This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer File: 336sT6MToueS5UJjzGBf8xnzXBk.cer (raw, json) Hash identifier: ueXUrftBGF/KTcO1GMJiXI4v7Ie6I/Q1B/nn0lFcbxA= Subject key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12B27A52CAD0606C4669B2D14795FB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 57906 IP: 178.213.78.0/24 IP: 193.238.119.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b2:7a:52:ca:d0:60:6c:46:69:b2:d1:47:95:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df7eac4fa313a2e792e54263cc605ff319f35c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e4:7c:70:81:d7:ad:a3:a7:08:04:38:7a:35: 39:df:7c:6e:cd:16:85:6e:c7:83:b1:7e:42:65:79: 45:9d:9f:c8:fe:df:3d:36:f5:86:1a:9a:ac:7e:7c: 62:7f:fb:d5:b4:30:bf:e1:c9:6d:2b:aa:27:14:a8: 0b:08:45:35:04:29:f9:9d:aa:8e:9b:ff:24:ca:59: ba:ee:47:e2:dc:1f:99:7c:29:e3:77:41:94:a3:ac: 6c:c3:83:4c:2c:55:92:67:ce:27:ad:54:5c:d7:3e: fe:9e:d0:f6:d8:6a:16:4b:0a:4d:ed:8e:35:a3:1d: 0c:7a:56:a6:f7:2b:5c:70:dc:56:b0:e8:3b:f8:c3: a7:bc:c2:79:81:1e:d3:d8:2a:99:78:26:e7:97:b4: 61:6e:93:5a:39:71:4b:a2:55:00:7d:b3:23:c9:18: 97:98:5d:4c:da:68:93:2e:f3:d0:18:30:ce:9e:80: c5:31:fd:7d:82:57:7c:54:0b:79:95:dd:b0:0e:fe: 04:26:73:a5:9e:d2:93:24:b9:59:77:52:d8:ac:c6: b9:0f:03:e8:b4:72:2a:55:90:ac:74:34:07:60:0b: 0f:1d:ff:4d:83:34:44:ce:14:a5:f5:11:3a:e1:36: e8:13:18:df:d0:c9:e5:db:b7:68:00:f8:b9:e1:01: 82:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.78.0/24 193.238.119.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 57906 Signature Algorithm: sha256WithRSAEncryption 3a:71:0e:03:f5:ad:75:a8:c7:87:1c:fc:48:2d:43:a3:f9:af: fb:d8:14:49:6a:4a:a5:76:bd:0d:17:38:1b:5e:b0:22:8b:ee: d0:fd:fe:c4:11:6a:97:fd:77:d2:8f:ec:0b:20:e7:76:82:6d: 20:3b:23:11:ce:65:67:17:8d:9f:97:ca:e5:48:f1:9f:82:3c: fd:4f:fa:86:3c:cd:b3:38:5d:f0:ab:8e:9f:09:b6:08:e5:4f: 66:bd:50:be:bd:7a:f8:30:0f:d3:db:01:de:0f:2c:78:b9:cd: 27:5e:6b:b6:66:02:2c:66:06:98:7a:55:1a:8e:17:60:cf:fe: 32:7b:6e:c0:18:4b:7c:99:94:38:11:72:a0:67:63:6b:b7:31: d5:22:32:11:17:b3:e2:cf:e7:6d:c6:5e:da:2b:42:5c:bf:38: 74:3e:a4:e9:98:34:27:7e:ab:37:13:8c:0f:ad:86:e6:4d:81: 5c:9c:eb:7d:20:a0:10:2b:83:0d:bb:95:73:08:cc:f5:39:2b: 90:98:e8:2e:e0:a6:bb:18:ab:a6:64:24:95:32:13:b9:eb:7c: f8:04:7e:80:dd:80:c3:a0:28:f9:f7:79:c2:b0:45:95:7d:1c: 34:b0:8d:be:cc:ba:a1:5f:e3:fb:60:3b:ed:75:9b:8a:af:9a: 21:50:2c:a2 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt8ErJ6UsrQYGxGabLRR5X7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjdlYWM0ZmEzMTNhMmU3OTJlNTQyNjNjYzYwNWZmMzE5ZjM1YzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOR8cIHXraOnCAQ4ejU533xuzRaF bseDsX5CZXlFnZ/I/t89NvWGGpqsfnxif/vVtDC/4cltK6onFKgLCEU1BCn5naqO m/8kylm67kfi3B+ZfCnjd0GUo6xsw4NMLFWSZ84nrVRc1z7+ntD22GoWSwpN7Y41 ox0Melam9ytccNxWsOg7+MOnvMJ5gR7T2CqZeCbnl7RhbpNaOXFLolUAfbMjyRiX mF1M2miTLvPQGDDOnoDFMf19gld8VAt5ld2wDv4EJnOlntKTJLlZd1LYrMa5DwPo tHIqVZCsdDQHYAsPHf9NgzREzhSl9RE64TboExjf0Mnl27doAPi54QGC7QIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFN9+rE+jE6LnkuVCY8xgX/MZ81wZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE3L2RhNTdj OS1lMTM1LTQzNjctOGJlNi0yYzBjZjIzYjQyM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTcvZGE1N2M5 LWUxMzUtNDM2Ny04YmU2LTJjMGNmMjNiNDIzZS8xLzMzNnNUNk1Ub3VlUzVVSmp6 R0JmOHhuelhCay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAstVOAwQAwe53MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDiMjANBgkqhkiG9w0BAQsFAAOCAQEAOnEOA/WtdajHhxz8SC1Do/mv +9gUSWpKpXa9DRc4G16wIovu0P3+xBFql/130o/sCyDndoJtIDsjEc5lZxeNn5fK 5Ujxn4I8/U/6hjzNszhd8KuOnwm2COVPZr1Qvr16+DAP09sB3g8seLnNJ15rtmYC LGYGmHpVGo4XYM/+MntuwBhLfJmUOBFyoGdja7cx1SIyERez4s/nbcZe2itCXL84 dD6k6Zg0J36rNxOMD62G5k2BXJzrfSCgECuDDbuVcwjM9TkrkJjoLuCmuxirpmQk lTITuet8+AR+gN2Aw6Ao+fd5wrBFlX0cNLCNvsy6oV/j+2A77XWbiq+aIVAsog== -----END CERTIFICATE-----Generated at Mon Feb 9 15:13:56 2026 by rpki-client