This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer File: ADn3QWhtoR55rnxeSGqikICMsbc.cer (raw, json) Hash identifier: gqbaJxDB8Ueh8rxq4i2lpIJwt3M0yzZzLOqc55rS1Cc= Subject key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77596797D25FC616DC64C57216D453C1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:26 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 206827 AS: 207874 AS: 211045 IP: 194.31.12.0/23 IP: 194.31.66.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:67:97:d2:5f:c6:16:dc:64:c5:72:16:d4:53:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0039f741686da11e79ae7c5e486aa290808cb1b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:59:24:9d:d9:38:8d:68:4b:e6:ef:00:f9: 24:be:34:da:37:2e:6d:1d:4e:f5:13:ed:17:95:8e: 54:63:76:7c:2c:1e:31:e0:b9:48:2c:c9:5d:d7:89: 2c:ea:3b:21:44:91:1d:f8:1b:26:13:72:74:37:91: 71:0f:1f:ba:b6:5f:42:e2:dc:72:5a:a9:b0:26:a8: f7:70:10:d5:8f:9f:e2:c5:f0:a0:3e:9b:42:45:d7: 81:7b:70:45:5b:c1:e2:05:d8:de:fb:e9:77:9d:94: 04:10:fa:af:4a:9f:aa:02:6a:ec:a5:bc:a2:92:89: 99:c6:6c:6b:6a:12:af:09:fc:5a:c6:f8:0c:f3:63: 5c:a0:17:15:c0:a2:8e:31:52:6b:eb:e3:4d:6c:b3: df:54:35:69:de:82:9e:94:0a:67:dd:0f:5e:5c:67: 56:d3:91:b3:17:97:c1:06:68:b4:6a:11:8f:e2:a1: 4e:21:0e:53:09:8c:47:7c:e7:e6:02:32:62:3d:6b: 79:86:93:db:96:60:03:35:3f:be:8d:5b:1c:60:ed: 5b:d2:4e:27:e4:f1:3d:31:ee:38:c9:9d:6c:7b:77: 5c:9b:f7:2b:5e:55:70:e8:c8:0f:18:20:ff:aa:60: 8d:3c:95:69:f9:e2:67:fd:aa:41:bb:e4:16:f2:f6: 53:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.12.0/23 194.31.66.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206827 207874 211045 Signature Algorithm: sha256WithRSAEncryption 08:12:31:5b:c2:21:47:a8:21:17:51:ad:8a:11:20:b9:fd:82: 50:3d:43:ec:28:59:d7:61:56:6d:dd:75:2c:56:a3:5f:a4:36: 87:18:13:4b:46:08:8e:41:c6:09:7c:91:e3:0a:0b:5b:b7:b7: 1d:7d:a2:7a:07:f4:4b:b4:f2:ab:39:cf:0b:75:43:22:2e:21: 25:30:6a:f3:64:98:1a:3a:ed:b9:c6:b6:ee:9b:c7:fb:77:57: 58:d5:dd:48:9b:ae:39:88:57:e7:b1:4b:3e:f7:a3:10:3c:18: 35:d7:17:c8:75:2a:ac:f3:b8:e1:2d:64:93:32:87:bd:7d:93: 35:a7:cb:bd:fb:38:2b:92:6c:da:70:87:e7:33:97:9c:58:38: 21:92:ea:0d:bf:4d:4f:83:8e:1a:75:50:e2:20:90:3b:de:65: e8:db:31:18:37:49:93:43:02:3c:e5:58:51:15:56:c7:1a:ac: 64:24:5f:ca:a2:97:35:c5:6a:88:5f:a0:ba:48:02:03:0d:d6: b3:98:3c:12:bd:3a:70:18:f3:a7:fb:0d:c7:d5:cd:73:54:c0: 14:76:7b:4d:78:cb:74:b5:6f:29:a8:2e:fa:c3:f2:42:b4:36: 97:3e:21:30:e7:7f:16:91:b1:b5:87:fe:6f:c7:dd:2b:40:f3: fe:fe:4c:ad -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt3WWeX0l/GFtxkxXIW1FPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDM5Zjc0MTY4NmRhMTFlNzlhZTdjNWU0ODZhYTI5MDgwOGNiMWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHFZJJ3ZOI1oS+bvAPkkvjTaNy5t HU71E+0XlY5UY3Z8LB4x4LlILMld14ks6jshRJEd+BsmE3J0N5FxDx+6tl9C4txy WqmwJqj3cBDVj5/ixfCgPptCRdeBe3BFW8HiBdje++l3nZQEEPqvSp+qAmrspbyi komZxmxrahKvCfxaxvgM82NcoBcVwKKOMVJr6+NNbLPfVDVp3oKelApn3Q9eXGdW 05GzF5fBBmi0ahGP4qFOIQ5TCYxHfOfmAjJiPWt5hpPblmADNT++jVscYO1b0k4n 5PE9Me44yZ1se3dcm/crXlVw6MgPGCD/qmCNPJVp+eJn/apBu+QW8vZTtwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFAA590FobaEeea58XkhqopCAjLG3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllLzNjNjE2 Zi0wMTM4LTRmZmItYWYxNy01NWY0MWZkZjBlNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvM2M2MTZm LTAxMzgtNGZmYi1hZjE3LTU1ZjQxZmRmMGU2My8xL0FEbjNRV2h0b1I1NXJueGVT R3Fpa0lDTXNiYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBwh8MAwQBwh9CMCQGCCsGAQUFBwEIAQH/BBUw E6ARMA8CAwMn6wIDAywCAgMDOGUwDQYJKoZIhvcNAQELBQADggEBAAgSMVvCIUeo IRdRrYoRILn9glA9Q+woWddhVm3ddSxWo1+kNocYE0tGCI5Bxgl8keMKC1u3tx19 onoH9Eu08qs5zwt1QyIuISUwavNkmBo67bnGtu6bx/t3V1jV3UibrjmIV+exSz73 oxA8GDXXF8h1KqzzuOEtZJMyh719kzWny737OCuSbNpwh+czl5xYOCGS6g2/TU+D jhp1UOIgkDveZejbMRg3SZNDAjzlWFEVVscarGQkX8qilzXFaohfoLpIAgMN1rOY PBK9OnAY86f7DcfVzXNUwBR2e014y3S1bymoLvrD8kK0Npc+ITDnfxaRsbWH/m/H 3StA8/7+TK0= -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:16 2026 by rpki-client