This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer File: 339euIF_Lal_ZlUHaDtcRadNDKA.cer (raw, json) Hash identifier: xNOT8PvXdFH8fWrzTpVeAySJHeMfNXAKsfxJ4QYekEc= Subject key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E5286656BABBECFFAD9FDC2FCE867 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35635 IP: 80.243.208.0/20 IP: 2a00:9840::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:52:86:65:6b:ab:be:cf:fa:d9:fd:c2:fc:e8:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0e:87:f5:69:43:41:3e:da:6d:ed:ab:ae:e9: 03:b7:0d:d3:fd:dc:d9:26:7c:48:65:bb:4c:52:92: bd:ab:83:83:99:79:c6:61:e1:56:2d:c0:30:f1:ba: ec:85:7e:87:12:71:84:99:b8:0a:71:a6:cd:aa:9f: 96:f1:15:21:d7:b5:44:d6:b4:52:42:05:13:0c:2c: dd:9f:a4:de:b8:c9:e5:68:f6:3b:79:ca:ff:79:a0: 17:33:cf:86:dd:8a:76:b6:54:d6:51:51:6f:59:ad: a8:70:ef:11:1b:be:ca:4a:f0:3b:d5:0a:cc:48:ee: 48:26:90:65:3c:4d:a8:ee:18:25:b0:d0:1b:43:61: c0:c9:12:58:b7:cd:e3:91:a7:e2:27:fb:27:ab:e6: dd:4b:48:2a:12:2a:4b:82:83:2c:3f:0b:26:ba:d6: ae:3d:5c:de:b9:75:9d:1d:00:9d:97:0c:f5:28:e4: 3d:98:55:32:ce:7b:64:b8:56:05:1a:23:d8:a3:2b: 64:4c:4c:cf:bb:08:66:7e:2e:df:67:a4:73:18:84: f6:ed:1f:e8:19:d1:d9:bf:c2:46:78:5f:7f:b6:8b: 11:b5:1f:ee:55:51:5d:4a:9b:5d:a0:04:b8:03:a3: bf:c8:ee:0b:e9:89:cc:3b:0e:65:eb:1f:c3:c9:ff: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.243.208.0/20 IPv6: 2a00:9840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35635 Signature Algorithm: sha256WithRSAEncryption a9:11:61:f6:82:47:15:1d:5f:7e:81:fb:2b:b5:9b:ae:5b:75: 97:7b:23:ce:99:ca:26:2c:cf:71:e0:b5:31:30:d5:58:e0:3b: 07:38:66:14:1b:44:63:69:c4:e1:e3:f1:04:0e:b5:8e:3f:b3: 05:8d:00:d3:a5:ee:78:eb:ed:b3:2c:8e:47:bb:b9:17:67:9e: 46:81:5b:32:39:78:d0:11:e0:26:56:01:eb:9e:00:76:28:4f: 5c:0e:b2:e3:08:8b:b3:ad:ec:f8:66:0e:37:3a:ef:da:cd:96: bd:e9:bc:af:50:dd:69:df:68:35:88:ae:46:e2:5f:b8:b9:1c: 9a:33:79:11:b3:a0:07:77:8c:45:40:e4:c2:bb:c5:d6:6e:92: 14:38:5f:f9:ae:c4:db:7f:1e:58:38:21:e9:f6:07:19:5d:09: c8:28:6d:f8:e8:09:5b:3a:65:7d:6f:97:3f:18:a4:1a:20:17: f6:aa:e3:1c:d7:57:6c:7f:f9:37:f7:70:16:6a:ca:c1:ad:b4: 3a:2c:9f:36:2e:35:7a:f1:5f:d7:1e:d6:07:63:92:4b:79:52: 53:07:d0:db:21:dd:92:b7:64:2b:82:51:ab:93:83:f1:77:47: 1e:20:36:63:9c:7c:2a:af:e1:bf:cb:81:58:76:56:f9:2c:17: 32:d8:ac:06 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5flKGZWurvs/62f3C/OhnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjdmNWViODgxN2YyZGE5N2Y2NjU1MDc2ODNiNWM0NWE3NGQwY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w6H9WlDQT7abe2rrukDtw3T/dzZ JnxIZbtMUpK9q4ODmXnGYeFWLcAw8brshX6HEnGEmbgKcabNqp+W8RUh17VE1rRS QgUTDCzdn6TeuMnlaPY7ecr/eaAXM8+G3Yp2tlTWUVFvWa2ocO8RG77KSvA71QrM SO5IJpBlPE2o7hglsNAbQ2HAyRJYt83jkafiJ/snq+bdS0gqEipLgoMsPwsmutau PVzeuXWdHQCdlwz1KOQ9mFUyzntkuFYFGiPYoytkTEzPuwhmfi7fZ6RzGIT27R/o GdHZv8JGeF9/tosRtR/uVVFdSptdoAS4A6O/yO4L6YnMOw5l6x/Dyf8OfwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN9/XriBfy2pf2ZVB2g7XEWnTQygMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4Lzg1N2Q5 Yy01OTZlLTRiODktOWYxYy1mOTIxMjhiZThiNzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvODU3ZDlj LTU5NmUtNGI4OS05ZjFjLWY5MjEyOGJlOGI3OS8xLzMzOWV1SUZfTGFsX1psVUhh RHRjUmFkTkRLQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEUPPQMA0EAgACMAcDBQAqAJhAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCLMzANBgkqhkiG9w0BAQsFAAOCAQEAqRFh9oJHFR1f foH7K7Wbrlt1l3sjzpnKJizPceC1MTDVWOA7BzhmFBtEY2nE4ePxBA61jj+zBY0A 06XueOvtsyyOR7u5F2eeRoFbMjl40BHgJlYB654AdihPXA6y4wiLs63s+GYONzrv 2s2Wvem8r1Ddad9oNYiuRuJfuLkcmjN5EbOgB3eMRUDkwrvF1m6SFDhf+a7E238e WDgh6fYHGV0JyCht+OgJWzplfW+XPxikGiAX9qrjHNdXbH/5N/dwFmrKwa20Oiyf Ni41evFf1x7WB2OSS3lSUwfQ2yHdkrdkK4JRq5OD8XdHHiA2Y5x8Kq/hv8uBWHZW +SwXMtisBg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:07 2026 by rpki-client