This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43ipS5lk6l6fiwWThwK6WDFrUA8.cer File: 43ipS5lk6l6fiwWThwK6WDFrUA8.cer (raw, json) Hash identifier: rfiXn9lNUPqMvFp7v57scA0lkZZ/yYMhX/W9awFv74Y= Subject key identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8A668D92D9CCCBC8D055FB93AB7C5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 50057 AS: 208268 AS: 210642 IP: 185.161.112.0/22 IP: 193.150.66.0/24 IP: 2a07:c200::/29 IP: 2a0f:6400::/29 IP: 2a11:9bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a6:68:d9:2d:9c:cc:bc:8d:05:5f:b9:3a:b7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e378a94b9964ea5e9f8b05938702ba58316b500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:d3:32:ee:35:15:cd:21:56:25:71:09:cb: f2:fc:cd:38:a8:bf:92:31:c7:ca:bd:55:58:6a:49: 46:ba:a8:2f:f1:2b:bb:96:4d:c4:22:ef:8d:a6:d3: f9:0d:36:81:f5:b0:d5:4e:41:59:6b:d0:09:85:a2: 35:73:5b:83:9a:30:ca:bc:64:d9:b0:48:f0:78:ed: 45:31:59:0d:fb:de:85:70:7b:12:7d:2b:0d:8f:55: 40:1a:39:81:93:fd:4c:83:7c:7e:aa:9b:fc:20:6f: 18:cb:b4:9e:2d:72:66:2b:38:4c:4a:7a:11:0d:17: 3e:df:f9:13:f5:e2:fa:b4:88:0d:bc:44:1c:20:2b: 9a:fd:81:d6:30:d2:77:69:84:8c:89:b7:34:ee:49: c4:2d:d0:ea:2e:a2:31:2a:c5:b5:b4:16:44:c2:b9: 26:08:ad:87:95:bf:06:ab:94:19:fd:62:68:13:0c: 1a:f3:2f:52:7c:eb:54:30:c6:7d:1b:f5:5b:17:20: fc:15:1a:88:86:da:33:6e:69:ba:34:a4:c7:2d:e1: 5b:b0:f2:e3:d7:a8:85:cc:77:7e:14:9e:b4:b3:10: e5:d0:9f:7d:b1:10:0d:6d:c9:2e:62:da:ca:6f:a8: 90:98:bc:78:d4:3c:fa:27:01:8a:c6:ae:d9:f5:f1: a4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:78:A9:4B:99:64:EA:5E:9F:8B:05:93:87:02:BA:58:31:6B:50:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6a5e8c-d831-41e3-84e5-f42176cd0445/1/43ipS5lk6l6fiwWThwK6WDFrUA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.112.0/22 193.150.66.0/24 IPv6: 2a07:c200::/29 2a0f:6400::/29 2a11:9bc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 50057 208268 210642 Signature Algorithm: sha256WithRSAEncryption 21:a3:f6:fe:2d:2e:75:d7:85:30:dd:ae:85:cc:53:8a:bb:5f: aa:32:dc:07:0e:f4:0e:6e:85:ab:92:3c:73:22:30:ae:97:85: ef:82:3c:e1:b5:d9:2f:a6:c6:12:72:52:19:62:be:75:15:77: a3:7d:42:87:5b:78:dc:b6:ac:24:85:98:4d:9b:83:14:f5:4b: a6:3f:a3:7f:df:f5:9b:2e:fa:40:ba:a8:dc:44:8a:48:14:7b: 51:d4:6d:2b:15:8d:ef:13:15:9d:1b:ef:66:02:2f:1d:cd:44: ef:a1:ec:d5:b0:97:52:77:bb:5c:e6:35:d9:53:f3:f2:a9:2a: 40:fc:ad:08:9a:e8:89:1e:00:d6:04:16:27:11:87:79:c6:c3: 37:79:b4:8d:7a:72:13:c7:e8:c7:e1:6f:4c:f4:1f:84:ba:c0: 7e:02:e7:49:2f:4d:ca:2d:12:6e:2b:5c:bd:fa:59:75:24:36: f1:3b:a3:f1:1f:f2:a8:a0:bd:e9:08:cb:10:c1:d6:8c:34:80: ff:59:44:8b:53:bb:3f:d2:a6:df:fc:c7:bc:24:91:b9:69:4f: 52:6e:ce:9f:d8:67:58:f9:e1:21:21:c8:7a:c5:36:d5:8b:17: f5:94:2e:17:f4:7d:ad:83:8f:1a:40:a4:9b:6a:e6:99:5a:b1: 6b:04:51:21 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt6yKZo2S2czLyNBV+5OrfFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzc4YTk0Yjk5NjRlYTVlOWY4YjA1OTM4NzAyYmE1ODMxNmI1MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPnTMu41Fc0hViVxCcvy/M04qL+S McfKvVVYaklGuqgv8Su7lk3EIu+NptP5DTaB9bDVTkFZa9AJhaI1c1uDmjDKvGTZ sEjweO1FMVkN+96FcHsSfSsNj1VAGjmBk/1Mg3x+qpv8IG8Yy7SeLXJmKzhMSnoR DRc+3/kT9eL6tIgNvEQcICua/YHWMNJ3aYSMibc07knELdDqLqIxKsW1tBZEwrkm CK2Hlb8Gq5QZ/WJoEwwa8y9SfOtUMMZ9G/VbFyD8FRqIhtozbmm6NKTHLeFbsPLj 16iFzHd+FJ60sxDl0J99sRANbckuYtrKb6iQmLx41Dz6JwGKxq7Z9fGk3QIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFON4qUuZZOpen4sFk4cCulgxa1APMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzZhNWU4 Yy1kODMxLTQxZTMtODRlNS1mNDIxNzZjZDA0NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvNmE1ZThj LWQ4MzEtNDFlMy04NGU1LWY0MjE3NmNkMDQ0NS8xLzQzaXBTNWxrNmw2Zml3V1Ro d0s2V0RGclVBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF BwEHAQH/BDMwMTASBAIAATAMAwQCuaFwAwQAwZZCMBsEAgACMBUDBQMqB8IAAwUD Kg9kAAMFAyoRm8AwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAMOJAgMDLYwCAwM2 0jANBgkqhkiG9w0BAQsFAAOCAQEAIaP2/i0uddeFMN2uhcxTirtfqjLcBw70Dm6F q5I8cyIwrpeF74I84bXZL6bGEnJSGWK+dRV3o31Ch1t43LasJIWYTZuDFPVLpj+j f9/1my76QLqo3ESKSBR7UdRtKxWN7xMVnRvvZgIvHc1E76Hs1bCXUne7XOY12VPz 8qkqQPytCJroiR4A1gQWJxGHecbDN3m0jXpyE8fox+FvTPQfhLrAfgLnSS9Nyi0S bitcvfpZdSQ28Tuj8R/yqKC96QjLEMHWjDSA/1lEi1O7P9Km3/zHvCSRuWlPUm7O n9hnWPnhISHIesU21YsX9ZQuF/R9rYOPGkCkm2rmmVqxawRRIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:35 2026 by rpki-client