This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer File: 639rU_mItXcyDvKJM4Cl6oJLauQ.cer (raw, json) Hash identifier: 8rVGUbvU67vcukp2bYcNMCuZpNOCCwBkut8BYzrO/Ds= Subject key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A361B872D44CE251CB240188C67F7E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197235 IP: 46.29.72.0/21 IP: 141.0.176.0/21 IP: 178.18.6.0/23 IP: 185.33.200.0/22 IP: 2a02:21f0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:61:b8:72:d4:4c:e2:51:cb:24:01:88:c6:7f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a9:d1:25:a3:33:0a:19:93:6c:2c:bd:61:c0: 97:a2:ce:fb:ce:e3:3d:8a:bf:d7:5e:b1:8a:fc:d8: ae:fb:58:0a:65:32:c5:61:35:a5:ad:1e:43:81:35: 61:a1:89:b1:3e:8e:20:3c:ee:f7:6d:d4:c1:9f:6f: e0:0f:86:df:8f:8b:45:90:a9:f3:ae:27:dd:c9:d9: c8:4b:e5:e9:3e:eb:e6:f5:87:e9:eb:5d:91:e1:28: af:6e:7f:f9:b4:a9:06:79:29:43:14:26:89:9a:4e: c1:7e:0a:99:e9:bd:d4:aa:79:4b:9f:94:a6:81:2a: 55:98:f8:d0:50:52:e2:03:52:1f:fc:e1:76:11:84: 87:ea:1e:ed:43:8b:6a:c8:0f:ca:fe:26:d3:d9:12: d1:32:bb:24:99:61:fa:0a:2d:0f:7c:0b:a1:ef:23: fe:43:6e:0a:89:2c:b0:96:5a:a7:5e:b6:27:6c:06: 10:c8:0c:41:a3:34:df:29:8b:4d:fe:12:ea:b2:bc: 55:1c:82:76:b7:fe:1c:3c:02:9d:92:09:44:aa:7a: f3:5f:11:d2:10:f0:67:d4:1d:16:c2:85:23:49:b4: 75:d0:10:50:84:c9:da:bc:9b:05:d0:fc:ef:82:86: 10:7d:5e:1d:ad:c3:ee:de:84:15:0d:a2:a2:08:16: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.72.0/21 141.0.176.0/21 178.18.6.0/23 185.33.200.0/22 IPv6: 2a02:21f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197235 Signature Algorithm: sha256WithRSAEncryption 75:dd:cc:51:70:15:ed:43:05:8a:24:96:74:0e:0f:e0:d3:ee: 48:7f:96:67:93:e2:d0:13:67:d6:1e:15:97:75:cb:09:bc:38: 29:9f:3c:be:81:d0:b4:af:90:94:b9:47:75:c3:01:85:d8:80: 54:36:71:31:98:e1:a9:e3:5d:d0:4b:91:60:32:07:c3:23:b8: 46:45:e9:c8:e6:9d:c2:90:67:3b:ce:a9:e8:53:a2:47:22:52: 93:ae:cd:12:cd:78:ce:ca:eb:b1:bc:68:87:2a:c1:1a:ef:58: e4:78:ed:c4:86:59:7c:1f:2f:ec:58:e6:b9:0e:bd:e6:8c:06: dd:07:31:75:73:cb:ee:25:70:75:8c:85:19:1e:b6:5e:1a:77: 5b:85:de:83:72:ab:2d:0f:f9:87:45:79:24:10:e4:47:02:b9: 45:25:6a:1c:d9:71:fe:3c:2d:ae:16:3e:32:06:d4:08:84:0d: 9f:ba:5b:2c:36:64:0c:54:b9:b2:08:95:19:e7:9f:0a:f3:53: 77:ed:f1:88:65:a7:47:a3:2c:c9:47:f9:da:36:09:fc:4f:d1: 98:97:39:9a:71:be:7e:7a:ff:5b:cd:70:4b:e9:48:27:e3:7f: 88:c6:ae:5d:df:5e:a5:b4:ea:27:5b:f2:a8:51:3a:fc:31:60: 0d:c1:87:75 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt4o2G4ctRM4lHLJAGIxn9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjdmNmI1M2Y5ODhiNTc3MzIwZWYyODkzMzgwYTVlYTgyNGI2YWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KnRJaMzChmTbCy9YcCXos77zuM9 ir/XXrGK/Niu+1gKZTLFYTWlrR5DgTVhoYmxPo4gPO73bdTBn2/gD4bfj4tFkKnz rifdydnIS+XpPuvm9Yfp612R4Sivbn/5tKkGeSlDFCaJmk7BfgqZ6b3UqnlLn5Sm gSpVmPjQUFLiA1If/OF2EYSH6h7tQ4tqyA/K/ibT2RLRMrskmWH6Ci0PfAuh7yP+ Q24KiSywllqnXrYnbAYQyAxBozTfKYtN/hLqsrxVHIJ2t/4cPAKdkglEqnrzXxHS EPBn1B0WwoUjSbR10BBQhMnavJsF0PzvgoYQfV4drcPu3oQVDaKiCBbFCwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFOt/a1P5iLV3Mg7yiTOApeqCS2rkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyL2ZmYWNl ZS0wOWNjLTQxY2ItOTM2Mi0wMmYzMDEzZDkxYTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvZmZhY2Vl LTA5Y2MtNDFjYi05MzYyLTAyZjMwMTNkOTFhOS8xLzYzOXJVX21JdFhjeUR2S0pN NENsNm9KTGF1US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDLh1IAwQDjQCwAwQBshIGAwQCuSHIMA0EAgAC MAcDBQAqAiHwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMCczANBgkqhkiG9w0B AQsFAAOCAQEAdd3MUXAV7UMFiiSWdA4P4NPuSH+WZ5Pi0BNn1h4Vl3XLCbw4KZ88 voHQtK+QlLlHdcMBhdiAVDZxMZjhqeNd0EuRYDIHwyO4RkXpyOadwpBnO86p6FOi RyJSk67NEs14zsrrsbxohyrBGu9Y5HjtxIZZfB8v7FjmuQ695owG3QcxdXPL7iVw dYyFGR62Xhp3W4Xeg3KrLQ/5h0V5JBDkRwK5RSVqHNlx/jwtrhY+MgbUCIQNn7pb LDZkDFS5sgiVGeefCvNTd+3xiGWnR6MsyUf52jYJ/E/RmJc5mnG+fnr/W81wS+lI J+N/iMauXd9epbTqJ1vyqFE6/DFgDcGHdQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:27 2026 by rpki-client