This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33mFgec3BO44yb4V5yNw8XbGAxE.cer File: 33mFgec3BO44yb4V5yNw8XbGAxE.cer (raw, json) Hash identifier: MAynpcPKQE62D5wt0MTHklnUM3LMGg81LYyktwyTV7s= Subject key identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B35C4ABD37570521638A82E0E42688A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207680 IP: 185.128.80.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c4:ab:d3:75:70:52:16:38:a8:2e:0e:42:68:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df798581e73704ee38c9be15e72370f176c60311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:34:32:1a:93:af:97:9d:fb:ab:ab:dc:46:2e: 87:5d:77:7b:e3:1c:6a:31:a2:89:86:fb:08:12:f1: 47:06:04:25:c1:d7:04:4e:28:ee:56:35:21:6c:66: c9:8b:ee:68:00:aa:c2:aa:2f:26:59:26:0b:62:3e: 5f:d2:6e:5b:05:1e:15:16:2d:93:e3:bf:4a:62:40: 06:15:31:da:66:69:9a:e8:aa:44:e7:9c:48:bc:0e: 2a:56:ec:67:86:9c:7c:28:d5:e6:c3:c5:98:bd:e9: be:39:1d:d6:89:d9:61:e0:42:7c:da:9f:6c:87:f8: 2a:ba:49:cf:87:b8:50:1b:75:6e:f8:73:fb:12:c1: 1d:42:e0:69:e4:85:33:5e:e7:8e:36:e2:b3:00:93: cf:78:02:da:86:45:16:c1:6c:9c:e8:60:57:45:07: 39:e6:7c:e0:8b:a2:78:73:f1:25:da:ff:5b:7d:0a: 1a:8f:92:c8:98:1e:1b:6c:ca:f2:8b:d8:bd:9c:e1: 91:a8:c9:47:a6:db:0d:fd:a1:48:11:f9:10:44:94: 85:46:f8:a6:6e:44:cb:47:53:89:4c:29:a6:fc:f7: f5:56:bd:61:e1:cc:9a:6e:cb:c8:d2:a3:df:e6:48: 18:2b:8a:45:f3:5f:54:47:67:97:1c:12:d8:ea:13: 2b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:79:85:81:E7:37:04:EE:38:C9:BE:15:E7:23:70:F1:76:C6:03:11 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a8007b-08ce-4af4-a383-c4a52dcee23d/1/33mFgec3BO44yb4V5yNw8XbGAxE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207680 Signature Algorithm: sha256WithRSAEncryption 07:f4:df:6d:e8:e0:d2:16:c0:f7:5c:66:b4:8a:90:2a:6d:bf: 0b:77:ea:d6:07:91:af:68:6e:04:dd:78:db:b9:d4:45:f4:cd: 5f:c5:d1:e1:b2:b4:2b:27:30:bf:04:55:24:41:74:88:7c:38: 8e:fe:17:ab:ab:42:81:95:1b:fd:28:56:26:54:2c:0d:80:e0: ae:2c:37:6a:e8:bb:6a:ef:4a:4e:36:e8:13:43:7a:24:7f:cf: 8a:07:ef:18:31:0f:3b:34:a8:ad:2c:15:9c:72:c1:35:db:e3: 22:af:42:c2:81:2c:d4:30:88:30:2c:99:e4:09:30:4f:c5:f8: d4:08:df:48:1b:da:25:99:50:8a:65:c0:be:7e:4c:27:42:13: 21:67:95:41:4d:ab:f2:1e:2e:b8:0c:8e:e4:f7:df:1b:ea:29: c3:13:0e:fe:77:1a:66:a8:4f:bf:ef:40:98:54:92:a2:8c:f4: c7:66:c8:d3:54:56:4d:f2:ec:67:9f:17:4a:eb:b0:3b:b0:f6: 46:45:19:91:0a:59:50:e9:85:08:7f:26:57:4b:6f:28:ec:23: 3e:9f:7f:2b:1a:18:84:33:b5:5d:e9:a5:7c:2d:b3:ac:e0:a7: 0e:e5:c8:97:15:15:4d:d2:9d:1f:39:6d:50:bb:d2:5c:3b:2b: cb:78:05:eb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7NcSr03VwUhY4qC4OQmiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjc5ODU4MWU3MzcwNGVlMzhjOWJlMTVlNzIzNzBmMTc2YzYwMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojQyGpOvl537q6vcRi6HXXd74xxq MaKJhvsIEvFHBgQlwdcETijuVjUhbGbJi+5oAKrCqi8mWSYLYj5f0m5bBR4VFi2T 479KYkAGFTHaZmma6KpE55xIvA4qVuxnhpx8KNXmw8WYvem+OR3Widlh4EJ82p9s h/gquknPh7hQG3Vu+HP7EsEdQuBp5IUzXueONuKzAJPPeALahkUWwWyc6GBXRQc5 5nzgi6J4c/El2v9bfQoaj5LImB4bbMryi9i9nOGRqMlHptsN/aFIEfkQRJSFRvim bkTLR1OJTCmm/Pf1Vr1h4cyabsvI0qPf5kgYK4pF819UR2eXHBLY6hMrjwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN95hYHnNwTuOMm+FecjcPF2xgMRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1L2E4MDA3 Yi0wOGNlLTRhZjQtYTM4My1jNGE1MmRjZWUyM2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvYTgwMDdi LTA4Y2UtNGFmNC1hMzgzLWM0YTUyZGNlZTIzZC8xLzMzbUZnZWMzQk80NHliNFY1 eU53OFhiR0F4RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuYBQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMrQDANBgkqhkiG9w0BAQsFAAOCAQEAB/Tfbejg0hbA91xmtIqQKm2/C3fq1geR r2huBN1427nURfTNX8XR4bK0KycwvwRVJEF0iHw4jv4Xq6tCgZUb/ShWJlQsDYDg riw3aui7au9KTjboE0N6JH/PigfvGDEPOzSorSwVnHLBNdvjIq9CwoEs1DCIMCyZ 5AkwT8X41AjfSBvaJZlQimXAvn5MJ0ITIWeVQU2r8h4uuAyO5PffG+opwxMO/nca ZqhPv+9AmFSSooz0x2bI01RWTfLsZ58XSuuwO7D2RkUZkQpZUOmFCH8mV0tvKOwj Pp9/KxoYhDO1XemlfC2zrOCnDuXIlxUVTdKdHzltULvSXDsry3gF6w== -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:49 2026 by rpki-client