This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer File: 3UftWIupBpRXoqiY_HoMuXfR-B4.cer (raw, json) Hash identifier: VIfNjdl7dWzWCNPsXmpiIwF2jXhRpfWoN3gTyhFsW68= Subject key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783530FCE03EC8DD36BD6272BE910AC1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208598 IP: 194.156.108.0/22 IP: 2a09:2d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:30:fc:e0:3e:c8:dd:36:bd:62:72:be:91:0a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:18:39:5e:cd:5f:36:1d:75:1d:5d:5a:07:93: 02:68:5d:a9:32:7c:40:b5:74:70:c9:a0:df:e1:ff: 8c:4c:b2:ff:2b:9c:8e:75:f6:cd:35:b5:89:b0:3d: db:d6:0f:26:83:fe:63:29:b7:17:c1:b3:ec:39:f6: 9f:29:5b:24:8d:91:a1:36:7d:37:aa:e3:86:4d:2d: 34:76:cb:8b:a7:1f:92:d4:a5:49:f2:29:6a:ce:7b: d5:ed:ff:86:c7:97:b1:df:ba:52:93:c3:97:65:1b: ab:75:d7:1c:0c:51:ef:d8:d6:29:0e:1b:3a:5f:99: 7c:19:b3:e5:21:31:b5:56:42:53:b4:70:9b:fb:a1: 4b:af:22:54:1f:f3:67:24:ab:b7:24:c2:e1:f9:53: 2e:29:ee:a7:dc:c9:48:df:ef:3b:ca:ea:3d:79:31: c1:ba:4c:c4:8e:ed:c1:03:c0:95:18:6f:bf:c5:b5: 2e:6b:a1:12:46:d4:48:aa:3c:34:04:d0:4a:f6:ee: e5:ac:a5:ee:63:af:5f:4b:83:f8:9a:1b:fa:8d:df: b0:91:40:55:7f:fa:14:0b:a4:e1:53:0b:4b:35:9e: ec:31:a1:91:bb:1b:80:4b:02:2b:62:92:6e:8b:c8: 78:ae:3f:45:a9:78:20:b0:8d:83:f5:6e:d1:18:46: 8f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.108.0/22 IPv6: 2a09:2d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208598 Signature Algorithm: sha256WithRSAEncryption ac:94:03:9b:89:17:3e:dd:b3:bf:d1:fd:23:8a:91:31:9f:7c: 47:f2:0e:a9:17:80:2c:ce:50:46:02:a7:f7:8a:4f:5f:70:bc: 8b:2f:65:ab:f8:c2:47:36:b1:aa:c4:82:99:95:70:2f:4c:fb: bf:6a:cc:57:c5:30:e2:2b:53:10:d5:ff:8a:8d:4c:76:d2:e0: 47:5e:61:75:99:1d:f7:68:84:2c:12:f7:1f:42:0c:97:7b:20: 62:13:77:29:a9:22:ff:b7:fc:0d:96:22:d0:c9:6a:ff:ef:23: d3:39:d9:73:79:28:db:de:d5:87:c1:b2:53:66:cc:c9:06:fb: 9d:2c:c1:1a:c9:2d:00:c0:fb:68:53:e4:64:e3:35:6e:6d:5e: 3b:6a:f9:67:de:f2:bf:b1:e5:d0:9c:50:43:7a:77:dd:26:65: 5d:4f:58:74:2d:c6:9c:3f:a9:b1:d8:ab:b9:83:9e:eb:0c:b2: 37:4d:ed:77:c1:f2:94:45:cb:44:55:59:63:f3:85:8f:5e:02: 1c:60:27:98:7d:5c:f3:56:e2:81:74:a0:b3:18:8b:5a:7f:a8: 22:c6:17:43:89:0b:69:cc:c4:bf:64:f9:4d:93:c2:6f:73:69: 30:37:0d:d7:c0:22:fc:b3:63:b4:99:ff:05:a7:35:dd:f0:66: 7b:f8:12:f2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NTD84D7I3Ta9YnK+kQrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDQ3ZWQ1ODhiYTkwNjk0NTdhMmE4OThmYzdhMGNiOTc3ZDFmODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rg5Xs1fNh11HV1aB5MCaF2pMnxA tXRwyaDf4f+MTLL/K5yOdfbNNbWJsD3b1g8mg/5jKbcXwbPsOfafKVskjZGhNn03 quOGTS00dsuLpx+S1KVJ8ilqznvV7f+Gx5ex37pSk8OXZRurddccDFHv2NYpDhs6 X5l8GbPlITG1VkJTtHCb+6FLryJUH/NnJKu3JMLh+VMuKe6n3MlI3+87yuo9eTHB ukzEju3BA8CVGG+/xbUua6ESRtRIqjw0BNBK9u7lrKXuY69fS4P4mhv6jd+wkUBV f/oUC6ThUwtLNZ7sMaGRuxuASwIrYpJui8h4rj9FqXggsI2D9W7RGEaPvQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN1H7ViLqQaUV6KomPx6DLl30fgeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzQ1ODFi Ny0zNWJjLTRiYzgtODViMy1mNDU5NmU3NzY3YTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNDU4MWI3 LTM1YmMtNGJjOC04NWIzLWY0NTk2ZTc3NjdhOC8xLzNVZnRXSXVwQnBSWG9xaVlf SG9NdVhmUi1CNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwpxsMA0EAgACMAcDBQMqCS2AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMu1jANBgkqhkiG9w0BAQsFAAOCAQEArJQDm4kXPt2z v9H9I4qRMZ98R/IOqReALM5QRgKn94pPX3C8iy9lq/jCRzaxqsSCmZVwL0z7v2rM V8Uw4itTENX/io1MdtLgR15hdZkd92iELBL3H0IMl3sgYhN3Kaki/7f8DZYi0Mlq /+8j0znZc3ko297Vh8GyU2bMyQb7nSzBGsktAMD7aFPkZOM1bm1eO2r5Z97yv7Hl 0JxQQ3p33SZlXU9YdC3GnD+psdiruYOe6wyyN03td8HylEXLRFVZY/OFj14CHGAn mH1c81bigXSgsxiLWn+oIsYXQ4kLaczEv2T5TZPCb3NpMDcN18Ai/LNjtJn/Bac1 3fBme/gS8g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:04 2026 by rpki-client