This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer File: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer (raw, json) Hash identifier: Wd9bbI9aUIM9EJHq9HGhW5PL/7BXu+vd7JTq1WpPFzw= Subject key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834CF8A89E6BD7829DCC7F91628945F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210376 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:cf:8a:89:e6:bd:78:29:dc:c7:f9:16:28:94:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de11cc6df13366fc595a6e72ed03c53800792b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:67:3d:35:76:b5:ce:22:ce:81:31:85:1a: 34:6c:56:05:ad:ca:72:62:e2:2e:12:98:77:c0:c1: a0:23:90:ba:8e:ad:d0:89:d7:5d:b7:89:5e:8c:1f: b0:a8:bb:d5:fd:65:f6:01:cb:3e:3f:18:cf:ca:a8: 5c:f3:8c:8b:31:0f:4d:a1:14:c8:36:1c:c7:ae:0b: da:b6:bc:ab:ab:58:66:c9:3a:82:df:6d:e7:67:1c: cc:89:5b:2a:da:05:61:19:6c:36:83:9b:c2:b9:f8: cf:6e:de:6a:64:61:41:43:9c:72:0b:c2:9d:84:5e: e6:2f:0b:ac:14:a2:97:27:bc:b9:99:d4:8f:09:47: 44:7c:4a:0c:4f:bf:d0:5f:43:fc:3e:12:43:4d:bd: 75:ac:51:02:c9:4d:12:d0:f0:4a:b1:d1:4c:c8:b6: fe:a4:fa:fd:9a:26:85:e8:b3:09:5a:d1:bc:02:e8: 14:b1:1b:b8:30:c5:5f:ab:83:e5:89:10:8d:bd:98: 1b:9d:dd:8d:98:81:e9:24:0f:a8:4b:a0:2c:61:fd: 5a:11:24:03:6f:30:c2:cd:48:92:e4:ea:db:28:ff: 7c:9a:fb:e5:eb:e8:de:0b:97:4f:84:42:6d:3d:f1: 4d:7e:0e:91:42:07:89:97:06:d9:43:70:59:64:c8: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210376 Signature Algorithm: sha256WithRSAEncryption 5e:d6:fc:0b:31:53:29:fe:c5:4b:96:43:36:b4:34:51:33:2e: a4:1c:d4:28:fd:60:3f:ff:25:cf:d0:bc:eb:ff:e4:9b:fe:75: 54:f3:c9:b4:40:b5:10:d2:07:4d:a3:e6:86:31:f9:48:c2:5f: 30:4d:52:f9:f3:e9:c4:ae:17:de:0f:cf:07:88:ea:1a:16:ce: c3:57:33:61:00:ad:80:8c:6c:5b:64:e8:46:c3:6b:7b:8b:63: 7a:bf:86:a6:10:39:21:bd:1c:09:65:bc:d7:f1:34:cb:39:75: d8:00:bc:a0:79:8f:12:7e:aa:73:14:fc:e1:7f:76:40:3e:6c: 5e:bb:de:50:4b:b5:32:7e:19:96:87:77:84:cd:17:4e:b9:84: ad:67:4c:35:a4:c0:2a:9b:37:4a:df:60:0e:07:69:ce:4e:31: b0:9e:73:7c:23:1a:70:de:0d:2a:5f:17:53:9b:c3:25:90:db: 67:90:4b:f3:23:3c:83:5a:4d:c7:30:15:08:71:c1:99:f5:ee: e3:9d:bd:2f:66:b2:27:07:aa:3b:eb:b4:ff:eb:ea:7c:d2:77: 75:0c:f5:26:48:c7:de:c9:cb:02:e9:09:cb:45:44:cc:40:23: 01:9e:cb:48:46:63:97:a5:1d:c7:85:f6:fb:af:96:45:47:34: b3:bb:e8:7a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt4NM+Kiea9eCncx/kWKJRfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTExY2M2ZGYxMzM2NmZjNTk1YTZlNzJlZDAzYzUzODAwNzkyYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBxnPTV2tc4izoExhRo0bFYFrcpy YuIuEph3wMGgI5C6jq3Qidddt4lejB+wqLvV/WX2Acs+PxjPyqhc84yLMQ9NoRTI NhzHrgvatryrq1hmyTqC323nZxzMiVsq2gVhGWw2g5vCufjPbt5qZGFBQ5xyC8Kd hF7mLwusFKKXJ7y5mdSPCUdEfEoMT7/QX0P8PhJDTb11rFECyU0S0PBKsdFMyLb+ pPr9miaF6LMJWtG8AugUsRu4MMVfq4PliRCNvZgbnd2NmIHpJA+oS6AsYf1aESQD bzDCzUiS5OrbKP98mvvl6+jeC5dPhEJtPfFNfg6RQgeJlwbZQ3BZZMhubQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFN4RzG3xM2b8WVpucu0DxTgAeStLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I1L2M2NDk0 ZC1mYzY2LTQ1M2MtYmM4My1lNmM0ZGY0NmYwNGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvYzY0OTRk LWZjNjYtNDUzYy1iYzgzLWU2YzRkZjQ2ZjA0ZC8xLzNoSE1iZkV6WnZ4WldtNXk3 UVBGT0FCNUswcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM1yDANBgkqhkiG9w0BAQsFAAOCAQEAXtb8CzFTKf7F S5ZDNrQ0UTMupBzUKP1gP/8lz9C86//km/51VPPJtEC1ENIHTaPmhjH5SMJfME1S +fPpxK4X3g/PB4jqGhbOw1czYQCtgIxsW2ToRsNre4tjer+GphA5Ib0cCWW81/E0 yzl12AC8oHmPEn6qcxT84X92QD5sXrveUEu1Mn4Zlod3hM0XTrmErWdMNaTAKps3 St9gDgdpzk4xsJ5zfCMacN4NKl8XU5vDJZDbZ5BL8yM8g1pNxzAVCHHBmfXu4529 L2ayJweqO+u0/+vqfNJ3dQz1JkjH3snLAukJy0VEzEAjAZ7LSEZjl6Udx4X2+6+W RUc0s7voeg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:41 2026 by rpki-client