This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer File: 53bFGYDHUepeMd3ayO9h-1bJcA8.cer (raw, json) Hash identifier: InNq6iZBg3NdQ0eeeIDIpAJ6kt2KlPdbllB0Lo1bLlY= Subject key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA7022945773E90FBEBCB8158F30341 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213630 IP: 193.106.96.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:02:29:45:77:3e:90:fb:eb:cb:81:58:f3:03:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:5d:06:00:8c:b3:1e:e6:89:1c:8e:b6:fb: 6e:0e:dc:0d:8c:eb:92:b4:f8:53:11:27:e7:df:2b: 2b:ef:30:8f:57:64:e3:b3:6c:9b:02:dd:5d:67:d8: af:05:d5:3e:98:4a:a8:9a:45:59:c8:0a:65:dd:40: 6f:79:16:f6:14:ce:cb:f5:ec:25:8b:ec:2d:23:dc: 4e:87:2e:30:3d:00:32:fd:e5:12:c7:07:8f:cc:08: 6f:8d:69:c1:8d:43:7b:e6:f2:79:e6:52:b4:40:96: 5f:a5:af:7d:60:2b:e3:6d:f6:7c:fe:75:fa:e4:b2: ce:ce:1d:3d:24:d5:e4:5c:2c:08:22:78:27:dc:e3: 40:c4:51:d9:c5:42:33:4e:5d:9f:fe:87:9c:d4:c0: f2:c8:21:7e:37:3f:40:96:95:ad:bb:ad:6a:a3:c8: 91:64:f7:80:5d:dd:21:e9:39:d5:18:a0:6f:bd:7a: 13:c1:2e:74:15:dc:9a:ed:ab:b8:c9:95:1f:5b:78: b3:86:21:78:1f:26:b6:29:ea:8a:ce:ab:82:c5:29: 18:1b:45:6c:b4:cc:3a:7d:fe:8b:23:93:59:c0:d6: 6c:fd:33:48:c9:75:79:79:be:6d:3d:1a:70:e2:fc: 5c:20:19:65:35:5f:a4:24:6b:4b:b9:af:07:bc:8d: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.96.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213630 Signature Algorithm: sha256WithRSAEncryption 24:6e:8f:7b:72:29:21:25:c5:32:c2:7d:55:e1:7f:ae:cd:47: 7b:b1:64:95:d3:45:94:88:60:b6:b1:02:50:14:b8:aa:4a:79: 9e:e0:7b:50:69:4d:14:7c:2c:c0:e8:56:b0:98:fb:be:cb:fa: 2b:f4:d3:a5:ea:1a:65:53:77:ad:89:67:ce:7b:70:81:25:72: 39:65:39:fe:b6:7f:f9:64:8c:43:59:ef:16:52:63:bf:fe:cd: 55:fa:72:33:92:27:d4:b2:29:90:0d:5f:92:cc:50:65:0a:d7: 39:89:ce:51:93:d8:3c:92:13:a1:f6:45:30:af:17:8c:c7:ce: f6:0f:88:67:5e:e2:0b:be:8c:1b:57:7e:d0:1a:4c:df:5f:5b: 59:b2:3a:ad:bb:8b:7b:30:c0:5f:57:f4:c3:d9:d9:90:a5:20: 06:ee:c1:51:06:c2:44:d8:a4:00:f2:6e:07:6b:f8:6e:9f:52: 3d:b2:4d:85:12:37:de:58:f3:dc:01:52:be:fe:cb:70:27:79: 09:fe:b2:95:56:20:52:d6:08:55:85:6a:a0:09:a5:4e:f1:42: 54:7e:65:cb:a3:b2:50:79:cb:d7:90:ea:48:1c:b2:60:7d:56: 12:2b:d0:d9:2e:a6:62:7e:12:fd:12:bc:d6:61:8f:26:91:20: ae:69:91:77 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+pwIpRXc+kPvry4FY8wNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzc2YzUxOTgwYzc1MWVhNWUzMWRkZGFjOGVmNjFmYjU2Yzk3MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo1dBgCMsx7miRyOtvtuDtwNjOuS tPhTESfn3ysr7zCPV2Tjs2ybAt1dZ9ivBdU+mEqomkVZyApl3UBveRb2FM7L9ewl i+wtI9xOhy4wPQAy/eUSxwePzAhvjWnBjUN75vJ55lK0QJZfpa99YCvjbfZ8/nX6 5LLOzh09JNXkXCwIIngn3ONAxFHZxUIzTl2f/oec1MDyyCF+Nz9AlpWtu61qo8iR ZPeAXd0h6TnVGKBvvXoTwS50Fdya7au4yZUfW3izhiF4Hya2KeqKzquCxSkYG0Vs tMw6ff6LI5NZwNZs/TNIyXV5eb5tPRpw4vxcIBllNV+kJGtLua8HvI1/SQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOd2xRmAx1HqXjHd2sjvYftWyXAPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzQ1YWRk ZS0yN2I1LTRkOTktOTMxOS1kN2MwMDc1MGVkOTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvNDVhZGRl LTI3YjUtNGQ5OS05MzE5LWQ3YzAwNzUwZWQ5NC8xLzUzYkZHWURIVWVwZU1kM2F5 TzloLTFiSmNBOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWpgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNCfjANBgkqhkiG9w0BAQsFAAOCAQEAJG6Pe3IpISXFMsJ9VeF/rs1He7FkldNF lIhgtrECUBS4qkp5nuB7UGlNFHwswOhWsJj7vsv6K/TTpeoaZVN3rYlnzntwgSVy OWU5/rZ/+WSMQ1nvFlJjv/7NVfpyM5In1LIpkA1fksxQZQrXOYnOUZPYPJITofZF MK8XjMfO9g+IZ17iC76MG1d+0BpM319bWbI6rbuLezDAX1f0w9nZkKUgBu7BUQbC RNikAPJuB2v4bp9SPbJNhRI33ljz3AFSvv7LcCd5Cf6ylVYgUtYIVYVqoAmlTvFC VH5ly6OyUHnL15DqSByyYH1WEivQ2S6mYn4S/RK81mGPJpEgrmmRdw== -----END CERTIFICATE-----Generated at Tue Feb 3 03:50:23 2026 by rpki-client