This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer File: e3hz-JwqmFMn6nmWJnQjp3UcYWk.cer (raw, json) Hash identifier: +jODAW4pWkCjiWxHWEiZNfhnj6k5ckDqB6o0KLO3NzQ= Subject key identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B08843371025A549157B21314A2B935F4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 13:47:20 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 193.36.128.0/22 IP: 194.169.150.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:84:33:71:02:5a:54:91:57:b2:13:14:a2:b9:35:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 13:47:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b7873f89c2a985327ea7996267423a7751c6169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c6:7c:fd:62:40:32:7c:21:75:74:a9:9f:9b: f7:e9:5e:96:34:8b:2c:c2:25:86:f6:4b:42:17:26: eb:3c:4b:39:4f:a8:17:92:05:f2:b4:3e:ff:51:db: 28:6f:85:35:20:a7:c6:7d:9d:4f:6c:ce:7f:f0:ad: 1d:6d:36:68:42:e5:5e:74:cc:3a:29:db:61:04:7a: 51:11:73:65:52:1f:36:ab:96:d9:65:2e:dd:39:bf: 3a:f6:19:55:40:b9:5b:f1:36:13:67:01:3c:73:5e: 5b:d5:e9:44:7f:a9:60:60:6a:26:91:d6:7b:06:95: 20:5b:dd:65:4b:4f:b2:1e:99:67:93:7b:0f:ce:7f: 82:2b:ad:25:82:b8:c8:2f:c6:f8:29:2d:6b:55:ae: 3b:01:9e:33:4f:46:22:02:67:47:c4:a7:25:a2:f9: e0:8b:28:65:c1:d5:37:aa:8e:29:b2:94:b9:30:60: 6a:b9:1c:8a:35:14:6c:e7:95:f6:5f:cd:6a:db:d0: b4:31:3c:dc:2d:41:09:0c:f5:d8:4b:56:07:e7:84: 03:66:fb:43:b4:da:ac:76:91:26:8a:d8:e2:9b:7a: ac:00:c5:b7:c3:17:08:ac:62:aa:1c:02:1b:04:96: d6:55:6b:ac:b1:9b:f3:3d:28:f8:3a:66:e6:d3:f2: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:78:73:F8:9C:2A:98:53:27:EA:79:96:26:74:23:A7:75:1C:61:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6334ae-8661-4b1c-8430-9b9df443c863/1/e3hz-JwqmFMn6nmWJnQjp3UcYWk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.128.0/22 194.169.150.0/23 Signature Algorithm: sha256WithRSAEncryption 86:1e:87:9c:1e:bf:e4:29:0d:a6:dc:ea:f8:97:68:27:6a:c4: 94:56:57:49:64:99:82:60:b1:74:bc:a9:12:89:af:d1:84:6f: 26:57:27:5b:79:de:bf:08:f3:84:6f:40:82:7d:4f:dc:d6:73: 8b:24:d6:ea:0b:4d:7e:55:c5:d6:a4:12:09:b8:1f:39:74:2a: ba:d9:ce:9f:be:15:b5:e5:62:80:12:0c:2c:73:55:3a:32:b4: fd:37:2b:88:7f:88:46:e7:46:ba:53:d5:af:01:3d:73:fd:c8: 31:d1:cd:ff:af:a6:4b:9f:6b:4b:3f:40:72:25:a6:86:84:05: 33:90:64:6c:d2:cf:8a:88:ff:61:01:f4:b1:de:32:62:c7:91: a0:ee:fe:40:c3:d4:f8:3e:41:90:fb:da:f4:62:27:e0:f9:5f: fd:5c:cc:9e:b5:01:54:0b:e5:e6:aa:3c:80:e3:3a:67:d7:8a: 74:c2:c5:9a:f8:33:4b:94:43:19:4a:d4:ec:43:c5:c5:57:09: 81:18:6d:40:13:25:2e:74:5f:08:83:dc:01:2a:c0:91:b7:a8: 7f:cc:32:a6:92:9a:fe:37:ca:1a:54:89:e0:1e:52:45:b4:ae: 6d:1c:60:f6:05:50:85:2c:d1:78:72:e5:d1:47:e7:ca:40:fc: cd:c5:d2:0a -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZsIhDNxAlpUkVeyExSiuTX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMTM0NzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yjc4NzNmODljMmE5ODUzMjdlYTc5OTYyNjc0MjNhNzc1MWM2MTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sZ8/WJAMnwhdXSpn5v36V6WNIss wiWG9ktCFybrPEs5T6gXkgXytD7/Udsob4U1IKfGfZ1PbM5/8K0dbTZoQuVedMw6 KdthBHpREXNlUh82q5bZZS7dOb869hlVQLlb8TYTZwE8c15b1elEf6lgYGomkdZ7 BpUgW91lS0+yHplnk3sPzn+CK60lgrjIL8b4KS1rVa47AZ4zT0YiAmdHxKclovng iyhlwdU3qo4pspS5MGBquRyKNRRs55X2X81q29C0MTzcLUEJDPXYS1YH54QDZvtD tNqsdpEmitjim3qsAMW3wxcIrGKqHAIbBJbWVWussZvzPSj4Ombm0/I3UwIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFHt4c/icKphTJ+p5liZ0I6d1HGFpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzYzMzRh ZS04NjYxLTRiMWMtODQzMC05YjlkZjQ0M2M4NjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNjMzNGFl LTg2NjEtNGIxYy04NDMwLTliOWRmNDQzYzg2My8xL2UzaHotSndxbUZNbjZubVdK blFqcDNVY1lXay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCwSSAAwQBwqmWMA0GCSqGSIb3DQEBCwUAA4IB AQCGHoecHr/kKQ2m3Or4l2gnasSUVldJZJmCYLF0vKkSia/RhG8mVydbed6/CPOE b0CCfU/c1nOLJNbqC01+VcXWpBIJuB85dCq62c6fvhW15WKAEgwsc1U6MrT9NyuI f4hG50a6U9WvAT1z/cgx0c3/r6ZLn2tLP0ByJaaGhAUzkGRs0s+KiP9hAfSx3jJi x5Gg7v5Aw9T4PkGQ+9r0Yifg+V/9XMyetQFUC+XmqjyA4zpn14p0wsWa+DNLlEMZ StTsQ8XFVwmBGG1AEyUudF8Ig9wBKsCRt6h/zDKmkpr+N8oaVIngHlJFtK5tHGD2 BVCFLNF4cuXRR+fKQPzNxdIK -----END CERTIFICATE-----Generated at Sat Dec 20 18:13:31 2025 by rpki-client