This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer File: 13EApGzEauiWvcLg4HTjBVq4hns.cer (raw, json) Hash identifier: Io1MmWAflMpa8OikWngtmRViVIiincD19PORBYCQC3I= Subject key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775914B6547B8D0ECD00A1A4B657A21E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 38935 IP: 195.254.134.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:14:b6:54:7b:8d:0e:cd:00:a1:a4:b6:57:a2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:b7:5e:5f:86:0a:6f:ed:8f:3e:17:ea:74: 04:7a:d6:7f:6b:07:ab:e3:29:ac:11:3d:e4:b4:48: c7:28:05:61:e8:94:64:c6:1c:ec:31:08:ed:d9:cf: 89:58:15:c2:97:cd:ae:09:d2:26:4c:65:6d:b9:0e: 68:5d:5d:a6:a7:2d:54:61:cf:4c:0e:d2:09:4f:7b: 75:5e:9b:7d:08:36:a0:83:63:62:44:91:c3:6c:07: 56:5b:0a:0b:44:ff:6a:37:da:aa:71:77:73:a1:b9: 54:d6:7f:5b:4c:2e:3d:01:4c:80:fe:91:ab:a2:36: 1c:54:68:a1:39:d4:a7:3b:ec:4f:a2:96:d2:6f:f3: c1:27:54:e9:21:b6:4f:01:6d:f9:77:dc:45:3d:2b: a1:cf:bb:f2:25:86:5e:63:70:67:eb:50:bf:24:d0: 96:03:91:11:c0:22:80:bb:02:7c:00:33:72:25:9d: 72:60:e5:ea:71:bd:1b:14:f5:95:0c:9d:80:1a:f6: f1:7f:e6:08:bc:7c:4b:af:fd:22:97:c4:72:1d:30: fa:38:92:bd:fb:01:9e:ed:b6:bf:1a:a2:f8:22:16: e9:32:7b:34:95:97:69:00:09:3e:90:ec:cc:87:40: 5c:05:a7:fd:b0:c7:10:6f:66:f9:a2:53:d4:1e:53: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.134.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 38935 Signature Algorithm: sha256WithRSAEncryption 14:fc:7b:0c:84:a8:f9:2a:43:e9:66:33:4f:b8:69:18:05:eb: 75:69:80:79:a9:bd:8c:7b:70:5d:79:a0:0a:37:54:9a:9e:b4: 09:f7:e4:f2:e2:a2:29:34:cf:8f:75:f0:ea:62:cb:07:cd:ff: ed:ce:a5:1e:86:da:15:be:30:f4:e9:a7:0a:bf:51:25:8a:0b: 1e:e2:14:12:bc:fb:3d:a9:8a:bd:46:f8:ee:a9:04:9b:cb:b9: 71:81:ee:7d:54:5f:f2:aa:b5:1c:3f:85:c9:78:e2:21:67:41: 5f:de:98:2e:10:ec:a7:93:c4:df:07:a0:de:38:ab:d5:cd:67: da:ee:67:f5:27:67:82:2b:dd:49:a9:3b:75:41:ef:4a:2b:21: 90:b3:2b:d6:01:7a:3e:8e:b8:55:9c:c9:e1:eb:d0:5e:13:30: bd:23:a3:e7:32:25:0a:09:d3:ac:7b:e0:c3:7b:d5:1d:69:f1: f9:b3:af:e3:da:34:a3:34:7c:8a:d3:b7:99:e7:53:a2:23:8d: 03:ca:ab:31:a8:4a:5e:ec:da:05:16:c1:58:a2:e9:99:87:a2: 54:d5:66:d2:c1:f3:10:8e:0f:b6:f1:02:e0:92:fa:8f:58:91: b6:c8:7b:ea:07:4c:e2:89:c5:aa:ab:b6:8d:f6:f3:bb:7b:3d: 3e:28:25:68 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3WRS2VHuNDs0AoaS2V6IeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzcxMDBhNDZjYzQ2YWU4OTZiZGMyZTBlMDc0ZTMwNTVhYjg4NjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwS3Xl+GCm/tjz4X6nQEetZ/awer 4ymsET3ktEjHKAVh6JRkxhzsMQjt2c+JWBXCl82uCdImTGVtuQ5oXV2mpy1UYc9M DtIJT3t1Xpt9CDagg2NiRJHDbAdWWwoLRP9qN9qqcXdzoblU1n9bTC49AUyA/pGr ojYcVGihOdSnO+xPopbSb/PBJ1TpIbZPAW35d9xFPSuhz7vyJYZeY3Bn61C/JNCW A5ERwCKAuwJ8ADNyJZ1yYOXqcb0bFPWVDJ2AGvbxf+YIvHxLr/0il8RyHTD6OJK9 +wGe7ba/GqL4IhbpMns0lZdpAAk+kOzMh0BcBaf9sMcQb2b5olPUHlP7TQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNdxAKRsxGrolr3C4OB04wVauIZ7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU2LzM2ZTM4 Mi0yYjYyLTQ0ZGMtOGZiMi1kZDUwYmUwNjc0MDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTYvMzZlMzgy LTJiNjItNDRkYy04ZmIyLWRkNTBiZTA2NzQwMS8xLzEzRUFwR3pFYXVpV3ZjTGc0 SFRqQlZxNGhucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw/6GMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCYFzANBgkqhkiG9w0BAQsFAAOCAQEAFPx7DISo+SpD6WYzT7hpGAXrdWmAeam9 jHtwXXmgCjdUmp60Cffk8uKiKTTPj3Xw6mLLB83/7c6lHobaFb4w9OmnCr9RJYoL HuIUErz7PamKvUb47qkEm8u5cYHufVRf8qq1HD+FyXjiIWdBX96YLhDsp5PE3weg 3jir1c1n2u5n9SdngivdSak7dUHvSishkLMr1gF6Po64VZzJ4evQXhMwvSOj5zIl CgnTrHvgw3vVHWnx+bOv49o0ozR8itO3medToiONA8qrMahKXuzaBRbBWKLpmYei VNVm0sHzEI4PtvEC4JL6j1iRtsh76gdM4onFqqu2jfbzu3s9PiglaA== -----END CERTIFICATE-----Generated at Thu Jan 1 07:24:22 2026 by rpki-client