This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer (raw, json) Hash identifier: V5U4LF9MJMPimDQUMMG9xxgxjgOFOo7uvK1XXZ+Ov2c= Subject key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C74B66DC016963F318945B8963235B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201293 IP: 185.79.188.0/22 IP: 2a03:5da0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4b:66:dc:01:69:63:f3:18:94:5b:89:63:23:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:fd:8d:cd:7c:2a:8b:ff:f9:46:cd:a8:86: 0b:ff:b8:e4:5e:1e:c5:ab:14:05:8f:16:74:e0:fa: 30:bf:6a:50:83:d4:a4:85:25:cf:0b:df:49:13:d5: a8:7d:f4:08:e1:a5:59:6a:0d:1c:28:ef:a3:24:e7: 0a:e5:7b:0f:a7:57:98:89:76:d0:30:85:63:c0:fc: 9b:59:22:d2:10:3d:53:62:eb:24:b0:c7:c8:42:ed: 4d:14:64:e7:62:1b:19:82:e8:a6:2d:f8:f2:f1:ab: b1:f8:67:eb:bc:58:ae:ab:7b:ea:94:60:8e:39:fa: 2a:7f:67:30:ec:75:32:9e:db:9f:59:88:a9:56:23: a6:99:74:0e:c2:b7:47:1c:aa:37:d9:7d:c9:08:ef: c5:ea:43:a3:b4:9a:e0:67:4f:8b:d4:ea:c3:94:02: 24:d7:91:2c:c4:6a:84:18:a1:88:77:86:97:56:f7: 9e:45:90:03:8f:d8:e6:32:51:40:9b:af:ae:64:ce: ed:07:18:82:a5:7c:cc:8b:e7:7c:4c:98:80:13:0d: 58:f7:33:27:79:aa:bd:a0:31:58:e2:49:f5:44:71: f7:31:c7:22:e6:11:58:55:e4:66:91:7c:32:df:c9: af:52:b2:ac:8d:17:3f:40:3a:dd:ac:3e:94:79:ea: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.188.0/22 IPv6: 2a03:5da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201293 Signature Algorithm: sha256WithRSAEncryption ad:70:b2:6c:b6:f5:a0:7a:e7:cb:48:55:f3:31:f2:1a:50:30: 8a:a8:47:bb:fb:b4:6c:88:2a:60:b9:4c:da:63:a0:50:46:87: d1:32:38:94:5c:5f:62:3a:08:1d:48:1d:e1:87:a9:06:e4:88: f1:55:e4:9c:4a:6c:a3:b9:2f:16:95:c9:76:57:47:8a:79:45: 22:59:88:59:b0:7b:5f:f7:73:17:17:41:a6:0e:57:6e:28:2b: cf:a8:2e:17:2f:0d:a3:a7:f5:ef:f2:0b:07:30:4c:c4:1f:25: 78:ef:4d:39:10:c4:52:e6:43:9d:ae:d5:7b:c7:32:1c:a7:cc: 21:ca:f4:18:7a:b2:1d:a1:41:76:6e:46:d2:14:57:d0:7d:41: 57:ff:ac:0c:4a:d0:d8:44:36:da:64:7f:a7:b0:3f:aa:49:92: 4d:c9:d2:cb:9c:3b:42:ff:56:8a:c4:b8:80:ad:7e:d7:bb:68: ac:f0:1a:1a:9a:d1:95:df:4e:30:52:a4:52:ed:a0:aa:ad:68: a9:00:89:7b:8c:cb:e4:be:cd:b1:c4:ba:40:54:a0:eb:b6:58: a1:e0:28:25:2f:b5:dd:5e:df:17:5c:e2:d7:65:b9:1a:50:b0: f9:e3:10:31:d7:b9:69:b7:14:6d:79:11:96:78:e0:53:c1:99: 10:8a:0f:9a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3x0tm3AFpY/MYlFuJYyNbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTExMzkyMThjNTJlOGZlN2Y3YzMxNGI2NjM5ZTdmODdlNTY3OWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJH9jc18Kov/+UbNqIYL/7jkXh7F qxQFjxZ04Powv2pQg9SkhSXPC99JE9WoffQI4aVZag0cKO+jJOcK5XsPp1eYiXbQ MIVjwPybWSLSED1TYusksMfIQu1NFGTnYhsZguimLfjy8aux+GfrvFiuq3vqlGCO Ofoqf2cw7HUyntufWYipViOmmXQOwrdHHKo32X3JCO/F6kOjtJrgZ0+L1OrDlAIk 15EsxGqEGKGId4aXVveeRZADj9jmMlFAm6+uZM7tBxiCpXzMi+d8TJiAEw1Y9zMn eaq9oDFY4kn1RHH3Mcci5hFYVeRmkXwy38mvUrKsjRc/QDrdrD6UeerZnwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN4ROSGMUuj+f3wxS2Y55/h+VnnIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NjL2RlYjkw My0yNmRhLTQ3YTgtOWIwNS0zOGEzODVmMzVlM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2MvZGViOTAz LTI2ZGEtNDdhOC05YjA1LTM4YTM4NWYzNWUzYi8xLzNoRTVJWXhTNlA1X2ZERkxa am5uLUg1V2VjZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuU+8MA0EAgACMAcDBQAqA12gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMSTTANBgkqhkiG9w0BAQsFAAOCAQEArXCybLb1oHrn y0hV8zHyGlAwiqhHu/u0bIgqYLlM2mOgUEaH0TI4lFxfYjoIHUgd4YepBuSI8VXk nEpso7kvFpXJdldHinlFIlmIWbB7X/dzFxdBpg5Xbigrz6guFy8No6f17/ILBzBM xB8leO9NORDEUuZDna7Ve8cyHKfMIcr0GHqyHaFBdm5G0hRX0H1BV/+sDErQ2EQ2 2mR/p7A/qkmSTcnSy5w7Qv9WisS4gK1+17torPAaGprRld9OMFKkUu2gqq1oqQCJ e4zL5L7NscS6QFSg67ZYoeAoJS+13V7fF1zi12W5GlCw+eMQMde5abcUbXkRlnjg U8GZEIoPmg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:38 2026 by rpki-client