This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39D7xN6B7icnq6PpEK_NKlOmZAw.cer File: 39D7xN6B7icnq6PpEK_NKlOmZAw.cer (raw, json) Hash identifier: spIV5I5bYC2mz59FpMSOypatjSvqG5fTRIv04ae42u4= Subject key identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775878EBD2BD4616214B8FD3C83F3A04 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.138.77.0/24 IP: 2a14:3a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:78:eb:d2:bd:46:16:21:4b:8f:d3:c8:3f:3a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd0fbc4de81ee2727aba3e910afcd2a53a6640c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:04:1e:8b:a9:f4:cb:81:3a:bb:3c:23:95: 29:80:eb:3c:2e:91:dc:16:99:d5:1e:a7:93:18:5a: 13:b1:0f:ba:8c:3c:a9:92:89:8a:68:ab:b1:5c:5b: b5:25:e8:34:6a:12:f9:6d:8c:7d:d5:79:85:f1:cf: cb:06:ef:f8:5b:95:dc:32:1a:1d:8b:87:61:49:b8: a8:df:bb:93:ae:bd:2a:04:ab:3d:db:da:b7:5b:cb: 5d:84:5a:7c:0c:2d:8f:ab:de:c3:fc:c6:49:46:7b: c1:18:0f:b4:c2:ea:59:95:fe:2a:b4:9b:16:cf:70: 75:9f:81:02:fb:03:99:4f:48:ec:a0:2b:dd:2f:f1: f8:47:49:9f:2f:82:31:84:1a:3a:58:46:5e:72:0b: ba:71:c3:46:2e:73:85:f1:da:09:09:a0:b6:be:b0: da:06:a3:4a:b6:10:3b:18:f9:7b:30:ae:52:4b:76: 11:bf:ae:96:99:f9:ac:43:78:f0:09:67:fe:16:77: c5:6d:df:ad:4e:ad:c9:79:8f:db:19:a6:35:79:d3: 89:41:5c:4d:aa:f4:c5:44:90:41:98:e8:b4:16:3e: 2a:60:1b:cd:19:9b:71:9c:fb:cd:6d:2f:ef:d6:64: 76:07:65:c4:4f:99:85:34:1e:6d:95:4f:da:fa:07: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D0:FB:C4:DE:81:EE:27:27:AB:A3:E9:10:AF:CD:2A:53:A6:64:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/245873-1ca7-4b71-b220-edb0418cac4d/1/39D7xN6B7icnq6PpEK_NKlOmZAw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.77.0/24 IPv6: 2a14:3a40::/29 Signature Algorithm: sha256WithRSAEncryption b1:87:d8:bb:a5:f8:1c:03:ed:04:65:e8:94:1c:31:e1:0f:17: 60:a2:af:d8:1a:ea:b6:4b:5d:d7:aa:9a:a7:e3:8f:0a:ae:12: 83:29:7e:9b:b6:32:1c:8e:cc:28:23:61:57:98:05:cf:58:da: eb:4f:c3:65:8c:c8:aa:f5:e1:0f:4d:44:2d:ec:cc:f9:0f:7b: a0:a9:85:7f:56:46:ac:cb:50:b6:6e:d6:b1:ae:c6:76:11:7f: da:6a:9f:d2:21:e7:4a:e4:3d:e8:25:f8:bb:f5:2c:bf:da:88: 31:f1:2b:8d:b3:4b:07:a9:d4:b4:98:ad:f5:53:ac:f2:69:2c: 4a:81:c6:c2:1f:08:24:ce:e6:1d:c3:30:df:af:04:44:4a:f9: 64:5d:f0:00:30:46:42:38:3b:f8:5b:d4:39:f8:5c:9d:00:fa: 26:32:7d:f2:8a:5d:4d:f3:ab:95:93:86:ad:0c:d6:2e:33:4e: 3a:01:de:57:44:27:ff:08:37:64:eb:83:06:b6:b7:3b:5b:0d: a3:b2:b7:ee:9a:e6:ae:96:6a:99:f8:2a:b9:d7:9d:76:e9:f7: 90:7c:a8:07:5e:e2:d6:01:74:fe:b3:f0:56:c6:5e:46:15:6e: 75:96:14:f8:02:99:d0:f9:f6:ef:96:e8:ae:4b:ed:44:a7:74: 19:02:42:2d -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WHjr0r1GFiFLj9PIPzoEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQwZmJjNGRlODFlZTI3MjdhYmEzZTkxMGFmY2QyYTUzYTY2NDBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YcEHoup9MuBOrs8I5UpgOs8LpHc FpnVHqeTGFoTsQ+6jDypkomKaKuxXFu1Jeg0ahL5bYx91XmF8c/LBu/4W5XcMhod i4dhSbio37uTrr0qBKs929q3W8tdhFp8DC2Pq97D/MZJRnvBGA+0wupZlf4qtJsW z3B1n4EC+wOZT0jsoCvdL/H4R0mfL4IxhBo6WEZecgu6ccNGLnOF8doJCaC2vrDa BqNKthA7GPl7MK5SS3YRv66WmfmsQ3jwCWf+FnfFbd+tTq3JeY/bGaY1edOJQVxN qvTFRJBBmOi0Fj4qYBvNGZtxnPvNbS/v1mR2B2XET5mFNB5tlU/a+ge6MwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFN/Q+8Tege4nJ6uj6RCvzSpTpmQMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzI0NTg3 My0xY2E3LTRiNzEtYjIyMC1lZGIwNDE4Y2FjNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMjQ1ODcz LTFjYTctNGI3MS1iMjIwLWVkYjA0MThjYWM0ZC8xLzM5RDd4TjZCN2ljbnE2UHBF S19OS2xPbVpBdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwYpNMA0EAgACMAcDBQMqFDpAMA0GCSqGSIb3 DQEBCwUAA4IBAQCxh9i7pfgcA+0EZeiUHDHhDxdgoq/YGuq2S13Xqpqn448KrhKD KX6btjIcjswoI2FXmAXPWNrrT8NljMiq9eEPTUQt7Mz5D3ugqYV/Vkasy1C2btax rsZ2EX/aap/SIedK5D3oJfi79Sy/2ogx8SuNs0sHqdS0mK31U6zyaSxKgcbCHwgk zuYdwzDfrwRESvlkXfAAMEZCODv4W9Q5+FydAPomMn3yil1N86uVk4atDNYuM046 Ad5XRCf/CDdk64MGtrc7Ww2jsrfumuaulmqZ+Cq515126feQfKgHXuLWAXT+s/BW xl5GFW51lhT4ApnQ+fbvluiuS+1Ep3QZAkIt -----END CERTIFICATE-----Generated at Sun Jan 25 16:44:00 2026 by rpki-client