This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer File: 63yCLR6UUXyIUVzJs_wr3hKbRUw.cer (raw, json) Hash identifier: DaqT4JgPqqOJ72JStD0n5sItqv7YQuQl2kg0gV8SPE4= Subject key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5C1417A1F2D0EE3A122F7BBC916FFB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42598 IP: 194.55.4.0/22 IP: 2a0c:ca40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:14:17:a1:f2:d0:ee:3a:12:2f:7b:bc:91:6f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:79:be:5b:3b:85:32:93:8d:84:cc:55:45: 0a:c8:52:83:62:4d:27:b4:c7:fc:9b:18:e8:55:d1: e4:5f:be:97:35:10:ad:00:57:09:bf:b6:5e:1d:10: 3b:b4:bc:98:b3:b0:41:a2:39:00:4a:e0:51:03:86: df:25:27:80:8b:73:be:6f:bb:b5:ee:de:b7:78:72: d3:1e:c6:30:f6:eb:f0:f5:4f:22:82:ab:7d:b9:18: 93:fc:f2:15:15:d3:1c:21:62:53:e7:8e:89:1c:78: 7c:c4:be:af:28:01:7a:4a:b7:bc:5a:d4:42:65:92: 1a:f8:ab:da:7d:97:5b:1c:f9:28:d7:b1:52:fa:4a: 5d:f5:4b:e2:a6:09:84:7b:46:a3:84:24:d7:42:12: 2f:57:5c:66:45:84:c2:df:24:0c:42:6b:81:0b:a4: 83:05:6a:d6:0b:1d:00:66:d8:9c:a8:cd:3a:b1:dc: 87:ab:7a:ea:d0:7b:59:7f:ea:9b:13:40:80:9b:aa: 8f:91:6b:fd:4b:03:45:52:22:00:d8:a1:47:d1:03: 51:99:3e:9f:57:4c:ff:70:af:ca:d9:a7:c7:2e:33: e1:51:9a:a7:a4:c9:f1:1d:76:05:88:ea:3d:c9:b3: e5:28:e3:ca:86:0d:b8:e6:d9:54:b0:36:8a:9d:4e: 81:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.4.0/22 IPv6: 2a0c:ca40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42598 Signature Algorithm: sha256WithRSAEncryption 91:77:d8:fe:23:39:c0:89:a1:5f:a4:d2:fa:37:a6:15:b6:54: 19:79:9a:0e:9d:76:91:a3:97:4a:c8:b0:d8:4f:29:eb:b9:6a: ce:c6:e7:36:28:58:34:e2:0a:a0:41:ab:b1:1a:50:55:b6:f0: f8:3e:0b:f6:ac:67:70:e9:8f:26:c2:21:e7:e6:2a:60:3d:68: db:a4:bb:6b:a7:c5:b7:bf:3e:09:ba:40:cb:3b:a3:66:db:75: 4a:05:2f:18:3c:f5:3c:1c:0f:06:00:b6:b9:61:0e:14:e5:aa: b9:51:40:84:0c:ff:e2:7a:8c:12:7e:2e:74:73:52:eb:e5:a1: 24:6e:86:fe:23:9c:cb:93:fe:4c:8a:94:84:f5:a8:19:1e:b6: 18:73:3e:31:48:52:c2:4f:fe:0b:1d:bc:7a:ba:fc:aa:ca:6b: 42:49:c9:78:a0:20:29:6a:c1:ab:d2:f1:fb:04:17:a7:c8:bc: 91:f3:6e:4c:58:aa:66:94:f9:6a:53:2a:fe:f9:e7:6d:7b:9f: eb:d8:3e:97:10:21:44:82:aa:10:ac:76:5b:6f:78:85:5d:ad: f3:09:51:5b:7e:ab:1a:b6:f1:0a:36:8d:17:d6:76:76:74:31: b9:ef:29:2c:cf:71:ff:23:d4:17:01:4a:2f:51:70:19:24:65: e0:47:31:92 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9XBQXofLQ7joSL3u8kW/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjdjODIyZDFlOTQ1MTdjODg1MTVjYzliM2ZjMmJkZTEyOWI0NTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPJ5vls7hTKTjYTMVUUKyFKDYk0n tMf8mxjoVdHkX76XNRCtAFcJv7ZeHRA7tLyYs7BBojkASuBRA4bfJSeAi3O+b7u1 7t63eHLTHsYw9uvw9U8igqt9uRiT/PIVFdMcIWJT546JHHh8xL6vKAF6Sre8WtRC ZZIa+KvafZdbHPko17FS+kpd9UvipgmEe0ajhCTXQhIvV1xmRYTC3yQMQmuBC6SD BWrWCx0AZticqM06sdyHq3rq0HtZf+qbE0CAm6qPkWv9SwNFUiIA2KFH0QNRmT6f V0z/cK/K2afHLjPhUZqnpMnxHXYFiOo9ybPlKOPKhg245tlUsDaKnU6BswIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFOt8gi0elFF8iFFcybP8K94Sm0VMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzExOTMz Yi1mYzBiLTQxMGYtOWMzNC0xMDY0NTA0ZTJiOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvMTE5MzNi LWZjMGItNDEwZi05YzM0LTEwNjQ1MDRlMmI5Ny8xLzYzeUNMUjZVVVh5SVVWekpz X3dyM2hLYlJVdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwjcEMA0EAgACMAcDBQMqDMpAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCmZjANBgkqhkiG9w0BAQsFAAOCAQEAkXfY/iM5wImh X6TS+jemFbZUGXmaDp12kaOXSsiw2E8p67lqzsbnNihYNOIKoEGrsRpQVbbw+D4L 9qxncOmPJsIh5+YqYD1o26S7a6fFt78+CbpAyzujZtt1SgUvGDz1PBwPBgC2uWEO FOWquVFAhAz/4nqMEn4udHNS6+WhJG6G/iOcy5P+TIqUhPWoGR62GHM+MUhSwk/+ Cx28err8qsprQknJeKAgKWrBq9Lx+wQXp8i8kfNuTFiqZpT5alMq/vnnbXuf69g+ lxAhRIKqEKx2W294hV2t8wlRW36rGrbxCjaNF9Z2dnQxue8pLM9x/yPUFwFKL1Fw GSRl4Ecxkg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:26:36 2026 by rpki-client