This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer File: 36JPgpi-GMimnxgSjwZOcAPh090.cer (raw, json) Hash identifier: OHJZaLJ0bBS+a/vod0GT2JuYEM5jQ2cUaFFkYRCMrmQ= Subject key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791105A310FE0C31F6096660BE2D61CD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60033 IP: 2001:678:b5c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:05:a3:10:fe:0c:31:f6:09:66:60:be:2d:61:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:98:9d:8c:0a:6b:11:be:9e:0a:43:ac:79: b2:0c:92:ae:cc:9c:4b:d6:e5:4b:44:65:37:1a:4a: d2:71:63:dc:6d:ec:22:fd:02:23:9c:68:e9:f8:bc: 25:05:55:b6:3c:62:44:89:2b:97:7b:50:28:76:ff: 95:7c:0b:4d:3a:8a:b4:c6:66:67:da:fc:97:20:63: f7:13:b6:85:f7:8b:8b:a3:1b:1c:b6:4e:b0:b3:df: df:96:66:c8:aa:0d:55:6f:6c:2d:0f:8c:d5:03:67: ea:43:14:ff:3b:ce:90:8e:08:51:48:7a:15:ba:ef: cd:5a:8c:2a:d3:99:ad:a4:3c:43:6f:27:47:1c:5c: c8:2e:ae:6e:f9:2c:1a:d7:a6:e9:c1:48:59:3b:a3: aa:e4:97:e6:f5:e2:0d:d4:ea:21:97:0b:b3:be:b5: 2a:68:fa:09:3e:cb:db:be:ee:2f:e5:70:ca:45:d7: 53:80:7d:ac:bc:83:c3:13:ab:24:da:9e:90:d0:6d: e3:af:b5:28:08:7e:d9:5a:48:e6:fe:d7:15:f8:60: 10:85:54:6e:e7:0c:13:38:79:36:bb:08:a0:be:33: 80:a2:18:7e:a4:93:df:3c:4c:a5:9e:0b:d9:17:b1: 33:2b:9e:ac:cb:41:29:68:a3:50:83:e2:11:d2:30: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b5c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60033 Signature Algorithm: sha256WithRSAEncryption 55:b0:1d:d1:0b:07:d4:60:89:40:fd:d1:88:fa:53:d4:d7:c9: c3:74:f0:b8:f5:d5:a5:d3:ff:0a:69:e7:f7:af:e8:54:21:4d: ba:02:eb:ea:49:55:46:18:a1:f3:bf:a5:f1:27:c0:3a:3f:bb: d5:a2:6b:1a:3e:c6:fb:2c:61:32:2b:10:95:f5:2e:b6:41:66: 4a:8b:af:2b:c1:7a:25:cd:90:33:c1:d6:68:57:1d:fc:f5:45: 3f:bd:b6:1c:e1:fa:2f:e1:34:a9:d3:1e:c7:09:8c:19:e1:03: a4:b8:6b:1f:4f:16:81:2f:ce:26:d0:af:98:75:5b:b1:c9:9a: 11:c2:ab:91:9f:8f:35:f9:ae:0b:11:09:ee:23:d9:42:fe:d2: f5:91:b7:69:6a:63:ed:a3:a8:ae:7d:2a:f2:5c:dc:70:06:4f: 88:33:4a:f0:bd:2f:02:6c:83:91:8c:4b:72:4d:ae:d7:e7:d2: bf:9a:98:b3:af:53:76:4f:e1:aa:5d:6f:65:e7:84:26:a7:01: e3:9f:2c:a3:7f:55:dd:f0:cc:46:c9:73:9e:3c:c0:ab:8f:e0: e0:a1:da:c2:19:0b:ce:d3:82:ae:0a:b0:91:7b:23:16:a7:1a: 5f:2b:a4:fc:e4:78:82:7b:b2:ef:d2:1d:e7:70:31:5e:6f:b3: 1e:36:60:7a -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt5EQWjEP4MMfYJZmC+LWHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmEyNGY4Mjk4YmUxOGM4YTY5ZjE4MTI4ZjA2NGU3MDAzZTFkM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+YnYwKaxG+ngpDrHmyDJKuzJxL 1uVLRGU3GkrScWPcbewi/QIjnGjp+LwlBVW2PGJEiSuXe1Aodv+VfAtNOoq0xmZn 2vyXIGP3E7aF94uLoxsctk6ws9/flmbIqg1Vb2wtD4zVA2fqQxT/O86QjghRSHoV uu/NWowq05mtpDxDbydHHFzILq5u+Swa16bpwUhZO6Oq5Jfm9eIN1OohlwuzvrUq aPoJPsvbvu4v5XDKRddTgH2svIPDE6sk2p6Q0G3jr7UoCH7ZWkjm/tcV+GAQhVRu 5wwTOHk2uwigvjOAohh+pJPfPEylngvZF7EzK56sy0EpaKNQg+IR0jAURwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFN+iT4KYvhjIpp8YEo8GTnAD4dPdMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZiL2MxZmU0 ZC1hYjVhLTQwNzEtYmEyYS1kNWEwNmQ4YWI5ODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIvYzFmZTRk LWFiNWEtNDA3MS1iYTJhLWQ1YTA2ZDhhYjk4NC8xLzM2SlBncGktR01pbW54Z1Nq d1pPY0FQaDA5MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAtcMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDqgTANBgkqhkiG9w0BAQsFAAOCAQEAVbAd0QsH1GCJQP3RiPpT1NfJw3Tw uPXVpdP/Cmnn96/oVCFNugLr6klVRhih87+l8SfAOj+71aJrGj7G+yxhMisQlfUu tkFmSouvK8F6Jc2QM8HWaFcd/PVFP722HOH6L+E0qdMexwmMGeEDpLhrH08WgS/O JtCvmHVbscmaEcKrkZ+PNfmuCxEJ7iPZQv7S9ZG3aWpj7aOorn0q8lzccAZPiDNK 8L0vAmyDkYxLck2u1+fSv5qYs69Tdk/hql1vZeeEJqcB458so39V3fDMRslznjzA q4/g4KHawhkLztOCrgqwkXsjFqcaXyuk/OR4gnuy79Id53AxXm+zHjZgeg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:30:05 2026 by rpki-client