This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer File: 39UkoF1He4L7ypPnpQSqMaOtaGM.cer (raw, json) Hash identifier: 6ErFk3gC5NE95uYm13Isn1ekKFUOWW5xve4vqbOP9cI= Subject key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12604E7AFBAAB1A2D489F06AC98014 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201021 IP: 185.28.60.0/22 IP: 185.103.196.0/22 IP: 185.106.20.0/22 IP: 2a05:bac0::/29 IP: 2a06:2d00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:60:4e:7a:fb:aa:b1:a2:d4:89:f0:6a:c9:80:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:4a:3f:86:72:02:c6:0e:41:0a:b8:54:0a: 95:6a:dd:9e:aa:79:d8:05:7e:4e:8c:77:80:65:07: b3:2f:38:e6:f8:c1:e6:bf:a7:58:73:db:f2:bf:62: 53:a3:e5:bc:78:ff:8b:e9:f4:e2:91:8b:c4:18:ec: 8c:39:9b:68:05:04:2d:eb:af:89:bb:bf:61:af:37: 9e:0f:f8:13:cf:92:b1:14:5b:eb:4c:eb:2a:71:c5: ef:0b:72:95:ff:61:46:32:9e:b1:f9:39:a5:c1:a0: fe:3b:44:bc:a8:da:7a:1e:93:92:84:b2:2e:02:03: 18:9c:74:b0:0f:e8:ee:19:f4:fd:c5:3d:8d:2b:67: 21:1b:b5:b3:2b:04:ed:09:44:af:fd:cf:6e:2f:03: e5:cb:1a:14:0e:01:bf:3b:50:15:9e:6f:78:3b:a4: 48:99:71:da:d7:50:01:f6:6c:09:4d:23:d1:07:36: 4f:11:81:7b:d2:99:50:87:d0:78:9c:02:23:b8:2f: 18:8c:83:2e:5f:ea:40:d5:b2:1d:d9:5b:58:88:81: a5:aa:48:8c:5c:80:b8:ce:cb:96:4e:17:97:f7:e4: 27:74:1b:1e:30:41:59:59:90:91:c9:0e:bb:d8:77: cc:4a:94:74:e1:9d:de:4e:4a:a1:91:17:b4:21:9f: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.28.60.0/22 185.103.196.0/22 185.106.20.0/22 IPv6: 2a05:bac0::/29 2a06:2d00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201021 Signature Algorithm: sha256WithRSAEncryption 89:48:3a:cf:c9:6b:cd:85:cb:48:e9:b1:72:f8:ab:aa:9d:f3: 18:3e:e5:03:4d:c6:c9:bb:b3:49:c3:22:b2:92:d9:38:f4:e9: b0:6a:2f:cb:92:73:df:0f:68:4e:60:f7:4c:bb:49:9c:f4:40: 6a:59:03:4d:7c:ff:dc:7e:c2:73:34:d4:4d:92:1a:41:cd:de: 60:8a:68:78:f5:b4:b6:19:2b:29:6f:91:69:58:a5:15:3c:ad: 24:67:e3:4d:79:e6:8d:63:a4:9a:22:70:1f:3d:dc:9f:56:e3: 38:53:f7:f9:7e:7f:4f:fb:15:a4:e4:38:70:88:50:da:fb:62: 42:7f:36:3f:71:9e:df:c9:f8:dd:5b:4c:d7:ba:be:ff:e2:b9: 1d:9e:d9:ff:68:28:8f:b9:da:07:9c:0a:70:a5:a4:19:9b:e1: b6:59:09:8b:d4:42:98:22:54:19:e2:de:95:2c:dd:e6:14:f7: 72:d9:ef:32:f7:54:a0:24:c4:2b:a7:20:b4:d3:89:b0:6c:0f: 5d:1b:6c:3d:f9:2d:f6:f9:ee:83:18:4e:67:4f:e1:0f:bf:27: 44:ce:8e:24:74:02:0e:22:1e:0d:57:d2:a1:ea:09:06:54:54: da:51:7d:a2:ea:fe:30:08:9e:c2:1e:b6:07:c6:a9:93:35:b7: 4b:cf:52:a8 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt8EmBOevuqsaLUifBqyYAUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQ1MjRhMDVkNDc3YjgyZmJjYTkzZTdhNTA0YWEzMWEzYWQ2ODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H1KP4ZyAsYOQQq4VAqVat2eqnnY BX5OjHeAZQezLzjm+MHmv6dYc9vyv2JTo+W8eP+L6fTikYvEGOyMOZtoBQQt66+J u79hrzeeD/gTz5KxFFvrTOsqccXvC3KV/2FGMp6x+TmlwaD+O0S8qNp6HpOShLIu AgMYnHSwD+juGfT9xT2NK2chG7WzKwTtCUSv/c9uLwPlyxoUDgG/O1AVnm94O6RI mXHa11AB9mwJTSPRBzZPEYF70plQh9B4nAIjuC8YjIMuX+pA1bId2VtYiIGlqkiM XIC4zsuWTheX9+QndBseMEFZWZCRyQ672HfMSpR04Z3eTkqhkRe0IZ+KUQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFN/VJKBdR3uC+8qT56UEqjGjrWhjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgyLzIwYzE4 Ny0wMGZkLTQ1OWUtYWFlNC00NjdmNGY3ZjVkZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjBjMTg3 LTAwZmQtNDU5ZS1hYWU0LTQ2N2Y0ZjdmNWRlZC8xLzM5VWtvRjFIZTRMN3lwUG5w UVNxTWFPdGFHTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCuRw8AwQCuWfEAwQCuWoUMBQEAgACMA4DBQMq BbrAAwUDKgYtADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDET0wDQYJKoZIhvcN AQELBQADggEBAIlIOs/Ja82Fy0jpsXL4q6qd8xg+5QNNxsm7s0nDIrKS2Tj06bBq L8uSc98PaE5g90y7SZz0QGpZA018/9x+wnM01E2SGkHN3mCKaHj1tLYZKylvkWlY pRU8rSRn40155o1jpJoicB893J9W4zhT9/l+f0/7FaTkOHCIUNr7YkJ/Nj9xnt/J +N1bTNe6vv/iuR2e2f9oKI+52gecCnClpBmb4bZZCYvUQpgiVBni3pUs3eYU93LZ 7zL3VKAkxCunILTTibBsD10bbD35Lfb57oMYTmdP4Q+/J0TOjiR0Ag4iHg1X0qHq CQZUVNpRfaLq/jAInsIetgfGqZM1t0vPUqg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:53:42 2026 by rpki-client