This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer File: zM32UWI31CXprjgX7LFB9IF3PBI.cer (raw, json) Hash identifier: oSIfwsQusruE3yv1NzDKumQJGtsxCv/JLyCIYtwVdaU= Subject key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12AB2EDAE99616D55E5045C99E28FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210649 IP: 37.140.249.0/24 IP: 193.38.153.0/24 IP: 2a11:1e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ab:2e:da:e9:96:16:d5:5e:50:45:c9:9e:28:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cccdf6516237d425e9ae3817ecb141f481773c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:76:0b:1a:a1:c4:f3:3f:a0:25:b3:d4:45: d7:de:a9:74:0a:02:f8:90:cc:4d:19:7b:70:bf:63: 09:45:fd:43:ec:6e:b3:2b:14:5d:a2:0f:30:49:57: 67:74:ca:90:3e:fc:83:bc:dd:f6:af:ba:13:6e:fb: 92:c2:54:0a:d9:10:12:e6:61:49:e4:b0:e3:d3:f8: f9:6c:7b:2f:61:24:7c:96:e1:c2:2a:dd:5d:b8:61: 97:6b:63:ff:42:9d:b6:e7:b9:51:52:a3:d0:58:db: 8b:60:16:63:4f:9a:e9:c8:52:14:75:79:02:5f:96: cc:e0:f9:1e:26:64:e8:95:8a:b8:3f:f5:c7:bf:de: 90:15:dc:4c:77:22:81:fb:ba:11:35:6c:23:2f:86: 6d:c3:d6:7c:2e:88:7c:2b:f1:69:02:18:3e:a0:b5: ca:15:da:55:12:3f:a0:c8:ce:87:b4:5e:3d:c0:e9: ef:6a:5b:06:9c:8a:84:d7:c7:4d:09:2f:d8:cd:28: ea:2e:7d:3c:2c:5d:f3:8e:c8:84:4d:69:3a:6f:66: e2:11:c5:67:c2:8e:cc:42:eb:43:f3:2a:82:3b:55: 77:4b:4e:ec:35:7d:ed:9d:a2:f9:68:81:23:30:08: 57:9a:22:09:c9:99:d7:3f:20:a2:57:99:a4:b1:24: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.249.0/24 193.38.153.0/24 IPv6: 2a11:1e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210649 Signature Algorithm: sha256WithRSAEncryption 0d:a9:57:45:68:47:ff:88:d5:97:88:cd:d5:a8:ca:96:04:4c: 6f:50:df:7e:f9:59:65:85:4d:84:8a:f6:3c:d1:89:09:e8:f0: 0e:14:ae:5a:27:4b:3e:3d:57:2a:72:00:99:2a:49:35:fa:4f: 36:b1:94:a7:f2:49:e7:75:1a:a7:61:53:8e:bd:3e:2d:9e:bb: f6:2a:ec:94:bf:7c:98:35:e3:bf:dc:af:1d:75:70:04:fe:f4: 09:14:ac:1d:3a:a1:07:30:31:7d:fa:58:d5:45:a0:7f:62:5b: be:82:07:eb:d2:f0:e4:60:de:64:95:92:17:68:21:6d:e6:b7: e6:0f:fe:91:14:36:49:84:8d:27:21:2c:f8:b7:1f:18:d0:58: 25:2b:b2:05:c2:0e:b5:0f:53:aa:d0:61:45:7f:bc:42:e0:7a: 99:87:e3:a3:60:70:60:73:f3:cc:f3:01:9b:1e:5f:f3:b3:b4: 19:cc:20:b8:3e:68:49:72:57:51:f2:ad:15:f8:b0:48:bc:48: 6e:e5:a9:1e:44:18:17:d0:35:3e:c2:2e:85:43:9c:4f:29:40: 9e:ce:1a:fe:7b:e9:6d:60:80:7e:fe:49:3b:1c:af:2f:6d:8f: 36:34:0b:ee:04:b6:c7:50:61:92:f8:71:0f:e5:94:a9:52:c2: 7f:d9:14:aa -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8Eqsu2umWFtVeUEXJnij/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2NkZjY1MTYyMzdkNDI1ZTlhZTM4MTdlY2IxNDFmNDgxNzczYzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGN2CxqhxPM/oCWz1EXX3ql0CgL4 kMxNGXtwv2MJRf1D7G6zKxRdog8wSVdndMqQPvyDvN32r7oTbvuSwlQK2RAS5mFJ 5LDj0/j5bHsvYSR8luHCKt1duGGXa2P/Qp2257lRUqPQWNuLYBZjT5rpyFIUdXkC X5bM4PkeJmTolYq4P/XHv96QFdxMdyKB+7oRNWwjL4Ztw9Z8Loh8K/FpAhg+oLXK FdpVEj+gyM6HtF49wOnvalsGnIqE18dNCS/YzSjqLn08LF3zjsiETWk6b2biEcVn wo7MQutD8yqCO1V3S07sNX3tnaL5aIEjMAhXmiIJyZnXPyCiV5mksSRwJQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMzN9lFiN9Ql6a44F+yxQfSBdzwSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y3LzNiNzQ4 NS04Yjc0LTRkNTAtOTc0YS0xYjUwMTUyMDUzMmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvM2I3NDg1 LThiNzQtNGQ1MC05NzRhLTFiNTAxNTIwNTMyYi8xL3pNMzJVV0kzMUNYcHJqZ1g3 TEZCOUlGM1BCSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAJYz5AwQAwSaZMA0EAgACMAcDBQMqER4AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM22TANBgkqhkiG9w0BAQsFAAOCAQEADalX RWhH/4jVl4jN1ajKlgRMb1DffvlZZYVNhIr2PNGJCejwDhSuWidLPj1XKnIAmSpJ NfpPNrGUp/JJ53Uap2FTjr0+LZ679irslL98mDXjv9yvHXVwBP70CRSsHTqhBzAx ffpY1UWgf2JbvoIH69Lw5GDeZJWSF2ghbea35g/+kRQ2SYSNJyEs+LcfGNBYJSuy BcIOtQ9TqtBhRX+8QuB6mYfjo2BwYHPzzPMBmx5f87O0GcwguD5oSXJXUfKtFfiw SLxIbuWpHkQYF9A1PsIuhUOcTylAns4a/nvpbWCAfv5JOxyvL22PNjQL7gS2x1Bh kvhxD+WUqVLCf9kUqg== -----END CERTIFICATE-----Generated at Mon Feb 2 08:11:01 2026 by rpki-client