This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer File: h3itgWjgnPktTgSYJX-OnOq_BpI.cer (raw, json) Hash identifier: 4bO4O7Zusu48vvN4/QwYlmqc2pEYRB0pN0waY2D+3eM= Subject key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8429FB32F7F382CFC3C72D801C9EDC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34535 AS: 41609 AS: 49549 AS: 51961 AS: 60057 IP: 89.107.10.0/24 IP: 146.19.128.0/24 IP: 146.19.207.0/24 IP: 176.126.103.0/24 IP: 178.250.184.0/21 IP: 193.0.227.0/24 IP: 193.0.229.0 -- 193.0.230.255 IP: 193.0.239.0/24 IP: 193.163.203.0/24 IP: 217.114.43.0/24 IP: 217.119.129.0/24 IP: 2a00:4080::/29 IP: 2a04:1bc0::/29 IP: 2a0f:cdc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:29:fb:32:f7:f3:82:cf:c3:c7:2d:80:1c:9e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:8f:34:4b:25:ed:0e:21:27:0d:8f:66:6b: 77:6b:90:f0:97:f7:78:ee:81:7a:74:46:53:f6:bc: cf:b7:9f:5c:f7:50:9c:86:48:bc:f5:50:94:ef:ea: cc:8b:c6:eb:9c:91:58:dd:fb:7a:35:75:07:12:6f: f0:62:47:7f:38:ee:00:bb:16:e8:de:ac:39:2b:44: c0:25:10:66:5e:a5:16:10:f7:ce:85:37:d2:88:39: 91:a7:a9:ce:94:60:10:f2:02:37:bd:a1:17:dd:83: 05:c0:4c:06:63:ef:50:19:15:e4:7a:6e:9c:8f:10: cb:68:79:ba:48:f6:38:99:3b:4b:b5:7c:e4:54:56: 98:96:37:9b:e6:f9:6a:b3:ab:ec:ba:3a:06:a0:7a: 42:f0:fd:54:a9:37:d4:6b:bb:a7:2b:a2:9c:c8:9d: 11:a6:1b:06:18:d8:64:09:ec:a1:44:77:39:7e:09: 75:50:fc:9a:33:aa:eb:0a:1b:e8:6b:de:9a:04:8b: 14:37:9d:93:54:f5:04:e3:a2:4b:51:16:8c:57:2c: 7e:bf:5f:67:c0:28:d8:a9:e8:4f:43:f4:99:18:72: 96:6f:60:37:ad:54:6a:6f:5c:d5:3f:d9:74:17:50: 00:8f:42:20:47:5e:77:4d:ac:ca:20:5d:ec:87:d7: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.10.0/24 146.19.128.0/24 146.19.207.0/24 176.126.103.0/24 178.250.184.0/21 193.0.227.0/24 193.0.229.0-193.0.230.255 193.0.239.0/24 193.163.203.0/24 217.114.43.0/24 217.119.129.0/24 IPv6: 2a00:4080::/29 2a04:1bc0::/29 2a0f:cdc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34535 41609 49549 51961 60057 Signature Algorithm: sha256WithRSAEncryption 54:33:0a:c8:b3:3d:9f:d2:e4:eb:b5:a8:67:cd:10:3e:eb:05: 81:66:8b:e4:26:9d:18:8f:ec:6c:23:5a:69:a6:4e:74:a1:4d: bc:14:dc:09:a7:12:d5:28:5e:d1:ff:ae:81:84:72:10:9f:3d: 62:ae:e3:7b:7f:3d:2a:53:0d:de:e0:23:e8:c3:7b:9a:7e:b5: