This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer File: Fd3Uydwj-sNVdPzitClDmK3YUhw.cer (raw, json) Hash identifier: DZX+SD3LSIBHgEFg74q5kKtjgqgnvDtcthhsJ9ooisA= Subject key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834C01600F359D8D2E034FCC3F68FAA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.164.120.0/22 IP: 185.183.212.0/22 IP: 185.221.96.0/22 IP: 2a0b:3400::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c0:16:00:f3:59:d8:d2:e0:34:fc:c3:f6:8f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15ddd4c9dc23fac35574fce2b4294398add8521c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b0:92:51:70:88:35:b4:63:b0:a1:d4:86:8b: 92:11:80:b2:b6:37:66:01:f9:ad:1c:c9:2e:45:63: 63:80:f8:d9:e2:7b:41:69:07:3f:23:07:57:9a:09: 85:c9:bd:ff:92:a7:fc:cc:e8:c5:04:4b:1f:62:7e: 6e:f0:50:8b:5d:31:8d:ec:11:e9:16:a9:1c:8b:27: c8:92:51:84:18:b1:b0:d8:9c:68:da:fe:20:bd:59: ba:88:0a:8f:46:cd:f2:3e:c1:9e:c1:fa:ea:26:78: 32:19:02:3e:2b:df:a0:2d:f3:aa:24:18:7e:98:1b: 69:5c:67:5a:61:5f:20:23:1f:8c:02:93:6f:51:6b: 0c:e8:6d:03:fd:81:3b:a7:88:66:8d:86:42:be:e9: 3d:42:37:e4:fb:69:c6:36:6d:7d:33:f3:58:53:02: c8:3f:f6:7c:6e:42:85:ac:c5:15:2d:e6:29:8e:57: 25:e9:1e:19:fb:4c:82:34:d1:46:ea:89:bb:5c:a5: 51:de:40:3b:1d:46:7b:c9:74:70:56:ac:6c:c3:26: 06:c8:3c:73:8c:a6:80:4e:12:78:68:9f:58:4a:f9: 38:2e:cd:eb:f4:c8:c9:58:75:d3:65:e6:af:cb:32: f3:d8:98:60:c5:4c:d3:f7:30:37:c1:7f:98:fb:d6: 60:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.120.0/22 185.183.212.0/22 185.221.96.0/22 IPv6: 2a0b:3400::/29 Signature Algorithm: sha256WithRSAEncryption 08:df:42:ad:23:2f:6c:a4:58:cb:15:cd:10:08:4d:62:6c:f3: bb:37:6a:72:2f:db:aa:2d:a4:0f:57:d6:03:22:66:30:18:5a: 8c:63:a6:46:25:a5:f8:ba:71:47:f9:5a:a5:94:17:ab:46:65: 9d:e4:f1:e5:a8:65:de:c0:2f:7c:6d:e2:9f:ff:52:df:36:f9: f0:bb:52:be:0a:2b:57:85:f0:1a:03:cf:07:3e:b7:ea:72:a6: f6:31:da:eb:67:88:7a:ac:08:26:da:19:f0:86:bc:70:48:80: 16:de:2b:f5:a8:79:89:ae:15:03:78:c6:99:c9:fc:4c:31:f7: 8b:d7:f7:57:8f:55:19:91:88:83:69:3a:79:a2:d2:d7:08:33: ca:5c:35:ba:8c:d3:ee:5c:9b:7d:45:17:09:56:3a:62:50:d7: 11:3c:7c:b6:6f:89:29:87:38:5d:6b:8b:3b:eb:41:4f:ab:b7: da:30:a7:e9:c7:d3:54:b3:01:51:a9:37:ff:43:8c:11:e1:ab: 7d:25:5e:1f:30:cf:06:72:24:9c:0f:47:e3:15:95:61:82:90: eb:93:f0:c7:46:74:64:6a:3c:47:92:af:e7:fd:77:a2:fd:ad: 98:1d:c6:e1:24:18:91:97:88:e4:5c:e6:77:a1:28:6a:93:6a: ae:3f:3a:55 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NMAWAPNZ2NLgNPzD9o+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWRkZDRjOWRjMjNmYWMzNTU3NGZjZTJiNDI5NDM5OGFkZDg1MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibCSUXCINbRjsKHUhouSEYCytjdm AfmtHMkuRWNjgPjZ4ntBaQc/IwdXmgmFyb3/kqf8zOjFBEsfYn5u8FCLXTGN7BHp FqkciyfIklGEGLGw2Jxo2v4gvVm6iAqPRs3yPsGewfrqJngyGQI+K9+gLfOqJBh+ mBtpXGdaYV8gIx+MApNvUWsM6G0D/YE7p4hmjYZCvuk9Qjfk+2nGNm19M/NYUwLI P/Z8bkKFrMUVLeYpjlcl6R4Z+0yCNNFG6om7XKVR3kA7HUZ7yXRwVqxswyYGyDxz jKaAThJ4aJ9YSvk4Ls3r9MjJWHXTZeavyzLz2JhgxUzT9zA3wX+Y+9ZgaQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFBXd1MncI/rDVXT84rQpQ5it2FIcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzM1ODI1 My00MWU4LTRjMTMtYmZhYS1jYjNjZDA0MDRhYjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvMzU4MjUz LTQxZTgtNGMxMy1iZmFhLWNiM2NkMDQwNGFiNS8xL0ZkM1V5ZHdqLXNOVmRQeml0 Q2xEbUszWVVody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCuaR4AwQCubfUAwQCud1gMA0EAgACMAcDBQMq CzQAMA0GCSqGSIb3DQEBCwUAA4IBAQAI30KtIy9spFjLFc0QCE1ibPO7N2pyL9uq LaQPV9YDImYwGFqMY6ZGJaX4unFH+VqllBerRmWd5PHlqGXewC98beKf/1LfNvnw u1K+CitXhfAaA88HPrfqcqb2MdrrZ4h6rAgm2hnwhrxwSIAW3iv1qHmJrhUDeMaZ yfxMMfeL1/dXj1UZkYiDaTp5otLXCDPKXDW6jNPuXJt9RRcJVjpiUNcRPHy2b4kp hzhda4s760FPq7faMKfpx9NUswFRqTf/Q4wR4at9JV4fMM8GciScD0fjFZVhgpDr k/DHRnRkajxHkq/n/Xei/a2YHcbhJBiRl4jkXOZ3oShqk2quPzpV -----END CERTIFICATE-----Generated at Tue Jan 20 01:54:25 2026 by rpki-client