This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer File: 13eW4WtWXXJzZphsycqcpj0aTlg.cer (raw, json) Hash identifier: m5VqZEvlW+m5aycVMnrPOIxPQRROC1o4Lc/jR80+cdM= Subject key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF270009300B1D02E1D5A986D2F3B7C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52148 IP: 37.26.104.0/21 IP: 91.204.208.0/22 IP: 91.238.160.0 -- 91.238.165.255 IP: 185.73.8.0/22 IP: 193.33.186.0/23 IP: 193.105.61.0/24 IP: 213.5.176.0/21 IP: 2001:67c:580::/48 IP: 2a00:c980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:70:00:93:00:b1:d0:2e:1d:5a:98:6d:2f:3b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:62:3e:31:1d:c3:61:68:28:7d:5d:70:eb: 97:84:6a:a6:87:f7:4e:8c:b8:43:23:60:12:d0:92: 33:76:d6:29:ef:7d:55:b8:9a:db:a1:9d:91:bc:b7: a2:5c:09:a0:8d:f4:37:61:97:9f:c9:58:89:a2:e1: 24:ab:19:eb:63:40:70:30:02:2c:97:06:7e:0e:50: 93:b9:6e:a3:22:fc:d2:36:a3:d5:2d:0f:06:b7:15: 84:74:80:55:47:ff:a3:0f:d6:e5:d3:b9:ce:05:13: c5:23:82:cd:91:8f:86:c3:2b:1a:fb:80:cc:b0:67: 53:f3:b4:d5:e1:ff:00:49:95:30:8e:71:ef:37:e0: 62:f8:ca:4f:77:e5:6d:62:e3:2d:37:9d:47:75:4d: 43:99:5b:43:c1:08:d6:8f:c9:d9:0b:51:67:2d:a2: fe:c7:c1:a9:06:68:21:9e:1f:a2:2c:e3:e3:6c:a3: 54:31:7d:30:2a:a9:9d:9c:91:09:67:bb:48:be:5a: c9:d8:4a:1c:b6:89:57:9b:1c:3a:d9:3c:ee:5d:c7: c4:c0:e3:02:c7:ac:91:25:05:32:b7:94:28:c9:a3: d0:dc:a5:b9:67:b7:7e:a8:f5:74:7a:0d:9a:de:82: 65:3e:61:30:91:29:5b:03:90:1e:cc:67:9e:be:42: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.104.0/21 91.204.208.0/22 91.238.160.0-91.238.165.255 185.73.8.0/22 193.33.186.0/23 193.105.61.0/24 213.5.176.0/21 IPv6: 2001:67c:580::/48 2a00:c980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52148 Signature Algorithm: sha256WithRSAEncryption 2b:07:a7:05:92:e6:39:e1:68:10:4d:88:d8:88:2e:1a:a8:9f: 6f:7b:6e:06:6e:49:f2:66:0a:11:6f:86:54:0e:c0:2f:13:8a: 35:f4:d2:2e:66:04:88:c0:bc:9b:5d:b9:41:d1:27:4f:5e:8b: f8:6b:66:35:a6:d4:0b:72:e1:9b:a9:af:7b:ec:1e:a6:49:9a: 37:5d:8e:86:89:49:06:38:cd:10:c9:c2:3a:55:97:4c:cd:3e: 33:bc:62:2f:bc:4e:bf:6b:bc:0d:4e:21:44:8a:99:96:0c:0b: eb:7f:45:80:8a:6d:27:f5:76:04:1f:30:de:a9:ae:85:02:60: 32:bd:90:82:89:96:f8:af:e4:e4:69:ab:28:7f:dc:a1:d2:51: b5:f4:aa:3d:11:67:45:49:3c:a8:5f:2a:ef:9b:8d:e0:5e:30: 0d:4f:38:c3:9c:40:86:e5:df:78:03:dd:00:d6:bf:ce:2a:be: a6:fb:d0:ad:03:a3:c9:d0:ed:6e:3e:91:e1:fb:7e:a0:6c:3a: e1:37:76:71:32:86:3c:cc:a5:ab:82:18:32:1e:35:25:37:02: d3:b7:dc:21:55:7c:1d:45:d4:64:e5:41:15:14:55:3b:7e:7d: 8f:b4:12:13:34:63:02:5d:07:d4:24:8a:66:e6:52:00:86:dc: ec:d8:81:8c -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt/8nAAkwCx0C4dWphtLzt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzc3OTZlMTZiNTY1ZDcyNzM2Njk4NmNjOWNhOWNhNjNkMWE0ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq71iPjEdw2FoKH1dcOuXhGqmh/dO jLhDI2AS0JIzdtYp731VuJrboZ2RvLeiXAmgjfQ3YZefyViJouEkqxnrY0BwMAIs lwZ+DlCTuW6jIvzSNqPVLQ8GtxWEdIBVR/+jD9bl07nOBRPFI4LNkY+Gwysa+4DM sGdT87TV4f8ASZUwjnHvN+Bi+MpPd+VtYuMtN51HdU1DmVtDwQjWj8nZC1FnLaL+ x8GpBmghnh+iLOPjbKNUMX0wKqmdnJEJZ7tIvlrJ2EoctolXmxw62TzuXcfEwOMC x6yRJQUyt5QoyaPQ3KW5Z7d+qPV0eg2a3oJlPmEwkSlbA5AezGeevkK1XQIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFNd3luFrVl1yc2aYbMnKnKY9Gk5YMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzU0Mjlk OC1mNDExLTQ2OTItYjBhNy0xNTVmZDBiNDNmOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvNTQyOWQ4 LWY0MTEtNDY5Mi1iMGE3LTE1NWZkMGI0M2Y5Zi8xLzEzZVc0V3RXWFhKelpwaHN5 Y3FjcGowYVRsZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGMGCCsGAQUF BwEHAQH/BFQwUjA4BAIAATAyAwQDJRpoAwQCW8zQMAwDBAVb7qADBAFb7qQDBAK5 SQgDBAHBIboDBADBaT0DBAPVBbAwFgQCAAIwEAMHACABBnwFgAMFAyoAyYAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAMu0MA0GCSqGSIb3DQEBCwUAA4IBAQArB6cF kuY54WgQTYjYiC4aqJ9ve24GbknyZgoRb4ZUDsAvE4o19NIuZgSIwLybXblB0SdP Xov4a2Y1ptQLcuGbqa977B6mSZo3XY6GiUkGOM0QycI6VZdMzT4zvGIvvE6/a7wN TiFEipmWDAvrf0WAim0n9XYEHzDeqa6FAmAyvZCCiZb4r+Tkaasof9yh0lG19Ko9 EWdFSTyoXyrvm43gXjANTzjDnECG5d94A90A1r/OKr6m+9CtA6PJ0O1uPpHh+36g bDrhN3ZxMoY8zKWrghgyHjUlNwLTt9whVXwdRdRk5UEVFFU7fn2PtBITNGMCXQfU JIpm5lIAhtzs2IGM -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:42 2026 by rpki-client