This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer File: 39hkHjKKpdGclg1Ikc-Gd84Siec.cer (raw, json) Hash identifier: c6CIIkO8pqicCMVIQf5F/rA9vR59NwrbYrZ4QJODC1A= Subject key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB463CA8CD516880AB7951503B1A9B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60042 IP: 176.118.208.0/20 IP: 185.42.228.0/22 IP: 2a0f:c380::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:46:3c:a8:cd:51:68:80:ab:79:51:50:3b:1a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:4b:a6:bb:50:cf:eb:19:71:35:17:2f:e3: 6e:57:5e:e8:dc:ad:74:4e:02:34:e3:b6:87:f0:92: 08:b8:5e:f0:c5:55:97:46:5d:9c:9d:74:b3:13:31: e8:3a:62:25:4c:d9:25:e1:95:ac:59:70:04:c5:d9: 61:a5:50:36:55:be:dc:8d:a8:a8:3a:52:7c:db:b0: 15:37:31:83:10:bf:7f:0e:89:d4:b9:54:f9:ea:e1: 21:56:1b:28:1c:32:fa:a5:c6:81:7c:e7:07:ef:7e: 32:47:aa:d8:25:5c:e0:f5:ff:14:25:83:47:f7:58: 67:f4:af:bc:49:f1:bf:39:a9:11:aa:d0:04:93:5a: eb:56:dc:ff:ac:64:75:9b:46:d8:8f:7d:37:61:16: 94:45:50:50:76:3b:5a:f8:96:79:ea:78:ca:88:61: 46:e9:d1:58:3f:41:64:6e:de:79:01:e1:d8:c4:cd: c5:0a:db:fd:f6:6f:51:4f:d4:04:5f:c0:ef:ef:bd: 49:4f:1c:32:10:b0:36:5b:12:03:31:a6:6f:31:13: 5b:9b:d5:49:a1:7d:38:e2:91:79:e0:f9:e0:1a:6e: be:13:81:f6:72:3b:33:d9:2f:fd:19:8c:8c:80:ef: a9:e1:51:18:17:f1:15:5f:dd:b2:88:2e:47:b9:48: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.118.208.0/20 185.42.228.0/22 IPv6: 2a0f:c380::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60042 Signature Algorithm: sha256WithRSAEncryption 39:08:09:46:db:b0:fd:a9:bf:37:37:b3:57:46:8c:95:2e:35: f9:97:b0:1f:e1:28:f3:9e:47:32:38:8e:b5:25:de:38:90:8e: 5e:2e:d0:54:65:3c:79:67:94:0a:f7:52:91:aa:ff:22:db:8f: 4b:25:3f:53:43:60:cc:db:a2:3d:cd:64:20:db:b3:fe:71:db: d3:ce:be:ff:79:ee:c6:ef:8f:b0:22:98:cd:70:38:e5:11:18: 35:00:2f:34:5f:cc:75:92:5a:8a:2f:f1:8a:c4:7d:45:36:c3: 21:59:04:80:99:7b:bc:7c:e1:33:98:c7:3b:43:96:a0:47:9c: a2:14:39:9a:07:aa:f1:c9:b0:95:6d:63:60:c6:30:db:01:c0: ec:93:db:d7:e8:82:2c:c3:53:d0:db:db:8e:9c:97:ae:2d:26: 6c:13:d6:27:cf:03:28:5c:cb:8f:42:34:bf:b5:93:2d:e5:2e: 26:5b:be:73:90:44:f9:1f:c3:0f:91:2a:8f:2b:2f:58:3f:83: 70:ab:20:f9:17:d0:db:4a:c9:75:a9:a7:fc:85:e6:b1:d9:b1: e5:ab:ef:0f:96:fc:00:d9:26:60:5b:8b:52:9f:53:dd:8f:5c: f1:95:a1:63:1a:7e:da:ac:c2:2a:44:02:b8:df:c2:ff:58:0f: 90:c9:d3:21 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt260Y8qM1RaICreVFQOxqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmQ4NjQxZTMyOGFhNWQxOWM5NjBkNDg5MWNmODY3N2NlMTI4OWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWxLprtQz+sZcTUXL+NuV17o3K10 TgI047aH8JIIuF7wxVWXRl2cnXSzEzHoOmIlTNkl4ZWsWXAExdlhpVA2Vb7cjaio OlJ827AVNzGDEL9/DonUuVT56uEhVhsoHDL6pcaBfOcH734yR6rYJVzg9f8UJYNH 91hn9K+8SfG/OakRqtAEk1rrVtz/rGR1m0bYj303YRaURVBQdjta+JZ56njKiGFG 6dFYP0Fkbt55AeHYxM3FCtv99m9RT9QEX8Dv771JTxwyELA2WxIDMaZvMRNbm9VJ oX044pF54PngGm6+E4H2cjsz2S/9GYyMgO+p4VEYF/EVX92yiC5HuUjZLwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFN/YZB4yiqXRnJYNSJHPhnfOEonnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIyLzFlM2Vi NC01ZGNmLTQ3ZDktYmM0Ni1lM2ZjNTM3OTE0OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIvMWUzZWI0 LTVkY2YtNDdkOS1iYzQ2LWUzZmM1Mzc5MTQ5MC8xLzM5aGtIaktLcGRHY2xnMUlr Yy1HZDg0U2llYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEsHbQAwQCuSrkMA0EAgACMAcDBQAqD8OAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDqijANBgkqhkiG9w0BAQsFAAOCAQEAOQgJ Rtuw/am/NzezV0aMlS41+ZewH+Eo855HMjiOtSXeOJCOXi7QVGU8eWeUCvdSkar/ ItuPSyU/U0NgzNuiPc1kINuz/nHb086+/3nuxu+PsCKYzXA45REYNQAvNF/MdZJa ii/xisR9RTbDIVkEgJl7vHzhM5jHO0OWoEecohQ5mgeq8cmwlW1jYMYw2wHA7JPb 1+iCLMNT0NvbjpyXri0mbBPWJ88DKFzLj0I0v7WTLeUuJlu+c5BE+R/DD5Eqjysv WD+DcKsg+RfQ20rJdamn/IXmsdmx5avvD5b8ANkmYFuLUp9T3Y9c8ZWhYxp+2qzC KkQCuN/C/1gPkMnTIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:00:48 2026 by rpki-client