This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer File: 40Y8J4uE4t8ApHvC2AyNgP-puok.cer (raw, json) Hash identifier: 77wnvnR1QKcVL9FJblV4Caxyn+hOOGGWfRd2UCdAp7k= Subject key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ED4EF4F5A7B9F1F68506BE4C333BCB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:19:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197690 IP: 185.35.172.0/22 IP: 193.104.37.0/24 IP: 2a00:b060::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:4e:f4:f5:a7:b9:f1:f6:85:06:be:4c:33:3b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:19:74:50:5b:52:25:b4:31:53:ac:db:9f:86: b3:89:71:92:4f:9d:86:03:8e:73:83:ce:cb:31:6b: 26:87:98:53:f8:fa:eb:c8:6a:77:0c:e2:04:2e:c4: 76:b0:88:a6:40:24:81:ee:12:04:35:c5:ed:99:1d: 9a:d3:0f:ac:93:01:ac:87:2c:6a:cf:2c:cd:29:d1: 80:e1:72:b1:a8:7f:99:58:af:2e:31:c7:1f:67:36: 7d:34:67:ae:c9:f0:90:9c:5a:1c:5f:61:32:c0:1c: a2:0a:8e:e2:42:21:2c:23:9b:2e:0e:53:2f:33:74: dc:2c:1b:49:ee:c9:ac:45:e6:0f:c2:9f:9c:dc:a9: f5:fa:a1:af:7f:3b:b6:1f:fb:f5:d5:7f:38:73:e7: 43:86:a3:80:cc:cf:c0:1d:ec:da:c1:28:1f:09:3b: 67:b8:32:c7:69:8a:ed:53:c3:09:83:f6:78:e0:f1: bb:c1:5a:e4:c6:26:2d:e8:42:b4:ed:62:a8:3c:23: 13:12:1d:7b:ff:30:ef:02:ed:bb:3f:2c:5a:51:55: 64:6f:a0:d1:a5:2a:d1:ce:ac:71:f8:fe:49:47:4e: 44:1a:ed:eb:d9:f6:15:06:b4:93:b4:da:7e:4d:e8: be:49:d7:45:67:8e:96:80:cb:3b:e7:0b:71:a5:47: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.35.172.0/22 193.104.37.0/24 IPv6: 2a00:b060::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197690 Signature Algorithm: sha256WithRSAEncryption b2:02:95:d6:29:bd:e8:b7:8b:0c:c2:1c:07:e8:d0:ac:ff:4f: f3:12:a8:db:19:14:cf:79:05:11:80:fc:fa:bc:48:60:b1:cb: 7f:82:b8:58:a0:0c:04:32:5c:51:8b:fe:c5:d0:13:d0:83:07: 20:f4:fd:3c:22:aa:72:b4:a5:4c:58:a0:b5:06:a2:b5:5b:3c: de:f1:46:b1:3c:b8:ac:0b:c9:6c:c2:33:bd:91:43:e1:8a:a8: 49:da:53:4b:ae:31:e7:e4:8a:cd:20:47:2f:59:61:a6:04:38: 00:2c:09:c7:50:30:02:7a:61:21:8e:e4:4a:c8:0d:a1:12:d1: 2b:75:86:c3:20:1c:99:76:53:9f:69:2b:fc:ac:a0:09:d7:91: e2:71:b6:3f:14:fe:67:93:7f:a8:29:bd:01:88:6d:62:04:08: 05:49:be:88:b8:5b:80:d4:76:8f:af:4c:d3:61:55:7b:89:30: 80:90:3d:e2:49:09:d4:66:8f:f7:cc:d3:ca:a2:32:81:26:e5: 6a:6e:a0:70:61:c7:e2:a1:62:c2:e7:fd:0d:a6:8c:e0:85:27: 38:0a:df:1e:04:22:af:8a:57:92:b2:7b:7e:eb:fe:92:17:48: fd:16:13:31:8d:52:6d:c5:71:b6:b6:53:fc:29:dd:0a:43:6c: 64:bf:74:87 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt57U709ae58faFBr5MMzvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzQ2M2MyNzhiODRlMmRmMDBhNDdiYzJkODBjOGQ4MGZmYTliYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxl0UFtSJbQxU6zbn4aziXGST52G A45zg87LMWsmh5hT+PrryGp3DOIELsR2sIimQCSB7hIENcXtmR2a0w+skwGshyxq zyzNKdGA4XKxqH+ZWK8uMccfZzZ9NGeuyfCQnFocX2EywByiCo7iQiEsI5suDlMv M3TcLBtJ7smsReYPwp+c3Kn1+qGvfzu2H/v11X84c+dDhqOAzM/AHezawSgfCTtn uDLHaYrtU8MJg/Z44PG7wVrkxiYt6EK07WKoPCMTEh17/zDvAu27PyxaUVVkb6DR pSrRzqxx+P5JR05EGu3r2fYVBrSTtNp+Tei+SddFZ46WgMs75wtxpUfrnwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFONGPCeLhOLfAKR7wtgMjYD/qbqJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4Lzk3YmFj ZS1iMmQ1LTQwNTItOGY2MS01ZjJkZmVkNWQxYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvOTdiYWNl LWIyZDUtNDA1Mi04ZjYxLTVmMmRmZWQ1ZDFhNC8xLzQwWThKNHVFNHQ4QXBIdkMy QXlOZ1AtcHVvay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuSOsAwQAwWglMA0EAgACMAcDBQAqALBgMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMEOjANBgkqhkiG9w0BAQsFAAOCAQEAsgKV 1im96LeLDMIcB+jQrP9P8xKo2xkUz3kFEYD8+rxIYLHLf4K4WKAMBDJcUYv+xdAT 0IMHIPT9PCKqcrSlTFigtQaitVs83vFGsTy4rAvJbMIzvZFD4YqoSdpTS64x5+SK zSBHL1lhpgQ4ACwJx1AwAnphIY7kSsgNoRLRK3WGwyAcmXZTn2kr/KygCdeR4nG2 PxT+Z5N/qCm9AYhtYgQIBUm+iLhbgNR2j69M02FVe4kwgJA94kkJ1GaP98zTyqIy gSblam6gcGHH4qFiwuf9DaaM4IUnOArfHgQir4pXkrJ7fuv+khdI/RYTMY1SbcVx trZT/CndCkNsZL90hw== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:31 2026 by rpki-client