a:21:31:0d:77:9d:66:f1:f1:8e:ba:3b:16:fe:ee: 4e:0b:a0:e6:92:21:d3:3b:6a:9a:70:3e:bf:e1:49:7b:69:88: 35:b8:f3:79:b6:4d:ed:bf:84:1c:45:a2:bf:36:e4:61:fc:83: 69:19:9a:ec:04:1a:79:79:55:fd:9f:4b:f6:fc:24:ad:c5:cb: 9c:8c:4d:1a:3a:ea:1d:a9:cc:d2:9c:5a:60:71:ce:24:b0:e7: 50:3c:b3:71:92:1b:71:0b:c8:f4:50:5b:04:bf:b3:be:67:00: 63:34:5a:dd:ad:e3:a5:98:a4:95:9d:f5:eb:59:28:65:32:0f: a9:1b:a9:f0:f2:06:d7:7a:e6:55:24:22:a2:5e:79:1e:26:7e: b5:53:e1:b6:ba:14:8b:83:89:d0:68:ca:78:dc:ad:4d:1b:bd: 95:35:59:3b -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57S2C8tEfidr0Znvc1EIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjkwNDE1NWVlM2FjZmUzZmVhOGJiZmVlODZlOTdjNThjODk5MWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkKVB2xji8dOHt9OqvGUt9kl2xxv HKbY5GKpjSdfIKexkb3TyoDR5/MDGpciQNyuRjtOr/YrPX6QzYoRvrQ7qfLGwDIv 8zzl8C3PJ4d/3OR+AVFTnyP9gPdaP7AMU7v21ocpxI05tI6s5DOBDfVlytIrO4Ek +Hakjp7hcUb+UbDwgtbbKq40ch6mr57EwhZmGahrsL2bCm9eOpQX8Q+uqiNO/RZG IIAUvKr+g2Qfafs4vOQKhkaVphC/TaGo1nHIxTWbOYUmwcqzs4OtEYb0EN2RLTDJ C2OhYIXZdZQeNeit9oeiim6JSRnYlPZMzgsWQdE46Q6ipKS6bVYd99FwCwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFN+QQVXuOs/j/qi7/uhul8WMiZH0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzQ0MmUx Ny00MTk4LTQzNWItOTZmNC02NDY3ZjQ0YjQzYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvNDQyZTE3 LTQxOTgtNDM1Yi05NmY0LTY0NjdmNDRiNDNiZi8xLzM1QkJWZTQ2ei1QLXFMdi02 RzZYeFl5SmtmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDHw2YAwQDT2PAMA0EAgACMAcDBQAqABU4MBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCtRDANBgkqhkiG9w0BAQsFAAOCAQEAJlWR 95au8sMnne6M3KdVAaMi/hxte/P0Y6qsAJGW+bvA0oU2/NMKdYueOjmdFeQSHjJx 72GpsWfr6jQvOLjxH/r2KvYQvM6z/uwH8Ql62B76CEcFPL+3cknRruXemiExDXed ZvHxjro7Fv7uTgug5pIh0ztqmnA+v+FJe2mINbjzebZN7b+EHEWivzbkYfyDaRma 7AQaeXlV/Z9L9vwkrcXLnIxNGjrqHanM0pxaYHHOJLDnUDyzcZIbcQvI9FBbBL+z vmcAYzRa3a3jpZiklZ3161koZTIPqRup8PIG13rmVSQiol55HiZ+tVPhtroUi4OJ 0GjKeNytTRu9lTVZOw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:27 2026 by rpki-client