This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer File: 3_JHJt8-d_b0yOBDZhOzURDurzg.cer (raw, json) Hash identifier: l5CqwezOMHlONCXAi1a3tlGURXigO/9+kCJpSy0nWxo= Subject key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C12DB7CF43D6F4203D7B7756E42A7C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 31.43.164.0/22 IP: 185.255.4.0/22 IP: 2a10:a340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:db:7c:f4:3d:6f:42:03:d7:b7:75:6e:42:a7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:d0:21:5e:ed:10:36:8d:a0:d7:74:4f:8d: 89:83:6f:85:d7:06:9e:70:18:af:b5:65:7f:c5:de: 65:6a:9c:fd:87:ad:db:d8:99:ae:53:64:60:2e:6b: 14:50:d1:b6:c3:82:04:ab:6c:84:2e:29:4f:33:f5: cc:3c:49:26:33:7f:0d:be:da:e8:ef:14:7f:30:ba: d7:6f:e2:4f:03:11:1f:0c:28:01:3b:e8:5e:69:1e: 5f:2b:18:59:ff:63:a4:1a:6c:3a:eb:20:94:c7:01: 66:56:c8:a4:9a:85:d9:2c:ab:75:f5:48:e6:d5:9c: a3:e2:79:df:57:b7:14:92:01:ed:eb:f0:95:fe:74: 71:ec:06:c9:d5:c7:9e:a1:a2:00:47:32:e1:56:07: 51:c3:0d:aa:f8:0f:fe:33:a3:59:a7:d4:13:68:5f: 70:a9:62:2b:90:bc:38:f9:35:e0:81:c0:d1:f5:91: ab:78:01:7a:35:c1:68:1f:73:f5:87:96:a4:49:92: 25:87:91:53:71:4c:d7:e3:70:b2:dd:80:f0:4a:cb: 2c:cb:6d:a7:c3:92:78:67:f5:35:49:6b:98:29:ca: 5e:ea:2c:b7:ed:02:7b:0a:05:d8:eb:0c:61:2d:5a: 96:b0:18:82:de:c0:55:d8:2f:d9:51:92:87:ed:a0: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.164.0/22 185.255.4.0/22 IPv6: 2a10:a340::/29 Signature Algorithm: sha256WithRSAEncryption 42:e8:fe:06:8b:ec:ba:87:95:86:1f:b7:7e:ae:af:f8:13:ea: 21:60:ed:d9:26:dd:e3:7b:8f:44:e6:cd:45:10:6e:ac:92:27: 2d:9d:32:e4:03:c9:9b:6f:22:64:e9:91:1d:d2:81:7a:6d:01: 93:6e:2a:e2:e1:8f:37:20:4b:30:c2:d8:ca:51:77:f0:d5:cb: 57:22:45:de:6e:16:70:dc:4a:be:55:32:7f:9a:d9:4a:57:44: 90:20:9b:b3:b7:4a:d7:fc:88:71:9d:b0:0e:27:67:6a:54:5f: b5:ff:1d:2f:7e:37:0e:41:10:f2:7c:e6:25:01:73:6e:3d:8e: 5c:4b:a3:89:ac:b1:c2:d1:e4:f0:36:d8:ac:f1:d6:29:57:d6: 99:36:6c:d5:ef:05:0d:25:cd:da:27:f5:2d:a0:d5:a3:f3:9a: 04:ca:05:0b:19:e9:21:af:a8:7c:45:fe:86:b6:59:bc:b4:e0: 0c:8a:ff:72:1e:6e:32:d9:b4:c0:88:45:ee:4f:fd:eb:64:d5: ea:4a:57:0a:9c:0b:13:bd:51:7f:ba:fa:a1:d9:b9:6e:02:36: 8a:fa:92:ad:cb:f8:53:1b:5f:4d:69:72:b3:0a:ea:32:81:26: fa:95:1d:84:58:21:4c:74:f0:87:88:1d:e8:e8:fa:c9:35:05: ac:65:73:a6 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt8Ett89D1vQgPXt3VuQqfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmYyNDcyNmRmM2U3N2Y2ZjRjOGUwNDM2NjEzYjM1MTEwZWVhZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqTQIV7tEDaNoNd0T42Jg2+F1wae cBivtWV/xd5lapz9h63b2JmuU2RgLmsUUNG2w4IEq2yELilPM/XMPEkmM38Nvtro 7xR/MLrXb+JPAxEfDCgBO+heaR5fKxhZ/2OkGmw66yCUxwFmVsikmoXZLKt19Ujm 1Zyj4nnfV7cUkgHt6/CV/nRx7AbJ1ceeoaIARzLhVgdRww2q+A/+M6NZp9QTaF9w qWIrkLw4+TXggcDR9ZGreAF6NcFoH3P1h5akSZIlh5FTcUzX43Cy3YDwSsssy22n w5J4Z/U1SWuYKcpe6iy37QJ7CgXY6wxhLVqWsBiC3sBV2C/ZUZKH7aA/IwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFN/yRybfPnf29MjgQ2YTs1EQ7q84MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4L2E5NjAy NC02NTU1LTRlOGQtYWYzNy02MmJiNmQ2M2U1OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvYTk2MDI0 LTY1NTUtNGU4ZC1hZjM3LTYyYmI2ZDYzZTU5ZC8xLzNfSkhKdDgtZF9iMHlPQkRa aE96VVJEdXJ6Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCHyukAwQCuf8EMA0EAgACMAcDBQMqEKNAMA0G CSqGSIb3DQEBCwUAA4IBAQBC6P4Gi+y6h5WGH7d+rq/4E+ohYO3ZJt3je49E5s1F EG6skictnTLkA8mbbyJk6ZEd0oF6bQGTbiri4Y83IEswwtjKUXfw1ctXIkXebhZw 3Eq+VTJ/mtlKV0SQIJuzt0rX/IhxnbAOJ2dqVF+1/x0vfjcOQRDyfOYlAXNuPY5c S6OJrLHC0eTwNtis8dYpV9aZNmzV7wUNJc3aJ/UtoNWj85oEygULGekhr6h8Rf6G tlm8tOAMiv9yHm4y2bTAiEXuT/3rZNXqSlcKnAsTvVF/uvqh2bluAjaK+pKty/hT G19NaXKzCuoygSb6lR2EWCFMdPCHiB3o6PrJNQWsZXOm -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:25 2026 by rpki-client