This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer File: r3gchFM5kA9-ayAz5jiItTrleHU.cer (raw, json) Hash identifier: WfUgl3Q3gHPTkXq6BXzYfKGElAI/cf1Kii0Cwj39CTo= Subject key identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A1325EEB589E26659C21BE42ED339 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.167.8.0/21 IP: 92.118.120.0/22 IP: 194.59.14.0/23 IP: 194.59.32.0/23 IP: 2a09:a640::/32 IP: 2a0f:bc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:13:25:ee:b5:89:e2:66:59:c2:1b:e4:2e:d3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af781c845339900f7e6b2033e63888b53ae57875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:5d:e5:d8:45:9f:50:61:2a:a7:13:d4:e9: fd:3a:6a:0d:e1:99:12:18:42:d6:d8:26:dc:69:f8: bf:44:98:08:ac:81:36:29:60:ac:d8:28:8e:1a:d1: 37:dc:ad:8a:8d:eb:e5:96:a1:4c:b7:3c:47:8b:43: ee:1b:21:8c:ef:0d:37:45:9f:74:0b:f6:0a:12:be: 0e:ff:6f:0c:54:d8:75:da:22:fb:1e:51:dc:f9:d3: c5:4e:51:c5:0e:3a:ea:30:1d:95:76:06:4b:78:f2: 8c:73:dd:28:d7:9f:50:43:d9:c2:aa:ab:0a:99:01: 7a:ab:9c:fc:59:e0:b0:6a:2b:cf:5b:ec:76:68:14: 1c:93:bb:0e:55:12:57:1c:b9:4c:f1:8c:86:36:14: 19:7c:c9:f5:ef:17:9a:0a:a3:82:e2:6d:c1:3b:20: a3:eb:90:d3:16:4b:93:fd:80:7d:93:2a:6d:6a:ec: 0f:13:36:d7:20:dc:3b:47:d2:c2:74:f2:99:05:5c: 1a:74:ee:96:34:94:66:d9:9e:cb:22:97:d5:d3:6f: 7d:58:a5:2e:63:e6:a6:81:e6:d7:d4:ac:75:ec:ea: 1b:35:f6:1f:c4:c4:b7:35:fa:38:b8:63:95:a5:05: 4e:88:72:28:af:65:d8:95:06:2a:6a:cd:46:2e:77: e1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.167.8.0/21 92.118.120.0/22 194.59.14.0/23 194.59.32.0/23 IPv6: 2a09:a640::/32 2a0f:bc0::/29 Signature Algorithm: sha256WithRSAEncryption 94:12:e1:97:23:96:99:1b:5c:60:8a:0c:24:0e:f7:fb:0e:3c: ac:a5:42:ec:4c:1b:db:e2:68:93:dc:1e:a1:ee:fa:af:20:51: e3:40:81:7f:51:b6:88:51:73:06:59:33:a9:9d:83:1d:34:a3: 31:f3:86:35:a9:a0:d5:fb:1d:5c:34:f9:9e:29:4f:2d:e5:09: 8d:6e:75:25:8f:1d:59:8a:de:6d:46:5e:c6:24:ef:a6:26:1e: 13:25:58:52:de:75:9c:eb:62:9a:b1:b9:80:e3:76:ca:c6:dc: 00:2f:cb:86:ce:42:54:d3:29:61:02:7e:4f:38:a0:ca:95:ba: 97:a2:46:af:2d:c3:59:b1:17:ff:7e:04:3c:55:61:44:b8:13: c1:89:aa:bf:96:2d:60:62:16:74:d7:28:91:f0:39:02:28:36: ec:6a:9c:7e:82:ef:17:35:53:8e:8f:f8:a6:39:3a:a2:47:a1: bb:3f:ac:1b:c1:74:bf:1c:fd:21:e4:35:28:79:af:a4:ff:c5: 13:d5:19:1d:47:28:96:67:6b:83:6d:2b:5f:b2:cf:6c:34:fa: 5e:12:e2:fb:13:03:66:c7:7d:4f:c4:8c:da:1b:a6:ba:b9:e1: a4:3c:9c:f7:b0:16:d5:fc:a0:05:36:d4:4e:87:2a:0d:08:ad: 71:2e:c3:ee -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt6WhMl7rWJ4mZZwhvkLtM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjc4MWM4NDUzMzk5MDBmN2U2YjIwMzNlNjM4ODhiNTNhZTU3ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstZd5dhFn1BhKqcT1On9OmoN4ZkS GELW2Cbcafi/RJgIrIE2KWCs2CiOGtE33K2KjevllqFMtzxHi0PuGyGM7w03RZ90 C/YKEr4O/28MVNh12iL7HlHc+dPFTlHFDjrqMB2VdgZLePKMc90o159QQ9nCqqsK mQF6q5z8WeCwaivPW+x2aBQck7sOVRJXHLlM8YyGNhQZfMn17xeaCqOC4m3BOyCj 65DTFkuT/YB9kyptauwPEzbXINw7R9LCdPKZBVwadO6WNJRm2Z7LIpfV0299WKUu Y+amgebX1Kx17OobNfYfxMS3Nfo4uGOVpQVOiHIor2XYlQYqas1GLnfh5wIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFK94HIRTOZAPfmsgM+Y4iLU65Xh1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhL2QxYzcx ZC1hYTUwLTRkNzgtOGU1Mi01Y2YzN2EzNDgzMGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvZDFjNzFk LWFhNTAtNGQ3OC04ZTUyLTVjZjM3YTM0ODMwZC8xL3IzZ2NoRk01a0E5LWF5QXo1 amlJdFRybGVIVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUF BwEHAQH/BDgwNjAeBAIAATAYAwQDLqcIAwQCXHZ4AwQBwjsOAwQBwjsgMBQEAgAC MA4DBQAqCaZAAwUDKg8LwDANBgkqhkiG9w0BAQsFAAOCAQEAlBLhlyOWmRtcYIoM JA73+w48rKVC7Ewb2+Jok9weoe76ryBR40CBf1G2iFFzBlkzqZ2DHTSjMfOGNamg 1fsdXDT5nilPLeUJjW51JY8dWYrebUZexiTvpiYeEyVYUt51nOtimrG5gON2ysbc AC/Lhs5CVNMpYQJ+TzigypW6l6JGry3DWbEX/34EPFVhRLgTwYmqv5YtYGIWdNco kfA5Aig27GqcfoLvFzVTjo/4pjk6okehuz+sG8F0vxz9IeQ1KHmvpP/FE9UZHUco lmdrg20rX7LPbDT6XhLi+xMDZsd9T8SM2humurnhpDyc97AW1fygBTbUTocqDQit cS7D7g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:44 2026 by rpki-client