This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer File: 3EThniu05wI8wboQ1Jt07eS_hlw.cer (raw, json) Hash identifier: FSjxnWMooBV6f4IKO8O6bxgEVgzUa79aH2ZqtBuHqrI= Subject key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C1E3E71A71FB6AF9082577C27FE0034F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 02 Feb 2026 12:05:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203665 IP: 25.0.0.0/8 IP: 195.130.0.0/19 IP: 2a08::/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 18:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:3e:71:a7:1f:b6:af:90:82:57:7c:27:fe:00:34:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Feb 2 12:05:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b0:ed:03:36:29:60:18:b9:34:e6:c3:d9:d0: 7c:c1:3e:42:32:c1:ad:b9:b4:a3:9a:d8:9d:a1:29: 52:d0:92:07:c7:bf:22:a9:35:93:bf:02:cb:c4:ee: 98:74:09:91:90:6a:f8:7e:19:a2:e9:a9:f7:39:5b: 56:85:ef:5b:ee:0f:7a:b0:7c:43:f5:af:21:c9:12: 98:67:04:10:59:f3:26:17:0c:ac:01:c8:90:c8:4a: d6:9e:a2:2a:7a:a6:12:42:73:7b:3b:22:8c:f1:bd: 8a:c6:12:2e:d9:c7:4c:21:69:55:53:b0:9c:6a:9f: 2f:c2:a1:91:32:3f:a3:3f:11:54:9f:10:39:91:43: fa:ca:c2:e6:9c:f0:75:f0:e3:29:f5:ee:f4:a7:e9: 26:bd:cd:14:6f:83:1f:2c:7b:ac:47:81:cf:4a:22: ef:26:9d:75:5e:eb:68:57:80:95:76:8a:de:76:65: 4b:c2:cd:11:06:84:39:e6:91:18:c2:38:7d:d7:0e: 94:84:81:6c:ed:4f:a9:94:f0:fb:78:7f:41:c5:1c: 7a:be:e5:87:28:43:02:9a:19:7c:47:35:92:f3:e2: 36:1b:51:6f:60:7e:da:44:29:6b:75:7b:01:f4:6a: 10:d8:c1:b5:66:9f:fb:0b:75:11:c1:33:b5:ea:83: cf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 25.0.0.0/8 195.130.0.0/19 IPv6: 2a08::/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203665 Signature Algorithm: sha256WithRSAEncryption 37:ce:bb:f8:c0:79:30:dc:34:bf:c8:92:c3:78:47:eb:cc:96: b7:50:6d:ac:84:1b:43:c1:1e:44:7a:c9:7c:6b:a5:74:25:ed: 09:07:4b:cf:ba:ca:84:0f:41:c8:fb:84:9a:4f:a3:e6:e3:20: b9:59:c8:2a:3a:d4:ea:8d:11:d0:27:46:e2:37:b5:97:34:e9: 13:93:af:2e:4c:38:78:96:d1:6e:df:e4:15:9d:b1:96:05:65: ed:2c:80:7e:5a:db:50:40:c6:fc:a6:81:23:11:9e:43:8d:c8: 24:c9:3e:65:ea:12:d0:04:8f:3d:1d:98:b7:67:08:1a:41:08: 6b:50:7d:8c:14:22:78:81:2b:b1:67:80:28:54:d0:a9:56:b3: d1:f6:10:48:32:d6:a5:66:d7:5e:20:61:06:40:ba:08:bc:14: 47:f9:19:7b:c4:3f:81:36:31:21:2c:76:1b:19:e6:0d:99:ef: 88:fc:7a:c2:5e:d9:ea:ff:38:9e:31:d0:e0:c5:aa:17:38:d2: 3b:ec:ac:6b:7e:62:75:d8:9e:9a:54:51:95:fd:f6:56:f2:a7: 67:6e:24:fe:41:9b:42:09:fd:7d:de:40:6b:a8:7b:be:bf:c3: 4e:4d:2c:25:f6:11:90:a4:39:ef:13:e8:ab:3d:5e:9b:b1:15: 9a:bc:03:dc -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZwePnGnH7avkIJXfCf+ADT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMjAyMTIwNTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzQ0ZTE5ZTJiYjRlNzAyM2NjMWJhMTBkNDliNzRlZGU0YmY4NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77DtAzYpYBi5NObD2dB8wT5CMsGt ubSjmtidoSlS0JIHx78iqTWTvwLLxO6YdAmRkGr4fhmi6an3OVtWhe9b7g96sHxD 9a8hyRKYZwQQWfMmFwysAciQyErWnqIqeqYSQnN7OyKM8b2KxhIu2cdMIWlVU7Cc ap8vwqGRMj+jPxFUnxA5kUP6ysLmnPB18OMp9e70p+kmvc0Ub4MfLHusR4HPSiLv Jp11XutoV4CVdoredmVLws0RBoQ55pEYwjh91w6UhIFs7U+plPD7eH9BxRx6vuWH KEMCmhl8RzWS8+I2G1FvYH7aRClrdXsB9GoQ2MG1Zp/7C3URwTO16oPPiQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzQ2ZjVi OS02MDAwLTQwNzItODlmMi00YzgyYWNlNzJjODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvNDZmNWI5 LTYwMDAtNDA3Mi04OWYyLTRjODJhY2U3MmM4NS8xLzNFVGhuaXUwNXdJOHdib1Ex SnQwN2VTX2hsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAQBAIAATAKAwIAGQMEBcOCADAMBAIAAjAGAwQFKggAMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwMbkTANBgkqhkiG9w0BAQsFAAOCAQEAN867+MB5 MNw0v8iSw3hH68yWt1BtrIQbQ8EeRHrJfGuldCXtCQdLz7rKhA9ByPuEmk+j5uMg uVnIKjrU6o0R0CdG4je1lzTpE5OvLkw4eJbRbt/kFZ2xlgVl7SyAflrbUEDG/KaB IxGeQ43IJMk+ZeoS0ASPPR2Yt2cIGkEIa1B9jBQieIErsWeAKFTQqVaz0fYQSDLW pWbXXiBhBkC6CLwUR/kZe8Q/gTYxISx2GxnmDZnviPx6wl7Z6v84njHQ4MWqFzjS O+ysa35iddiemlRRlf32VvKnZ24k/kGbQgn9fd5Aa6h7vr/DTk0sJfYRkKQ57xPo qz1em7EVmrwD3A== -----END CERTIFICATE-----Generated at Sat Feb 7 23:17:01 2026 by rpki-client