This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer File: 3EThniu05wI8wboQ1Jt07eS_hlw.cer (raw, json) Hash identifier: /UK6DtxTJFaBa9j+z6n71zMNQNDAIzaYt1HnC9TVCxg= Subject key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C800601F06384338FA99F213A77A506 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:43 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203665 AS: 206747 IP: 25.0.0.0/8 IP: 195.130.0.0/19 IP: 2a08::/19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:06:01:f0:63:84:33:8f:a9:9f:21:3a:77:a5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b0:ed:03:36:29:60:18:b9:34:e6:c3:d9:d0: 7c:c1:3e:42:32:c1:ad:b9:b4:a3:9a:d8:9d:a1:29: 52:d0:92:07:c7:bf:22:a9:35:93:bf:02:cb:c4:ee: 98:74:09:91:90:6a:f8:7e:19:a2:e9:a9:f7:39:5b: 56:85:ef:5b:ee:0f:7a:b0:7c:43:f5:af:21:c9:12: 98:67:04:10:59:f3:26:17:0c:ac:01:c8:90:c8:4a: d6:9e:a2:2a:7a:a6:12:42:73:7b:3b:22:8c:f1:bd: 8a:c6:12:2e:d9:c7:4c:21:69:55:53:b0:9c:6a:9f: 2f:c2:a1:91:32:3f:a3:3f:11:54:9f:10:39:91:43: fa:ca:c2:e6:9c:f0:75:f0:e3:29:f5:ee:f4:a7:e9: 26:bd:cd:14:6f:83:1f:2c:7b:ac:47:81:cf:4a:22: ef:26:9d:75:5e:eb:68:57:80:95:76:8a:de:76:65: 4b:c2:cd:11:06:84:39:e6:91:18:c2:38:7d:d7:0e: 94:84:81:6c:ed:4f:a9:94:f0:fb:78:7f:41:c5:1c: 7a:be:e5:87:28:43:02:9a:19:7c:47:35:92:f3:e2: 36:1b:51:6f:60:7e:da:44:29:6b:75:7b:01:f4:6a: 10:d8:c1:b5:66:9f:fb:0b:75:11:c1:33:b5:ea:83: cf:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 25.0.0.0/8 195.130.0.0/19 IPv6: 2a08::/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203665 206747 Signature Algorithm: sha256WithRSAEncryption 42:fe:03:37:1a:e2:2d:01:f9:78:69:3d:c5:ed:92:a9:b0:43: d3:4d:9b:12:c8:52:42:1c:80:a5:e7:be:9e:22:f2:29:dc:45: 68:ab:dc:61:2a:dc:96:61:85:48:c1:79:09:b0:d4:2b:5f:40: 51:7c:a3:ef:8b:88:9f:a9:c4:48:e6:90:67:79:95:d6:35:a9: af:fb:b2:12:57:ca:34:6e:55:6a:24:02:f6:64:08:6f:4d:ef: 5e:06:70:a5:31:31:81:de:25:46:0c:e2:52:b3:f0:04:8d:f1: 0e:d1:60:c6:e0:80:e8:ea:99:df:5f:9c:2c:fb:35:d9:3e:25: 92:82:ee:91:38:97:11:bb:e4:a4:59:4c:bd:a4:3e:9c:fc:ab: ae:e1:50:b0:45:a5:ff:49:9c:04:88:dc:c4:26:6b:94:c3:c5: 04:05:d0:60:4d:66:4d:c6:6e:4d:72:67:86:83:a8:77:ef:6d: fd:20:7c:28:1b:0b:37:ec:15:17:46:ce:76:f9:31:dc:bd:f3: 14:81:6a:5c:eb:80:be:42:d7:eb:df:0c:f8:61:79:a4:ce:de: f6:c1:c6:e2:68:40:51:56:2f:a5:51:8b:e0:41:1b:2f:59:31: 76:94:72:cc:df:89:5d:fa:33:1c:ee:92:ef:51:78:23:6a:2c: 45:70:5a:6e -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt8gAYB8GOEM4+pnyE6d6UGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzQ0ZTE5ZTJiYjRlNzAyM2NjMWJhMTBkNDliNzRlZGU0YmY4NjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77DtAzYpYBi5NObD2dB8wT5CMsGt ubSjmtidoSlS0JIHx78iqTWTvwLLxO6YdAmRkGr4fhmi6an3OVtWhe9b7g96sHxD 9a8hyRKYZwQQWfMmFwysAciQyErWnqIqeqYSQnN7OyKM8b2KxhIu2cdMIWlVU7Cc ap8vwqGRMj+jPxFUnxA5kUP6ysLmnPB18OMp9e70p+kmvc0Ub4MfLHusR4HPSiLv Jp11XutoV4CVdoredmVLws0RBoQ55pEYwjh91w6UhIFs7U+plPD7eH9BxRx6vuWH KEMCmhl8RzWS8+I2G1FvYH7aRClrdXsB9GoQ2MG1Zp/7C3URwTO16oPPiQIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1LzQ2ZjVi OS02MDAwLTQwNzItODlmMi00YzgyYWNlNzJjODUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvNDZmNWI5 LTYwMDAtNDA3Mi04OWYyLTRjODJhY2U3MmM4NS8xLzNFVGhuaXUwNXdJOHdib1Ex SnQwN2VTX2hsdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAQBAIAATAKAwIAGQMEBcOCADAMBAIAAjAGAwQFKggAMB8GCCsG AQUFBwEIAQH/BBAwDqAMMAoCAwMbkQIDAyebMA0GCSqGSIb3DQEBCwUAA4IBAQBC /gM3GuItAfl4aT3F7ZKpsEPTTZsSyFJCHICl576eIvIp3EVoq9xhKtyWYYVIwXkJ sNQrX0BRfKPvi4ifqcRI5pBneZXWNamv+7ISV8o0blVqJAL2ZAhvTe9eBnClMTGB 3iVGDOJSs/AEjfEO0WDG4IDo6pnfX5ws+zXZPiWSgu6ROJcRu+SkWUy9pD6c/Kuu 4VCwRaX/SZwEiNzEJmuUw8UEBdBgTWZNxm5NcmeGg6h37239IHwoGws37BUXRs52 +THcvfMUgWpc64C+Qtfr3wz4YXmkzt72wcbiaEBRVi+lUYvgQRsvWTF2lHLM34ld +jMc7pLvUXgjaixFcFpu -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:22 2026 by rpki-client