This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer File: 58B9uYgBM8XNzgBbyhEbVSzRTFM.cer (raw, json) Hash identifier: 7uo3Je4FL2REiOtaVlngVySaYlewNwRqe9P/duTf2Zk= Subject key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B3696CB70CA4B32B59B58FB9C5B5A67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202539 AS: 205154 AS: 208183 AS: 208974 IP: 45.12.168.0/22 IP: 45.12.200.0/22 IP: 45.152.228.0/22 IP: 91.224.165.0/24 IP: 2001:67c:1160::/48 IP: 2a0e:b500::/29 IP: 2a0e:bf00::/29 IP: 2a0f:6500::/29 IP: 2a12:efc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:96:cb:70:ca:4b:32:b5:9b:58:fb:9c:5b:5a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f4:8f:c6:ac:78:25:d9:b3:9e:6d:8a:76:a3: e0:dc:36:07:02:55:b4:ed:73:02:0e:ac:ad:7c:ed: fa:57:ed:6a:31:39:94:f4:a3:d3:c5:9f:9a:84:28: 5f:96:bc:c2:3d:dd:13:62:0d:b1:b2:a6:26:9c:2b: 50:04:65:94:19:b2:de:bb:15:50:7e:29:45:c6:bb: ee:6a:8d:9a:c8:45:6c:40:e6:47:c6:cb:f0:f9:87: fe:55:99:9e:53:88:e7:fc:9c:c4:10:04:14:b6:77: 68:24:86:78:dd:b6:9b:3f:5c:15:79:86:23:91:a6: 3d:cf:66:2e:37:fb:e9:01:d4:fc:eb:4d:04:8a:01: 66:43:79:d1:d9:a4:99:2c:13:e3:0f:09:71:28:09: a4:fb:52:ad:3e:51:e2:58:f0:64:15:5c:b0:f8:d1: 39:25:a1:5e:f4:d3:9d:a0:52:76:ad:c5:c8:20:96: 95:c1:a4:86:bf:f3:fc:89:98:6a:d6:8a:99:b2:9b: 5f:92:c8:bc:77:04:2f:22:0b:ef:dd:a5:0a:97:34: e6:27:68:27:02:eb:dc:65:bb:e8:d8:85:01:a5:8b: cb:14:87:39:32:3a:83:7a:b9:e2:cf:0a:3f:79:5c: 83:9a:26:63:b4:8b:ef:0f:35:ab:b7:6e:51:b5:10: 35:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.168.0/22 45.12.200.0/22 45.152.228.0/22 91.224.165.0/24 IPv6: 2001:67c:1160::/48 2a0e:b500::/29 2a0e:bf00::/29 2a0f:6500::/29 2a12:efc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202539 205154 208183 208974 Signature Algorithm: sha256WithRSAEncryption 65:73:44:49:2a:af:b4:0a:3f:5b:46:7b:47:42:ce:b2:80:0d: e9:3a:7e:a2:a1:7d:28:d7:88:0b:3a:af:4f:2e:e5:61:d7:5a: 5e:ce:e5:7b:42:38:30:36:17:a9:20:e8:b4:34:e8:2c:1b:41: 1b:09:27:38:00:b9:9e:43:d1:7b:0c:75:e4:a8:67:6c:83:01: 83:d7:ba:cc:8a:e9:be:76:b3:68:a0:61:e0:b7:6d:26:dd:fb: ec:2f:97:d6:2b:82:bb:9b:c4:66:be:e8:06:52:8d:20:2f:fd: f9:ea:3c:1d:72:cd:d2:46:32:5f:30:08:6d:f6:3c:e5:9b:da: 73:a6:77:3d:47:9a:11:90:35:76:34:9b:ee:5e:17:b6:70:d8: 22:59:5c:8f:c0:bc:e2:a3:b8:89:86:d2:4a:e0:1b:4a:e0:d9: 75:02:34:79:67:3d:15:46:93:6b:ec:57:11:dd:2e:8d:5d:c3: 88:2c:d9:73:99:19:46:74:21:b1:d5:a1:45:4b:ee:6e:6c:0d: 76:c5:7d:dc:ad:92:89:5b:e6:24:3c:ba:01:58:84:81:36:a8: 1e:46:40:6f:12:00:b6:37:da:78:9b:52:3b:1b:f8:ff:88:07: 5d:3d:f5:31:e5:7f:27:7a:5b:dd:ff:c0:8e:0c:c0:ee:11:94: a5:10:53:36 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISAZt7NpbLcMpLMrWbWPucW1pnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2MwN2RiOTg4MDEzM2M1Y2RjZTAwNWJjYTExMWI1NTJjZDE0YzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fSPxqx4Jdmznm2KdqPg3DYHAlW0 7XMCDqytfO36V+1qMTmU9KPTxZ+ahChflrzCPd0TYg2xsqYmnCtQBGWUGbLeuxVQ filFxrvuao2ayEVsQOZHxsvw+Yf+VZmeU4jn/JzEEAQUtndoJIZ43babP1wVeYYj kaY9z2YuN/vpAdT8600EigFmQ3nR2aSZLBPjDwlxKAmk+1KtPlHiWPBkFVyw+NE5 JaFe9NOdoFJ2rcXIIJaVwaSGv/P8iZhq1oqZsptfksi8dwQvIgvv3aUKlzTmJ2gn AuvcZbvo2IUBpYvLFIc5MjqDernizwo/eVyDmiZjtIvvDzWrt25RtRA13QIDAQAB o4IC7jCCAuowHQYDVR0OBBYEFOfAfbmIATPFzc4AW8oRG1Us0UxTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzhjZGQ0 OS1jMDk0LTRjNmEtOTE4Yy0wYWE0NjNjZGZjYTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvOGNkZDQ5 LWMwOTQtNGM2YS05MThjLTBhYTQ2M2NkZmNhMC8xLzU4Qjl1WWdCTThYTnpnQmJ5 aEViVlN6UlRGTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTAeBAIAATAYAwQCLQyoAwQCLQzIAwQCLZjkAwQAW+ClMCsEAgAC MCUDBwAgAQZ8EWADBQMqDrUAAwUDKg6/AAMFAyoPZQADBQMqEu/AMCkGCCsGAQUF BwEIAQH/BBowGKAWMBQCAwMXKwIDAyFiAgMDLTcCAwMwTjANBgkqhkiG9w0BAQsF AAOCAQEAZXNESSqvtAo/W0Z7R0LOsoAN6Tp+oqF9KNeICzqvTy7lYddaXs7le0I4 MDYXqSDotDToLBtBGwknOAC5nkPRewx15KhnbIMBg9e6zIrpvnazaKBh4LdtJt37 7C+X1iuCu5vEZr7oBlKNIC/9+eo8HXLN0kYyXzAIbfY85Zvac6Z3PUeaEZA1djSb 7l4XtnDYIllcj8C84qO4iYbSSuAbSuDZdQI0eWc9FUaTa+xXEd0ujV3DiCzZc5kZ RnQhsdWhRUvubmwNdsV93K2SiVvmJDy6AViEgTaoHkZAbxIAtjfaeJtSOxv4/4gH XT31MeV/J3pb3f/AjgzA7hGUpRBTNg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:09:33 2026 by rpki-client