This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/352lG6cnhKBORBIPne1HhWd5TBs.cer File: 352lG6cnhKBORBIPne1HhWd5TBs.cer (raw, json) Hash identifier: vpLag63C/Rvv4ggKdHglRn38E/+Wlv6T5nzXTTBXFvQ= Subject key identifier: DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCB2D67F6C16972D60EB66B75CA313F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208450 IP: 45.136.56.0/22 IP: 2a0e:9340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2d:67:f6:c1:69:72:d6:0e:b6:6b:75:ca:31:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df9da51ba72784a04e44120f9ded478567794c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:53:72:fe:71:89:88:7e:58:4c:cd:90:cd: 45:8a:16:9c:ee:82:cc:cf:42:1a:57:57:83:ee:d8: 7b:db:93:06:d4:5e:c9:6d:de:47:c5:d3:1b:a4:d9: 9a:8a:b6:dd:b5:bd:7a:83:ea:a8:80:7e:a7:d4:a9: 90:d5:e6:6b:1b:3c:36:cf:df:d0:e9:8b:e7:7a:26: 57:32:f5:5e:84:ec:ea:6f:3c:ee:28:2b:8f:59:09: 4e:f6:7c:0e:13:ad:cf:fe:7b:d9:ab:5e:a9:7e:01: f2:10:05:ee:2a:23:0f:0f:0f:20:df:9a:34:c6:e1: c2:6f:b7:aa:45:46:d3:1a:33:86:bd:af:c8:06:f8: c2:6a:df:ac:34:43:2b:f2:50:da:d9:ed:ed:27:20: d9:d1:99:f9:18:98:bd:fc:53:0e:d7:3a:68:34:b2: f3:b6:18:af:c6:b9:6f:09:5b:41:a0:af:10:c1:36: 25:a7:a0:bb:72:f9:33:0d:51:28:92:58:21:47:08: cb:cb:ea:b8:64:cd:82:05:1c:82:c7:1c:d3:eb:16: 44:1b:5b:7a:04:14:6a:b7:52:fd:64:0d:4a:33:41: cc:82:51:a9:fe:b1:1e:1d:68:cb:2e:a5:33:9c:35: e6:64:c2:25:09:7e:21:b6:20:5f:27:7d:d8:ee:fd: eb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9D:A5:1B:A7:27:84:A0:4E:44:12:0F:9D:ED:47:85:67:79:4C:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bf8eca-bcf9-4536-88bf-bc6975561078/1/352lG6cnhKBORBIPne1HhWd5TBs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.56.0/22 IPv6: 2a0e:9340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208450 Signature Algorithm: sha256WithRSAEncryption 45:5e:9e:97:63:e5:ca:a7:44:12:20:44:45:b2:50:8a:ec:07: fe:62:43:eb:26:36:e9:98:aa:b8:da:c7:cd:e0:37:e5:36:e8: 1e:14:03:42:02:6d:f0:99:ce:37:7f:9c:67:89:f4:84:78:0e: fa:f4:69:e1:ae:05:98:e2:4b:d9:6b:07:fe:9e:61:cc:44:46: 7d:5e:b5:5f:8d:8c:2a:b1:6a:56:6e:e5:1d:9b:31:2f:5d:bb: 46:de:41:ca:1e:92:63:16:78:55:e7:8e:95:5e:53:72:93:2c: e4:56:c0:88:87:c0:8a:92:bf:e0:3a:8b:23:41:1a:e3:5f:cf: b3:d8:78:81:2f:64:20:8a:81:46:a8:4b:f5:15:ba:6d:d7:4c: 35:46:09:5e:1b:a0:9b:ea:e4:6d:97:80:7e:2b:7d:4a:30:ec: 3d:50:23:31:7d:40:c2:7e:a3:e1:db:8c:bf:08:34:3b:e0:8f: 42:1d:10:6c:40:c0:50:f7:2b:d6:75:3d:c3:71:ca:14:58:57: ff:78:f6:f9:90:1b:c8:c8:e3:7f:0c:ba:5c:a2:5c:67:88:85: d8:dc:0f:e4:0c:18:b2:ce:8c:e9:37:da:c9:c7:b6:a8:f6:05: 33:c6:5b:59:bb:47:cf:bd:87:85:bd:86:b9:ca:c7:99:c6:97: 81:5e:ff:ae -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9yy1n9sFpctYOtmt1yjE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjlkYTUxYmE3Mjc4NGEwNGU0NDEyMGY5ZGVkNDc4NTY3Nzk0YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD9Tcv5xiYh+WEzNkM1Fihac7oLM z0IaV1eD7th725MG1F7Jbd5HxdMbpNmairbdtb16g+qogH6n1KmQ1eZrGzw2z9/Q 6YvneiZXMvVehOzqbzzuKCuPWQlO9nwOE63P/nvZq16pfgHyEAXuKiMPDw8g35o0 xuHCb7eqRUbTGjOGva/IBvjCat+sNEMr8lDa2e3tJyDZ0Zn5GJi9/FMO1zpoNLLz thivxrlvCVtBoK8QwTYlp6C7cvkzDVEoklghRwjLy+q4ZM2CBRyCxxzT6xZEG1t6 BBRqt1L9ZA1KM0HMglGp/rEeHWjLLqUznDXmZMIlCX4htiBfJ33Y7v3ruQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN+dpRunJ4SgTkQSD53tR4VneUwbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg4L2JmOGVj YS1iY2Y5LTQ1MzYtODhiZi1iYzY5NzU1NjEwNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgvYmY4ZWNh LWJjZjktNDUzNi04OGJmLWJjNjk3NTU2MTA3OC8xLzM1MmxHNmNuaEtCT1JCSVBu ZTFIaFdkNVRCcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYg4MA0EAgACMAcDBQMqDpNAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMuQjANBgkqhkiG9w0BAQsFAAOCAQEARV6el2PlyqdE EiBERbJQiuwH/mJD6yY26ZiquNrHzeA35TboHhQDQgJt8JnON3+cZ4n0hHgO+vRp 4a4FmOJL2WsH/p5hzERGfV61X42MKrFqVm7lHZsxL127Rt5Byh6SYxZ4VeeOlV5T cpMs5FbAiIfAipK/4DqLI0Ea41/Ps9h4gS9kIIqBRqhL9RW6bddMNUYJXhugm+rk bZeAfit9SjDsPVAjMX1Awn6j4duMvwg0O+CPQh0QbEDAUPcr1nU9w3HKFFhX/3j2 +ZAbyMjjfwy6XKJcZ4iF2NwP5AwYss6M6Tfayce2qPYFM8ZbWbtHz72Hhb2GucrH mcaXgV7/rg== -----END CERTIFICATE-----Generated at Mon Jan 12 05:18:18 2026 by rpki-client