This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer File: c58-vNJnkrkTwdy5lBmW6ZjxYHg.cer (raw, json) Hash identifier: YRSmOVP7/zhMXBDP2Bomki7VIDRkBSj5q5U7P+euStE= Subject key identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC9582E7BF3E55B26D41A0E463878E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35063 IP: 31.7.40.0/21 IP: 46.29.144.0/21 IP: 85.237.160.0/19 IP: 185.18.140.0/22 IP: 212.109.160.0/21 IP: 217.171.48.0/20 IP: 2a03:9500::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:95:82:e7:bf:3e:55:b2:6d:41:a0:e4:63:87:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=739f3ebcd26792b913c1dcb9941996e998f16078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:86:7b:09:ef:47:b8:98:43:6f:34:45:e1: 96:87:0a:ca:fe:cf:fe:43:99:14:c6:7f:ea:11:03: 4e:89:a6:62:06:24:72:82:79:22:31:bc:0b:e6:e2: 2e:91:2e:98:b2:aa:ad:c1:bb:f7:7e:ec:3e:9b:49: af:dd:9d:05:46:5e:09:20:13:a5:51:41:02:c8:28: 6d:28:79:a3:c0:12:7c:7f:94:89:56:c4:ee:a0:f8: d3:29:34:58:a0:c8:04:1b:2d:0d:73:eb:f1:11:56: 69:51:22:5d:e6:fd:a4:9c:e7:c9:8e:d2:c1:f2:88: 0d:82:56:58:45:74:e0:96:63:36:97:08:96:b0:49: ba:51:24:db:6a:61:58:3c:5a:d5:4c:40:ef:bf:a8: e9:49:2a:4d:15:33:4f:59:6a:19:9b:03:24:61:6d: e8:74:c8:35:26:4b:a3:22:a7:93:bf:43:c9:30:4b: fb:c1:1d:88:2c:e1:b2:12:ad:3b:a1:04:ac:56:f8: 75:59:14:92:18:9e:8c:2c:2f:b2:03:fe:17:b0:f7: e2:9f:21:62:3f:eb:22:10:36:39:9e:68:23:37:29: a8:7e:0a:c1:d7:73:eb:d3:f9:b6:12:cc:ba:20:0d: c6:bb:47:5a:36:11:34:48:9b:7f:c3:ff:77:3c:a2: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:3E:BC:D2:67:92:B9:13:C1:DC:B9:94:19:96:E9:98:F1:60:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d2d99e-a7c1-43e8-93f5-a11a96d21861/1/c58-vNJnkrkTwdy5lBmW6ZjxYHg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.7.40.0/21 46.29.144.0/21 85.237.160.0/19 185.18.140.0/22 212.109.160.0/21 217.171.48.0/20 IPv6: 2a03:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35063 Signature Algorithm: sha256WithRSAEncryption a7:f8:6d:d3:47:96:77:10:87:33:34:d6:22:d9:24:52:4e:7e: 18:88:07:22:eb:3d:70:8f:7c:19:ed:4f:5a:f4:90:2e:85:60: 99:54:97:3f:e7:a6:a0:82:ab:25:8c:fc:83:db:9a:11:bc:aa: 8c:6e:7e:60:71:f7:a3:2e:49:28:41:81:2a:d1:a1:a1:df:83: bb:35:ac:4e:e3:70:e8:7a:d2:31:75:72:70:d3:3b:ca:af:51: 5a:8e:00:d8:5b:00:82:b0:4b:92:ef:60:5d:5c:ff:09:66:33: 98:f4:73:6b:44:0c:d6:52:6b:d2:ca:07:19:6f:c5:c5:c7:22: d1:6e:9f:3e:14:fb:62:bd:34:69:c5:99:cc:a4:86:8e:ad:ed: 06:48:33:59:23:11:b8:30:0c:e6:ff:f6:7b:e8:cd:12:31:e6: 8f:33:a0:98:4a:c9:e2:b2:40:ed:b3:29:fa:78:57:fe:79:bf: a3:54:b8:d5:ef:64:af:d9:e2:34:f8:74:f8:9b:33:f6:0a:d5: 18:5a:b9:bc:be:4c:06:0b:b7:5f:e6:1a:3c:a1:0d:86:8c:0f: d3:12:76:cd:76:b4:a1:b0:35:2e:44:c7:b1:70:6c:13:9a:02: 27:e0:b3:b7:fc:d1:cb:d3:a9:48:f6:82:c3:d4:ec:5f:e3:75: 56:e4:55:56 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgISAZt57JWC578+VbJtQaDkY4eOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzlmM2ViY2QyNjc5MmI5MTNjMWRjYjk5NDE5OTZlOTk4ZjE2MDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPaGewnvR7iYQ280ReGWhwrK/s/+ Q5kUxn/qEQNOiaZiBiRygnkiMbwL5uIukS6Ysqqtwbv3fuw+m0mv3Z0FRl4JIBOl UUECyChtKHmjwBJ8f5SJVsTuoPjTKTRYoMgEGy0Nc+vxEVZpUSJd5v2knOfJjtLB 8ogNglZYRXTglmM2lwiWsEm6USTbamFYPFrVTEDvv6jpSSpNFTNPWWoZmwMkYW3o dMg1JkujIqeTv0PJMEv7wR2ILOGyEq07oQSsVvh1WRSSGJ6MLC+yA/4XsPfinyFi P+siEDY5nmgjNymofgrB13Pr0/m2Esy6IA3Gu0daNhE0SJt/w/93PKJdDwIDAQAB o4ICzTCCAskwHQYDVR0OBBYEFHOfPrzSZ5K5E8HcuZQZlumY8WB4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmL2QyZDk5 ZS1hN2MxLTQzZTgtOTNmNS1hMTFhOTZkMjE4NjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvZDJkOTll LWE3YzEtNDNlOC05M2Y1LWExMWE5NmQyMTg2MS8xL2M1OC12Tkpua3JrVHdkeTVs Qm1XNlpqeFlIZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQDHwcoAwQDLh2QAwQFVe2gAwQCuRKMAwQD1G2g AwQE2aswMA0EAgACMAcDBQAqA5UAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCI 9zANBgkqhkiG9w0BAQsFAAOCAQEAp/ht00eWdxCHMzTWItkkUk5+GIgHIus9cI98 Ge1PWvSQLoVgmVSXP+emoIKrJYz8g9uaEbyqjG5+YHH3oy5JKEGBKtGhod+DuzWs TuNw6HrSMXVycNM7yq9RWo4A2FsAgrBLku9gXVz/CWYzmPRza0QM1lJr0soHGW/F xcci0W6fPhT7Yr00acWZzKSGjq3tBkgzWSMRuDAM5v/2e+jNEjHmjzOgmErJ4rJA 7bMp+nhX/nm/o1S41e9kr9niNPh0+Jsz9grVGFq5vL5MBgu3X+YaPKENhowP0xJ2 zXa0obA1LkTHsXBsE5oCJ+Czt/zRy9OpSPaCw9TsX+N1VuRVVg== -----END CERTIFICATE-----Generated at Sat Jan 3 02:18:56 2026 by rpki-client