This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer File: 4336E008jUaNzls3Q1-Z4yPa4Og.cer (raw, json) Hash identifier: fdT1Ejl1jQ4FAM3UmfshDHnomz++VgQnTs6p5GnYdss= Subject key identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC77B65C2AAD075050383C2AF4D5730 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.236.22.0/23 IP: 193.32.177.0 -- 193.32.179.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:7b:65:c2:aa:d0:75:05:03:83:c2:af:4d:57:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:94:9d:e8:16:76:12:93:d8:b1:43:9a:64:e8: b8:5f:99:cb:ee:d4:69:08:fe:4a:f3:cc:7e:41:7c: 65:b3:8e:77:30:db:5b:85:9c:79:ba:61:0d:25:c5: a6:dc:ac:ce:2b:dc:20:0f:6e:c2:40:ac:d2:33:b9: 24:7a:c6:ad:e8:35:8c:64:08:7a:31:1e:93:55:ff: e7:18:55:d1:e0:36:78:af:4d:24:fb:ff:ae:80:ca: 53:57:bc:3a:70:3b:e6:b5:bf:cf:67:c2:4a:07:c5: eb:c1:d5:d7:1e:29:61:f6:74:70:e8:14:05:9e:f8: d4:1c:86:e4:d9:af:04:83:b7:ee:3d:14:98:0a:54: 88:c4:c0:35:cc:1c:d4:dc:b3:c4:79:3b:a5:16:cf: ed:d6:91:5f:e4:7e:e8:a3:98:ee:48:76:ff:4f:a9: d8:fd:11:30:1a:a0:eb:11:64:21:94:69:60:93:fb: ae:45:42:12:9d:70:9c:f3:35:0b:c2:53:a2:81:72: 8a:82:a1:a0:cf:f0:e8:6b:c2:9f:ee:ed:6f:1b:9b: 2f:54:f9:b5:c3:bf:12:2b:3a:41:da:f8:61:61:a6: 05:80:f6:0e:22:72:f9:4b:09:31:33:e5:bb:43:32: dd:99:86:ce:fe:64:09:e6:e6:95:9f:73:e3:c9:23: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.22.0/23 193.32.177.0-193.32.179.255 Signature Algorithm: sha256WithRSAEncryption 46:e6:a4:88:84:95:20:df:59:bb:03:44:70:c9:be:8d:df:c6: a2:0d:09:44:47:97:5e:bb:84:ae:bc:a0:2d:1c:da:26:5a:1f: a7:bf:91:1c:7e:f4:54:6a:e5:22:19:fa:ce:63:68:54:91:f0: b1:5b:8f:ff:ec:c8:e7:3e:19:b4:1a:0f:b9:ff:dd:ac:d1:e8: 3b:a5:7e:e5:db:14:48:ec:4f:73:bf:99:79:a3:ba:2c:f0:08: fd:7c:fb:a5:06:8a:f2:cd:98:e3:ac:59:61:ab:75:25:74:c8: c4:e3:af:f4:2d:7b:3f:2e:cf:18:99:d8:cf:fb:ab:0e:40:d2: 51:9f:43:cd:89:ee:5c:2b:94:6a:92:0a:02:49:ab:49:a5:bf: 8c:4a:ae:22:fb:fc:63:1f:d3:e0:48:93:e5:60:8d:d7:cb:37: 7a:e7:05:af:c6:bd:f5:ee:c2:61:d7:ea:24:30:72:2a:5f:5e: 60:df:6b:54:ab:15:09:e9:b0:05:34:cf:e5:3d:7b:c9:06:48: f3:c7:1e:08:bc:09:a7:de:2f:8a:e0:19:70:d7:81:24:78:05: 9a:7a:d4:d2:fb:da:6f:2f:93:b4:6a:27:ee:83:f5:3a:a6:5e: bd:59:aa:bb:ba:3a:39:bd:5d:e2:07:76:8c:10:28:f9:34:1a: 5c:9d:1b:9c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZt6x3tlwqrQdQUDg8KvTVcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzdkZmExMzRkM2M4ZDQ2OGRjZTViMzc0MzVmOTllMzIzZGFlMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZSd6BZ2EpPYsUOaZOi4X5nL7tRp CP5K88x+QXxls453MNtbhZx5umENJcWm3KzOK9wgD27CQKzSM7kkesat6DWMZAh6 MR6TVf/nGFXR4DZ4r00k+/+ugMpTV7w6cDvmtb/PZ8JKB8XrwdXXHilh9nRw6BQF nvjUHIbk2a8Eg7fuPRSYClSIxMA1zBzU3LPEeTulFs/t1pFf5H7oo5juSHb/T6nY /REwGqDrEWQhlGlgk/uuRUISnXCc8zULwlOigXKKgqGgz/Doa8Kf7u1vG5svVPm1 w78SKzpB2vhhYaYFgPYOInL5SwkxM+W7QzLdmYbO/mQJ5uaVn3PjySNVkQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFON9+hNNPI1Gjc5bN0NfmeMj2uDoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2L2MxYjQ0 Ny00MzUyLTRmZDEtOWMyNy01ZjRhNzA3MTJjMjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYzFiNDQ3 LTQzNTItNGZkMS05YzI3LTVmNGE3MDcxMmMyMy8xLzQzMzZFMDA4alVhTnpsczNR MS1aNHlQYTRPZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDAaBAIAATAUAwQBuewWMAwDBADBILEDBALBILAwDQYJKoZIhvcN AQELBQADggEBAEbmpIiElSDfWbsDRHDJvo3fxqINCURHl167hK68oC0c2iZaH6e/ kRx+9FRq5SIZ+s5jaFSR8LFbj//syOc+GbQaD7n/3azR6DulfuXbFEjsT3O/mXmj uizwCP18+6UGivLNmOOsWWGrdSV0yMTjr/Qtez8uzxiZ2M/7qw5A0lGfQ82J7lwr lGqSCgJJq0mlv4xKriL7/GMf0+BIk+VgjdfLN3rnBa/GvfXuwmHX6iQwcipfXmDf a1SrFQnpsAU0z+U9e8kGSPPHHgi8CafeL4rgGXDXgSR4BZp61NL72m8vk7RqJ+6D 9TqmXr1Zqru6Ojm9XeIHdowQKPk0GlydG5w= -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:39 2026 by rpki-client