This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3C8IdW9U7NcoDR6sz4eK6z8orE8.cer File: 3C8IdW9U7NcoDR6sz4eK6z8orE8.cer (raw, json) Hash identifier: PSRSB70nOrpLaSGHdhl6ESlCFS3CbQceYti/QTJKYAg= Subject key identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1A3DC32902210AD042BAC2913212 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.33.33.0/24 IP: 194.61.78.0/24 IP: 194.62.144.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1a:3d:c3:29:02:21:0a:d0:42:ba:c2:91:32:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc2f08756f54ecd7280d1eaccf878aeb3f28ac4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:89:02:a4:fd:2a:77:77:21:12:74:4d:b4: b3:f5:a5:ac:d1:2e:97:62:d2:d3:d9:50:c9:f9:b2: f4:91:f8:aa:21:fc:f9:e7:c7:3e:03:48:f0:ec:d2: 2e:4b:3f:4f:e9:c5:de:d6:d7:60:79:40:19:84:48: ea:dd:04:14:a1:62:91:8c:66:b8:f2:81:90:e6:72: cf:38:3f:56:10:ea:ee:78:b5:1e:49:b8:f3:4b:1f: 74:4c:5f:3f:72:94:9e:6f:93:8d:5e:81:a1:da:70: f8:dd:04:98:97:78:5e:47:77:b1:0c:54:71:23:55: 7a:68:85:f6:c2:96:4e:36:30:6a:42:96:a9:06:30: 78:9f:19:c5:02:9e:de:24:29:f6:60:84:03:dd:7b: 54:20:3d:1f:be:a2:85:fe:3a:0e:63:4e:3a:43:4e: bc:a9:05:d7:d4:8d:1c:83:bd:ad:bb:80:e1:2a:13: 1d:8f:a9:99:3f:0c:f3:98:c9:ac:76:27:b5:27:3f: 1c:ea:c2:99:ce:32:1b:5a:0a:79:cd:af:9c:93:57: 07:7c:d7:ef:1f:d4:42:9d:49:7f:ab:74:f9:b4:1f: a9:be:09:c8:9b:c1:46:d2:37:ab:de:6e:7e:e8:9c: 4b:a0:e2:4c:70:ab:f6:d0:3c:d1:c8:5c:c5:bc:f7: 39:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2F:08:75:6F:54:EC:D7:28:0D:1E:AC:CF:87:8A:EB:3F:28:AC:4F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/389477-5870-4e2d-ac87-cc6bc94538fa/1/3C8IdW9U7NcoDR6sz4eK6z8orE8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.33.0/24 194.61.78.0/24 194.62.144.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:83:fb:14:3d:81:29:db:eb:c8:ac:35:6c:e9:49:97:ea:1a: 3b:f3:49:bc:2b:bf:16:8d:48:f1:cf:a1:3a:41:1e:96:9a:94: 3c:3c:89:4f:6b:31:e4:5e:3a:de:e3:e1:c2:e7:64:8c:46:27: a1:bf:1b:1e:00:cc:9a:d5:31:4d:c0:e9:47:c8:3d:cf:a8:00: c0:7a:03:77:b3:f1:10:96:74:91:c4:77:c4:a5:c9:22:d3:5f: 1d:29:51:f1:a0:cb:60:38:9f:af:ee:d2:d7:8b:6a:a9:6d:8d: f3:a3:a3:44:a9:22:d1:7b:70:bc:e5:78:c9:5d:e8:a3:f3:09: 70:2b:2a:af:64:ac:20:7d:0e:fa:b0:ef:01:df:c5:d1:8b:8a: cd:19:70:8f:80:3f:c9:a2:07:4d:98:98:7d:f8:57:f7:b4:fa: 09:98:02:2e:be:da:69:19:6d:47:f8:fa:ef:c4:af:d4:01:6f: 59:ef:cc:3c:7f:4b:87:66:be:98:28:2a:41:5b:b6:7d:7a:6c: 4f:c0:b2:8f:e8:7e:e9:18:9b:49:13:5b:a8:ea:1c:64:a6:81: 70:c8:f2:20:34:7f:f5:8f:e3:b8:36:a5:12:a3:68:f5:7e:36: d9:ae:2b:91:e6:d8:61:c0:d4:ee:f1:b5:30:d2:d4:60:5d:6e: a9:66:8c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt87ho9wykCIQrQQrrCkTISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzJmMDg3NTZmNTRlY2Q3MjgwZDFlYWNjZjg3OGFlYjNmMjhhYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW6JAqT9Knd3IRJ0TbSz9aWs0S6X YtLT2VDJ+bL0kfiqIfz558c+A0jw7NIuSz9P6cXe1tdgeUAZhEjq3QQUoWKRjGa4 8oGQ5nLPOD9WEOrueLUeSbjzSx90TF8/cpSeb5ONXoGh2nD43QSYl3heR3exDFRx I1V6aIX2wpZONjBqQpapBjB4nxnFAp7eJCn2YIQD3XtUID0fvqKF/joOY046Q068 qQXX1I0cg72tu4DhKhMdj6mZPwzzmMmsdie1Jz8c6sKZzjIbWgp5za+ck1cHfNfv H9RCnUl/q3T5tB+pvgnIm8FG0jer3m5+6JxLoOJMcKv20DzRyFzFvPc55wIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFNwvCHVvVOzXKA0erM+Hius/KKxPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzM4OTQ3 Ny01ODcwLTRlMmQtYWM4Ny1jYzZiYzk0NTM4ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMzg5NDc3 LTU4NzAtNGUyZC1hYzg3LWNjNmJjOTQ1MzhmYS8xLzNDOElkVzlVN05jb0RSNnN6 NGVLNno4b3JFOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAwiEhAwQAwj1OAwQCwj6QMA0GCSqGSIb3DQEB CwUAA4IBAQBMg/sUPYEp2+vIrDVs6UmX6ho780m8K78WjUjxz6E6QR6WmpQ8PIlP azHkXjre4+HC52SMRiehvxseAMya1TFNwOlHyD3PqADAegN3s/EQlnSRxHfEpcki 018dKVHxoMtgOJ+v7tLXi2qpbY3zo6NEqSLRe3C85XjJXeij8wlwKyqvZKwgfQ76 sO8B38XRi4rNGXCPgD/JogdNmJh9+Ff3tPoJmAIuvtppGW1H+PrvxK/UAW9Z78w8 f0uHZr6YKCpBW7Z9emxPwLKP6H7pGJtJE1uo6hxkpoFwyPIgNH/1j+O4NqUSo2j1 fjbZriuR5thhwNTu8bUw0tRgXW6pZoxE -----END CERTIFICATE-----Generated at Mon Feb 9 22:34:59 2026 by rpki-client