This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer File: 58NBW98cAUrhwY58_TPFbwGP7ug.cer (raw, json) Hash identifier: qbqcJdFs6Q9MdoxbE57QgGg3PWesNRkCaV9QwjrfvR0= Subject key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B144F9E375245A96E24D8F269D384 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.34.4.0/22 IP: 2001:67c:2b60::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:14:4f:9e:37:52:45:a9:6e:24:d8:f2:69:d3:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:44:25:c2:0d:6b:bc:6b:5c:c6:e3:d4:38:1c: c1:9f:64:a3:43:11:33:68:b4:cb:c0:0d:ed:7d:35: db:23:fe:64:71:3f:a3:ae:43:8a:69:45:de:1a:c0: 80:b9:d6:95:3b:71:38:43:33:fe:e1:06:20:2d:23: 7d:6f:82:5e:4c:93:7b:84:0a:17:c5:6d:16:d9:7b: bd:8f:99:73:ea:7c:bf:29:46:3a:1b:2c:0c:0b:bc: e1:70:95:0c:5e:3f:66:13:50:a5:a4:37:2b:8f:2f: 54:ae:85:b3:1e:99:9d:e0:fd:d1:26:c9:f4:1f:03: c1:32:ae:4f:90:3f:18:48:66:a1:36:85:aa:8a:27: b4:19:94:74:d2:61:da:44:93:65:e2:45:4d:90:83: ab:3e:97:9b:52:95:2e:4e:96:13:35:8d:f1:7f:b4: fe:aa:80:61:97:28:0c:91:0b:f3:24:51:cf:48:2a: c8:61:61:16:e1:7c:ae:60:00:4e:01:39:0d:58:6e: 3a:95:30:f2:26:fc:37:1f:ee:6a:87:28:b3:6d:7b: 2e:be:5c:74:eb:99:d0:48:d9:ae:b7:52:ba:c6:74: d7:5c:04:06:9f:77:bf:2b:02:d9:66:18:05:9a:37: 49:db:5b:7f:9a:ae:24:78:69:b8:08:9d:00:ba:f1: 63:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.4.0/22 IPv6: 2001:67c:2b60::/48 Signature Algorithm: sha256WithRSAEncryption 51:9a:d3:61:8d:57:b6:65:9e:44:49:5c:97:e6:e0:65:5c:1c: 6a:87:24:b5:89:c8:ab:b6:ce:2b:38:16:ee:ce:22:39:db:78: 47:8c:33:b8:42:7a:8d:b7:76:dd:94:a6:b5:c0:89:88:6f:b6: 47:a4:b1:cf:32:be:44:93:cd:cb:59:21:3c:c4:04:21:70:05: 30:21:dc:94:46:1b:8a:b8:a5:51:e3:0b:6e:b5:77:e7:74:3d: 3e:4b:2b:c4:c4:0d:2b:48:7e:91:54:c5:d3:d1:ab:18:b8:f4: d8:4f:de:c5:8f:73:8c:ed:bc:75:ea:4a:f1:15:03:81:11:1d: a2:09:d3:01:b4:af:84:8a:6e:7d:fe:dd:d1:76:75:f2:5a:92: dc:a3:3f:1e:41:35:c7:c4:6d:fe:6f:94:8d:a3:22:a0:f5:e5: 1b:b6:dd:e5:11:58:7c:bb:57:89:ed:af:e8:9a:e8:8e:f8:fd: 9f:e6:3b:86:12:16:08:46:43:f3:e0:18:c8:28:e4:24:95:87: 04:c7:dc:1e:0a:39:5f:4e:09:10:14:37:5f:56:6d:0f:cd:27: 69:86:4b:42:4a:a0:63:94:f5:64:24:6b:22:59:28:d7:48:a9: de:6b:1b:33:c7:71:4c:13:76:25:6c:c7:d0:39:34:4f:95:77: b7:f2:bf:1d -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt6WxRPnjdSRaluJNjyadOEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2MzNDE1YmRmMWMwMTRhZTFjMThlN2NmZDMzYzU2ZjAxOGZlZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkQlwg1rvGtcxuPUOBzBn2SjQxEz aLTLwA3tfTXbI/5kcT+jrkOKaUXeGsCAudaVO3E4QzP+4QYgLSN9b4JeTJN7hAoX xW0W2Xu9j5lz6ny/KUY6GywMC7zhcJUMXj9mE1ClpDcrjy9UroWzHpmd4P3RJsn0 HwPBMq5PkD8YSGahNoWqiie0GZR00mHaRJNl4kVNkIOrPpebUpUuTpYTNY3xf7T+ qoBhlygMkQvzJFHPSCrIYWEW4XyuYABOATkNWG46lTDyJvw3H+5qhyizbXsuvlx0 65nQSNmut1K6xnTXXAQGn3e/KwLZZhgFmjdJ21t/mq4keGm4CJ0AuvFjPwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFOfDQVvfHAFK4cGOfP0zxW8Bj+7oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiL2NjYjU2 Zi1kZDA1LTQ2MTYtYTVmMS01NjMyNDY2OGE5NjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvY2NiNTZm LWRkMDUtNDYxNi1hNWYxLTU2MzI0NjY4YTk2NC8xLzU4TkJXOThjQVVyaHdZNThf VFBGYndHUDd1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQCwSIEMA8EAgACMAkDBwAgAQZ8K2AwDQYJKoZI hvcNAQELBQADggEBAFGa02GNV7ZlnkRJXJfm4GVcHGqHJLWJyKu2zis4Fu7OIjnb eEeMM7hCeo23dt2UprXAiYhvtkeksc8yvkSTzctZITzEBCFwBTAh3JRGG4q4pVHj C261d+d0PT5LK8TEDStIfpFUxdPRqxi49NhP3sWPc4ztvHXqSvEVA4ERHaIJ0wG0 r4SKbn3+3dF2dfJaktyjPx5BNcfEbf5vlI2jIqD15Ru23eURWHy7V4ntr+ia6I74 /Z/mO4YSFghGQ/PgGMgo5CSVhwTH3B4KOV9OCRAUN19WbQ/NJ2mGS0JKoGOU9WQk ayJZKNdIqd5rGzPHcUwTdiVsx9A5NE+Vd7fyvx0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:01 2026 by rpki-client