This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49UVmILnemf3l_j4uZa2LE66vCA.cer File: 49UVmILnemf3l_j4uZa2LE66vCA.cer (raw, json) Hash identifier: iyFNiwoa8nDe6/jL6qCkrpLt6rczQGxKrykX6aY9PH0= Subject key identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AEAF541911B5DCF9C954C7E1EFD91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39306 IP: 193.37.138.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ea:f5:41:91:1b:5d:cf:9c:95:4c:7e:1e:fd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d5159882e77a67f797f8f8b996b62c4ebabc20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ef:2a:88:88:4b:be:11:ec:db:b9:17:fa:dd: 48:d7:19:18:f9:10:79:1f:83:3b:8b:2d:2c:46:01: 9d:a8:d5:13:24:79:12:6f:e1:ee:3d:58:c8:db:82: 04:ed:c9:e6:52:dc:8b:ae:ba:8e:11:62:49:90:a9: 26:69:f2:52:05:bd:b4:6b:14:51:23:8d:f7:61:df: 83:69:fd:8e:28:70:0e:66:0e:48:32:95:5d:25:84: 56:ed:58:f7:54:bf:a2:ef:b3:14:97:ed:d0:a4:b5: 67:20:fc:fa:b6:5c:37:f1:1d:28:22:69:3c:bc:4b: 08:eb:96:b2:24:44:08:45:42:1b:c6:57:93:8d:cc: 3a:fe:58:24:0e:5e:4c:0d:36:cd:ca:6b:0c:c0:93: ec:fe:58:fd:be:0d:e2:69:54:84:62:8c:d1:4f:75: 89:c1:1a:d5:92:a9:80:77:75:f2:6a:f3:52:d4:48: c6:3a:21:ee:18:da:40:d1:6e:e4:50:e9:f2:b5:0f: d0:0c:65:20:43:60:85:ab:58:7a:c3:6d:ff:3c:e2: b3:e6:e0:3c:93:60:85:36:a5:86:ae:d1:74:6f:29: 09:e6:cd:9f:f2:c7:e7:78:fe:5b:81:c2:a4:6a:05: 0c:42:79:e9:4a:c0:95:c6:5f:5d:c8:f4:95:a7:4d: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D5:15:98:82:E7:7A:67:F7:97:F8:F8:B9:96:B6:2C:4E:BA:BC:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/30523b-8b3c-46cb-abbc-e101477efb8a/1/49UVmILnemf3l_j4uZa2LE66vCA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.138.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39306 Signature Algorithm: sha256WithRSAEncryption 4f:dd:ad:07:ee:92:81:68:a4:94:24:af:0a:64:8e:2e:16:42: d3:ca:da:68:f4:9f:1c:3c:5b:c2:93:82:82:16:56:a7:64:8d: 12:57:96:9a:51:79:e8:3a:d7:8c:63:a6:f9:38:cb:6d:22:7d: 5c:64:84:1a:ca:9a:a7:fe:08:f1:b9:b6:6d:c5:3b:e8:6b:11: 91:72:2f:dd:d4:55:ea:e6:87:87:0a:a5:d1:60:24:dd:30:8f: 0d:c6:72:83:d6:97:74:e5:61:9d:86:49:9d:41:c9:65:c0:a5: 72:19:63:54:86:0a:ea:4a:84:47:1e:8c:4d:bc:da:87:a9:23: a0:66:5f:6d:02:7e:76:09:bf:d8:27:50:df:5b:fe:b9:f7:9e: 72:0f:84:3b:5a:94:d4:3e:6e:5b:a3:0c:a6:d7:68:22:ba:0c: 12:fc:45:b9:13:76:35:82:21:38:87:dc:0c:bd:cd:de:d4:6e: 0c:3d:d3:52:e0:2c:86:be:4e:7e:35:f7:65:8a:ec:cc:7b:56: 79:9e:ce:22:db:06:95:ee:f4:8a:f6:e5:30:98:94:79:42:e8: 30:dc:be:ce:3a:1d:a6:e4:d5:06:18:b4:7f:68:b5:d8:fd:47: 11:c9:ab:9e:b1:3d:12:24:4a:44:1c:d7:dd:fc:ff:08:b1:09: 57:bf:64:fb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt9Wur1QZEbXc+clUx+Hv2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Q1MTU5ODgyZTc3YTY3Zjc5N2Y4ZjhiOTk2YjYyYzRlYmFiYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO8qiIhLvhHs27kX+t1I1xkY+RB5 H4M7iy0sRgGdqNUTJHkSb+HuPVjI24IE7cnmUtyLrrqOEWJJkKkmafJSBb20axRR I433Yd+Daf2OKHAOZg5IMpVdJYRW7Vj3VL+i77MUl+3QpLVnIPz6tlw38R0oImk8 vEsI65ayJEQIRUIbxleTjcw6/lgkDl5MDTbNymsMwJPs/lj9vg3iaVSEYozRT3WJ wRrVkqmAd3XyavNS1EjGOiHuGNpA0W7kUOnytQ/QDGUgQ2CFq1h6w23/POKz5uA8 k2CFNqWGrtF0bykJ5s2f8sfneP5bgcKkagUMQnnpSsCVxl9dyPSVp007twIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOPVFZiC53pn95f4+LmWtixOurwgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzMwNTIz Yi04YjNjLTQ2Y2ItYWJiYy1lMTAxNDc3ZWZiOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvMzA1MjNi LThiM2MtNDZjYi1hYmJjLWUxMDE0NzdlZmI4YS8xLzQ5VVZtSUxuZW1mM2xfajR1 WmEyTEU2NnZDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwSWKMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCZijANBgkqhkiG9w0BAQsFAAOCAQEAT92tB+6SgWiklCSvCmSOLhZC08raaPSf HDxbwpOCghZWp2SNEleWmlF56DrXjGOm+TjLbSJ9XGSEGsqap/4I8bm2bcU76GsR kXIv3dRV6uaHhwql0WAk3TCPDcZyg9aXdOVhnYZJnUHJZcClchljVIYK6kqERx6M Tbzah6kjoGZfbQJ+dgm/2CdQ31v+ufeecg+EO1qU1D5uW6MMptdoIroMEvxFuRN2 NYIhOIfcDL3N3tRuDD3TUuAshr5OfjX3ZYrszHtWeZ7OItsGle70ivblMJiUeULo MNy+zjodpuTVBhi0f2i12P1HEcmrnrE9EiRKRBzX3fz/CLEJV79k+w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:42:52 2026 by rpki-client