This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer File: _32KebrU-YPQxJiVr1DqigPrxw0.cer (raw, json) Hash identifier: 4id3FgZ7/z+xalzixO5csUAc3hsjchCjwkjcj0Sy+6g= Subject key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3E8E165055D15FAD11C4761683589 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43641 IP: 31.42.176.0/23 IP: 37.16.75.0/24 IP: 91.202.4.0/23 IP: 91.234.4.0/22 IP: 91.239.76.0/22 IP: 213.111.144.0/20 IP: 2a11:6100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e8:e1:65:05:5d:15:fa:d1:1c:47:61:68:35:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:9e:d4:f5:f2:6f:2d:2a:8d:b5:fe:79:fd: b6:d0:fa:5a:00:55:31:57:d2:f5:c9:8f:25:06:cc: ff:19:25:94:af:79:27:d7:92:55:a2:2f:ae:fb:71: ad:3a:55:0c:22:20:d6:07:ba:7c:99:54:22:8a:40: 74:be:33:ce:22:39:02:8b:55:2b:76:ab:cf:1f:b4: 56:6d:a2:a0:f9:34:2a:86:17:6b:ff:d4:2d:05:af: e6:a4:01:ee:75:26:b0:ec:22:7c:ba:64:0d:e6:b5: 13:e7:ac:77:e7:d6:0d:27:fc:96:24:ca:ad:63:89: 32:97:89:b1:da:9d:f1:c5:db:d2:15:cb:f7:72:dc: 36:93:2f:b1:59:62:d6:31:f9:df:6d:0e:c9:ff:a2: 70:2e:76:6e:a6:76:dd:90:13:ac:8c:bb:51:24:4f: 34:e7:81:de:74:f3:97:cc:91:5e:76:f8:dd:ec:e8: 4e:bb:72:b2:4a:f2:90:84:07:27:53:de:a0:c6:01: 84:34:d2:a6:25:30:ec:fe:83:4b:46:47:33:96:bb: eb:45:98:7c:84:f5:37:fd:55:83:5a:51:32:d5:e2: 18:ff:98:d5:d8:4b:fd:fe:03:a1:48:22:fc:6f:28: 9a:ba:df:7b:fa:c0:23:5d:d0:ec:e8:45:83:04:5e: fa:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.176.0/23 37.16.75.0/24 91.202.4.0/23 91.234.4.0/22 91.239.76.0/22 213.111.144.0/20 IPv6: 2a11:6100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43641 Signature Algorithm: sha256WithRSAEncryption 34:a6:a7:0b:59:df:a4:91:90:e2:22:fb:ad:87:00:c9:25:67: 6e:5c:59:86:da:17:6e:a8:8b:55:e7:11:76:c9:f1:e3:58:a6: 93:27:1c:1c:ee:b9:26:e5:47:b5:c5:a2:e3:d6:2f:50:ee:52: c3:fb:ee:a3:4a:7d:d8:e1:bf:1e:a9:80:c9:68:af:ae:58:4f: bf:f3:9b:c1:ea:a9:35:c9:1f:65:2a:6b:f5:15:9a:2c:cd:bb: b4:56:8e:41:91:98:e9:fb:9f:34:33:b5:91:50:14:2a:06:de: 46:06:f6:cd:86:75:31:cd:cd:d4:1f:81:0b:af:14:ee:72:be: 41:c9:06:71:2b:35:46:89:41:cb:47:8d:cd:de:92:77:f8:70: c5:e0:e3:9a:38:b7:43:bf:a7:a1:d5:56:ed:4a:a7:8c:74:a2: b4:aa:ca:77:bc:01:6d:75:7e:52:ac:17:76:46:50:fc:3d:9d: f1:0f:b9:4f:b6:3e:f9:0f:c6:74:31:ab:ef:63:28:67:af:b0: 09:d8:ef:18:79:39:ac:95:e4:9d:68:72:20:97:6b:c1:9f:4a: da:a2:36:49:20:ef:84:b1:fc:25:07:98:87:f8:ea:08:03:c2: 78:0e:ac:53:c9:76:2e:f1:4b:3e:a2:b4:56:a4:ef:a0:41:cb: f5:2d:91:bb -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt7o+jhZQVdFfrRHEdhaDWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjdkOGE3OWJhZDRmOTgzZDBjNDk4OTVhZjUwZWE4YTAzZWJjNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswWe1PXyby0qjbX+ef220PpaAFUx V9L1yY8lBsz/GSWUr3kn15JVoi+u+3GtOlUMIiDWB7p8mVQiikB0vjPOIjkCi1Ur dqvPH7RWbaKg+TQqhhdr/9QtBa/mpAHudSaw7CJ8umQN5rUT56x359YNJ/yWJMqt Y4kyl4mx2p3xxdvSFcv3ctw2ky+xWWLWMfnfbQ7J/6JwLnZupnbdkBOsjLtRJE80 54HedPOXzJFedvjd7OhOu3KySvKQhAcnU96gxgGENNKmJTDs/oNLRkczlrvrRZh8 hPU3/VWDWlEy1eIY/5jV2Ev9/gOhSCL8byiaut97+sAjXdDs6EWDBF76wQIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFP99inm61PmD0MSYla9Q6ooD68cNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzQ0MjRl Zi02OGFhLTRiNzAtYjJjYy0wODczZTM5OTRkMGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvNDQyNGVm LTY4YWEtNGI3MC1iMmNjLTA4NzNlMzk5NGQwZS8xL18zMktlYnJVLVlQUXhKaVZy MURxaWdQcnh3MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQBHyqwAwQAJRBLAwQBW8oEAwQCW+oEAwQCW+9M AwQE1W+QMA0EAgACMAcDBQMqEWEAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCq eTANBgkqhkiG9w0BAQsFAAOCAQEANKanC1nfpJGQ4iL7rYcAySVnblxZhtoXbqiL VecRdsnx41imkyccHO65JuVHtcWi49YvUO5Sw/vuo0p92OG/HqmAyWivrlhPv/Ob weqpNckfZSpr9RWaLM27tFaOQZGY6fufNDO1kVAUKgbeRgb2zYZ1Mc3N1B+BC68U 7nK+QckGcSs1RolBy0eNzd6Sd/hwxeDjmji3Q7+nodVW7UqnjHSitKrKd7wBbXV+ UqwXdkZQ/D2d8Q+5T7Y++Q/GdDGr72MoZ6+wCdjvGHk5rJXknWhyIJdrwZ9K2qI2 SSDvhLH8JQeYh/jqCAPCeA6sU8l2LvFLPqK0VqTvoEHL9S2Ruw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:52 2026 by rpki-client