This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer File: N_sATjl93wTn0F82Q6A28hg2_xA.cer (raw, json) Hash identifier: ERxllDewRkwxaEz7y/AhKcStPFrs5UBD/Fg+CX/6jEA= Subject key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC3C789A66169C973698CB9CA6D91A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29134 AS: 51278 AS: 198171 AS: 206566 IP: 37.46.80.0/21 IP: 62.109.128.0/19 IP: 130.193.8.0/21 IP: 171.33.136.0/21 IP: 185.100.92.0/22 IP: 185.102.20.0/22 IP: 185.102.76.0/22 IP: 185.183.8.0/22 IP: 195.226.217.0/24 IP: 213.109.164.0/22 IP: 217.31.48.0/20 IP: 2001:67c:278::/48 IP: 2001:1ab0::/32 IP: 2a00:ca80::/32 IP: 2a03:b780::/32 IP: 2a09:ec00::/29 IP: 2a0a:ff80::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3c:78:9a:66:16:9c:97:36:98:cb:9c:a6:d9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:40:e2:84:90:46:0b:bb:05:9f:11:29:fc:34: 57:43:31:a9:b9:dd:16:0c:a1:8c:65:21:e6:ec:47: 63:94:e4:21:a7:9c:82:85:18:02:07:a5:35:99:67: de:31:f3:78:a5:03:d7:02:c1:0b:6f:ef:0e:a0:2c: d9:6b:cf:4e:fa:f7:d2:bf:21:b0:d5:a4:5c:2f:14: 49:fb:8c:3f:4f:8c:9e:5a:a6:45:06:9b:89:d4:22: 54:21:b6:bc:5f:55:d5:86:1e:84:a9:b6:22:4a:78: 44:be:d6:d2:00:a3:ea:ed:9e:d7:31:fa:ae:48:a3: b9:41:2f:41:bc:66:09:d3:b6:c4:4f:2d:2c:ee:44: dc:31:7f:8b:49:d7:16:ac:83:1c:6b:2b:8f:02:4c: c4:4d:be:56:1c:62:66:e7:e8:78:27:43:33:4f:d4: 34:f0:19:14:87:3e:3c:ff:0e:39:e2:e1:08:a0:a4: 72:a7:bc:2e:4c:ba:11:0e:5d:8a:10:e3:c4:ed:b7: 3c:73:ef:80:17:d4:f2:89:16:cb:67:c9:0b:fb:3c: 0a:bf:71:94:d1:52:fb:bb:5a:8b:7f:59:f9:1a:a4: e9:b3:8f:a9:57:f6:ac:f3:4c:ce:f5:d2:ac:9a:da: 43:aa:e8:54:e1:18:d2:98:44:d5:05:22:34:20:15: 49:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.80.0/21 62.109.128.0/19 130.193.8.0/21 171.33.136.0/21 185.100.92.0/22 185.102.20.0/22 185.102.76.0/22 185.183.8.0/22 195.226.217.0/24 213.109.164.0/22 217.31.48.0/20 IPv6: 2001:67c:278::/48 2001:1ab0::/32 2a00:ca80::/32 2a03:b780::/32 2a09:ec00::/29 2a0a:ff80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29134 51278 198171 206566 Signature Algorithm: sha256WithRSAEncryption 9b:9c:ee:9f:68:60:88:15:a9:75:6a:e6:59:b7:0f:2c:3c:3f: 71:2a:1a:2c:dc:b3:be:03:62:50:91:fc:73:7a:f4:53:3a:12: b4:71:88:00:26:bc:d2:8c:d3:70:3f:d4:55:12:d5:ff:b7:f1: