This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer File: 36vRQuiUFoiDzkUicxf5-lAiGU8.cer (raw, json) Hash identifier: FysnYIlXLLMpG376/7E3Jk+qv4x5STbe6J9fAn58wng= Subject key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED2DAFC66536C643FA3A6D69188AA8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49853 IP: 91.212.134.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2d:af:c6:65:36:c6:43:fa:3a:6d:69:18:8a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfabd142e894168883ce45227317f9fa5022194f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3e:b2:92:8a:dd:ba:f1:66:a7:fa:02:14:aa: de:7a:96:93:13:16:63:70:a5:1b:06:fa:07:92:2c: b5:39:8b:80:5e:92:9e:4a:b5:29:63:cb:9d:f9:c7: ff:c6:5b:f5:3d:7b:7a:c3:44:0a:3a:b9:49:c0:eb: e7:ca:2a:0d:c4:76:d8:e1:bf:fd:b9:3b:80:bd:98: 4c:52:93:ab:98:b4:c8:52:20:8a:60:ab:ff:77:41: f6:ce:61:e4:95:c0:1b:ca:ab:54:63:52:e1:4e:cf: 2f:a4:0d:3c:0f:41:72:4c:73:bf:97:55:3d:63:07: bb:7c:d4:95:95:a8:33:34:18:af:34:37:ab:7f:af: da:20:f9:b8:a3:41:a4:d2:6e:18:ae:23:2e:cd:b8: c6:c8:d3:50:de:ee:e6:49:20:5a:6d:6a:b0:82:7c: b8:42:93:df:33:4c:63:24:da:ba:19:d3:a9:f1:ae: 82:24:a9:9c:45:03:8a:fd:3a:a4:7e:b9:22:35:79: de:e7:88:5d:74:ad:61:cd:37:a5:36:81:22:ae:3e: 18:88:cb:0b:91:bb:c4:1b:14:9e:24:73:be:b2:88: 6e:c7:fe:31:4a:1e:2d:da:67:ee:d5:cc:db:ea:a6: 5e:e5:4a:2e:59:a5:6e:5f:d6:81:e0:28:0d:76:b5: fb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.134.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49853 Signature Algorithm: sha256WithRSAEncryption b1:d1:d6:0a:bc:79:a6:c5:17:5c:40:c1:62:2e:54:08:36:38: a8:47:15:13:87:65:19:2d:0b:37:a5:ce:7e:55:74:05:4b:71: 81:76:f0:22:67:d1:94:4f:25:d8:4c:9c:56:05:a3:f3:fc:4b: ba:ea:8b:bd:80:9d:7b:68:a2:db:6a:03:cf:db:b8:c3:11:16: 84:84:e6:94:65:41:d7:d1:61:c7:84:08:d8:74:95:48:5a:7f: 96:67:36:35:a3:1d:3a:a4:96:76:49:6a:d8:2d:1b:95:3b:5f: 8d:93:f6:33:57:75:90:06:db:53:b9:e4:16:da:d1:dc:68:70: 66:58:f0:9e:79:a5:8a:ed:1d:04:00:12:d5:ba:ae:c6:4a:c1: 75:08:a7:d1:80:bd:20:29:88:2c:f4:d7:07:98:42:33:a7:1f: 87:30:66:9e:0d:ea:c1:51:d5:ee:f1:7b:a5:00:83:12:94:12: 6f:c7:a3:31:a0:75:d8:b5:8b:58:3f:65:90:03:ec:a8:52:fa: d0:11:54:be:f1:e1:ab:ce:18:1f:41:a0:16:04:56:8f:bf:36: 93:58:fd:d6:d3:16:da:76:9a:e8:38:05:07:6c:e8:0b:39:cd: fc:6f:a8:5c:5f:57:f4:8a:8f:19:eb:82:0b:eb:14:2a:bf:67: fb:1e:89:66 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87S2vxmU2xkP6Om1pGIqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmFiZDE0MmU4OTQxNjg4ODNjZTQ1MjI3MzE3ZjlmYTUwMjIxOTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz6ykorduvFmp/oCFKreepaTExZj cKUbBvoHkiy1OYuAXpKeSrUpY8ud+cf/xlv1PXt6w0QKOrlJwOvnyioNxHbY4b/9 uTuAvZhMUpOrmLTIUiCKYKv/d0H2zmHklcAbyqtUY1LhTs8vpA08D0FyTHO/l1U9 Ywe7fNSVlagzNBivNDerf6/aIPm4o0Gk0m4YriMuzbjGyNNQ3u7mSSBabWqwgny4 QpPfM0xjJNq6GdOp8a6CJKmcRQOK/TqkfrkiNXne54hddK1hzTelNoEirj4YiMsL kbvEGxSeJHO+sohux/4xSh4t2mfu1czb6qZe5UouWaVuX9aB4CgNdrX7pQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN+r0ULolBaIg85FInMX+fpQIhlPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2UzOGZj My1lYTEzLTQwMTMtOTI4NC0zYThhYzRkYzNlZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvZTM4ZmMz LWVhMTMtNDAxMy05Mjg0LTNhOGFjNGRjM2VlZi8xLzM2dlJRdWlVRm9pRHprVWlj eGY1LWxBaUdVOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9SGMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDCvTANBgkqhkiG9w0BAQsFAAOCAQEAsdHWCrx5psUXXEDBYi5UCDY4qEcVE4dl GS0LN6XOflV0BUtxgXbwImfRlE8l2EycVgWj8/xLuuqLvYCde2ii22oDz9u4wxEW hITmlGVB19Fhx4QI2HSVSFp/lmc2NaMdOqSWdklq2C0blTtfjZP2M1d1kAbbU7nk FtrR3GhwZljwnnmliu0dBAAS1bquxkrBdQin0YC9ICmILPTXB5hCM6cfhzBmng3q wVHV7vF7pQCDEpQSb8ejMaB12LWLWD9lkAPsqFL60BFUvvHhq84YH0GgFgRWj782 k1j91tMW2naa6DgFB2zoCznN/G+oXF9X9IqPGeuCC+sUKr9n+x6JZg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:04 2026 by rpki-client