This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59eZrg792Ybd53-zWtChCCPLly8.cer File: 59eZrg792Ybd53-zWtChCCPLly8.cer (raw, json) Hash identifier: EHJUkzJRBs61/Ub1J8+DDIdGuty8yWfr60ey/xAZpo8= Subject key identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF218FE6C3BDBE960C9AAE2F5788394 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 3261 IP: 2a02:300::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:18:fe:6c:3b:db:e9:60:c9:aa:e2:f5:78:83:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7d799ae0efdd986dde77fb35ad0a10823cb972f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:45:61:ff:a0:48:70:d6:2f:a8:e8:8f:81:cb: b6:6b:23:5c:13:c3:6c:38:ca:d1:95:62:e5:d4:8f: 53:96:0c:41:71:e0:e0:90:c3:29:c8:2d:c2:17:8b: 31:f8:ae:94:8f:fa:e3:e3:25:b1:2c:a7:c7:37:93: fb:eb:25:a9:43:38:1e:e6:ee:a9:66:ab:05:ec:4f: a4:16:9d:e0:35:49:55:cd:0e:57:91:91:df:d7:e4: ac:ae:b4:a7:96:a7:8e:9e:9a:41:5f:78:ac:87:3a: 00:a8:07:f2:06:b9:34:d7:a5:63:f1:a4:27:29:bd: c0:a8:3d:96:37:2e:65:f7:d1:b8:50:13:cd:17:44: 3c:4e:e5:39:d6:48:2a:1d:e9:6d:22:d1:62:b5:20: b9:4b:0f:e9:bc:59:88:bd:2b:72:19:0f:59:34:bf: 42:69:24:e5:76:fb:6d:d3:f6:42:43:81:84:db:9a: b3:54:29:46:70:3b:f0:fc:51:7f:5b:11:1b:d8:f7: f4:83:5d:04:2d:e4:8c:d8:38:76:ee:43:26:81:6e: 33:3b:f7:c4:c0:a9:72:a6:07:a9:f3:c6:20:77:bc: a8:ad:c2:70:b1:2a:7f:c9:f1:cb:94:84:1a:ad:09: 73:cd:ba:27:14:1d:3e:7a:d0:1e:85:04:bb:d3:7f: 4b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D7:99:AE:0E:FD:D9:86:DD:E7:7F:B3:5A:D0:A1:08:23:CB:97:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/11081b-4ef9-4e2f-8153-287937940d7b/1/59eZrg792Ybd53-zWtChCCPLly8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3261 Signature Algorithm: sha256WithRSAEncryption 71:88:79:19:05:56:9c:4c:f5:d0:54:65:57:e9:06:cf:70:6b: bf:4c:ce:1d:ce:7b:cb:44:b1:62:95:d6:92:5a:c5:98:25:0a: f8:bc:ef:62:41:7d:34:65:69:ef:74:f8:4f:45:90:9c:66:a1: 07:31:8c:ac:48:b5:32:95:0c:08:d3:1b:a5:4a:7d:e7:2c:20: ba:5c:b4:1f:6f:ad:92:35:f8:fa:b0:3c:5d:f4:65:18:c9:68: d6:6b:e0:19:df:96:bd:f0:82:f4:31:34:2a:8d:82:dd:0e:6c: d5:6b:e9:38:3e:e9:62:7a:83:26:99:3b:23:18:e2:40:8c:f6: 31:f4:44:88:23:09:80:97:44:36:41:16:99:fc:31:d9:7d:14: aa:7e:ce:68:b9:62:5d:fa:a8:64:22:30:1e:6e:67:c6:b4:e9: 21:58:d8:39:a3:5b:92:1c:86:31:b9:c8:6b:08:e8:ec:64:0b: 03:92:2d:46:83:ec:6d:ce:8d:ab:d7:c0:94:ec:65:ea:fb:e7: 9c:b1:64:cd:83:dc:46:94:6f:d9:cd:07:a0:50:ee:76:ce:5a: 4d:36:c6:37:5a:45:b3:d5:2c:b6:ff:d7:e2:59:da:77:1d:41: 8c:06:70:d6:9a:03:11:eb:ec:47:c4:2b:fb:35:c6:77:cd:a7: f5:f3:f9:b8 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/8hj+bDvb6WDJquL1eIOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2Q3OTlhZTBlZmRkOTg2ZGRlNzdmYjM1YWQwYTEwODIzY2I5NzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkVh/6BIcNYvqOiPgcu2ayNcE8Ns OMrRlWLl1I9TlgxBceDgkMMpyC3CF4sx+K6Uj/rj4yWxLKfHN5P76yWpQzge5u6p ZqsF7E+kFp3gNUlVzQ5XkZHf1+SsrrSnlqeOnppBX3ishzoAqAfyBrk016Vj8aQn Kb3AqD2WNy5l99G4UBPNF0Q8TuU51kgqHeltItFitSC5Sw/pvFmIvStyGQ9ZNL9C aSTldvtt0/ZCQ4GE25qzVClGcDvw/FF/WxEb2Pf0g10ELeSM2Dh27kMmgW4zO/fE wKlypgep88Ygd7yorcJwsSp/yfHLlIQarQlzzbonFB0+etAehQS7039LjwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOfXma4O/dmG3ed/s1rQoQgjy5cvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc5LzExMDgx Yi00ZWY5LTRlMmYtODE1My0yODc5Mzc5NDBkN2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkvMTEwODFi LTRlZjktNGUyZi04MTUzLTI4NzkzNzk0MGQ3Yi8xLzU5ZVpyZzc5MlliZDUzLXpX dENoQ0NQTGx5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgIDADAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIMvTANBgkqhkiG9w0BAQsFAAOCAQEAcYh5GQVWnEz10FRlV+kGz3Brv0zOHc57 y0SxYpXWklrFmCUK+LzvYkF9NGVp73T4T0WQnGahBzGMrEi1MpUMCNMbpUp95ywg uly0H2+tkjX4+rA8XfRlGMlo1mvgGd+WvfCC9DE0Ko2C3Q5s1WvpOD7pYnqDJpk7 IxjiQIz2MfREiCMJgJdENkEWmfwx2X0Uqn7OaLliXfqoZCIwHm5nxrTpIVjYOaNb khyGMbnIawjo7GQLA5ItRoPsbc6Nq9fAlOxl6vvnnLFkzYPcRpRv2c0HoFDuds5a TTbGN1pFs9Ustv/X4lnadx1BjAZw1poDEevsR8Qr+zXGd82n9fP5uA== -----END CERTIFICATE-----Generated at Mon Jan 26 14:24:03 2026 by rpki-client