e4:b2:d5:4b:cb:a8:5f:f5:d5:58:e4:b7:08:90:f0:9b:c6:72: dc:90:7f:0f:f7:98:3c:3f:48:82:3c:6b:79:d2:06:a7:82:60: b9:4c:61:3b:59:85:5a:46:60:d1:8c:14:54:23:75:e6:21:a3: 6b:aa:ee:49:8d:4b:60:72:75:8c:b0:4a:6b:b7:56:f9:b8:ae: 22:1b:73:63:1c:92:1a:25:c6:77:c0:b5:48:8b:a9:c4:67:de: 01:a4:64:c4:6b:df:16:ac:3f:26:65:87:d4:c6:d3:84:23:90: 7d:8a:d8:44:6b:9f:26:3c:41:e7:dc:33:94:de:01:3a:8a:ed: 68:6c:38:a5:f1:df:91:d1:9c:68:c6:83:80:80:d5:a5:31:65: 15:73:bf:58:1a:7a:f9:d4:a1:89:bc:57:ac:7f:57:e3:52:30: e7:26:17:f9:f8:b2:2a:38:5d:1f:81:b1:9a:5b:ab:5c:cb:3f: 17:d3:e6:3d:40:24:e2:bf:ec:70:ea:fb:11:85:36:c7:06:23: 30:2b:12:ac -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgISAZt57Dx4mmYWnJc2mMucptkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2ZiMDA0ZTM5N2RkZjA0ZTdkMDVmMzY0M2EwMzZmMjE4MzZmZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EDihJBGC7sFnxEp/DRXQzGpud0W DKGMZSHm7EdjlOQhp5yChRgCB6U1mWfeMfN4pQPXAsELb+8OoCzZa89O+vfSvyGw 1aRcLxRJ+4w/T4yeWqZFBpuJ1CJUIba8X1XVhh6EqbYiSnhEvtbSAKPq7Z7XMfqu SKO5QS9BvGYJ07bETy0s7kTcMX+LSdcWrIMcayuPAkzETb5WHGJm5+h4J0MzT9Q0 8BkUhz48/w454uEIoKRyp7wuTLoRDl2KEOPE7bc8c++AF9TyiRbLZ8kL+zwKv3GU 0VL7u1qLf1n5GqTps4+pV/as80zO9dKsmtpDquhU4RjSmETVBSI0IBVJPwIDAQAB o4IDIDCCAxwwHQYDVR0OBBYEFDf7AE45fd8E59BfNkOgNvIYNv8QMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzc0MjI5 OS1mMzQzLTQzMjEtYjM1MS1iNTNiNjRjZjBkOTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvNzQyMjk5 LWYzNDMtNDMyMS1iMzUxLWI1M2I2NGNmMGQ5NS8xL05fc0FUamw5M3dUbjBGODJR NkEyOGhnMl94QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGQBggrBgEF BQcBBwEB/wSBgDB+MEgEAgABMEIDBAMlLlADBAU+bYADBAOCwQgDBAOrIYgDBAK5 ZFwDBAK5ZhQDBAK5ZkwDBAK5twgDBADD4tkDBALVbaQDBATZHzAwMgQCAAIwLAMH ACABBnwCeAMFACABGrADBQAqAMqAAwUAKgO3gAMFAyoJ7AADBQAqCv+AMCgGCCsG AQUFBwEIAQH/BBkwF6AVMBMCAnHOAgMAyE4CAwMGGwIDAybmMA0GCSqGSIb3DQEB CwUAA4IBAQCbnO6faGCIFal1auZZtw8sPD9xKhos3LO+A2JQkfxzevRTOhK0cYgA JrzSjNNwP9RVEtX/t/HkstVLy6hf9dVY5LcIkPCbxnLckH8P95g8P0iCPGt50gan gmC5TGE7WYVaRmDRjBRUI3XmIaNrqu5JjUtgcnWMsEprt1b5uK4iG3NjHJIaJcZ3 wLVIi6nEZ94BpGTEa98WrD8mZYfUxtOEI5B9ithEa58mPEHn3DOU3gE6iu1obDil 8d+R0ZxoxoOAgNWlMWUVc79YGnr51KGJvFesf1fjUjDnJhf5+LIqOF0fgbGaW6tc yz8X0+Y9QCTiv+xw6vsRhTbHBiMwKxKs -----END CERTIFICATE-----Generated at Sun Jan 25 11:07:11 2026 by rpki-client