This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer File: dE3Tr9fM584AqerGfgvKmb63Kao.cer (raw, json) Hash identifier: CZZwPS6B+x5Qb88zCido4gIa/I/4+0+6ZBO+oAi0/h8= Subject key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E3903B168ECFC5E9D8EA2EAF9A46E5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.81.84.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:03:b1:68:ec:fc:5e:9d:8e:a2:ea:f9:a4:6e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9e:71:79:b5:76:5a:30:49:e3:61:b4:8c:6c: ea:d1:ab:4f:12:06:1e:9e:0d:3a:fc:14:42:84:cc: 07:07:b6:d8:75:85:da:34:a7:ca:dc:dc:41:77:98: 0d:88:99:3f:0a:bb:b0:55:83:a2:4d:cc:e9:91:3d: 65:18:cd:84:e1:64:44:d3:ae:6e:18:9b:82:19:12: ad:df:a1:bd:d1:79:fa:47:10:0c:dd:75:53:0c:44: 8d:c3:1e:3a:48:69:ad:a8:27:4f:6f:ff:31:e3:ec: 70:fe:1c:cd:80:ee:92:dd:20:11:25:af:37:e6:38: 2d:5c:fd:df:15:0d:2c:90:56:71:78:34:4a:51:9a: fe:2d:41:77:39:90:10:f6:54:5a:c8:4f:1b:14:e5: 1c:02:18:2d:e9:a0:db:d7:68:00:ae:79:ba:2f:93: 30:20:1e:fc:2e:2a:4c:69:77:4c:3c:7b:66:24:81: 5d:da:d2:3b:37:26:35:e6:62:17:0f:2d:e3:88:30: 46:8e:4c:9f:0f:a8:13:f4:74:c8:95:68:92:71:2d: 45:32:1c:19:39:7d:d1:cd:8f:1e:27:11:51:a9:c2: 64:33:a9:68:f6:54:3d:ee:d0:a9:b8:53:6e:29:05: 61:4c:9d:e4:4f:ed:e9:74:1d:e8:e1:58:2a:a3:cc: 19:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.84.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:28:2b:42:94:88:78:e6:78:54:f8:b6:ee:91:21:b3:78:91: a4:87:e4:f2:a3:e0:c6:5b:dc:3a:a1:47:af:9a:ca:f3:20:91: 84:af:2f:8a:fd:95:4c:a3:e1:49:de:c1:2e:4e:41:cc:5e:41: 9f:9b:c0:90:b1:e1:99:4b:4b:e9:be:6f:65:86:7b:36:84:22: e6:68:5a:01:57:50:a7:a5:0f:e0:01:87:a8:8a:c8:56:cc:49: 3c:5c:08:a2:80:59:73:cf:b9:48:c6:ff:e0:40:f2:5f:11:57: 4c:14:b8:63:67:ec:1f:ac:a7:03:c7:37:29:34:26:c0:13:26: 14:22:06:98:3d:a8:99:61:b9:1a:ff:3c:28:b5:ac:0a:48:09: 7b:25:bc:a1:0b:19:4e:67:73:84:c7:18:95:8b:67:ff:55:9b: 37:d2:61:20:95:92:58:85:2a:4e:53:53:a6:22:18:e4:fd:36: d6:5a:95:fb:fa:e7:48:48:00:79:93:b0:d9:88:17:35:c4:3d: ae:26:69:31:87:be:82:e7:31:3f:d2:57:25:dd:3b:be:aa:c3: 54:d8:c7:cd:09:01:f6:d2:78:11:31:ba:94:b1:6e:11:01:dc: a2:ad:c0:7b:54:36:dd:ca:52:2a:e0:3f:4a:f2:8b:37:b5:17: 0b:a1:87:58 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+OQOxaOz8Xp2Oour5pG5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDRkZDNhZmQ3Y2NlN2NlMDBhOWVhYzY3ZTBiY2E5OWJlYjcyOWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p5xebV2WjBJ42G0jGzq0atPEgYe ng06/BRChMwHB7bYdYXaNKfK3NxBd5gNiJk/CruwVYOiTczpkT1lGM2E4WRE065u GJuCGRKt36G90Xn6RxAM3XVTDESNwx46SGmtqCdPb/8x4+xw/hzNgO6S3SARJa83 5jgtXP3fFQ0skFZxeDRKUZr+LUF3OZAQ9lRayE8bFOUcAhgt6aDb12gArnm6L5Mw IB78LipMaXdMPHtmJIFd2tI7NyY15mIXDy3jiDBGjkyfD6gT9HTIlWiScS1FMhwZ OX3RzY8eJxFRqcJkM6lo9lQ97tCpuFNuKQVhTJ3kT+3pdB3o4Vgqo8wZ8QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHRN06/XzOfOAKnqxn4Lypm+tymqMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4LzJlYTU5 NC1hMmNhLTRmZmEtODllZS04OTIxYjA1NTllOTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvMmVhNTk0 LWEyY2EtNGZmYS04OWVlLTg5MjFiMDU1OWU5MC8xL2RFM1RyOWZNNTg0QXFlckdm Z3ZLbWI2M0thby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLVFUMA0GCSqGSIb3DQEBCwUAA4IBAQAqKCtC lIh45nhU+LbukSGzeJGkh+Tyo+DGW9w6oUevmsrzIJGEry+K/ZVMo+FJ3sEuTkHM XkGfm8CQseGZS0vpvm9lhns2hCLmaFoBV1CnpQ/gAYeoishWzEk8XAiigFlzz7lI xv/gQPJfEVdMFLhjZ+wfrKcDxzcpNCbAEyYUIgaYPaiZYbka/zwotawKSAl7Jbyh CxlOZ3OExxiVi2f/VZs30mEglZJYhSpOU1OmIhjk/TbWWpX7+udISAB5k7DZiBc1 xD2uJmkxh76C5zE/0lcl3Tu+qsNU2MfNCQH20ngRMbqUsW4RAdyircB7VDbdylIq 4D9K8os3tRcLoYdY -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:14 2026 by rpki-client