This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer File: 3o44GHrnDLx77WlXWfDgMpn7swI.cer (raw, json) Hash identifier: kQEIVqzjRzcNd1uvhmNACO+GFP13AHuPw6i+aoS4/oM= Subject key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C806F66B232EFDB749A2D189B5DEF3C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202703 IP: 194.93.79.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:6f:66:b2:32:ef:db:74:9a:2d:18:9b:5d:ef:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de8e38187ae70cbc7bed695759f0e03299fbb302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:2d:7f:d9:44:0d:77:04:de:22:ce:6c:88: dd:33:11:c9:8d:32:a5:91:45:48:9f:e2:00:a3:78: 8c:0a:d2:78:1b:e5:25:94:32:97:cb:56:88:3c:00: e3:c6:eb:7a:b7:c7:69:d5:f2:aa:be:c1:54:06:4f: 9a:6d:fb:8b:aa:b3:31:8f:c1:26:58:de:13:b8:04: da:62:55:f7:9a:56:67:dd:63:52:f8:fc:ce:71:8a: 15:7d:da:d0:d8:43:4d:c0:25:f7:e1:6b:14:57:97: 84:fd:b3:dd:87:9a:0f:40:f1:c8:e6:19:3f:de:9b: c9:60:af:d9:90:d0:54:bb:4c:fb:f5:14:5e:50:30: 6c:19:f3:ac:d4:d1:7c:8d:57:25:d3:19:df:08:57: 4d:5a:6d:13:41:b2:e3:79:e7:56:6e:84:40:ba:7e: 28:81:12:ee:0a:1d:99:90:24:e6:91:f7:ce:9e:f1: aa:29:69:e8:ae:3f:09:d8:c7:9e:06:c0:e4:c9:b7: ce:d9:fd:d2:8b:40:7d:f6:2c:dd:8a:a4:af:8f:67: b4:39:66:de:50:d5:77:6c:32:fa:13:61:ad:96:2d: 92:b1:fc:9b:0f:b8:be:47:83:2e:0d:59:7a:63:f5: ab:a5:99:b6:46:cf:30:cf:62:2e:3c:8c:4c:8b:18: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.93.79.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202703 Signature Algorithm: sha256WithRSAEncryption 96:f8:2e:e6:ed:35:a2:ba:1a:ad:ea:da:d2:21:01:ad:09:6a: e6:af:a4:95:bd:e0:22:61:88:bb:1a:f7:b1:b8:0d:c0:02:04: f4:ce:79:65:bf:c6:d7:db:69:16:22:49:35:61:0a:60:00:63: b4:8f:6b:d1:7e:cf:40:89:f3:ce:5d:e1:c1:c8:86:02:ab:1c: f4:91:da:ff:80:47:76:9e:26:0b:29:90:ac:5a:82:e7:f5:b7: 4a:e0:8b:1f:0c:1b:89:ad:5b:43:1d:fb:9e:c3:3d:4c:57:ce: 9e:f7:22:26:3b:a0:ee:cc:bf:e5:c9:f6:ac:63:3d:ae:53:bd: 39:68:82:48:18:48:9d:13:c4:5d:f4:f5:00:6f:67:ce:a7:a4: a7:a9:85:43:33:ed:44:08:01:86:a6:eb:fc:4a:42:27:b5:06: 18:46:27:fe:59:52:11:62:30:5b:19:8d:b9:e9:c8:75:00:f7: 87:9d:ea:43:aa:68:84:c9:de:54:ba:8b:32:c5:35:7b:b6:31: 51:5f:7f:c1:a0:2f:d0:e7:84:ec:0b:0f:45:d8:67:05:f2:47: 79:b0:0c:d6:7f:ae:3f:f6:f1:12:7e:ec:46:83:e4:e0:ad:ef: 5f:fe:c1:78:6b:2e:8c:f2:bd:21:c6:58:38:53:7e:d0:e3:37: 64:81:a2:23 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8gG9msjLv23SaLRibXe88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZThlMzgxODdhZTcwY2JjN2JlZDY5NTc1OWYwZTAzMjk5ZmJiMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZYtf9lEDXcE3iLObIjdMxHJjTKl kUVIn+IAo3iMCtJ4G+UllDKXy1aIPADjxut6t8dp1fKqvsFUBk+abfuLqrMxj8Em WN4TuATaYlX3mlZn3WNS+PzOcYoVfdrQ2ENNwCX34WsUV5eE/bPdh5oPQPHI5hk/ 3pvJYK/ZkNBUu0z79RReUDBsGfOs1NF8jVcl0xnfCFdNWm0TQbLjeedWboRAun4o gRLuCh2ZkCTmkffOnvGqKWnorj8J2MeeBsDkybfO2f3Si0B99izdiqSvj2e0OWbe UNV3bDL6E2Gtli2SsfybD7i+R4MuDVl6Y/WrpZm2Rs8wz2IuPIxMixjqwQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN6OOBh65wy8e+1pV1nw4DKZ+7MCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzU4MGMx MS0zOTEzLTQ0NzktYmVhMy01YjFmNDhiM2UyMTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNTgwYzEx LTM5MTMtNDQ3OS1iZWEzLTViMWY0OGIzZTIxNC8xLzNvNDRHSHJuREx4NzdXbFhX ZkRnTXBuN3N3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwl1PMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMXzzANBgkqhkiG9w0BAQsFAAOCAQEAlvgu5u01oroarera0iEBrQlq5q+klb3g ImGIuxr3sbgNwAIE9M55Zb/G19tpFiJJNWEKYABjtI9r0X7PQInzzl3hwciGAqsc 9JHa/4BHdp4mCymQrFqC5/W3SuCLHwwbia1bQx37nsM9TFfOnvciJjug7sy/5cn2 rGM9rlO9OWiCSBhInRPEXfT1AG9nzqekp6mFQzPtRAgBhqbr/EpCJ7UGGEYn/llS EWIwWxmNuenIdQD3h53qQ6pohMneVLqLMsU1e7YxUV9/waAv0OeE7AsPRdhnBfJH ebAM1n+uP/bxEn7sRoPk4K3vX/7BeGsujPK9IcZYOFN+0OM3ZIGiIw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:19 2026 by rpki-client