This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer File: G3jb8-hZWC_R7aLy3N5UIilRRvE.cer (raw, json) Hash identifier: mIF2MexvXmsyyXgTL6zmGCswmFJDTKPpGm1ZlgZnAoM= Subject key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F82F98D9B4BA189D83CB7005F713EC2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.172.128.0/20 IP: 185.74.136.0/22 IP: 2a00:d4e0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:f9:8d:9b:4b:a1:89:d8:3c:b7:00:5f:71:3e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:a3:2d:ae:22:3f:07:48:9c:4f:53:95:1c: 75:3e:26:ee:73:aa:4d:7e:60:4e:51:28:c4:6b:73: a5:99:7e:34:55:0a:55:66:e5:2d:de:0d:46:8a:54: 77:97:e2:7e:15:65:08:b7:af:d7:27:8c:fa:1c:41: 2a:d3:05:52:b1:05:6b:66:85:02:b2:ab:40:33:0a: c8:96:8d:fe:c4:14:24:5e:82:da:0c:47:1a:99:6e: 5a:51:a4:76:88:dd:ca:99:4a:b1:b5:59:94:53:52: 4f:cc:17:36:b7:fa:6f:15:91:23:2a:80:bb:15:c8: b0:76:86:af:37:36:0e:33:fc:04:01:8d:55:2b:9e: 11:65:3e:ea:77:98:39:e2:da:05:a5:6d:c2:9b:9b: 54:7e:bf:f7:46:6f:0f:6e:d2:8a:bd:5f:cc:aa:12: a7:1c:cf:7a:b0:57:aa:59:39:ad:27:45:7a:d1:20: ba:81:86:0f:55:b4:72:1e:cb:b5:50:f2:8d:63:f7: d4:59:3c:11:83:c5:ca:c4:98:2b:e5:ef:66:36:7b: c5:9d:35:52:2b:74:15:87:9c:af:12:51:0b:ec:9f: b5:e4:ad:f4:b9:d2:83:ef:3a:66:e3:3f:ca:7a:1e: 9f:42:58:db:39:c3:04:21:fb:4e:a7:e3:3a:3a:5a: d8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.172.128.0/20 185.74.136.0/22 IPv6: 2a00:d4e0::/29 Signature Algorithm: sha256WithRSAEncryption 4c:ce:25:4d:1c:08:0e:9c:30:ac:90:f3:ef:49:70:c8:23:d2: ac:23:5c:b3:83:d9:d0:df:f7:f4:ea:0a:b4:10:3b:e6:1d:18: ec:ac:1f:9e:78:90:9b:ea:51:b1:7f:50:ac:89:a4:13:b0:4d: 05:28:bb:b2:0f:8a:0d:da:ed:36:9f:91:e5:76:1c:57:9b:7e: ae:50:51:f2:dd:a5:65:09:99:26:de:d7:9d:61:65:4c:ad:73: b2:ec:d1:48:36:f5:fd:b2:ad:62:17:d4:81:53:6e:a3:e1:a7: 7e:b0:b4:1f:c6:3a:d1:dc:02:60:11:88:c3:07:70:7a:11:ab: e6:37:cd:63:64:bb:d2:ab:4d:74:a1:1c:47:3c:d7:fe:ab:fa: 8f:72:61:8b:80:07:51:bd:95:87:38:e1:30:19:82:27:cb:c9: 5e:ab:b7:3b:53:2c:82:30:85:07:61:49:0b:68:7e:15:24:1f: 29:ea:10:9d:a5:c9:fb:b4:8b:5b:e0:00:c6:f4:b6:63:c9:3a: 60:d4:2f:8a:db:a6:ea:f3:52:39:2c:09:0f:59:0b:d5:a6:90: 94:bf:3d:07:cf:e5:7c:1c:1d:92:dc:57:9d:f3:4d:45:ab:09: d4:3e:ff:f7:6b:c6:32:26:a6:82:10:24:0f:d9:ff:11:ad:48: 48:06:00:2e -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt/gvmNm0uhidg8twBfcT7CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjc4ZGJmM2U4NTk1ODJmZDFlZGEyZjJkY2RlNTQyMjI5NTE0NmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut6jLa4iPwdInE9TlRx1Pibuc6pN fmBOUSjEa3OlmX40VQpVZuUt3g1GilR3l+J+FWUIt6/XJ4z6HEEq0wVSsQVrZoUC sqtAMwrIlo3+xBQkXoLaDEcamW5aUaR2iN3KmUqxtVmUU1JPzBc2t/pvFZEjKoC7 FciwdoavNzYOM/wEAY1VK54RZT7qd5g54toFpW3Cm5tUfr/3Rm8PbtKKvV/MqhKn HM96sFeqWTmtJ0V60SC6gYYPVbRyHsu1UPKNY/fUWTwRg8XKxJgr5e9mNnvFnTVS K3QVh5yvElEL7J+15K30udKD7zpm4z/Keh6fQljbOcMEIftOp+M6OlrYNQIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFBt42/PoWVgv0e2i8tzeVCIpUUbxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzk5YjUz NS1jNDJiLTRlMDEtODc5My03MjIyOTQ3ODNlOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvOTliNTM1 LWM0MmItNGUwMS04NzkzLTcyMjI5NDc4M2U5ZS8xL0czamI4LWhaV0NfUjdhTHkz TjVVSWlsUlJ2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEBayAAwQCuUqIMA0EAgACMAcDBQMqANTgMA0G CSqGSIb3DQEBCwUAA4IBAQBMziVNHAgOnDCskPPvSXDII9KsI1yzg9nQ3/f06gq0 EDvmHRjsrB+eeJCb6lGxf1CsiaQTsE0FKLuyD4oN2u02n5HldhxXm36uUFHy3aVl CZkm3tedYWVMrXOy7NFINvX9sq1iF9SBU26j4ad+sLQfxjrR3AJgEYjDB3B6Eavm N81jZLvSq010oRxHPNf+q/qPcmGLgAdRvZWHOOEwGYIny8leq7c7UyyCMIUHYUkL aH4VJB8p6hCdpcn7tItb4ADG9LZjyTpg1C+K26bq81I5LAkPWQvVppCUvz0Hz+V8 HB2S3Fed801FqwnUPv/3a8YyJqaCECQP2f8RrUhIBgAu -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:14 2026 by rpki-client