This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer File: E38zct9XyBSrqLUakHhh2SueT1U.cer (raw, json) Hash identifier: LTVlwY1BnWa4G/3pK9bSM1KEFpqYSczgsfo4DCXTLlA= Subject key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C124A82E664D184F378E65A123BFF63 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209459 IP: 5.253.24.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4a:82:e6:64:d1:84:f3:78:e6:5a:12:3b:ff:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=137f3372df57c814aba8b51a907861d92b9e4f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:9f:19:c2:3d:a4:a0:10:79:55:22:57:3e: 0a:42:92:79:40:03:ef:3d:38:01:38:f6:31:5f:4a: 45:a6:82:96:55:cb:29:d6:c9:2e:89:c1:69:c0:9d: 0a:39:28:81:fc:4d:a0:ad:6a:c1:8f:ab:23:23:38: 12:d4:dd:73:a0:ce:3f:89:62:3b:97:4c:fc:0e:e0: 46:19:22:5c:19:f7:41:d3:0b:1d:e7:e1:fc:61:46: 2f:36:74:99:a4:3e:3e:e3:35:c7:1a:7b:86:bf:9d: 8c:b3:35:6d:35:8f:01:74:3f:66:c0:f3:2a:0c:38: 6e:99:c7:ef:1a:50:fe:76:96:95:4b:df:c8:e9:2f: c0:d6:17:e4:eb:0b:bb:40:9b:a7:aa:0f:7b:35:7a: df:5a:00:0a:20:c2:ea:7f:05:1f:6b:3e:03:8d:4d: 1c:82:e4:fd:9b:96:cf:79:27:1c:04:1e:05:51:d8: 1c:1d:ab:22:6e:f2:80:8f:b9:75:0a:5a:e4:8f:07: 1d:3d:59:8d:cc:11:c6:86:b4:21:4f:9c:54:9a:85: 72:77:ee:1d:57:69:c4:94:be:4e:f5:60:a0:7e:ad: 74:c3:25:5f:48:db:39:c5:48:40:9e:0d:54:09:0f: b6:d2:53:66:60:a9:fa:32:ce:d2:7f:91:bb:62:23: eb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.24.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209459 Signature Algorithm: sha256WithRSAEncryption a1:1f:80:c8:47:6d:4e:24:1c:7c:68:a2:78:5d:67:bb:9a:7f: df:18:a8:bb:80:bc:ef:2c:31:6a:5d:5a:26:98:cb:09:86:79: 0f:22:3d:9d:98:a7:d4:79:15:da:ee:2e:17:5f:1c:ad:85:3b: a3:54:a1:04:df:c3:4a:c8:63:45:28:d0:af:07:8b:46:9d:48: 00:90:cb:f2:b1:34:85:82:b3:56:8a:57:44:d6:c9:8d:05:1b: 01:6d:17:17:d4:18:23:e1:45:f9:95:08:9a:c5:38:6e:25:56: 9c:f9:74:7a:21:83:3e:21:c6:24:6e:ac:ad:10:e9:b1:f8:e1: bf:e8:6c:a3:7c:ba:0f:a5:28:52:6d:a3:e9:13:a0:a1:31:33: 1b:5b:fe:45:2c:f6:06:17:f5:f2:02:7e:40:8b:14:44:5e:ec: 85:55:17:2d:df:3b:f2:fe:aa:81:a8:33:ba:7d:ea:a8:0e:e4: fd:78:70:10:d4:90:49:bd:a8:19:f3:de:c7:1f:6d:e5:8f:9e: 39:ea:e1:c2:f9:c8:03:4d:9c:37:05:8d:12:5e:22:f6:ff:e9: fd:1d:66:a9:42:16:31:6b:8a:a9:51:41:ed:cf:c3:9b:76:63: d1:ce:28:1e:ad:64:ad:84:19:6c:d9:8f:6a:f6:9c:4f:5b:8a: 0b:88:df:b4 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EkqC5mTRhPN45loSO/9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzdmMzM3MmRmNTdjODE0YWJhOGI1MWE5MDc4NjFkOTJiOWU0ZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM6fGcI9pKAQeVUiVz4KQpJ5QAPv PTgBOPYxX0pFpoKWVcsp1skuicFpwJ0KOSiB/E2grWrBj6sjIzgS1N1zoM4/iWI7 l0z8DuBGGSJcGfdB0wsd5+H8YUYvNnSZpD4+4zXHGnuGv52MszVtNY8BdD9mwPMq DDhumcfvGlD+dpaVS9/I6S/A1hfk6wu7QJunqg97NXrfWgAKIMLqfwUfaz4DjU0c guT9m5bPeSccBB4FUdgcHasibvKAj7l1ClrkjwcdPVmNzBHGhrQhT5xUmoVyd+4d V2nElL5O9WCgfq10wyVfSNs5xUhAng1UCQ+20lNmYKn6Ms7Sf5G7YiPrnwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFBN/M3LfV8gUq6i1GpB4Ydkrnk9VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzhiMTQx Yi00OTRlLTQ2NmItYTIyYy1hMjI0ZmVmYWMyMTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvOGIxNDFi LTQ5NGUtNDY2Yi1hMjJjLWEyMjRmZWZhYzIxOC8xL0UzOHpjdDlYeUJTcnFMVWFr SGhoMlN1ZVQxVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCBf0YMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMyMzANBgkqhkiG9w0BAQsFAAOCAQEAoR+AyEdtTiQcfGiieF1nu5p/3xiou4C8 7ywxal1aJpjLCYZ5DyI9nZin1HkV2u4uF18crYU7o1ShBN/DSshjRSjQrweLRp1I AJDL8rE0hYKzVopXRNbJjQUbAW0XF9QYI+FF+ZUImsU4biVWnPl0eiGDPiHGJG6s rRDpsfjhv+hso3y6D6UoUm2j6ROgoTEzG1v+RSz2Bhf18gJ+QIsURF7shVUXLd87 8v6qgagzun3qqA7k/XhwENSQSb2oGfPexx9t5Y+eOerhwvnIA02cNwWNEl4i9v/p /R1mqUIWMWuKqVFB7c/Dm3Zj0c4oHq1krYQZbNmPavacT1uKC4jftA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:25 2026 by rpki-client