This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.cer (raw, json) Hash identifier: /lwHAvmsZpUP32kT1u24fpVkQzauBfZAFt+X1ZutTE4= Subject key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C124D1DA687B55BBA53BD1BC17CE3BC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201766 IP: 176.124.253.0/24 IP: 185.64.32.0/22 IP: 2a04:f7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4d:1d:a6:87:b5:5b:ba:53:bd:1b:c1:7c:e3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:07:83:10:ab:ff:46:6b:84:d7:9b:bc:df: d3:45:e1:92:eb:8a:1d:2d:74:71:3e:b7:e3:a8:41: da:2c:8a:65:7d:af:84:d0:43:29:c7:8b:73:26:8c: 10:ef:41:17:f9:f6:10:9a:8c:45:23:94:81:88:58: 79:4d:94:54:b6:11:ef:d3:23:6a:01:c1:be:0f:1e: 2a:9a:c3:58:70:ba:18:0b:df:bd:16:0c:08:10:58: a7:eb:ef:7d:27:d4:40:08:45:c9:7e:74:03:dc:fb: 14:6d:48:ac:9b:aa:14:c1:71:29:a5:52:f7:77:dd: b6:6f:c1:83:c9:4d:95:3c:41:60:ae:01:6b:f7:01: 7f:a6:9d:7c:f8:61:ff:8f:37:93:70:18:0b:77:68: 49:1b:9a:b4:26:28:5c:5a:e7:af:ff:c4:d7:b7:91: aa:a5:86:19:0d:33:aa:1a:f8:f0:54:82:7b:e9:67: c3:ef:68:57:66:9d:53:42:58:73:74:d4:1f:cf:d5: 11:0c:7a:ae:35:2c:bd:f7:bf:ff:75:07:73:d7:1a: f4:24:48:bf:01:e6:7f:70:fa:d2:fa:26:b1:a6:77: 41:9c:38:8c:50:09:4f:ea:87:f2:cb:ff:64:bb:c9: 87:d9:0c:f2:60:19:82:94:1e:d8:97:83:fc:6b:95: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.253.0/24 185.64.32.0/22 IPv6: 2a04:f7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201766 Signature Algorithm: sha256WithRSAEncryption 97:3d:bc:de:54:f3:44:46:0c:14:1f:d4:27:a9:94:51:71:b0: 78:fe:54:95:56:96:6a:6b:bc:59:d0:f7:7a:29:4f:51:ed:3c: cc:89:79:df:8c:a3:90:40:d5:47:bd:f3:e7:c2:5d:e0:ec:88: db:37:41:52:69:71:56:84:3b:b5:8f:76:81:51:7d:2d:eb:60: d9:db:20:91:d1:0b:5d:cc:fb:fc:7f:ac:d9:de:76:38:e1:ca: 4b:e4:58:91:28:46:cd:a1:5c:b9:b0:61:10:4c:b4:20:ed:89: b5:80:09:ff:e8:84:65:36:df:8c:90:f5:b6:ca:43:65:c8:a1: 2a:b7:c5:8f:a0:e9:db:96:3f:c0:8f:f0:c3:4f:a1:6a:05:cb: bb:2a:91:3d:de:60:20:e8:e5:88:c4:51:94:ea:9b:bd:59:70: b3:20:81:d9:19:44:47:bc:6c:95:46:44:dd:88:76:4d:31:d2: 88:e2:17:a9:1c:aa:d6:0a:19:89:60:37:e4:da:1e:a7:12:18: 83:5b:a5:42:db:ed:94:98:4a:14:59:97:1c:a3:33:47:41:17: 9d:7c:f6:6f:1d:7e:2a:34:31:b4:47:b1:4c:00:42:ab:1b:53: ca:7b:e1:37:5e:4a:91:7f:c7:69:c3:10:b6:c3:5f:08:3b:f5: 1d:51:1e:3e -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8Ek0dpoe1W7pTvRvBfOO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYmQ3Yzk1MTM0OGJkMmUwOWNjYWY3NmY1N2I4Mzg1ZjE1ZGY0NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT8HgxCr/0ZrhNebvN/TReGS64od LXRxPrfjqEHaLIplfa+E0EMpx4tzJowQ70EX+fYQmoxFI5SBiFh5TZRUthHv0yNq AcG+Dx4qmsNYcLoYC9+9FgwIEFin6+99J9RACEXJfnQD3PsUbUism6oUwXEppVL3 d922b8GDyU2VPEFgrgFr9wF/pp18+GH/jzeTcBgLd2hJG5q0JihcWuev/8TXt5Gq pYYZDTOqGvjwVIJ76WfD72hXZp1TQlhzdNQfz9URDHquNSy997//dQdz1xr0JEi/ AeZ/cPrS+iaxpndBnDiMUAlP6ofyy/9ku8mH2QzyYBmClB7Yl4P8a5U0BwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNvXyVE0i9LgnMr3b1e4OF8V30TkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzg1M2M3 Ni1hMzk4LTQzNWEtYmU0MS03ZDBhYzUyODE1YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvODUzYzc2 LWEzOTgtNDM1YS1iZTQxLTdkMGFjNTI4MTVhNi8xLzI5ZkpVVFNMMHVDY3l2ZHZW N2c0WHhYZlJPUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAsHz9AwQCuUAgMA0EAgACMAcDBQMqBPfAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMUJjANBgkqhkiG9w0BAQsFAAOCAQEAlz28 3lTzREYMFB/UJ6mUUXGweP5UlVaWamu8WdD3eilPUe08zIl534yjkEDVR73z58Jd 4OyI2zdBUmlxVoQ7tY92gVF9Letg2dsgkdELXcz7/H+s2d52OOHKS+RYkShGzaFc ubBhEEy0IO2JtYAJ/+iEZTbfjJD1tspDZcihKrfFj6Dp25Y/wI/ww0+hagXLuyqR Pd5gIOjliMRRlOqbvVlwsyCB2RlER7xslUZE3Yh2TTHSiOIXqRyq1goZiWA35Noe pxIYg1ulQtvtlJhKFFmXHKMzR0EXnXz2bx1+KjQxtEexTABCqxtTynvhN15KkX/H acMQtsNfCDv1HVEePg== -----END CERTIFICATE-----Generated at Tue Jan 27 07:45:57 2026 by rpki-client