This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer File: 437h7O0Z-KCjpjW_qiZCk-NDd5U.cer (raw, json) Hash identifier: PgS2aFZO3uZiS+6az27c+ZPIbhpkfIvqGMrEUq9AB0s= Subject key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C7525871DC87CDF8C5AE18553B8343 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.32.160.0/19 IP: 2a03:8c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:58:71:dc:87:cd:f8:c5:ae:18:55:3b:83:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:a5:21:4d:76:f3:b6:24:3c:1a:a6:45:6b: 5c:7e:15:ca:55:52:5b:aa:40:36:b5:50:60:7c:51: 73:2e:d1:9b:67:12:88:de:60:60:f0:b2:fb:c5:35: d0:46:08:cb:b1:d0:94:d9:71:66:5f:d8:c8:29:ba: 10:32:69:db:04:ff:69:dd:de:c3:29:d3:0d:51:b3: cf:5b:57:df:7c:ea:6c:33:c7:e3:44:b7:5c:ba:84: e1:a8:f8:5e:4b:e9:33:23:05:c8:de:00:76:a6:64: d7:2b:d9:d5:59:fb:d4:b9:61:03:07:d2:d1:9b:1e: ef:dd:40:92:0e:82:29:ad:aa:79:13:c8:01:a6:93: 17:d8:ff:1e:9c:03:a0:ca:b9:c6:9b:63:6b:e0:49: c7:2f:ff:80:a7:76:89:46:1c:f2:b1:01:e3:7a:a2: b7:e2:9d:b9:5a:a4:8b:60:ca:3e:35:fa:4a:53:63: 6d:84:02:3c:ce:e3:2d:0d:ec:8e:d9:92:da:0a:a1: 34:20:94:8b:22:5a:01:6e:5a:6c:34:4a:4d:06:ed: 78:a1:6c:5e:de:de:fa:ca:3c:92:32:98:09:3a:d9: a5:a2:48:3e:4e:0a:ca:5b:53:2b:0d:70:4b:9a:58: 37:ee:66:bf:95:d1:27:6e:45:84:62:e9:7c:b4:e1: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.160.0/19 IPv6: 2a03:8c0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:0a:fc:4f:80:38:b6:48:64:f1:26:d5:36:77:b8:e9:ee:2c: 36:2f:28:f8:84:50:aa:d6:f3:bc:1f:b8:43:bf:0b:38:b0:85: 18:22:92:eb:10:7f:7c:1a:2c:6b:5b:a1:2b:77:d8:3d:20:e3: d7:89:0c:3f:a5:1b:65:90:30:84:a5:1b:b1:5a:30:d2:37:16: ad:ce:52:f5:b8:d6:b6:ad:52:dd:33:63:00:e8:21:a1:83:46: a1:9f:6d:d2:15:5d:b7:13:ac:c2:34:35:5d:76:f5:62:c0:6d: 5b:f8:aa:fb:96:54:c0:4b:ca:01:f8:c0:1a:48:1b:ad:c5:c5: 4d:cb:31:f8:f7:b8:43:c2:07:7a:20:83:f9:3f:5b:8f:75:e7: 53:c8:76:ce:d5:91:20:52:02:4f:38:f0:2d:50:1b:76:d7:20: ac:8b:42:9c:f0:4c:b3:8b:c0:75:f5:57:04:bc:bf:cb:35:05: af:42:cf:70:58:48:5c:0c:df:7f:6a:da:d4:ef:86:c5:05:da: 61:75:67:56:01:6a:db:89:32:95:db:a1:d8:83:ac:33:86:2a: 3b:9e:c7:f3:3a:0d:e6:64:4d:90:8a:c2:5e:02:9f:ca:8e:de: cd:48:31:61:f2:e4:86:8d:b1:6c:97:60:9d:d0:bb:ea:51:03: cb:40:47:3b -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3x1JYcdyHzfjFrhhVO4NDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzdlZTFlY2VkMTlmOGEwYTNhNjM1YmZhYTI2NDI5M2UzNDM3Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv2lIU1287YkPBqmRWtcfhXKVVJb qkA2tVBgfFFzLtGbZxKI3mBg8LL7xTXQRgjLsdCU2XFmX9jIKboQMmnbBP9p3d7D KdMNUbPPW1fffOpsM8fjRLdcuoThqPheS+kzIwXI3gB2pmTXK9nVWfvUuWEDB9LR mx7v3UCSDoIprap5E8gBppMX2P8enAOgyrnGm2Nr4EnHL/+Ap3aJRhzysQHjeqK3 4p25WqSLYMo+NfpKU2NthAI8zuMtDeyO2ZLaCqE0IJSLIloBblpsNEpNBu14oWxe 3t76yjySMpgJOtmlokg+TgrKW1MrDXBLmlg37ma/ldEnbkWEYul8tOGCnQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFON+4eztGfigo6Y1v6omQpPjQ3eVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4LzZkNWQ3 NS00ZDFlLTQ2OTctYjFkMy0zNmUzNDRhYmM5ZDMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvNmQ1ZDc1 LTRkMWUtNDY5Ny1iMWQzLTM2ZTM0NGFiYzlkMy8xLzQzN2g3TzBaLUtDanBqV19x aVpDay1ORGQ1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFLiCgMA0EAgACMAcDBQAqAwjAMA0GCSqGSIb3 DQEBCwUAA4IBAQA/CvxPgDi2SGTxJtU2d7jp7iw2Lyj4hFCq1vO8H7hDvws4sIUY IpLrEH98GixrW6Erd9g9IOPXiQw/pRtlkDCEpRuxWjDSNxatzlL1uNa2rVLdM2MA 6CGhg0ahn23SFV23E6zCNDVddvViwG1b+Kr7llTAS8oB+MAaSButxcVNyzH497hD wgd6IIP5P1uPdedTyHbO1ZEgUgJPOPAtUBt21yCsi0Kc8Eyzi8B19VcEvL/LNQWv Qs9wWEhcDN9/atrU74bFBdphdWdWAWrbiTKV26HYg6wzhio7nsfzOg3mZE2QisJe Ap/Kjt7NSDFh8uSGjbFsl2Cd0LvqUQPLQEc7 -----END CERTIFICATE-----Generated at Sun Jan 25 22:23:22 2026 by rpki-client