This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer File: __48efMne-a_MrCqZ5PfjuT8aT8.cer (raw, json) Hash identifier: mNsOsiHISA0PVLpxheMwhrIHwPTHwB9j8679tULEa9g= Subject key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA747DE0D6E4684E9FFEC9DB76D531 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56390 IP: 195.3.218.0/24 IP: 2001:67c:2bf0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:74:7d:e0:d6:e4:68:4e:9f:fe:c9:db:76:d5:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:b6:ea:58:0a:08:e7:a1:fe:25:4e:1c:59: 7f:26:78:f5:5f:46:e9:38:e0:48:ed:fc:3c:6d:6b: bb:9a:a4:91:7a:33:4a:c0:94:2a:48:33:66:cb:fc: 95:df:6f:77:76:e7:b5:ea:b6:da:17:eb:2f:2e:09: e1:c8:8c:1b:f4:b8:19:81:63:54:0f:42:e9:1c:20: 2b:94:94:39:97:f6:3d:b3:27:39:69:31:43:eb:d1: d3:89:f4:e3:dd:a4:9c:3f:44:cd:18:25:3e:a6:f8: 83:9a:f4:f8:c5:7b:25:93:50:b1:eb:df:93:fa:a0: 1f:8c:9f:e6:ae:46:90:e3:94:1d:9e:67:de:b0:2c: f1:2d:28:29:c5:ef:a1:75:91:34:42:45:15:e6:39: 30:f3:48:04:41:a1:8a:ca:18:56:5c:e1:7b:ea:46: f0:c5:e2:91:11:e0:9e:b5:80:1f:ad:ea:55:2c:16: ab:ab:8f:58:4d:1b:47:ff:70:a6:1c:e4:e1:1d:96: c4:2b:c3:1d:cc:89:6b:49:46:4a:55:59:1e:1a:48: 27:8d:93:d7:19:24:67:fc:54:32:b0:a1:7a:3c:02: e7:4d:88:35:99:74:6a:83:9e:73:19:c8:60:a6:71: 82:04:c5:f0:26:30:b8:0a:30:d4:0b:00:ba:9c:ed: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.3.218.0/24 IPv6: 2001:67c:2bf0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56390 Signature Algorithm: sha256WithRSAEncryption 86:63:51:b5:ee:f0:79:34:07:c1:a2:97:f9:b8:ba:46:d6:c8: 95:3e:da:90:ea:0b:18:7b:4c:7c:1b:72:ad:1d:b2:f2:a4:f8: e3:f0:a7:c9:30:b1:b1:fb:b9:64:97:61:37:26:d6:79:a1:d5: b4:b3:10:5f:64:4c:f3:47:d9:81:a6:7f:cc:fa:f4:9e:87:9e: 60:2d:88:ce:ad:92:9e:e5:51:73:58:22:d4:41:b2:aa:e4:03: 3d:90:63:21:e6:fa:ca:32:7e:39:60:ae:b9:e6:5a:ff:99:47: fc:d7:7c:0f:22:c0:9e:0a:9e:aa:11:3a:8e:a7:2f:9a:fe:3f: d1:48:60:5c:42:f4:c3:15:b1:41:50:ce:45:12:cb:c0:d1:f9: ad:12:7c:22:16:29:83:a5:f9:e7:78:66:2e:52:25:12:b8:71: b6:a9:34:00:71:49:c2:d5:7b:d0:07:82:2d:c0:ff:6f:03:ad: 1e:c0:be:c2:de:c0:7f:4a:e7:a9:4c:04:43:39:33:71:b9:79: 7c:01:b4:1a:4c:37:d6:91:6f:b0:b6:c9:c7:8b:80:7c:68:7d: 40:93:e4:3f:22:69:ac:2d:b3:7b:e0:8b:51:93:5e:fb:d4:55: e9:06:0e:b7:e7:db:1d:52:cc:ea:fb:98:27:05:bc:36:d8:5f: 89:0a:1d:7d -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt9ynR94NbkaE6f/snbdtUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmZlM2M3OWYzMjc3YmU2YmYzMmIwYWE2NzkzZGY4ZWU0ZmM2OTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGC26lgKCOeh/iVOHFl/Jnj1X0bp OOBI7fw8bWu7mqSRejNKwJQqSDNmy/yV3293due16rbaF+svLgnhyIwb9LgZgWNU D0LpHCArlJQ5l/Y9syc5aTFD69HTifTj3aScP0TNGCU+pviDmvT4xXslk1Cx69+T +qAfjJ/mrkaQ45QdnmfesCzxLSgpxe+hdZE0QkUV5jkw80gEQaGKyhhWXOF76kbw xeKREeCetYAfrepVLBarq49YTRtH/3CmHOThHZbEK8MdzIlrSUZKVVkeGkgnjZPX GSRn/FQysKF6PALnTYg1mXRqg55zGchgpnGCBMXwJjC4CjDUCwC6nO0yJwIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFP/+PHnzJ3vmvzKwqmeT347k/Gk/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzIyOTU3 ZS1kMzkwLTRiNzktOTZiNC1mMjAyNWQ3YWU4YmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMjI5NTdl LWQzOTAtNGI3OS05NmI0LWYyMDI1ZDdhZThiZC8xL19fNDhlZk1uZS1hX01yQ3Fa NVBmanVUOGFUOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwwPaMA8EAgACMAkDBwAgAQZ8K/AwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDANxGMA0GCSqGSIb3DQEBCwUAA4IBAQCGY1G17vB5 NAfBopf5uLpG1siVPtqQ6gsYe0x8G3KtHbLypPjj8KfJMLGx+7lkl2E3JtZ5odW0 sxBfZEzzR9mBpn/M+vSeh55gLYjOrZKe5VFzWCLUQbKq5AM9kGMh5vrKMn45YK65 5lr/mUf813wPIsCeCp6qETqOpy+a/j/RSGBcQvTDFbFBUM5FEsvA0fmtEnwiFimD pfnneGYuUiUSuHG2qTQAcUnC1XvQB4ItwP9vA60ewL7C3sB/SuepTARDOTNxuXl8 AbQaTDfWkW+wtsnHi4B8aH1Ak+Q/ImmsLbN74ItRk1771FXpBg6359sdUszq+5gn Bbw22F+JCh19 -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:39 2026 by rpki-client