This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer File: 3VXsF19u56H8H4mt91S7KghiV4o.cer (raw, json) Hash identifier: w6liB1cFAtlGJPlYrSHpkngb62kYW8PPDLMe7RWix2o= Subject key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B360EF29997514A4FFC5AEBC56564FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:18:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.88.10.0/23 IP: 2001:67c:2090::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0e:f2:99:97:51:4a:4f:fc:5a:eb:c5:65:64:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2f:28:06:9e:f2:df:f3:8c:b2:38:6d:e5:a7: f7:b7:9a:97:6e:89:4a:12:05:4b:71:3b:a2:c1:a8: 7a:51:3e:28:a1:b0:34:72:ac:12:6f:21:95:15:b0: 34:1f:bd:34:6b:08:e1:90:af:f4:7e:ac:aa:48:53: c8:31:df:47:b4:56:2c:7a:c8:12:e3:7b:79:92:37: 0d:1c:f2:29:fd:97:aa:c1:b3:6b:18:3f:63:53:27: 86:c5:15:a1:d6:a2:db:8e:8c:67:0f:6e:79:2d:72: ee:e0:44:15:b5:03:cb:79:29:e2:b2:29:47:11:9a: 73:d7:ed:74:dc:a3:cd:2b:ab:cc:ac:30:4f:a2:50: 8a:88:84:31:36:f3:46:0f:2d:01:65:6a:81:d5:f9: 3a:7c:73:1d:95:99:a0:9a:db:0b:1c:f4:85:6e:54: 0c:6c:51:d9:cc:a1:ed:29:c4:90:f3:f2:fb:c7:d5: 08:1e:20:c6:c9:17:53:57:58:8a:1d:a9:17:46:24: 88:3a:55:82:cd:67:b2:ea:12:71:60:7a:3d:a8:2f: 8b:e3:47:81:71:fc:c0:dc:bb:b7:9e:c8:13:e3:62: e0:bc:52:4a:96:ba:c4:02:14:1e:3c:e5:4e:5b:a9: d2:fe:38:e5:95:dd:91:2c:23:64:12:24:0f:b2:8e: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.10.0/23 IPv6: 2001:67c:2090::/48 Signature Algorithm: sha256WithRSAEncryption 55:72:65:a9:23:4f:e6:0f:eb:d1:81:04:6f:3d:cd:6f:df:19: f1:3d:b2:7f:83:71:6a:b9:df:ca:21:90:0c:97:08:64:fe:af: b2:60:ac:b0:6d:df:d6:f7:40:3e:0b:09:88:58:62:23:c8:51: d7:0f:4c:84:76:a9:42:ab:b2:30:54:71:a1:8f:44:66:ab:12: 4c:35:00:f8:1f:b0:be:7a:5e:4f:f2:45:a3:e3:79:01:c2:f1: 29:c7:d1:bd:e6:16:a3:1a:3d:e7:b4:61:98:99:ff:76:f5:17: fe:32:df:c4:e3:22:ea:49:c3:80:fd:d7:58:5e:67:65:f1:e6: b7:bb:67:09:db:ff:84:ef:5e:d4:87:a5:e1:c0:a3:b7:89:e4: 4f:98:cb:67:2e:24:db:2b:1a:c8:fd:ef:f5:76:78:4a:f7:c3: 53:83:ee:2f:ec:58:a2:46:58:74:21:5e:d3:62:ad:77:c8:f7: 66:c8:9b:f4:f7:66:3e:c5:20:47:97:fb:76:62:7f:49:6d:ea: de:34:24:ef:48:a4:e3:44:49:77:98:fb:8b:de:08:78:88:f7: be:fe:ac:7b:ba:e4:2d:87:ad:7b:23:65:d6:a2:7a:bd:da:ac: c7:79:72:3c:52:45:e4:98:2e:90:7e:3e:e0:36:9f:8d:12:46: b0:7b:05:f3 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt7Ng7ymZdRSk/8WuvFZWT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDU1ZWMxNzVmNmVlN2ExZmMxZjg5YWRmNzU0YmIyYTA4NjI1NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC8oBp7y3/OMsjht5af3t5qXbolK EgVLcTuiwah6UT4oobA0cqwSbyGVFbA0H700awjhkK/0fqyqSFPIMd9HtFYsesgS 43t5kjcNHPIp/ZeqwbNrGD9jUyeGxRWh1qLbjoxnD255LXLu4EQVtQPLeSnisilH EZpz1+103KPNK6vMrDBPolCKiIQxNvNGDy0BZWqB1fk6fHMdlZmgmtsLHPSFblQM bFHZzKHtKcSQ8/L7x9UIHiDGyRdTV1iKHakXRiSIOlWCzWey6hJxYHo9qC+L40eB cfzA3Lu3nsgT42LgvFJKlrrEAhQePOVOW6nS/jjlld2RLCNkEiQPso7fVwIDAQAB o4IClTCCApEwHQYDVR0OBBYEFN1V7Bdfbueh/B+JrfdUuyoIYleKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzQwZDQw Ny0xZWFjLTQzODEtOGZhNi00NmMyY2MyODAyZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNDBkNDA3 LTFlYWMtNDM4MS04ZmE2LTQ2YzJjYzI4MDJmMS8xLzNWWHNGMTl1NTZIOEg0bXQ5 MVM3S2doaVY0by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw1gKMA8EAgACMAkDBwAgAQZ8IJAwDQYJKoZI hvcNAQELBQADggEBAFVyZakjT+YP69GBBG89zW/fGfE9sn+DcWq538ohkAyXCGT+ r7JgrLBt39b3QD4LCYhYYiPIUdcPTIR2qUKrsjBUcaGPRGarEkw1APgfsL56Xk/y RaPjeQHC8SnH0b3mFqMaPee0YZiZ/3b1F/4y38TjIupJw4D911heZ2Xx5re7Zwnb /4TvXtSHpeHAo7eJ5E+Yy2cuJNsrGsj97/V2eEr3w1OD7i/sWKJGWHQhXtNirXfI 92bIm/T3Zj7FIEeX+3Zif0lt6t40JO9IpONESXeY+4veCHiI977+rHu65C2HrXsj Zdaier3arMd5cjxSReSYLpB+PuA2n40SRrB7BfM= -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:19 2026 by rpki-client