This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.cer (raw, json) Hash identifier: W+U4MPve/5fGXue9vWLrIlTrHNzw/cS0Isgn//QPMQ4= Subject key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A37D42B0DEF2316AECABAF8BB4C0EF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51907 AS: 198175 IP: 193.134.8.0 -- 193.134.31.255 IP: 194.117.50.64/26 IP: 2001:7f8:146::/48 IP: 2a10:8240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:42:b0:de:f2:31:6a:ec:ab:af:8b:b4:c0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfc2603437ef74117fa12272ec42c2527da800c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:91:c5:a7:b4:fa:3d:69:bd:75:f8:50:92:1f: 6e:cc:fa:54:7d:c1:9a:74:9a:7d:df:25:b4:e6:88: 88:ce:64:68:56:79:61:c9:f8:b2:7b:44:00:a4:1a: 68:f3:65:30:9d:c4:64:c5:0e:c9:f1:34:53:b5:f4: 84:e8:ff:3b:34:ff:bc:ef:20:47:8f:3d:22:c4:7f: 8d:43:d8:e7:41:31:2e:14:4f:d2:19:69:1a:f1:03: fb:9c:f8:7e:45:22:2d:45:54:67:ce:7d:37:81:1e: 5c:8f:23:34:81:ca:06:73:94:09:f5:b0:d3:0c:0a: 6f:41:9f:80:8a:fb:52:e5:50:2d:6b:86:f8:f3:c6: 6b:6a:25:96:67:f8:a8:e8:7a:37:72:38:83:36:0c: 18:b3:18:33:6d:9b:0b:52:5d:0f:ce:dd:3e:20:19: fc:87:ad:7b:f1:df:63:c4:05:d2:f3:1b:fb:a1:81: 12:b2:c1:f9:a9:3c:bf:64:38:f8:55:f2:1d:84:6e: f8:3c:84:ba:53:67:02:dc:04:a1:11:da:e7:08:c0: 50:f7:2a:3e:95:bd:14:ae:e3:06:bb:87:ed:18:f8: cb:13:15:6b:ea:f1:43:5a:dd:5a:39:64:d7:4a:0b: 76:3f:f7:ef:9c:de:ad:2b:e7:ab:c9:fd:5c:95:46: 94:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.8.0-193.134.31.255 194.117.50.64/26 IPv6: 2001:7f8:146::/48 2a10:8240::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51907 198175 Signature Algorithm: sha256WithRSAEncryption 4e:12:7d:ff:8d:07:30:8b:90:51:4a:09:f1:7d:c5:0f:cb:0e: 76:58:22:5c:bf:f4:3e:88:84:b5:25:ed:3c:32:7d:97:39:2a: d4:bf:55:1a:f4:e8:ee:c0:8b:6a:a2:ac:0b:a4:30:47:c1:d7: d4:2f:86:1f:74:18:6f:1c:b5:dd:68:7c:62:94:25:b5:52:7b: 40:2a:f5:ca:4a:26:78:63:a5:09:bd:b9:55:cb:83:b6:fb:cc: ee:25:af:49:5b:78:6c:dc:2d:65:60:4f:42:62:2b:05:2c:05: b1:17:f5:e6:5f:fb:56:26:e8:1c:5c:aa:8c:74:9c:60:18:5f: fa:44:ce:b0:d1:00:cc:9f:75:46:83:66:75:f6:65:7f:c0:b4: 5a:36:3f:c0:76:95:03:76:fe:c6:4d:62:2d:97:cf:96:08:bc: 73:64:73:f6:f2:41:cd:2a:a9:94:4a:3f:f9:a9:2e:ce:69:c4: 96:79:72:aa:39:d8:58:b3:93:6d:b0:ba:ad:33:b7:3a:19:9d: 43:7b:c2:6c:6b:ad:97:e9:39:a1:86:86:63:65:82:dc:f6:b8: e9:d1:a8:99:0a:c4:1d:ef:62:df:c5:c6:90:08:6e:7c:c4:30: 2f:44:0a:88:ff:48:87:b6:45:d1:90:a7:b3:23:50:e0:7a:59: f3:fd:1f:31 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt4o31CsN7yMWrsq6+LtMDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmMyNjAzNDM3ZWY3NDExN2ZhMTIyNzJlYzQyYzI1MjdkYTgwMGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpHFp7T6PWm9dfhQkh9uzPpUfcGa dJp93yW05oiIzmRoVnlhyfiye0QApBpo82UwncRkxQ7J8TRTtfSE6P87NP+87yBH jz0ixH+NQ9jnQTEuFE/SGWka8QP7nPh+RSItRVRnzn03gR5cjyM0gcoGc5QJ9bDT DApvQZ+AivtS5VAta4b488ZraiWWZ/io6Ho3cjiDNgwYsxgzbZsLUl0Pzt0+IBn8 h6178d9jxAXS8xv7oYESssH5qTy/ZDj4VfIdhG74PIS6U2cC3AShEdrnCMBQ9yo+ lb0UruMGu4ftGPjLExVr6vFDWt1aOWTXSgt2P/fvnN6tK+eryf1clUaU9QIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFN/CYDQ373QRf6EicuxCwlJ9qADHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkL2I1NWU0 MC1kOGJlLTQ4ZDktYmQ1NS1jODMwMDczMjc0NDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvYjU1ZTQw LWQ4YmUtNDhkOS1iZDU1LWM4MzAwNzMyNzQ0OS8xLzM4SmdORGZ2ZEJGX29TSnk3 RUxDVW4yb0FNYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAbBAIAATAVMAwDBAPBhggDBAXBhgADBQbCdTJAMBYEAgACMBAD BwAgAQf4AUYDBQMqEIJAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDKwwIDAwYf MA0GCSqGSIb3DQEBCwUAA4IBAQBOEn3/jQcwi5BRSgnxfcUPyw52WCJcv/Q+iIS1 Je08Mn2XOSrUv1Ua9OjuwItqoqwLpDBHwdfUL4YfdBhvHLXdaHxilCW1UntAKvXK SiZ4Y6UJvblVy4O2+8zuJa9JW3hs3C1lYE9CYisFLAWxF/XmX/tWJugcXKqMdJxg GF/6RM6w0QDMn3VGg2Z19mV/wLRaNj/AdpUDdv7GTWItl8+WCLxzZHP28kHNKqmU Sj/5qS7OacSWeXKqOdhYs5NtsLqtM7c6GZ1De8Jsa62X6TmhhoZjZYLc9rjp0aiZ CsQd72LfxcaQCG58xDAvRAqI/0iHtkXRkKezI1Dgelnz/R8x -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:57 2026 by rpki-client