This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/435f8SPqfS6DzidSDJh9A35knQM.cer File: 435f8SPqfS6DzidSDJh9A35knQM.cer (raw, json) Hash identifier: HnlGIysUmp01c5pQthdp5hB0VTpCbl4X/TmBhezZWho= Subject key identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5991E87DAA9AAF497DADF895BF0F7F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:17:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48927 IP: 178.215.228.0/22 IP: 2a0d:5440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:91:e8:7d:aa:9a:af:49:7d:ad:f8:95:bf:0f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e37e5ff123ea7d2e83ce27520c987d037e649d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:36:f5:60:ab:3d:3d:a1:52:18:aa:06:0d:fe: 2e:4e:b3:49:5e:93:a3:e4:35:a3:bb:ab:9b:0c:d4: c6:cc:56:35:f1:26:21:1a:33:36:5b:f9:44:04:3a: bc:38:94:e3:0d:27:8a:01:79:8e:53:1d:b4:04:22: 3f:f2:42:58:10:86:0f:5c:e1:cb:28:79:d4:c8:75: b7:4f:1c:13:54:5e:9d:e9:c0:41:86:25:a0:e4:aa: 5d:29:75:97:38:62:8d:0b:4f:d5:59:d8:48:6b:f0: 35:62:0f:e7:46:ae:0e:5c:98:93:67:1f:ed:22:3e: 0b:74:54:38:6e:bc:ad:9d:13:52:1f:31:87:53:a4: 65:90:ea:80:ff:4e:3e:0c:52:1d:46:6d:14:c4:6b: 45:8c:37:22:0c:61:c7:f9:de:bf:21:8a:82:3c:c0: 77:d5:2c:a2:c1:48:a4:da:75:9b:eb:ee:8e:11:1f: 87:d2:0a:bb:cc:da:f0:33:ef:51:b8:b3:dd:7f:cc: 2a:bb:5d:62:9e:28:ba:b7:da:b2:93:5f:70:95:9b: 92:21:04:14:b8:ca:5f:95:b9:6d:03:a5:76:c4:dd: 22:66:52:cd:f0:6a:a4:6f:c7:79:66:52:cb:4c:36: 2a:28:59:3e:6c:33:62:80:7c:6f:4d:6d:25:6b:b4: a0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7E:5F:F1:23:EA:7D:2E:83:CE:27:52:0C:98:7D:03:7E:64:9D:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dfc10c-f889-455a-82a0-b30408948cce/1/435f8SPqfS6DzidSDJh9A35knQM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.215.228.0/22 IPv6: 2a0d:5440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48927 Signature Algorithm: sha256WithRSAEncryption af:2a:e8:85:9e:74:da:82:e5:4f:f8:11:8f:e0:b8:7b:3a:18: ee:7a:b1:0b:11:9d:b6:02:a8:32:83:9b:5e:7c:18:bd:1e:0b: 79:a1:67:e4:c9:47:ef:e7:cb:2a:d3:dc:90:53:45:89:d3:be: ef:27:7c:09:45:4b:10:53:c2:0a:8e:77:c9:b8:04:34:a8:c7: 09:40:8e:03:bb:ce:3b:3a:04:e6:ff:1b:3e:3b:db:bc:fc:ba: 40:57:15:f5:ce:03:ed:56:fd:2f:8d:45:a3:41:d0:b8:fb:27: 02:c7:93:57:f5:93:a9:65:fc:be:a9:b6:6e:6e:01:e1:1a:3e: 6e:a6:ab:f3:c2:cb:9e:95:fd:c4:5e:f9:09:b2:8f:23:b8:18: cf:fe:18:a8:93:c8:9a:db:16:86:f1:65:94:d3:40:7f:37:dd: f9:36:6a:92:09:10:b3:72:01:86:85:05:a2:05:75:7f:70:c2: 81:b1:40:06:32:d6:0f:43:1f:bb:77:7c:f5:a3:13:68:ba:18: 3c:e7:26:8c:62:34:0a:a0:b9:aa:2c:94:ed:92:67:7d:87:b6: fc:fc:4d:d0:d7:f0:c4:78:dc:11:1c:e2:4b:51:47:06:78:a7: f8:14:c3:cf:2b:5c:a9:15:d6:cb:7f:f1:e3:f9:8b:e9:98:b9: d4:7f:71:a4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6WZHofaqar0l9rfiVvw9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzdlNWZmMTIzZWE3ZDJlODNjZTI3NTIwYzk4N2QwMzdlNjQ5ZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjb1YKs9PaFSGKoGDf4uTrNJXpOj 5DWju6ubDNTGzFY18SYhGjM2W/lEBDq8OJTjDSeKAXmOUx20BCI/8kJYEIYPXOHL KHnUyHW3TxwTVF6d6cBBhiWg5KpdKXWXOGKNC0/VWdhIa/A1Yg/nRq4OXJiTZx/t Ij4LdFQ4brytnRNSHzGHU6RlkOqA/04+DFIdRm0UxGtFjDciDGHH+d6/IYqCPMB3 1SyiwUik2nWb6+6OER+H0gq7zNrwM+9RuLPdf8wqu11inii6t9qyk19wlZuSIQQU uMpflbltA6V2xN0iZlLN8Gqkb8d5ZlLLTDYqKFk+bDNigHxvTW0la7SgXQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFON+X/Ej6n0ug84nUgyYfQN+ZJ0DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5L2RmYzEw Yy1mODg5LTQ1NWEtODJhMC1iMzA0MDg5NDhjY2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvZGZjMTBj LWY4ODktNDU1YS04MmEwLWIzMDQwODk0OGNjZS8xLzQzNWY4U1BxZlM2RHppZFNE Smg5QTM1a25RTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCstfkMA0EAgACMAcDBQMqDVRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwC/HzANBgkqhkiG9w0BAQsFAAOCAQEAryrohZ502oLl T/gRj+C4ezoY7nqxCxGdtgKoMoObXnwYvR4LeaFn5MlH7+fLKtPckFNFidO+7yd8 CUVLEFPCCo53ybgENKjHCUCOA7vOOzoE5v8bPjvbvPy6QFcV9c4D7Vb9L41Fo0HQ uPsnAseTV/WTqWX8vqm2bm4B4Ro+bqar88LLnpX9xF75CbKPI7gYz/4YqJPImtsW hvFllNNAfzfd+TZqkgkQs3IBhoUFogV1f3DCgbFABjLWD0Mfu3d89aMTaLoYPOcm jGI0CqC5qiyU7ZJnfYe2/PxN0NfwxHjcERziS1FHBnin+BTDzytcqRXWy3/x4/mL 6Zi51H9xpA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:55:45 2026 by rpki-client