This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer File: cT-D3uktjT4o1zYt_HGHVT2Ix1w.cer (raw, json) Hash identifier: JX0HXDhbQ/uYCMeTdEr4ZKQlvV9W9T4ZGgCM3y4zMzo= Subject key identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15112419D48AE9E48A04A99CF59C9C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.110.138.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:11:24:19:d4:8a:e9:e4:8a:04:a9:9c:f5:9c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=713f83dee92d8d3e28d7362dfc7187553d88c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:62:e3:67:bb:f8:73:9a:c0:6a:dc:57:c3: bf:4b:5d:6e:cc:45:17:3a:4c:22:ce:83:fb:32:53: 71:09:46:46:52:77:0a:f2:5d:09:2b:9e:79:09:35: d0:b5:4c:67:ff:6d:96:a5:c2:d6:ff:75:a7:fb:45: b1:eb:f4:7c:c6:69:c3:2d:0b:6d:8f:4e:23:f5:14: 84:6d:5e:90:0d:89:e2:51:9a:a4:50:94:fb:66:43: b8:cc:89:9c:a0:24:1b:7c:bc:c7:a0:eb:b2:af:4a: 20:29:3b:32:a1:c0:3d:65:80:42:c6:9e:54:17:6a: 9b:a8:d5:c7:9e:34:71:90:e0:27:64:43:2e:da:f9: c8:61:a2:98:f4:7d:80:a7:75:25:ec:d3:86:81:8d: 46:5b:bf:05:7e:3e:58:24:cc:5d:3b:5f:e7:02:a5: e8:97:9b:14:26:4f:dd:cc:d2:82:d3:af:73:e1:dc: ad:98:d1:6a:e5:34:64:99:e4:38:24:ae:dd:0c:e0: f7:d9:4e:c8:f4:90:db:ca:da:76:2a:cc:ba:11:45: d9:c1:23:bb:2c:0d:5d:b0:14:5a:90:83:bd:a1:14: 15:c8:1f:93:f7:1c:23:0b:a9:23:bc:cf:a2:0d:50: 19:2f:23:a2:f6:41:8e:37:fd:82:22:91:35:d1:15: fa:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3F:83:DE:E9:2D:8D:3E:28:D7:36:2D:FC:71:87:55:3D:88:C7:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1331cf-b3f0-47d9-9e40-7914383363f7/1/cT-D3uktjT4o1zYt_HGHVT2Ix1w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.138.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:6d:d6:c5:45:de:be:01:33:d1:a1:7c:3b:cd:e5:53:27:3e: 18:99:2f:15:76:ea:80:94:4c:67:bd:a8:cb:12:f1:90:ae:b8: f5:40:1f:9e:8c:34:0e:55:ee:ba:d9:1a:41:a2:24:81:ca:50: 35:3b:7f:af:da:7c:2a:a5:8d:88:b7:7c:f5:82:a5:1c:e7:f7: a5:f0:e1:94:f9:b5:c8:46:38:55:87:61:09:58:e1:d0:ee:73: d1:ed:23:f1:b3:ed:48:30:2a:fb:95:bd:01:6d:c9:62:93:a4: c5:77:e3:9d:ac:1c:32:6c:75:86:0c:29:29:4e:a8:3a:15:34: 54:c7:41:a4:c8:6b:c8:4e:68:bd:86:13:f9:5f:26:da:20:7e: 7c:70:7c:64:bf:a7:63:ba:32:74:3b:64:4a:40:da:73:50:57: 7e:00:0d:e4:e5:d2:65:93:fe:10:d0:8b:03:2e:a8:f2:44:a3: b0:3d:aa:18:7e:9f:54:72:9d:65:f0:37:38:d0:7e:23:c6:65: ec:1e:5b:2a:6d:2d:c2:6b:22:10:00:af:25:ba:7e:69:8c:6e: cb:6b:75:8f:6b:da:59:21:81:bd:39:bf:f5:1c:81:0c:97:51: 55:c6:ce:6f:16:eb:f0:6e:a8:67:08:09:4e:ec:b6:f2:cd:5f: 27:7a:d3:bf -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt/FREkGdSK6eSKBKmc9ZycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTNmODNkZWU5MmQ4ZDNlMjhkNzM2MmRmYzcxODc1NTNkODhjNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf5i42e7+HOawGrcV8O/S11uzEUX OkwizoP7MlNxCUZGUncK8l0JK555CTXQtUxn/22WpcLW/3Wn+0Wx6/R8xmnDLQtt j04j9RSEbV6QDYniUZqkUJT7ZkO4zImcoCQbfLzHoOuyr0ogKTsyocA9ZYBCxp5U F2qbqNXHnjRxkOAnZEMu2vnIYaKY9H2Ap3Ul7NOGgY1GW78Ffj5YJMxdO1/nAqXo l5sUJk/dzNKC069z4dytmNFq5TRkmeQ4JK7dDOD32U7I9JDbytp2Ksy6EUXZwSO7 LA1dsBRakIO9oRQVyB+T9xwjC6kjvM+iDVAZLyOi9kGON/2CIpE10RX6nQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHE/g97pLY0+KNc2Lfxxh1U9iMdcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzEzMzFj Zi1iM2YwLTQ3ZDktOWU0MC03OTE0MzgzMzYzZjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvMTMzMWNm LWIzZjAtNDdkOS05ZTQwLTc5MTQzODMzNjNmNy8xL2NULUQzdWt0alQ0bzF6WXRf SEdIVlQySXgxdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwW6KMA0GCSqGSIb3DQEBCwUAA4IBAQCMbdbF Rd6+ATPRoXw7zeVTJz4YmS8VduqAlExnvajLEvGQrrj1QB+ejDQOVe662RpBoiSB ylA1O3+v2nwqpY2It3z1gqUc5/el8OGU+bXIRjhVh2EJWOHQ7nPR7SPxs+1IMCr7 lb0Bbclik6TFd+OdrBwybHWGDCkpTqg6FTRUx0GkyGvITmi9hhP5XybaIH58cHxk v6djujJ0O2RKQNpzUFd+AA3k5dJlk/4Q0IsDLqjyRKOwPaoYfp9Ucp1l8Dc40H4j xmXsHlsqbS3CayIQAK8lun5pjG7La3WPa9pZIYG9Ob/1HIEMl1FVxs5vFuvwbqhn CAlO7LbyzV8netO/ -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:06 2026 by rpki-client