This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer File: A3tIRJuhyuFb3iwvCG2UIY4HILs.cer (raw, json) Hash identifier: d4lcERPdZ1K4wa80SgMJoyHJcPAePmFBIJEMSh1l/TY= Subject key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79112AB20A5DC29101937ED7BEDC4885 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197962 AS: 212722 IP: 176.126.161.0/24 IP: 2a10:500::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2a:b2:0a:5d:c2:91:01:93:7e:d7:be:dc:48:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=037b48449ba1cae15bde2c2f086d94218e0720bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:9f:93:e4:96:51:1b:b1:67:0a:cd:49:f6: 78:da:fd:ca:83:97:9f:a8:1f:ae:a5:2b:15:00:4f: 00:7c:1f:a8:56:86:f1:36:b9:d5:be:4a:ac:f6:72: 3e:78:0c:bb:f1:7a:a9:fc:a1:46:5c:01:86:cc:15: 37:48:9b:9b:62:5a:49:d6:ba:33:34:79:e9:9d:78: 40:a5:9d:c5:bc:e0:5f:7e:2b:95:40:9e:2f:f6:27: 7d:b2:60:f9:ae:be:d3:ed:fe:22:00:0f:15:0b:56: 1d:29:d6:95:cf:8f:50:ef:ff:bf:eb:5c:b8:db:38: 48:dc:7f:cb:91:ac:56:10:2e:33:1d:ae:61:2d:85: 25:f1:b6:3d:74:35:60:c2:2f:33:ab:d6:7b:4b:5c: 47:49:01:88:43:eb:56:7c:65:e5:0b:a7:24:64:7c: 38:cd:48:7c:04:32:22:e5:2c:81:17:87:d6:d8:91: fb:76:5d:78:dc:b8:36:3d:05:c0:90:79:69:d9:88: d3:b2:37:78:10:4c:ee:1f:65:a3:2f:d1:84:08:a7: 23:02:6d:7d:6a:04:b2:5e:3a:73:e4:92:c5:24:49: dc:eb:e6:68:95:fb:0b:d7:3e:86:76:10:3d:d3:f0: 4a:99:51:35:26:26:c9:69:a3:a3:cc:b9:3e:21:51: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.161.0/24 IPv6: 2a10:500::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197962 212722 Signature Algorithm: sha256WithRSAEncryption 35:61:06:c1:61:b2:e0:28:f1:b5:33:bb:3e:11:89:c5:9d:87: ec:be:f6:ef:fd:b7:1e:1e:c9:d2:33:58:61:95:5a:b7:98:62: 59:2b:4d:bb:68:18:45:73:8e:4d:32:36:a2:c8:d4:eb:96:62: 36:73:d1:9b:23:9b:79:2f:fc:79:22:6c:7a:4b:6e:29:fc:61: 18:41:db:5e:4a:a5:94:f8:43:3c:fe:6b:32:0c:b7:ed:ef:24: 32:3d:39:6c:fe:b0:fa:6d:26:fd:6e:35:28:77:ee:fc:73:ce: 32:f0:84:4d:d3:ad:b2:fa:57:a8:67:ba:6a:47:9b:47:d5:6a: 83:38:60:58:32:65:6c:c2:73:8b:87:7a:29:a5:3c:7a:c4:81: 77:3e:43:de:6a:90:13:7e:99:32:b0:d9:e7:e8:d1:12:ed:95: 97:17:99:fa:82:09:ab:2a:62:5d:a2:4b:86:cc:3e:5e:c3:bb: e6:7d:e7:3c:5b:12:d2:aa:d5:e8:8b:ed:95:29:a7:72:74:c0: 2a:74:b2:88:5a:76:2e:08:e2:94:7f:b7:89:9d:6e:fc:a8:0e: 8f:4c:6f:17:f4:2a:a2:e9:dc:0e:a5:a6:d8:0a:cc:86:de:38: 89:b5:2a:f2:4f:95:a4:cc:39:75:66:9e:7c:59:d5:5a:6b:b6: 2b:99:eb:d9 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt5ESqyCl3CkQGTfte+3EiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzdiNDg0NDliYTFjYWUxNWJkZTJjMmYwODZkOTQyMThlMDcyMGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY2fk+SWURuxZwrNSfZ42v3Kg5ef qB+upSsVAE8AfB+oVobxNrnVvkqs9nI+eAy78Xqp/KFGXAGGzBU3SJubYlpJ1roz NHnpnXhApZ3FvOBffiuVQJ4v9id9smD5rr7T7f4iAA8VC1YdKdaVz49Q7/+/61y4 2zhI3H/LkaxWEC4zHa5hLYUl8bY9dDVgwi8zq9Z7S1xHSQGIQ+tWfGXlC6ckZHw4 zUh8BDIi5SyBF4fW2JH7dl143Lg2PQXAkHlp2YjTsjd4EEzuH2WjL9GECKcjAm19 agSyXjpz5JLFJEnc6+ZolfsL1z6GdhA90/BKmVE1JibJaaOjzLk+IVGGdwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFAN7SESbocrhW94sLwhtlCGOByC7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E1LzVmZjc4 ZS1kYjE0LTRiMDUtOWNjNi03NDAzZTEzNjc1YWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUvNWZmNzhl LWRiMTQtNGIwNS05Y2M2LTc0MDNlMTM2NzVhYi8xL0EzdElSSnVoeXVGYjNpd3ZD RzJVSVk0SElMcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAsH6hMA0EAgACMAcDBQMqEAUAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMFSgIDAz7yMA0GCSqGSIb3DQEBCwUAA4IBAQA1YQbB YbLgKPG1M7s+EYnFnYfsvvbv/bceHsnSM1hhlVq3mGJZK027aBhFc45NMjaiyNTr lmI2c9GbI5t5L/x5Imx6S24p/GEYQdteSqWU+EM8/msyDLft7yQyPTls/rD6bSb9 bjUod+78c84y8IRN062y+leoZ7pqR5tH1WqDOGBYMmVswnOLh3oppTx6xIF3PkPe apATfpkysNnn6NES7ZWXF5n6ggmrKmJdokuGzD5ew7vmfec8WxLSqtXoi+2VKady dMAqdLKIWnYuCOKUf7eJnW78qA6PTG8X9Cqi6dwOpabYCsyG3jiJtSryT5WkzDl1 Zp58WdVaa7YrmevZ -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:00 2026 by rpki-client