This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer File: 13mWjmbtvqNy75W6or9okThWekA.cer (raw, json) Hash identifier: Huc3NqX84vpJH/n3dSnQFxjG0XxUgPSBR5xDpVO7hkk= Subject key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A378B41048E667530264B0AD388375 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205496 IP: 185.214.228.0/22 IP: 194.15.137.0/24 IP: 2001:67c:2fd8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 09:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:78:b4:10:48:e6:67:53:02:64:b0:ad:38:83:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d779968e66edbea372ef95baa2bf689138567a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:77:d9:2c:81:45:fb:ce:53:c2:ca:da:24:1f: 0d:19:3f:20:f8:5f:d8:5f:2c:ab:8f:5a:73:6f:48: 0b:ae:a2:13:07:23:81:36:36:1f:19:9b:91:f5:17: f2:2e:50:93:d1:0f:49:00:d4:63:5c:df:bd:bb:c5: 0b:69:4c:dc:ad:4e:59:d6:53:8e:41:63:6b:ef:04: 3f:b7:57:03:7b:3b:60:1e:80:ef:e9:29:a5:ed:d4: e9:6b:0f:92:ff:23:41:c7:86:38:76:75:5b:8b:cd: ae:93:51:2c:82:d2:40:b5:43:c9:2a:d0:11:09:2b: f1:91:fa:3f:8a:79:0e:69:cd:38:c6:38:da:5b:2b: 2c:ae:ba:c0:68:c7:aa:18:ee:44:b9:56:23:2f:d3: 04:56:ea:88:d9:dd:63:24:6a:2d:d6:62:97:d6:09: fc:e0:8f:23:41:11:a2:d8:a3:03:95:fc:4a:86:4e: 11:3b:c0:e5:27:69:ba:08:4a:01:52:0d:fb:a5:5d: 2c:58:0a:9c:c2:d2:71:00:33:a4:f5:97:d6:ee:dd: 59:36:38:a9:ce:25:d8:16:b1:b8:a9:f7:29:f1:a4: 6d:e9:da:ee:51:1c:7e:5e:e7:d5:c8:ef:bd:c8:83: 51:79:d4:ef:0e:07:14:89:71:c7:b1:5a:d6:6d:39: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.214.228.0/22 194.15.137.0/24 IPv6: 2001:67c:2fd8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205496 Signature Algorithm: sha256WithRSAEncryption 03:ef:1f:8c:e6:a6:b5:4e:96:79:8a:80:7c:99:d5:44:09:3b: 72:4d:2f:e0:6b:ce:28:48:8a:21:36:a6:42:df:2a:1d:25:7d: aa:12:2a:70:c8:3b:db:69:8d:3d:9c:c7:31:8a:9d:6c:30:84: 76:b0:7d:f5:17:2e:f5:42:77:49:16:79:58:eb:31:de:3d:36: af:ab:7d:72:af:dd:0f:bb:46:2f:54:8b:cc:9a:93:cf:46:ce: 9e:59:99:bd:21:c8:d9:75:24:0e:38:ab:10:2c:ca:81:c7:24: 4b:12:da:f7:33:a3:39:3f:1d:5c:3d:b8:d1:83:55:f3:82:b8: 90:bf:1d:dd:ec:5f:a7:1a:13:22:f7:e1:6f:c6:1b:38:cc:f7: 20:e5:b4:c1:c5:29:b1:a5:ac:4f:eb:3f:e1:29:33:9e:a4:4e: 87:bc:9b:79:40:fe:b2:65:85:da:e6:04:87:c2:a1:17:da:6b: 98:6c:f8:65:df:7c:11:ae:63:d3:ac:2d:73:55:12:c8:5d:7a: de:dc:1f:ec:94:32:92:09:42:60:01:44:3d:9b:4f:02:e8:73: 5c:9f:0a:c9:0a:b7:c5:a4:d6:f3:8e:a7:ae:91:56:9f:e5:e3: 14:94:b5:ce:bf:df:e9:34:37:8c:45:62:91:ee:99:67:87:cb: 37:78:62:5c -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt4o3i0EEjmZ1MCZLCtOIN1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzc5OTY4ZTY2ZWRiZWEzNzJlZjk1YmFhMmJmNjg5MTM4NTY3YTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nfZLIFF+85TwsraJB8NGT8g+F/Y Xyyrj1pzb0gLrqITByOBNjYfGZuR9RfyLlCT0Q9JANRjXN+9u8ULaUzcrU5Z1lOO QWNr7wQ/t1cDeztgHoDv6Sml7dTpaw+S/yNBx4Y4dnVbi82uk1EsgtJAtUPJKtAR CSvxkfo/inkOac04xjjaWyssrrrAaMeqGO5EuVYjL9MEVuqI2d1jJGot1mKX1gn8 4I8jQRGi2KMDlfxKhk4RO8DlJ2m6CEoBUg37pV0sWAqcwtJxADOk9ZfW7t1ZNjip ziXYFrG4qfcp8aRt6druURx+XufVyO+9yINRedTvDgcUiXHHsVrWbTnRgQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFNd5lo5m7b6jcu+VuqK/aJE4VnpAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0Lzk0YmY1 Yi1kMzhhLTRjNzYtYjAxZi02ZTZmYTM5YmIxZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvOTRiZjVi LWQzOGEtNGM3Ni1iMDFmLTZlNmZhMzliYjFlYy8xLzEzbVdqbWJ0dnFOeTc1VzZv cjlva1RoV2VrQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQCudbkAwQAwg+JMA8EAgACMAkDBwAgAQZ8L9gw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAyK4MA0GCSqGSIb3DQEBCwUAA4IBAQAD 7x+M5qa1TpZ5ioB8mdVECTtyTS/ga84oSIohNqZC3yodJX2qEipwyDvbaY09nMcx ip1sMIR2sH31Fy71QndJFnlY6zHePTavq31yr90Pu0YvVIvMmpPPRs6eWZm9IcjZ dSQOOKsQLMqBxyRLEtr3M6M5Px1cPbjRg1XzgriQvx3d7F+nGhMi9+Fvxhs4zPcg 5bTBxSmxpaxP6z/hKTOepE6HvJt5QP6yZYXa5gSHwqEX2muYbPhl33wRrmPTrC1z VRLIXXre3B/slDKSCUJgAUQ9m08C6HNcnwrJCrfFpNbzjqeukVaf5eMUlLXOv9/p NDeMRWKR7plnh8s3eGJc -----END CERTIFICATE-----Generated at Tue Jan 13 12:34:36 2026 by rpki-client