cd:a4:59:5a:4b:8f:9f:56:8b:40:73:a9:ff:4a:5f:4c:85:25: f2:9a:9a:61:a4:9e:64:3f:84:9e:6c:94:96:e0:dd:a1:45:85: e9:af:41:b3:51:de:6b:9b:2c:07:d5:5a:7c:59:70:87:72:77: 12:3c:4e:7f:0f:82:a1:f7:de:f3:62:7a:ec:67:19:12:fa:78: af:fc:b6:51:0b:57:7b:c9:e4:09:1d:82:c7:69:b8:93:0f:08: 4e:33:3b:f3:4e:7c:04:e6:56:c3:c5:ad:a8:4e:bc:fa:f9:dd: 2d:50:6a:86:61:67:ee:f3:23:ac:6b:17:c3:f5:ca:22:34:61: 3a:36:68:5e:4d:26:33:47:a7:54:cc:b3:64:65:84:36:83:12: c4:52:4f:28:81:87:1a:fe:88:d1:e5:f9:e4:1d:b3:61:08:75: c7:fc:b3:df:47:02:27:1f:eb:11:cd:e9:66:f5:92:85:da:43: a1:71:a0:53 -----BEGIN CERTIFICATE----- MIIGCjCCBPKgAwIBAgISAZt/hCn7Mvfzgs/Dxy2AHJ7cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Nzc4YWQ4MTY4ZTA5Y2Y5MmQ0ZTA0OTgyNTdmOGU5Y2VhYmYwNjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2iPNEsl7Q4hJw2PZmt3a5Dwl/d4 7oF6dEZT9rzPt59c91Cchki89VCU7+rMi8brnJFY3ft6NXUHEm/wYkd/OO4Auxbo 3qw5K0TAJRBmXqUWEPfOhTfSiDmRp6nOlGAQ8gI3vaEX3YMFwEwGY+9QGRXkem6c jxDLaHm6SPY4mTtLtXzkVFaYljeb5vlqs6vsujoGoHpC8P1UqTfUa7unK6KcyJ0R phsGGNhkCeyhRHc5fgl1UPyaM6rrChvoa96aBIsUN52TVPUE46JLURaMVyx+v19n wCjYqehPQ/SZGHKWb2A3rVRqb1zVP9l0F1AAj0IgR153TazKIF3sh9cWnwIDAQAB o4IDFjCCAxIwHQYDVR0OBBYEFId4rYFo4Jz5LU4EmCV/jpzqvwaSMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhiL2YwN2Y4 ZC05ZGYwLTQ5YzYtYjJmMC1hYTlkNjkxODExZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIvZjA3Zjhk LTlkZjAtNDljNi1iMmYwLWFhOWQ2OTE4MTFlNy8xL2gzaXRnV2pnblBrdFRnU1lK WC1Pbk9xX0JwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGABggrBgEF BQcBBwEB/wRxMG8wUAQCAAEwSgMEAFlrCgMEAJITgAMEAJITzwMEALB+ZwMEA7L6 uAMEAMEA4zAMAwQAwQDlAwQAwQDmAwQAwQDvAwQAwaPLAwQA2XIrAwQA2XeBMBsE AgACMBUDBQMqAECAAwUDKgQbwAMFAyoPzcAwLgYIKwYBBQUHAQgBAf8EHzAdoBsw GQIDAIbnAgMAookCAwDBjQIDAMr5AgMA6pkwDQYJKoZIhvcNAQELBQADggEBAFQz CsizPZ/S5Ou1qGfNED7rBYFmi+QmnRiP7GwjWmmmTnShTbwU3AmnEtUoXtH/roGE chCfPWKu43t/PSpTDd7gI+jDe5p+tc2kWVpLj59Wi0Bzqf9KX0yFJfKammGknmQ/ hJ5slJbg3aFFhemvQbNR3mubLAfVWnxZcIdydxI8Tn8PgqH33vNieuxnGRL6eK/8 tlELV3vJ5AkdgsdpuJMPCE4zO/NOfATmVsPFrahOvPr53S1QaoZhZ+7zI6xrF8P1 yiI0YTo2aF5NJjNHp1TMs2RlhDaDEsRSTyiBhxr+iNHl+eQds2EIdcf8s99HAicf 6xHN6Wb1koXaQ6FxoFM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:41:56 2026 by rpki-client