This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t3CHf-B99JohaBSt5wHQh7EWk7Q.cer File: t3CHf-B99JohaBSt5wHQh7EWk7Q.cer (raw, json) Hash identifier: 8lbk2a3I8QzsLxJzDTS4spnFywa2DxmdeD2Hwh9RO3M= Subject key identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB0CCD64D0F61C4975BDB7E647BE2B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201889 IP: 185.60.204.0/22 IP: 2a02:7560::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0c:cd:64:d0:f6:1c:49:75:bd:b7:e6:47:be:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b770877fe07df49a216814ade701d087b11693b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:1b:9c:b4:25:34:8c:21:8d:14:bf:ca:bd: 8a:a4:64:8d:7d:2e:c3:c2:f5:91:ec:fa:66:8a:3b: 0e:d1:7d:66:6b:c5:7e:1f:da:3d:8e:4a:bb:10:13: cb:2f:af:6b:1b:11:7b:e1:b9:64:3f:f3:24:49:78: 2a:0b:f7:0a:c4:6d:dd:3a:85:a4:61:53:9d:f4:71: 77:b0:1e:1b:a9:69:10:4c:0c:e1:7b:6f:d6:87:46: 2a:3f:d9:f6:76:cd:7c:0f:cf:53:3e:6a:8c:73:e3: 41:95:96:cf:ae:4a:5e:26:4b:cf:4a:20:c9:3b:29: d3:64:17:10:c4:57:60:33:8a:d0:d6:07:c7:40:e6: a3:1c:7b:83:d7:47:20:bf:12:6e:2e:9e:49:84:77: e5:90:bf:57:fa:bb:26:54:c8:30:70:5a:be:03:fd: 62:69:6e:70:a5:aa:61:56:ee:57:e0:0f:97:20:e0: d6:66:80:04:fa:67:1b:25:d9:0b:f9:c4:35:8b:3b: 9e:7c:85:34:5e:68:f7:bc:da:4d:b2:c7:e6:10:68: 11:b0:57:8f:f1:e6:e2:1f:a0:f0:61:42:7a:65:ab: 87:8c:88:45:80:f4:1f:44:5e:19:d1:22:46:33:2e: 90:c9:0c:9e:0a:9d:be:ed:ef:45:d8:26:a1:0a:8b: 22:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:70:87:7F:E0:7D:F4:9A:21:68:14:AD:E7:01:D0:87:B1:16:93:B4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cc127-e6ec-4da1-8469-c4a0e9706597/1/t3CHf-B99JohaBSt5wHQh7EWk7Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.204.0/22 IPv6: 2a02:7560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201889 Signature Algorithm: sha256WithRSAEncryption 79:09:d9:72:e1:ca:eb:4f:d7:21:34:5d:29:f5:43:6c:00:e8: 8a:37:c8:0b:c1:bc:b0:47:d2:f1:de:2b:6a:c9:1f:ed:6b:dc: e8:d4:83:0d:ad:86:d3:cc:52:f3:7c:e8:2f:e2:60:74:27:fc: 81:62:b3:d2:f3:9f:1f:8f:81:af:ef:60:ab:bf:9a:7a:26:06: ca:44:1e:73:41:be:4a:78:da:7e:9b:bb:2f:d8:86:d7:51:83: 04:82:af:49:62:d2:e4:26:b3:55:4e:15:ec:dd:89:1a:25:93: d3:d0:36:45:99:6c:56:0c:2e:e8:f5:04:d4:c6:11:90:f1:6a: 4b:86:e2:42:0c:e7:22:6c:b6:42:a7:fa:c5:4e:d7:39:27:96: f2:4d:2e:92:53:cf:86:9c:52:cc:c7:6b:04:ab:d6:65:60:07: 3d:34:06:de:7b:cc:d6:f3:a9:aa:a7:7c:a7:72:f2:3a:26:4f: 6f:7f:b6:fc:c0:2c:3b:b5:4c:d2:52:58:41:ef:80:48:d2:16: f4:07:c7:21:94:97:32:13:c2:07:37:b7:71:54:8e:2b:2b:3d: da:98:0d:8b:9d:d1:96:55:c8:4a:59:2f:df:47:91:dc:f3:56: e5:d3:4d:81:fa:12:68:68:66:02:91:d3:d9:5e:80:d9:4b:fe: 51:9e:12:50 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26wzNZND2HEl1vbfmR74rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzcwODc3ZmUwN2RmNDlhMjE2ODE0YWRlNzAxZDA4N2IxMTY5M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN0bnLQlNIwhjRS/yr2KpGSNfS7D wvWR7PpmijsO0X1ma8V+H9o9jkq7EBPLL69rGxF74blkP/MkSXgqC/cKxG3dOoWk YVOd9HF3sB4bqWkQTAzhe2/Wh0YqP9n2ds18D89TPmqMc+NBlZbPrkpeJkvPSiDJ OynTZBcQxFdgM4rQ1gfHQOajHHuD10cgvxJuLp5JhHflkL9X+rsmVMgwcFq+A/1i aW5wpaphVu5X4A+XIODWZoAE+mcbJdkL+cQ1izuefIU0Xmj3vNpNssfmEGgRsFeP 8ebiH6DwYUJ6ZauHjIhFgPQfRF4Z0SJGMy6QyQyeCp2+7e9F2CahCosi7QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLdwh3/gffSaIWgUrecB0IexFpO0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzVjYzEy Ny1lNmVjLTRkYTEtODQ2OS1jNGEwZTk3MDY1OTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvNWNjMTI3 LWU2ZWMtNGRhMS04NDY5LWM0YTBlOTcwNjU5Ny8xL3QzQ0hmLUI5OUpvaGFCU3Q1 d0hRaDdFV2s3US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTzMMA0EAgACMAcDBQAqAnVgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMUoTANBgkqhkiG9w0BAQsFAAOCAQEAeQnZcuHK60/X ITRdKfVDbADoijfIC8G8sEfS8d4raskf7Wvc6NSDDa2G08xS83zoL+JgdCf8gWKz 0vOfH4+Br+9gq7+aeiYGykQec0G+Snjafpu7L9iG11GDBIKvSWLS5CazVU4V7N2J GiWT09A2RZlsVgwu6PUE1MYRkPFqS4biQgznImy2Qqf6xU7XOSeW8k0uklPPhpxS zMdrBKvWZWAHPTQG3nvM1vOpqqd8p3LyOiZPb3+2/MAsO7VM0lJYQe+ASNIW9AfH IZSXMhPCBze3cVSOKys92pgNi53RllXISlkv30eR3PNW5dNNgfoSaGhmApHT2V6A 2Uv+UZ4SUA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:27 2026 by rpki-client