This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer (raw, json) Hash identifier: Sdt9xANoDFguG2qI1BKSbK2f/It5cX8E1Dvl3H4LNG4= Subject key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC8A9399920D51C4F118923FC423136 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215395 IP: 195.78.128.0/19 IP: 2a14:39c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a9:39:99:20:d5:1c:4f:11:89:23:fc:42:31:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8775e6408b8e05aa914b874635a47b7b820c6c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:89:63:4e:6a:8c:a9:61:7f:0e:aa:dc:c2: a6:c2:06:6f:69:9f:93:43:3d:24:2b:4d:4e:b2:21: 81:a3:e8:d3:ed:7e:4b:b7:48:3f:7f:8e:04:66:1f: 10:fb:f6:36:6e:ee:88:85:96:a8:e1:6b:ef:3f:f7: ea:16:db:bf:84:13:e2:44:ad:96:d4:8e:59:c4:7a: 50:03:70:c3:a7:fc:c3:aa:18:66:10:16:94:a0:93: 87:99:84:f2:6a:c6:e7:f9:bc:60:e3:8a:e3:66:9b: af:98:4c:22:88:59:7d:36:fd:e9:9c:58:16:50:62: 5d:ce:4b:d9:60:e5:ba:82:37:fc:8b:08:b5:8a:48: 4d:7f:a3:02:a9:3f:5f:2a:21:f4:4e:55:8e:ed:7e: ab:18:bd:ba:e8:64:22:45:57:5f:b9:bb:76:1b:28: e2:34:e8:c1:f1:b1:c0:82:1f:91:82:32:c0:3f:c1: db:fb:bf:29:6e:5f:a6:f9:44:31:99:69:3d:fc:a0: 8e:61:fc:72:15:55:77:30:63:01:9e:6f:1e:f1:56: aa:c7:b4:9f:0f:f0:44:a3:b9:72:5b:61:dc:ac:17: 7f:d1:a6:b1:7c:11:82:3f:cc:5b:b9:35:1d:b3:0a: 94:ec:15:83:5a:10:28:ac:19:10:a4:b9:5a:2e:e7: 1d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.128.0/19 IPv6: 2a14:39c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215395 Signature Algorithm: sha256WithRSAEncryption 8f:21:b2:41:aa:1b:d6:69:0e:64:bd:bc:d2:dc:7e:d7:16:7c: 8c:bc:d9:5b:0b:3c:bd:c7:a4:fb:10:98:37:cc:67:f8:c4:1d: bc:fc:3b:9a:0c:02:01:af:36:12:05:ac:1b:17:fa:4f:35:a4: b3:c5:66:47:98:9a:7b:dd:1a:24:17:99:5c:0d:d7:8a:6a:03: 9a:90:06:7c:d0:5e:b8:6d:c5:94:96:83:97:82:cf:6f:cf:d0: 52:c0:ba:3a:42:79:e9:20:54:57:12:4a:e3:4b:e8:19:2b:76: 7d:08:54:b6:ed:ce:ee:ca:61:a0:41:90:fc:c6:4f:10:d7:c2: 18:a9:c6:58:dd:39:41:08:3f:cf:c7:db:1a:dc:38:81:53:43: 33:28:7e:bd:7a:13:7e:52:05:51:2f:96:70:b1:e4:f2:88:fc: 64:c4:91:3b:4b:5c:8b:11:35:a8:12:b0:ae:4a:af:72:19:66: d6:df:3b:a6:62:3c:cd:c1:33:a3:fc:e0:5f:21:6a:2a:5a:01: 33:ff:07:4a:79:d9:4c:e9:24:ca:16:30:33:f8:4c:2e:b7:83: 3f:04:30:cd:ad:7e:17:8b:8c:0a:79:46:7a:88:82:a0:cc:bf: ee:c5:80:de:16:57:73:f9:77:1c:c5:90:aa:48:89:b4:d1:11: 0f:94:96:f5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6yKk5mSDVHE8RiSP8QjE2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzc1ZTY0MDhiOGUwNWFhOTE0Yjg3NDYzNWE0N2I3YjgyMGM2YzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujuJY05qjKlhfw6q3MKmwgZvaZ+T Qz0kK01OsiGBo+jT7X5Lt0g/f44EZh8Q+/Y2bu6IhZao4WvvP/fqFtu/hBPiRK2W 1I5ZxHpQA3DDp/zDqhhmEBaUoJOHmYTyasbn+bxg44rjZpuvmEwiiFl9Nv3pnFgW UGJdzkvZYOW6gjf8iwi1ikhNf6MCqT9fKiH0TlWO7X6rGL266GQiRVdfubt2Gyji NOjB8bHAgh+RgjLAP8Hb+78pbl+m+UQxmWk9/KCOYfxyFVV3MGMBnm8e8Vaqx7Sf D/BEo7lyW2HcrBd/0aaxfBGCP8xbuTUdswqU7BWDWhAorBkQpLlaLucdIQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFId15kCLjgWqkUuHRjWke3uCDGwyMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y2LzM2ZTA2 NS1hMWY2LTRlMTQtYjJkNy02MWU1NGNmYzJhYmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvMzZlMDY1 LWExZjYtNGUxNC1iMmQ3LTYxZTU0Y2ZjMmFiYy8xL2gzWG1RSXVPQmFxUlM0ZEdO YVI3ZTRJTWJESS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFw06AMA0EAgACMAcDBQAqFDnAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNJYzANBgkqhkiG9w0BAQsFAAOCAQEAjyGyQaob1mkO ZL280tx+1xZ8jLzZWws8vcek+xCYN8xn+MQdvPw7mgwCAa82EgWsGxf6TzWks8Vm R5iae90aJBeZXA3XimoDmpAGfNBeuG3FlJaDl4LPb8/QUsC6OkJ56SBUVxJK40vo GSt2fQhUtu3O7sphoEGQ/MZPENfCGKnGWN05QQg/z8fbGtw4gVNDMyh+vXoTflIF US+WcLHk8oj8ZMSRO0tcixE1qBKwrkqvchlm1t87pmI8zcEzo/zgXyFqKloBM/8H SnnZTOkkyhYwM/hMLreDPwQwza1+F4uMCnlGeoiCoMy/7sWA3hZXc/l3HMWQqkiJ tNERD5SW9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 15:03:55 2026 by rpki-client