This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer File: 83T3NMNpXmeQanAy6y5Z-z60GyI.cer (raw, json) Hash identifier: sCLhFJ54dbVVVrNk3JpVFyhsrdn7OZ6ue9kOu9oGkIg= Subject key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A33FD7B1BF5996498AD5946077DDB1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56638 IP: 192.162.216.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3f:d7:b1:bf:59:96:49:8a:d5:94:60:77:dd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f5:e8:3c:80:cf:ab:2b:bc:3a:46:5c:6f:26: 50:d2:91:20:fa:ad:76:aa:68:58:52:1c:72:96:c9: ee:2a:c3:9a:df:0e:a9:bd:e1:92:6b:4f:f5:d3:53: 1a:6f:b3:79:df:eb:89:02:38:3a:e8:eb:8c:85:d8: e9:42:d3:19:17:ae:2b:92:52:2b:28:fc:2e:6f:08: 01:69:06:37:07:ee:de:59:f6:65:ed:5f:cc:cf:16: 61:df:fd:8b:eb:13:b3:bf:70:34:45:fd:db:0e:41: fb:4f:d6:55:0e:5d:df:f9:a3:d6:60:3b:96:07:ac: 2b:5b:3c:7c:72:36:df:0f:36:01:c2:42:ba:4e:db: 0a:48:7d:11:78:d4:87:b7:5c:40:5e:a3:ae:76:f8: 67:cd:98:5b:8c:fc:58:9a:78:f5:38:b3:4f:2f:b5: 00:d2:5e:63:57:18:27:95:09:f7:65:4c:3b:8b:64: 8d:d5:8e:4a:6d:40:a8:a2:42:63:1c:fc:05:62:d5: 04:a1:38:44:f0:57:b2:9b:9d:00:fd:51:0e:8d:1b: 57:ea:06:21:31:01:b5:b2:98:7e:82:bc:90:a6:e9: ad:22:ed:ca:e7:8d:20:00:20:f5:e0:63:5a:89:75: 80:40:c5:2c:96:69:b4:79:e4:85:49:b0:a6:47:16: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.216.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56638 Signature Algorithm: sha256WithRSAEncryption 27:a7:64:00:35:e5:6a:6a:d3:db:ab:ac:3a:f2:d1:ee:4f:fe: b0:b7:57:62:dc:ed:2a:34:aa:86:ac:17:a6:4b:3c:1e:89:76: 30:97:6b:f2:b1:d7:57:37:1a:49:5e:c9:95:9a:3a:f9:40:a1: 05:13:5f:c1:6b:30:e1:fc:d9:16:da:b3:90:48:f5:4a:a9:9f: f1:68:5a:f9:0f:55:06:97:7b:78:1b:4f:a3:4e:c1:c1:d3:45: 23:5f:20:9a:48:9f:61:56:11:e1:67:ed:fa:b6:8d:fa:24:af: b5:0f:17:50:35:95:5e:ae:e3:ae:93:ed:2f:a0:9f:c6:a8:6e: 10:e8:40:02:24:b4:d8:37:31:ef:02:cd:56:e9:49:bf:bd:f5: e1:fe:bb:45:28:2e:1f:ae:97:40:49:ac:34:dc:10:67:e8:1a: 51:3e:cf:53:32:49:48:33:d3:7d:9b:22:9e:d4:ef:bf:63:d3: 6e:7c:14:4f:9a:62:65:67:5c:ec:c3:96:93:c5:99:94:fb:a5: 64:e7:69:3d:e7:4b:3d:a3:24:fd:fe:9b:fe:1d:1d:2f:0d:bf: 9f:aa:01:ef:ff:79:56:21:39:d4:10:c8:cb:c9:0c:60:73:76: 2a:72:07:f4:4b:85:9e:ea:ff:41:b9:34:6c:57:16:44:9d:c9: 51:57:69:4d -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4oz/Xsb9ZlkmK1ZRgd92xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzc0ZjczNGMzNjk1ZTY3OTA2YTcwMzJlYjJlNTlmYjNlYjQxYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPXoPIDPqyu8OkZcbyZQ0pEg+q12 qmhYUhxylsnuKsOa3w6pveGSa0/101Mab7N53+uJAjg66OuMhdjpQtMZF64rklIr KPwubwgBaQY3B+7eWfZl7V/MzxZh3/2L6xOzv3A0Rf3bDkH7T9ZVDl3f+aPWYDuW B6wrWzx8cjbfDzYBwkK6TtsKSH0ReNSHt1xAXqOudvhnzZhbjPxYmnj1OLNPL7UA 0l5jVxgnlQn3ZUw7i2SN1Y5KbUCookJjHPwFYtUEoThE8Feym50A/VEOjRtX6gYh MQG1sph+gryQpumtIu3K540gACD14GNaiXWAQMUslmm0eeSFSbCmRxZjawIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFPN09zTDaV5nkGpwMusuWfs+tBsiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyL2Y3NDkx NC1kZGE4LTRkNDUtOTk5Mi00YmVmODMyOGFhYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvZjc0OTE0 LWRkYTgtNGQ0NS05OTkyLTRiZWY4MzI4YWFhYi8xLzgzVDNOTU5wWG1lUWFuQXk2 eTVaLXo2MEd5SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwKLYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDdPjANBgkqhkiG9w0BAQsFAAOCAQEAJ6dkADXlamrT26usOvLR7k/+sLdXYtzt KjSqhqwXpks8Hol2MJdr8rHXVzcaSV7JlZo6+UChBRNfwWsw4fzZFtqzkEj1Sqmf 8Wha+Q9VBpd7eBtPo07BwdNFI18gmkifYVYR4Wft+raN+iSvtQ8XUDWVXq7jrpPt L6CfxqhuEOhAAiS02Dcx7wLNVulJv7314f67RSguH66XQEmsNNwQZ+gaUT7PUzJJ SDPTfZsintTvv2PTbnwUT5piZWdc7MOWk8WZlPulZOdpPedLPaMk/f6b/h0dLw2/ n6oB7/95ViE51BDIy8kMYHN2KnIH9EuFnur/Qbk0bFcWRJ3JUVdpTQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:00:48 2026 by rpki-client