This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer File: s34hWkFe17XeS23BLy97d1DD1m8.cer (raw, json) Hash identifier: MUiqLbFh2dbdPtbAJ5XOP3Wa8396c2JtcO4Op1O+Mlw= Subject key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79107DE03293826B95E4493971CFD22B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 52041 IP: 82.215.64.0/24 IP: 86.54.213.0/24 IP: 185.248.134.0/24 IP: 194.46.57.0/24 IP: 2a12:bec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7d:e0:32:93:82:6b:95:e4:49:39:71:cf:d2:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:ab:08:3a:c8:f2:65:9e:48:1e:9d:7d:2f: 69:7f:0d:53:84:86:4b:e1:33:c9:8b:99:ed:1b:0b: 1b:99:74:ab:d2:e5:73:9b:36:bf:2d:c7:89:26:1c: d2:b7:ac:82:f6:25:2d:6f:72:fb:54:6c:f7:38:1a: 2c:57:be:4c:bf:16:75:5e:c4:9a:c6:84:fb:ba:62: 28:aa:40:f1:61:b3:b8:6b:9a:20:a3:df:f8:a0:5d: aa:f6:0b:7f:bd:d4:94:5b:ef:ec:41:1a:f8:98:5f: 18:0f:89:02:8b:75:f7:70:35:ff:d5:66:6c:fb:25: 78:47:b0:b5:10:51:3c:d4:e6:f3:09:9f:53:4e:f4: 9f:4f:94:3f:4e:47:b5:61:de:40:c7:00:6a:d0:a0: 6e:ed:ed:cd:b5:c9:d2:36:d9:46:0b:a5:83:3e:c3: b9:41:ec:45:9a:aa:23:c1:54:d1:6f:41:ab:90:c2: 34:31:36:f5:ee:da:c4:3e:32:aa:52:70:f8:5c:95: 5e:01:9d:1c:43:8b:f4:b1:c3:aa:5d:5a:70:15:5e: 4a:18:09:db:2e:b1:72:04:31:02:9c:3f:f8:3d:7c: 83:56:2c:fb:d9:14:09:b6:30:8b:2a:92:13:b3:2d: e2:d9:9e:7b:a2:ce:b4:86:25:4a:fa:5e:15:40:c6: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.215.64.0/24 86.54.213.0/24 185.248.134.0/24 194.46.57.0/24 IPv6: 2a12:bec0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52041 Signature Algorithm: sha256WithRSAEncryption 5b:4d:8b:0b:08:b5:05:8a:8c:bd:88:5c:e0:cd:bf:0a:ae:45: fd:e6:a1:46:31:d9:66:4b:8e:0c:c2:76:42:dd:6b:a2:e7:aa: 5c:7a:6f:40:8b:a4:b5:68:85:05:f5:e2:ba:0e:ab:19:d0:91: ee:7f:5e:40:1f:ce:2f:6a:a6:07:2d:5c:a6:d1:ca:ea:48:ad: cb:75:b8:e0:19:b9:68:d3:09:c6:d9:06:22:f7:64:00:44:28: 40:6b:08:1f:7f:b6:24:61:0e:9f:5d:7f:84:93:45:d1:86:51: 36:4d:b3:a8:dc:bd:59:e2:95:b0:18:45:16:f7:91:e3:97:86: 08:52:fb:45:c2:b6:7a:2d:ed:a0:27:22:21:34:30:e2:c3:d3: 0f:9e:b2:a1:83:d6:8a:f1:70:02:71:e7:6b:21:1b:c8:03:3e: e7:cd:04:b9:19:37:5a:f9:36:6c:e2:ac:3d:5a:e6:88:4f:07: 13:00:54:f5:62:9a:4b:59:e0:b3:b2:cf:25:92:74:80:88:0b: aa:0b:b2:37:ba:dd:4a:cf:e8:40:ea:fb:90:e0:cc:d5:91:12: fb:61:64:6a:d0:31:e5:ef:2f:cc:07:88:b1:ce:e7:be:1c:40: 7c:0d:ba:ed:67:13:49:c1:54:ea:b3:5c:4a:ee:ff:ae:b3:ab: 64:7f:ee:78 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5EH3gMpOCa5XkSTlxz9IrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzdlMjE1YTQxNWVkN2I1ZGU0YjZkYzEyZjJmN2I3NzUwYzNkNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcmrCDrI8mWeSB6dfS9pfw1ThIZL 4TPJi5ntGwsbmXSr0uVzmza/LceJJhzSt6yC9iUtb3L7VGz3OBosV75MvxZ1XsSa xoT7umIoqkDxYbO4a5ogo9/4oF2q9gt/vdSUW+/sQRr4mF8YD4kCi3X3cDX/1WZs +yV4R7C1EFE81ObzCZ9TTvSfT5Q/Tke1Yd5AxwBq0KBu7e3NtcnSNtlGC6WDPsO5 QexFmqojwVTRb0GrkMI0MTb17trEPjKqUnD4XJVeAZ0cQ4v0scOqXVpwFV5KGAnb LrFyBDECnD/4PXyDViz72RQJtjCLKpITsy3i2Z57os60hiVK+l4VQMaqXwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFLN+IVpBXte13kttwS8ve3dQw9ZvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3Lzk3ZjQ5 YS03YTk1LTRkZDUtOGM3NC01NTM2OWNmNTA3ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvOTdmNDlh LTdhOTUtNGRkNS04Yzc0LTU1MzY5Y2Y1MDdlZS8xL3MzNGhXa0ZlMTdYZVMyM0JM eTk3ZDFERDFtOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAUtdAAwQAVjbVAwQAufiGAwQAwi45MA0EAgAC MAcDBQMqEr7AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDLSTANBgkqhkiG9w0B AQsFAAOCAQEAW02LCwi1BYqMvYhc4M2/Cq5F/eahRjHZZkuODMJ2Qt1roueqXHpv QIuktWiFBfXiug6rGdCR7n9eQB/OL2qmBy1cptHK6kity3W44Bm5aNMJxtkGIvdk AEQoQGsIH3+2JGEOn11/hJNF0YZRNk2zqNy9WeKVsBhFFveR45eGCFL7RcK2ei3t oCciITQw4sPTD56yoYPWivFwAnHnayEbyAM+580EuRk3Wvk2bOKsPVrmiE8HEwBU 9WKaS1ngs7LPJZJ0gIgLqguyN7rdSs/oQOr7kODM1ZES+2FkatAx5e8vzAeIsc7n vhxAfA267WcTScFU6rNcSu7/rrOrZH/ueA== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:20 2026 by rpki-client