This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.cer (raw, json) Hash identifier: sfgbISpDMQrwH8Jk0KhnHvt7Q1RPsA/gfdB0l4NATX8= Subject key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78353E626A26B90938CBBBCA1007BEA9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 194.30.182.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3e:62:6a:26:b9:09:38:cb:bb:ca:10:07:be:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:74:c0:70:24:58:9f:c3:93:58:e8:a3:94:90: 38:01:27:e4:de:8a:75:e6:4e:7e:34:bc:09:0d:c7: 96:ae:8d:f0:83:fb:81:31:04:eb:52:3b:7e:52:31: 1e:fb:5f:58:c4:4b:6c:5f:a2:e5:89:9b:56:43:db: 59:97:92:6e:6e:39:1b:ec:09:a5:4f:71:5a:95:e1: 39:b0:4d:9f:15:ab:1a:6b:0d:54:03:b9:bd:78:26: b9:5b:0b:e7:25:55:37:9f:00:5b:08:25:0a:3a:8c: aa:9e:8e:77:fa:a4:b9:01:99:91:b7:4e:76:54:e8: 32:fa:b3:f1:1e:36:ac:3c:6b:d4:57:06:d1:d2:3a: c8:c8:e7:86:f7:ca:b2:a1:66:e6:11:36:22:f0:40: e8:d2:04:d8:fa:af:e3:54:7c:51:41:c7:53:a1:41: ca:cf:69:0a:0a:63:2c:4f:33:4f:19:3b:42:5a:3b: be:62:16:2d:8d:cd:e7:a2:80:80:bb:64:e3:6e:c8: a8:9c:b3:e4:8e:8b:ca:4e:f0:a2:88:58:25:47:97: 42:7a:da:f0:93:82:d5:f3:fd:03:f8:2e:5b:c0:b4: 85:13:78:35:63:c2:11:2f:6e:6a:6c:65:3e:7b:45: cf:c1:cf:91:d6:a8:ad:07:d6:d9:2f:69:9c:8f:27: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.30.182.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:5c:de:98:e9:0b:31:3f:07:c7:74:ca:6c:95:52:e6:9c:e4: ea:71:33:b2:34:36:2d:14:c1:40:03:09:b4:4e:ff:fc:4a:5e: d1:47:3d:53:e8:b0:1e:30:8d:56:5c:8c:31:d0:d7:95:cd:61: c8:41:00:f9:93:72:10:59:cd:73:a9:b4:36:d9:b0:d1:f8:36: 24:a5:a6:e1:a0:bb:c0:10:a8:fe:d4:8f:bf:3a:e2:6c:6b:9a: 98:62:9c:85:d0:d4:3c:1b:c0:0c:65:30:0d:1c:cd:9d:d2:91: 1b:cf:17:40:7e:a4:66:79:f4:15:77:0f:75:f8:b0:72:46:90: d0:2d:5a:05:34:2d:e7:97:bd:7c:3b:63:e3:4e:e8:23:b7:3a: 0e:64:df:4a:ed:75:b1:7d:72:d8:4e:82:02:33:78:0a:7f:16: 31:ac:04:68:d6:6d:f2:a0:3c:c6:25:c6:e9:6f:ae:b2:34:5d: 9c:9a:39:f7:a8:5c:30:7a:d2:b6:54:a6:4a:49:f1:dd:e3:d2: 70:c1:8e:0a:79:9a:a6:13:0c:6b:72:a4:52:d0:4e:ef:c5:ab: a3:da:9c:90:e8:96:12:09:03:47:e2:ab:ef:28:34:d5:22:49: dc:e2:a5:77:b0:2b:fd:b7:7f:52:cb:25:06:54:ec:8d:d2:08: 83:ee:31:e3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NT5iaia5CTjLu8oQB76pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzc2ZDJmNDNlYzE3ZGZjODA1Y2RiMDVmMDAwYTE1Nzk4OWVkNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXTAcCRYn8OTWOijlJA4ASfk3op1 5k5+NLwJDceWro3wg/uBMQTrUjt+UjEe+19YxEtsX6LliZtWQ9tZl5Jubjkb7Aml T3FaleE5sE2fFasaaw1UA7m9eCa5WwvnJVU3nwBbCCUKOoyqno53+qS5AZmRt052 VOgy+rPxHjasPGvUVwbR0jrIyOeG98qyoWbmETYi8EDo0gTY+q/jVHxRQcdToUHK z2kKCmMsTzNPGTtCWju+YhYtjc3nooCAu2TjbsionLPkjovKTvCiiFglR5dCetrw k4LV8/0D+C5bwLSFE3g1Y8IRL25qbGU+e0XPwc+R1qitB9bZL2mcjyeUzwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNx20vQ+wX38gFzbBfAAoVeYntRIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MyL2M2MWU0 MC1hYzA5LTQ3NTYtOTRlZi05M2M2NDU3Y2FmMzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIvYzYxZTQw LWFjMDktNDc1Ni05NGVmLTkzYzY0NTdjYWYzMy8xLzNIYlM5RDdCZmZ5QVhOc0Y4 QUNoVjVpZTFFZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwh62MA0GCSqGSIb3DQEBCwUAA4IBAQB7XN6Y 6QsxPwfHdMpslVLmnOTqcTOyNDYtFMFAAwm0Tv/8Sl7RRz1T6LAeMI1WXIwx0NeV zWHIQQD5k3IQWc1zqbQ22bDR+DYkpabhoLvAEKj+1I+/OuJsa5qYYpyF0NQ8G8AM ZTANHM2d0pEbzxdAfqRmefQVdw91+LByRpDQLVoFNC3nl718O2PjTugjtzoOZN9K 7XWxfXLYToICM3gKfxYxrARo1m3yoDzGJcbpb66yNF2cmjn3qFwwetK2VKZKSfHd 49JwwY4KeZqmEwxrcqRS0E7vxauj2pyQ6JYSCQNH4qvvKDTVIknc4qV3sCv9t39S yyUGVOyN0giD7jHj -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:23 2026 by rpki-client