This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.cer (raw, json) Hash identifier: wwgAHIgsegGXSsl/prnFYR8eArAG9tHLprO8HFtISls= Subject key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA74C37C2F4CD9DECAD03274C5B304F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213314 IP: 95.214.168.0/22 IP: 2a09:ea80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4c:37:c2:f4:cd:9d:ec:ad:03:27:4c:5b:30:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df77662f60b5c41032e0535ee727184e3adb7b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3b:4c:8e:01:e4:c5:1e:31:59:87:f1:4c:f3: a9:ce:78:88:18:91:5e:87:a1:19:06:cb:5e:b1:cf: e9:f3:42:85:23:86:45:ca:7f:8a:9c:8b:56:d6:13: 4c:42:a9:4b:a5:d4:e5:23:a3:1f:89:7b:bb:ba:ae: 66:3a:9f:1e:d1:8a:36:03:13:c6:61:ca:91:96:76: 6b:a7:94:a0:93:cf:9e:df:7a:b4:0e:bb:43:ae:cf: 9f:07:63:4d:58:90:7b:07:dc:e9:05:43:18:92:e8: 7a:94:bf:da:44:86:f5:c4:20:92:c1:b9:c4:61:48: 84:94:fa:cf:90:65:cf:a6:42:91:4c:7a:66:dc:e3: 73:2e:a2:5b:19:db:7e:01:ad:1f:58:72:3d:e7:20: cf:c8:89:31:7a:5f:35:12:4e:30:5a:60:e3:45:e9: 5b:dc:1f:90:a4:68:0e:60:5a:a2:bb:1d:79:83:75: 70:b3:0b:78:82:34:80:35:62:cb:ef:17:e7:b5:8b: be:32:33:ca:d7:22:7e:a6:0d:83:fb:1f:14:83:e1: 27:fe:06:5f:d4:4b:b3:04:6d:7e:34:8c:29:18:86: e9:2b:b7:cb:09:0b:b5:76:6c:4e:b2:d2:5a:18:8d: c5:ec:f9:d5:ac:61:a7:d2:2b:c0:e2:0a:6b:d3:d4: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.168.0/22 IPv6: 2a09:ea80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213314 Signature Algorithm: sha256WithRSAEncryption 7d:ea:ec:fe:6f:55:d1:5c:87:e8:46:60:a5:7a:57:97:00:7d: 52:c6:1b:aa:df:18:59:34:d1:53:fa:b9:67:d9:67:4d:a7:29: c4:bb:c4:0f:c5:b4:1c:58:cc:79:b3:5e:86:99:aa:a2:54:a0: 54:37:9d:47:42:a9:80:6b:40:e1:7b:03:08:7d:fe:10:57:bf: 0c:29:fe:1c:22:f3:49:0d:9d:53:5a:f5:95:d1:4a:a2:e7:ff: 69:4c:30:b0:45:0a:ab:31:49:70:60:25:5c:8d:3e:59:35:b0: 47:e3:91:d9:50:dd:5f:db:fd:5d:2a:54:11:21:80:62:70:7e: e0:3f:c7:48:93:b7:c5:36:1c:aa:eb:29:23:d5:67:fd:4e:c1: 27:75:f7:70:22:aa:f5:2a:1b:ba:95:ac:c1:32:07:bd:e5:bc: 74:09:9f:c6:1f:d9:65:8e:5e:b3:91:e3:80:4e:1b:e5:33:a1: 57:bc:bc:6c:0d:84:40:27:fe:6c:ea:46:86:14:5c:d3:04:7f: 4c:02:2b:cb:a2:fd:1a:00:5a:f4:b7:9a:4e:8d:62:ac:d0:2d: 5e:1e:cb:a3:0b:2d:b3:f4:10:a4:b7:e2:3d:fd:4a:ec:15:b8: d3:8c:bd:ef:97:db:db:e3:91:16:9a:32:c1:2e:9a:c7:fa:f8: ba:20:8e:81 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+p0w3wvTNneytAydMWzBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjc3NjYyZjYwYjVjNDEwMzJlMDUzNWVlNzI3MTg0ZTNhZGI3Yjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DtMjgHkxR4xWYfxTPOpzniIGJFe h6EZBstesc/p80KFI4ZFyn+KnItW1hNMQqlLpdTlI6MfiXu7uq5mOp8e0Yo2AxPG YcqRlnZrp5Sgk8+e33q0DrtDrs+fB2NNWJB7B9zpBUMYkuh6lL/aRIb1xCCSwbnE YUiElPrPkGXPpkKRTHpm3ONzLqJbGdt+Aa0fWHI95yDPyIkxel81Ek4wWmDjRelb 3B+QpGgOYFqiux15g3Vwswt4gjSANWLL7xfntYu+MjPK1yJ+pg2D+x8Ug+En/gZf 1EuzBG1+NIwpGIbpK7fLCQu1dmxOstJaGI3F7PnVrGGn0ivA4gpr09TiCQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN93Zi9gtcQQMuBTXucnGE4623t3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2L2ZjNTc2 Ni1hZWJmLTQ1MjktOGUzZi00MTA1ZjhhM2JiOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvZmM1NzY2 LWFlYmYtNDUyOS04ZTNmLTQxMDVmOGEzYmI5Yy8xLzMzZG1MMkMxeEJBeTRGTmU1 eWNZVGpyYmUzYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCX9aoMA0EAgACMAcDBQMqCeqAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBQjANBgkqhkiG9w0BAQsFAAOCAQEAfers/m9V0VyH 6EZgpXpXlwB9UsYbqt8YWTTRU/q5Z9lnTacpxLvED8W0HFjMebNehpmqolSgVDed R0KpgGtA4XsDCH3+EFe/DCn+HCLzSQ2dU1r1ldFKouf/aUwwsEUKqzFJcGAlXI0+ WTWwR+OR2VDdX9v9XSpUESGAYnB+4D/HSJO3xTYcquspI9Vn/U7BJ3X3cCKq9Sob upWswTIHveW8dAmfxh/ZZY5es5HjgE4b5TOhV7y8bA2EQCf+bOpGhhRc0wR/TAIr y6L9GgBa9LeaTo1irNAtXh7Lowsts/QQpLfiPf1K7BW404y975fb2+ORFpoywS6a x/r4uiCOgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:25 2026 by rpki-client