This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3sSBFsa8JrPlmLuNbos1-HIW60.cer File: a3sSBFsa8JrPlmLuNbos1-HIW60.cer (raw, json) Hash identifier: jGhYH9TnR06K/2MfIw1fwUfZsrzK6Xan2z3akHQjnpI= Subject key identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB81798B5FF1CD4942D27F7DE1759F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 92.119.240.0/22 IP: 2a09:bcc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:81:79:8b:5f:f1:cd:49:42:d2:7f:7d:e1:75:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7b12045b1af09acf9662ee35ba2cd7e1c85bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bf:a4:ca:44:63:f7:cf:0d:a9:1e:20:5a:8e: 9e:28:c7:d7:e5:3b:0f:ec:31:d7:e8:e3:6b:ba:c8: 7f:a0:34:96:a3:6b:6e:b4:79:df:5c:86:c6:aa:64: 60:bb:cb:9c:2c:29:c3:d9:e0:6a:85:9e:c0:eb:5e: 89:b6:7d:20:12:12:9e:39:f6:28:7c:f9:09:23:00: 6d:42:60:09:f0:1e:aa:b9:91:c2:b3:bb:47:b2:b6: 56:de:c0:83:c5:11:1f:7c:7f:fa:9b:4b:e0:b1:39: cd:fe:f8:5e:34:17:f3:e1:cf:c7:0e:6b:5b:a0:78: 38:ed:eb:3f:80:67:a8:88:b1:04:e4:68:97:7c:8b: 5e:83:c9:5e:8a:6e:c9:7a:2f:81:aa:19:5b:f2:9e: 4a:bb:19:da:48:d5:72:92:01:ac:06:0d:9e:c9:a4: a6:e0:73:8e:6f:2d:40:3a:f8:52:dd:6b:b1:65:33: 7d:b0:c9:4b:10:9a:50:f3:37:3c:7d:ae:50:77:cc: b7:5f:f6:95:25:97:af:d1:98:a4:27:b4:55:ad:9d: 55:73:6b:00:12:c6:d8:e0:1b:2a:0a:e6:9b:b9:07: 67:34:f3:bc:02:fb:aa:10:9a:c6:62:53:a6:9a:be: fb:64:c0:e0:18:27:9d:33:7f:47:4a:35:f5:cb:04: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:12:04:5B:1A:F0:9A:CF:96:62:EE:35:BA:2C:D7:E1:C8:5B:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/868a9c-fe25-4b59-a329-18401da43563/1/a3sSBFsa8JrPlmLuNbos1-HIW60.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.240.0/22 IPv6: 2a09:bcc0::/29 Signature Algorithm: sha256WithRSAEncryption 95:6f:91:cd:6a:b7:88:78:91:28:88:dd:df:e4:ab:45:b1:e9: 9e:34:4b:8e:a6:1a:dd:95:aa:82:7a:d0:97:87:fa:64:cb:08: ba:4f:71:2b:01:72:eb:45:45:07:04:a6:9e:a5:a0:d9:4e:bf: a1:ad:26:e2:af:f6:91:1a:b2:6c:ab:e8:30:1f:1e:a6:03:09: 9b:a4:79:62:88:47:21:9c:41:0f:23:3a:63:f9:53:6a:bd:78: 4b:f3:1d:4e:b2:99:ea:23:6a:72:e1:8a:5e:46:75:6c:6d:46: 7e:36:21:1d:bf:b0:10:c3:e9:f0:28:e8:90:3c:5b:98:44:e3: 19:f3:17:cd:03:14:25:7d:2f:e4:ae:0b:02:c7:f2:92:b1:cb: 90:38:a3:01:22:28:df:6f:a0:d8:72:85:87:89:f5:9f:3f:f5: 76:59:74:7c:b1:c5:62:72:a3:95:59:d7:a0:8c:6d:d2:22:05: 7a:d2:16:e8:6a:8b:53:a0:f1:2d:cd:cb:3f:76:9d:08:2f:5c: 4c:c4:4d:c7:2f:db:27:61:d8:73:e9:ca:35:da:4f:a2:1a:6b: 64:0e:30:8a:01:4b:51:fd:ad:87:f4:c2:a7:54:d4:ea:8b:18: 4f:ea:e3:25:33:07:03:f1:b4:63:fa:47:19:4e:7c:23:33:6b: 50:12:ec:44 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt264F5i1/xzUlC0n994XWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdiMTIwNDViMWFmMDlhY2Y5NjYyZWUzNWJhMmNkN2UxYzg1YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL+kykRj988NqR4gWo6eKMfX5TsP 7DHX6ONrush/oDSWo2tutHnfXIbGqmRgu8ucLCnD2eBqhZ7A616Jtn0gEhKeOfYo fPkJIwBtQmAJ8B6quZHCs7tHsrZW3sCDxREffH/6m0vgsTnN/vheNBfz4c/HDmtb oHg47es/gGeoiLEE5GiXfIteg8leim7Jei+Bqhlb8p5KuxnaSNVykgGsBg2eyaSm 4HOOby1AOvhS3WuxZTN9sMlLEJpQ8zc8fa5Qd8y3X/aVJZev0ZikJ7RVrZ1Vc2sA EsbY4BsqCuabuQdnNPO8AvuqEJrGYlOmmr77ZMDgGCedM39HSjX1ywTtFQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFGt7EgRbGvCaz5Zi7jW6LNfhyFutMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzg2OGE5 Yy1mZTI1LTRiNTktYTMyOS0xODQwMWRhNDM1NjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvODY4YTlj LWZlMjUtNGI1OS1hMzI5LTE4NDAxZGE0MzU2My8xL2Ezc1NCRnNhOEpyUGxtTHVO Ym9zMS1ISVc2MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCXHfwMA0EAgACMAcDBQMqCbzAMA0GCSqGSIb3 DQEBCwUAA4IBAQCVb5HNareIeJEoiN3f5KtFsemeNEuOphrdlaqCetCXh/pkywi6 T3ErAXLrRUUHBKaepaDZTr+hrSbir/aRGrJsq+gwHx6mAwmbpHliiEchnEEPIzpj +VNqvXhL8x1OspnqI2py4YpeRnVsbUZ+NiEdv7AQw+nwKOiQPFuYROMZ8xfNAxQl fS/krgsCx/KSscuQOKMBIijfb6DYcoWHifWfP/V2WXR8scVicqOVWdegjG3SIgV6 0hboaotToPEtzcs/dp0IL1xMxE3HL9snYdhz6co12k+iGmtkDjCKAUtR/a2H9MKn VNTqixhP6uMlMwcD8bRj+kcZTnwjM2tQEuxE -----END CERTIFICATE-----Generated at Mon Jan 26 05:35:58 2026 by rpki-client