This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer File: 89hcR9C31txd3aCFcrZFTBBZUSw.cer (raw, json) Hash identifier: 6a4vBa1XyOJ5WZiGK0mgIlTStf885yPMyIlFNoOaR04= Subject key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37E077BC242D349670D57789969555 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203153 AS: 206500 IP: 45.3.60.0/23 IP: 194.62.161.0/24 IP: 212.73.154.0/24 IP: 2a10:a7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e0:77:bc:24:2d:34:96:70:d5:77:89:96:95:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:fb:69:b2:cf:1c:1a:1d:d7:3c:a3:08:a8: 8f:f3:06:37:ed:e3:a0:25:d8:d2:f2:47:ba:ea:ae: a2:70:8d:30:65:91:78:ff:cd:16:6c:d6:13:b9:76: cb:54:47:1e:a9:b2:92:b9:7d:1a:e2:31:0e:f6:b0: cf:23:30:0d:e9:e6:1c:fd:b9:f8:a0:ba:d6:7a:52: 5a:8a:a1:d7:1c:07:88:39:8b:35:63:80:b1:cc:8e: 6b:db:16:c5:66:67:65:07:b7:ca:3a:a3:91:fa:88: 35:39:10:82:88:ad:0d:b2:b4:52:7b:c1:d6:8b:0a: 9a:77:e5:27:83:6a:a5:d6:12:5b:71:6a:ec:8c:0f: 47:57:a6:0f:3c:53:24:04:74:c0:3f:50:ce:9f:2d: e6:e3:51:41:7e:53:23:6f:d9:c8:11:34:8e:1b:86: 7e:36:ce:2e:1b:0d:cd:39:cb:fb:70:12:ac:be:df: 5d:b8:e9:73:99:9c:69:2b:36:63:0c:ab:64:83:ef: a6:ac:ce:71:02:a3:76:48:ba:24:04:2c:7c:9a:2b: de:79:88:18:b4:bd:ea:94:f2:20:63:d6:9b:cb:5c: 7c:b7:06:4d:6a:fb:c1:50:45:17:65:0e:df:0d:78: 3f:23:f4:5f:9c:93:27:60:a5:b6:4b:37:59:52:91: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.3.60.0/23 194.62.161.0/24 212.73.154.0/24 IPv6: 2a10:a7c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203153 206500 Signature Algorithm: sha256WithRSAEncryption 1b:90:02:f4:e4:ee:ae:8d:a9:06:20:62:7d:f9:31:fd:d1:69: 26:3b:63:28:b3:9a:37:d9:ee:3b:4b:b3:a1:b9:c9:6d:3b:5f: b4:16:21:bd:37:37:83:92:f7:09:fd:bd:73:3b:0c:66:f5:27: 35:69:bc:6f:95:c2:ec:88:23:dc:8c:c0:8e:44:43:2b:8a:cb: c0:8f:49:60:ae:95:33:b7:7c:c1:ae:3d:37:c4:1c:bd:cc:a3: 45:01:41:8e:92:52:bf:0b:2a:6f:38:df:b7:56:a4:be:04:c3: 3c:8a:7d:09:f3:d6:de:81:52:5b:d7:8d:bb:24:be:22:79:fa: 63:54:aa:44:c1:aa:74:46:a3:80:c3:a5:87:66:44:59:17:0c: 27:47:48:ac:63:9c:e2:ee:cd:ac:01:51:03:fb:16:d5:56:4c: 4c:1e:a8:ef:5f:ed:2d:56:17:4d:84:7a:27:3a:b5:4d:da:e6: 5c:7d:0a:83:98:ae:7e:1f:66:07:c0:b1:42:ee:31:1b:b9:99: d2:fd:67:45:7b:9b:2c:9b:08:cb:63:d6:33:be:d3:57:4e:bc: 22:79:1b:4f:6b:6b:7f:9f:28:1e:05:bb:77:7b:85:f0:52:18: 38:3f:e9:c3:d0:af:5f:37:63:df:8e:bb:91:a3:19:73:46:d6: 73:12:3c:34 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZt+N+B3vCQtNJZw1XeJlpVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Q4NWM0N2QwYjdkNmRjNWRkZGEwODU3MmI2NDU0YzEwNTk1MTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8T7abLPHBod1zyjCKiP8wY37eOg JdjS8ke66q6icI0wZZF4/80WbNYTuXbLVEceqbKSuX0a4jEO9rDPIzAN6eYc/bn4 oLrWelJaiqHXHAeIOYs1Y4CxzI5r2xbFZmdlB7fKOqOR+og1ORCCiK0NsrRSe8HW iwqad+Ung2ql1hJbcWrsjA9HV6YPPFMkBHTAP1DOny3m41FBflMjb9nIETSOG4Z+ Ns4uGw3NOcv7cBKsvt9duOlzmZxpKzZjDKtkg++mrM5xAqN2SLokBCx8miveeYgY tL3qlPIgY9aby1x8twZNavvBUEUXZQ7fDXg/I/RfnJMnYKW2SzdZUpESmQIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFPPYXEfQt9bcXd2ghXK2RUwQWVEsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU0LzI2ZmIx MS0yZDAwLTRlN2ItYjI5Ny01MjEyZGI5NzU0ZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMjZmYjEx LTJkMDAtNGU3Yi1iMjk3LTUyMTJkYjk3NTRmNC8xLzg5aGNSOUMzMXR4ZDNhQ0Zj clpGVEJCWlVTdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBLQM8AwQAwj6hAwQA1EmaMA0EAgACMAcDBQMq EKfAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMZkQIDAyakMA0GCSqGSIb3DQEB CwUAA4IBAQAbkAL05O6ujakGIGJ9+TH90WkmO2Mos5o32e47S7OhucltO1+0FiG9 NzeDkvcJ/b1zOwxm9Sc1abxvlcLsiCPcjMCOREMrisvAj0lgrpUzt3zBrj03xBy9 zKNFAUGOklK/CypvON+3VqS+BMM8in0J89begVJb1427JL4iefpjVKpEwap0RqOA w6WHZkRZFwwnR0isY5zi7s2sAVED+xbVVkxMHqjvX+0tVhdNhHonOrVN2uZcfQqD mK5+H2YHwLFC7jEbuZnS/WdFe5ssmwjLY9YzvtNXTrwieRtPa2t/nygeBbt3e4Xw Uhg4P+nD0K9fN2PfjruRoxlzRtZzEjw0 -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:20 2026 by rpki-client