This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer File: 95x8Ghuu0yYNlQ1M_Omol8yX-jA.cer (raw, json) Hash identifier: bk3VV/V5DMcawZXVFUU/XEw1wsHPfVm6npmlXQu7jwM= Subject key identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39269375FBB8311F1043919ABFA60A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203587 IP: 217.20.255.0/24 IP: 2a13:4000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:26:93:75:fb:b8:31:1f:10:43:91:9a:bf:a6:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f79c7c1a1baed3260d950d4cfce9a897cc97fa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7f:22:21:04:c5:dc:7c:34:23:31:d4:64:d0: 82:af:48:ab:12:0c:15:92:ef:c5:51:71:78:c2:bb: 14:78:7e:1c:26:94:15:84:a4:05:b0:51:8f:41:c0: 3f:b8:e0:d8:1e:b8:ad:5d:e7:aa:69:59:d8:6e:3e: eb:ce:b6:b4:dd:b1:33:6e:04:c4:34:61:a5:f5:33: 93:cf:b9:5b:79:ac:6c:0f:2e:af:df:8e:39:7c:7f: e1:3e:db:1a:4a:8d:92:d6:4d:02:3b:42:3b:ee:e5: 93:80:6b:9e:35:31:a3:90:31:ea:42:b8:13:22:e6: d2:c1:b9:96:2d:1b:ce:6b:b3:1f:21:ed:46:ba:62: 34:67:a0:04:89:8d:05:20:ba:d5:fd:fd:ab:a2:05: f3:67:66:d4:56:27:2c:a9:9b:cc:4e:72:33:29:65: 09:4d:5e:90:06:f1:57:8b:35:a3:2d:13:6c:58:61: 1c:ad:5e:85:49:0f:45:9e:2b:5f:74:c6:79:a7:1d: fc:f5:a2:c5:73:3b:2c:4f:8d:5a:21:39:27:4f:4f: 13:7f:be:9d:d0:6e:f8:8c:6d:8c:b2:cb:86:77:da: 52:76:ce:6e:24:6a:2b:b4:3c:f0:1a:dd:dc:b8:f4: b6:9d:d6:75:37:74:f1:c5:2a:b8:a0:09:32:c5:9b: 15:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:9C:7C:1A:1B:AE:D3:26:0D:95:0D:4C:FC:E9:A8:97:CC:97:FA:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2dd03b-589b-451c-b9ed-d12b58ccb87c/1/95x8Ghuu0yYNlQ1M_Omol8yX-jA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.20.255.0/24 IPv6: 2a13:4000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203587 Signature Algorithm: sha256WithRSAEncryption 3c:8f:36:03:39:61:42:e9:60:7f:b5:99:b4:a3:38:bd:5a:5e: 99:64:57:80:0f:eb:45:14:ff:63:50:c4:e5:0c:55:35:65:87: ee:b8:c6:8f:1e:5e:b6:12:16:c4:aa:78:e7:88:d0:87:81:fb: d7:5b:05:b2:6f:12:61:ae:69:09:a5:29:2e:57:f6:8c:59:6e: 2f:05:86:f0:f1:75:9e:df:1e:c9:90:e3:5a:5b:9f:f0:2c:88: 4a:a9:c6:81:87:e1:69:64:89:b9:aa:a3:ad:9c:cf:a9:da:a1: 0e:dd:fb:a5:c9:1c:8e:4d:b3:90:52:a7:b1:46:86:29:ff:07: 39:79:82:6a:7e:20:3c:76:3a:70:01:77:47:26:53:dc:d2:3a: 3c:d4:b3:d4:49:89:61:25:e5:8c:0f:4b:7c:97:ca:08:7d:91: 3d:d5:e4:44:35:9c:17:71:34:1b:a6:a6:ce:c4:3e:b3:4c:99: a5:de:aa:19:84:60:bc:01:3a:ff:17:88:27:6a:61:f2:bf:46: 26:98:ac:c9:c0:f8:cc:93:35:9f:18:96:72:e9:ee:3b:c6:32: 01:5e:b4:73:5b:38:b0:49:08:2d:da:34:79:62:2d:07:ee:70: f5:6c:0d:fa:38:f2:96:dd:37:f7:60:9c:c0:51:3b:de:aa:86: ed:45:b9:f1 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+OSaTdfu4MR8QQ5Gav6YKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzljN2MxYTFiYWVkMzI2MGQ5NTBkNGNmY2U5YTg5N2NjOTdmYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X8iIQTF3Hw0IzHUZNCCr0irEgwV ku/FUXF4wrsUeH4cJpQVhKQFsFGPQcA/uODYHritXeeqaVnYbj7rzra03bEzbgTE NGGl9TOTz7lbeaxsDy6v3445fH/hPtsaSo2S1k0CO0I77uWTgGueNTGjkDHqQrgT IubSwbmWLRvOa7MfIe1GumI0Z6AEiY0FILrV/f2rogXzZ2bUVicsqZvMTnIzKWUJ TV6QBvFXizWjLRNsWGEcrV6FSQ9FnitfdMZ5px389aLFczssT41aITknT08Tf76d 0G74jG2MssuGd9pSds5uJGortDzwGt3cuPS2ndZ1N3TxxSq4oAkyxZsVEwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPecfBobrtMmDZUNTPzpqJfMl/owMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzJkZDAz Yi01ODliLTQ1MWMtYjllZC1kMTJiNThjY2I4N2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvMmRkMDNi LTU4OWItNDUxYy1iOWVkLWQxMmI1OGNjYjg3Yy8xLzk1eDhHaHV1MHlZTmxRMU1f T21vbDh5WC1qQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA2RT/MA0EAgACMAcDBQMqE0AAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbQzANBgkqhkiG9w0BAQsFAAOCAQEAPI82AzlhQulg f7WZtKM4vVpemWRXgA/rRRT/Y1DE5QxVNWWH7rjGjx5ethIWxKp454jQh4H711sF sm8SYa5pCaUpLlf2jFluLwWG8PF1nt8eyZDjWluf8CyISqnGgYfhaWSJuaqjrZzP qdqhDt37pckcjk2zkFKnsUaGKf8HOXmCan4gPHY6cAF3RyZT3NI6PNSz1EmJYSXl jA9LfJfKCH2RPdXkRDWcF3E0G6amzsQ+s0yZpd6qGYRgvAE6/xeIJ2ph8r9GJpis ycD4zJM1nxiWcunuO8YyAV60c1s4sEkILdo0eWItB+5w9WwN+jjylt0392CcwFE7 3qqG7UW58Q== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:32 2026 by rpki-client