This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R3QefHWNSAQTtfGwBgYRKX5EA28.cer File: R3QefHWNSAQTtfGwBgYRKX5EA28.cer (raw, json) Hash identifier: Qp8Ak2dwIWag55SmuWHKWhvcGaJTKfF7n5xGIbdlF+0= Subject key identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C126C97B5A292B37EF6C8038F9C04FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9017 IP: 176.117.63.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6c:97:b5:a2:92:b3:7e:f6:c8:03:8f:9c:04:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47741e7c758d480413b5f1b0060611297e44036f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:ac:96:38:9d:73:e4:05:37:9b:61:3d:5b: 58:af:fb:f3:e5:2d:18:ea:d7:df:2e:e0:5d:38:58: a0:73:ca:ba:d7:67:7e:97:fd:6c:2a:c5:8c:7a:d6: dc:e1:0e:df:eb:23:10:55:e2:9a:43:6a:dc:77:27: 74:6e:99:97:c6:a9:7d:cc:25:27:9d:62:8d:cc:87: d1:6a:7d:30:95:dc:bb:89:f5:a7:d7:03:3f:be:51: 38:12:09:83:b2:c9:b4:3b:9e:1c:03:c7:36:51:08: 45:41:41:25:c4:62:30:55:8e:d9:99:b2:bc:ea:d8: dc:04:bc:dc:d1:cf:3b:fd:ab:06:cc:12:59:1e:c1: b6:8f:de:e0:c8:eb:4c:ed:91:8d:11:f1:ed:2d:91: 5a:76:4c:73:f9:d8:40:64:8d:d7:2d:d0:ae:2e:f3: fd:b2:4b:0d:d1:53:bb:66:f8:73:cb:4b:c6:21:4a: e2:5a:21:05:65:ea:8a:b3:a9:b1:88:5c:64:21:0e: c7:96:5a:8a:21:67:18:58:df:b1:88:29:e7:7c:77: c7:ff:ab:f1:02:e1:98:b3:44:e8:ed:78:74:d3:de: c6:e0:a3:d6:93:3f:ac:84:bc:76:e5:a8:10:05:f7: 87:c9:4f:90:5f:e6:01:ca:15:90:84:b6:7d:3b:74: 57:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:74:1E:7C:75:8D:48:04:13:B5:F1:B0:06:06:11:29:7E:44:03:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/50294d-8cc5-49d3-9312-727b1b583eb6/1/R3QefHWNSAQTtfGwBgYRKX5EA28.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.63.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9017 Signature Algorithm: sha256WithRSAEncryption 37:54:65:fd:60:6c:39:f2:f0:e4:9d:73:f8:8c:d2:e9:0a:d6: 7e:a4:67:26:1d:f7:49:1e:d2:a7:78:00:d1:c4:d5:08:95:23: 98:57:d9:82:52:c4:2d:95:94:f4:f0:eb:e3:f1:76:b8:15:6c: 74:c5:23:f8:ee:72:39:52:60:1e:e3:dc:0e:ad:e6:54:28:e8: 21:08:58:1a:36:80:4d:d7:93:ec:1b:17:ee:7f:41:a3:fc:d9: 68:fa:4d:4b:da:45:54:bb:ac:6e:68:bf:ff:c5:2b:e5:9b:12: 98:c1:cf:c0:38:47:cb:12:24:ad:56:bb:06:ad:13:88:cd:d4: 88:44:5a:b8:b6:50:f3:9e:9e:b7:04:c9:cd:45:51:90:c9:9d: 5a:ea:86:db:ef:22:05:5b:47:34:cc:90:b2:66:ca:7e:4d:53: 51:bb:fd:7e:56:6d:89:46:2c:c3:12:68:1a:45:4e:5d:51:1f: 24:c2:8e:2f:b3:3a:4f:de:10:b9:a4:30:41:19:21:47:cf:1a: e2:9d:32:a4:07:77:bd:49:d2:4b:00:b7:c0:a8:20:f0:23:ed: 94:85:1c:a0:0f:00:4b:1d:e6:f4:1f:0f:73:c6:38:82:f2:c1: c6:7b:34:3d:37:02:17:26:de:46:e2:44:ea:19:1b:bd:2a:a6: 3f:f1:45:9b -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt8EmyXtaKSs372yAOPnAT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzc0MWU3Yzc1OGQ0ODA0MTNiNWYxYjAwNjA2MTEyOTdlNDQwMzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKOsljidc+QFN5thPVtYr/vz5S0Y 6tffLuBdOFigc8q612d+l/1sKsWMetbc4Q7f6yMQVeKaQ2rcdyd0bpmXxql9zCUn nWKNzIfRan0wldy7ifWn1wM/vlE4EgmDssm0O54cA8c2UQhFQUElxGIwVY7ZmbK8 6tjcBLzc0c87/asGzBJZHsG2j97gyOtM7ZGNEfHtLZFadkxz+dhAZI3XLdCuLvP9 sksN0VO7Zvhzy0vGIUriWiEFZeqKs6mxiFxkIQ7HllqKIWcYWN+xiCnnfHfH/6vx AuGYs0To7Xh0097G4KPWkz+shLx25agQBfeHyU+QX+YByhWQhLZ9O3RXVQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFEd0Hnx1jUgEE7XxsAYGESl+RANvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzUwMjk0 ZC04Y2M1LTQ5ZDMtOTMxMi03MjdiMWI1ODNlYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvNTAyOTRk LThjYzUtNDlkMy05MzEyLTcyN2IxYjU4M2ViNi8xL1IzUWVmSFdOU0FRVHRmR3dC Z1lSS1g1RUEyOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAsHU/MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AiM5MA0GCSqGSIb3DQEBCwUAA4IBAQA3VGX9YGw58vDknXP4jNLpCtZ+pGcmHfdJ HtKneADRxNUIlSOYV9mCUsQtlZT08Ovj8Xa4FWx0xSP47nI5UmAe49wOreZUKOgh CFgaNoBN15PsGxfuf0Gj/Nlo+k1L2kVUu6xuaL//xSvlmxKYwc/AOEfLEiStVrsG rROIzdSIRFq4tlDznp63BMnNRVGQyZ1a6obb7yIFW0c0zJCyZsp+TVNRu/1+Vm2J RizDEmgaRU5dUR8kwo4vszpP3hC5pDBBGSFHzxrinTKkB3e9SdJLALfAqCDwI+2U hRygDwBLHeb0Hw9zxjiC8sHGezQ9NwIXJt5G4kTqGRu9KqY/8UWb -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:54 2026 by rpki-client