This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer File: a3GzSTijGjS_WGag8914w4qsYRk.cer (raw, json) Hash identifier: Z42OhltiNlTEcnGssGYn6Map3xOmxKLvL8WW8dpZ5+M= Subject key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77595776F30AFAAB3B747B792A2AF4AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.14.84.0/22 IP: 2a03:9dc0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 13 Feb 2026 23:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:57:76:f3:0a:fa:ab:3b:74:7b:79:2a:2a:f4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:66:7f:5d:c3:0c:43:6f:f5:77:3c:ca:05: f4:a0:f3:d4:9a:b2:4a:61:12:d1:b8:93:6d:21:ff: ef:34:18:34:6e:08:98:21:4b:2e:34:37:05:bb:00: 95:c9:bd:6e:65:9f:4b:9d:e9:1d:5c:72:f7:c8:24: 90:e3:b9:bc:91:fa:32:0a:f5:32:22:c1:47:27:49: ee:90:b2:a6:74:88:f3:ae:f4:0b:8f:0d:e0:71:73: a5:55:14:76:0c:68:08:7e:56:87:69:ef:3b:b3:f6: 7c:3b:97:c3:6f:d7:41:74:01:cb:24:16:8e:02:f9: 38:fd:ba:24:ee:5a:27:a3:45:68:7b:fe:ae:1d:3b: 4f:c6:5a:a1:dc:fe:1c:1d:22:bb:bd:37:61:d0:1d: a0:49:dd:9e:ec:9d:68:c0:4e:36:7e:06:13:bc:8d: 89:b3:87:83:d1:91:4a:ff:42:f0:09:9d:78:29:4e: b8:ab:98:25:3d:87:f9:4f:36:78:1d:5a:45:12:e6: 27:cf:4d:ca:2a:3c:62:bd:67:69:cc:2f:de:60:f5: 55:df:df:6a:20:9f:a9:89:ed:61:4b:ef:ca:a0:7b: 1d:2f:b3:d3:e7:08:c9:fe:24:53:a2:3a:17:41:d8: 51:a0:9d:88:23:fd:dc:fa:65:be:90:75:02:31:1e: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.14.84.0/22 IPv6: 2a03:9dc0::/32 Signature Algorithm: sha256WithRSAEncryption 49:05:4b:38:0b:fe:c1:36:77:d5:55:ad:45:5f:78:c1:1d:96: 52:bf:c3:36:14:24:9b:bc:72:5c:05:cc:c8:5b:b8:3d:a1:1b: 4a:9f:fb:c1:0e:3f:11:ad:95:e3:65:59:9b:fe:45:ee:e7:a4: ee:b0:26:36:1d:ca:0b:cf:bd:33:d8:fe:b6:a3:8c:4d:a3:c9: a6:58:50:5f:99:4f:41:50:a3:99:00:b3:9b:cc:b8:c0:73:2b: ff:02:99:b5:b9:e3:25:f4:78:bf:22:2d:1d:7f:02:98:81:f7: b1:8c:fd:4f:d1:63:7d:21:e0:0d:e4:c9:ef:8f:e1:cf:73:72: 37:a3:cd:80:1c:78:69:fe:b9:18:6d:32:27:d9:d4:14:54:d7: 3a:85:23:db:f7:d8:e2:cc:d1:6e:99:a5:9f:35:9f:c1:3d:ab: 94:8a:23:2c:13:d7:f9:07:9a:85:d9:8c:6a:8d:97:0c:bb:34: f9:f3:52:cb:88:1e:2c:24:1d:fe:36:9f:50:b2:11:de:08:59: 09:cc:d3:e8:d1:16:41:7f:7d:5e:12:d1:68:ca:70:28:1d:28: ee:3a:b1:58:2f:1c:21:ae:db:4b:00:39:7f:18:2a:ea:83:f9: e6:81:60:5f:68:54:f5:7d:e9:ca:b2:5b:27:43:50:76:36:19: ab:fc:10:26 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WVd28wr6qzt0e3kqKvSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjcxYjM0OTM4YTMxYTM0YmY1ODY2YTBmM2RkNzhjMzhhYWM2MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8dmf13DDENv9Xc8ygX0oPPUmrJK YRLRuJNtIf/vNBg0bgiYIUsuNDcFuwCVyb1uZZ9LnekdXHL3yCSQ47m8kfoyCvUy IsFHJ0nukLKmdIjzrvQLjw3gcXOlVRR2DGgIflaHae87s/Z8O5fDb9dBdAHLJBaO Avk4/bok7lono0Voe/6uHTtPxlqh3P4cHSK7vTdh0B2gSd2e7J1owE42fgYTvI2J s4eD0ZFK/0LwCZ14KU64q5glPYf5TzZ4HVpFEuYnz03KKjxivWdpzC/eYPVV399q IJ+pie1hS+/KoHsdL7PT5wjJ/iRTojoXQdhRoJ2II/3c+mW+kHUCMR4pTQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGtxs0k4oxo0v1hmoPPdeMOKrGEZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzczMTAz NC01ZmQ1LTQ5MmItOWRhZi02ZjU2ZTFmYTAyMzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvNzMxMDM0 LTVmZDUtNDkyYi05ZGFmLTZmNTZlMWZhMDIzMC8xL2EzR3pTVGlqR2pTX1dHYWc4 OTE0dzRxc1lSay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQ5UMA0EAgACMAcDBQAqA53AMA0GCSqGSIb3 DQEBCwUAA4IBAQBJBUs4C/7BNnfVVa1FX3jBHZZSv8M2FCSbvHJcBczIW7g9oRtK n/vBDj8RrZXjZVmb/kXu56TusCY2HcoLz70z2P62o4xNo8mmWFBfmU9BUKOZALOb zLjAcyv/Apm1ueMl9Hi/Ii0dfwKYgfexjP1P0WN9IeAN5Mnvj+HPc3I3o82AHHhp /rkYbTIn2dQUVNc6hSPb99jizNFumaWfNZ/BPauUiiMsE9f5B5qF2YxqjZcMuzT5 81LLiB4sJB3+Np9QshHeCFkJzNPo0RZBf31eEtFoynAoHSjuOrFYLxwhrttLADl/ GCrqg/nmgWBfaFT1fenKslsnQ1B2Nhmr/BAm -----END CERTIFICATE-----Generated at Fri Feb 13 09:56:05 2026 by rpki-client