This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35xk4XC38lXXyjADXWUyyJV-sWk.cer File: 35xk4XC38lXXyjADXWUyyJV-sWk.cer (raw, json) Hash identifier: rFb7Pl5YJqQg2N4BNV8eNTAVCrRRKLSpTWoAO01O0P0= Subject key identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6AA87C331D9304FD8E35DF880277D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 62.201.32.0/19 IP: 217.147.4.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:aa:87:c3:31:d9:30:4f:d8:e3:5d:f8:80:27:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df9c64e170b7f255d7ca30035d6532c8957eb169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:04:7a:be:a5:ec:0a:8f:32:8e:21:b2:e3: 73:d8:7b:10:20:81:7d:cb:cc:72:a4:df:b1:cc:8d: eb:43:23:34:08:61:38:e0:9d:03:d2:46:ca:be:35: 16:0a:af:d5:21:73:0e:b8:22:16:73:15:56:0e:f1: db:69:10:79:40:cc:67:5e:e3:8b:7e:c4:a8:b1:99: 29:1f:90:f6:de:62:5f:d5:ce:f2:3c:27:4a:a5:6c: f5:6f:df:e0:a7:4e:b7:aa:24:ea:58:e5:8e:85:55: 06:d6:23:d6:e5:92:b8:32:f0:05:7a:67:e7:e8:df: 2c:93:23:d8:a1:e4:fd:e4:d4:ce:54:4e:69:ab:8f: 5a:21:4a:6a:35:63:d6:b1:77:27:17:78:bf:a3:bf: 48:c3:c1:ee:4f:64:db:b3:42:8e:d1:d4:b0:c1:72: 16:35:e8:c8:3b:54:b6:78:db:4a:7a:2f:26:f0:f1: ea:91:99:a8:a4:cf:c7:53:95:df:e3:87:94:61:e5: 80:8f:7b:8c:9f:76:e2:65:06:08:84:38:ca:f1:a2: 87:9a:34:46:c5:3b:55:dc:8d:59:fa:b0:94:c3:8c: a5:02:95:07:b5:9f:91:0f:e7:9e:20:d3:3f:8a:0d: 28:31:d6:9f:95:4c:0a:b9:69:fb:0c:5b:a3:23:e6: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9C:64:E1:70:B7:F2:55:D7:CA:30:03:5D:65:32:C8:95:7E:B1:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/abd12f-1d66-412f-9be2-28cb3bbf05ae/1/35xk4XC38lXXyjADXWUyyJV-sWk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.201.32.0/19 217.147.4.0/22 Signature Algorithm: sha256WithRSAEncryption 37:e7:58:90:0c:20:39:c2:f4:c0:dc:b7:bc:3a:c6:4a:64:d6: 59:bd:4b:c2:08:8b:bd:a8:aa:66:a8:6b:f5:3a:92:cd:56:af: 92:3f:af:dd:dc:60:11:61:2a:7a:4a:d1:24:f6:6e:9d:d2:d5: 63:80:71:e2:6d:82:2b:99:99:9a:bc:55:d8:99:9b:5f:f0:22: c7:03:66:90:a7:bf:64:03:d9:c0:c1:6f:d3:5f:d5:dd:0b:de: c5:92:4a:5b:d5:67:e6:15:03:9c:54:95:f2:37:59:be:ea:7a: e7:56:e9:4d:ba:88:45:e2:df:da:4e:f5:99:e1:c0:50:e3:1f: 6e:c7:46:f0:f6:f7:d0:85:f8:51:32:aa:64:73:ba:62:c8:a4: 93:5f:93:6c:13:d3:0c:75:4d:fd:c1:f8:a1:80:4a:80:79:32: c3:51:1a:c1:4f:55:c4:51:e1:6e:9c:f9:6f:f3:35:67:83:20: bc:a9:4f:a0:c2:44:60:2b:7c:fd:ea:c3:9f:85:0f:d4:bc:6a: f0:0b:96:d2:8c:cd:eb:b5:7c:aa:79:22:d0:21:8a:c7:e1:68: 79:3b:56:99:bd:f3:d9:65:3e:08:3b:9f:79:be:7c:dc:e8:60: d7:d4:1d:fe:99:ab:f5:0e:2b:d4:c4:56:4d:e3:b9:95:8a:e5: 94:ba:1c:0f -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt3xqqHwzHZME/Y4134gCd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjljNjRlMTcwYjdmMjU1ZDdjYTMwMDM1ZDY1MzJjODk1N2ViMTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ0Eer6l7AqPMo4hsuNz2HsQIIF9 y8xypN+xzI3rQyM0CGE44J0D0kbKvjUWCq/VIXMOuCIWcxVWDvHbaRB5QMxnXuOL fsSosZkpH5D23mJf1c7yPCdKpWz1b9/gp063qiTqWOWOhVUG1iPW5ZK4MvAFemfn 6N8skyPYoeT95NTOVE5pq49aIUpqNWPWsXcnF3i/o79Iw8HuT2Tbs0KO0dSwwXIW NejIO1S2eNtKei8m8PHqkZmopM/HU5Xf44eUYeWAj3uMn3biZQYIhDjK8aKHmjRG xTtV3I1Z+rCUw4ylApUHtZ+RD+eeINM/ig0oMdaflUwKuWn7DFujI+bxXwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFN+cZOFwt/JV18owA11lMsiVfrFpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkL2FiZDEy Zi0xZDY2LTQxMmYtOWJlMi0yOGNiM2JiZjA1YWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvYWJkMTJm LTFkNjYtNDEyZi05YmUyLTI4Y2IzYmJmMDVhZS8xLzM1eGs0WEMzOGxYWHlqQURY V1V5eUpWLXNXay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQFPskgAwQC2ZMEMA0GCSqGSIb3DQEBCwUAA4IB AQA351iQDCA5wvTA3Le8OsZKZNZZvUvCCIu9qKpmqGv1OpLNVq+SP6/d3GARYSp6 StEk9m6d0tVjgHHibYIrmZmavFXYmZtf8CLHA2aQp79kA9nAwW/TX9XdC97Fkkpb 1WfmFQOcVJXyN1m+6nrnVulNuohF4t/aTvWZ4cBQ4x9ux0bw9vfQhfhRMqpkc7pi yKSTX5NsE9MMdU39wfihgEqAeTLDURrBT1XEUeFunPlv8zVngyC8qU+gwkRgK3z9 6sOfhQ/UvGrwC5bSjM3rtXyqeSLQIYrH4Wh5O1aZvfPZZT4IO595vnzc6GDX1B3+ mav1DivUxFZN47mViuWUuhwP -----END CERTIFICATE-----Generated at Mon Jan 5 03:02:23 2026 by rpki-client