This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer (raw, json) Hash identifier: 2J7Q26+uWFzE53XEYAp5LLB0uGXHMXTtlxfdEP3p7o0= Subject key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED39E8AF3F7998A7902E58D8AB1328 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.246.122.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:39:e8:af:3f:79:98:a7:90:2e:58:d8:ab:13:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=777c49d3f627335190e3c2ec3654e154cfd45398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:7d:93:cb:63:b8:58:34:bf:29:b0:aa:3b: fe:1a:2f:13:80:f0:1e:d5:54:c2:9a:46:ab:0f:63: e6:09:2a:6f:36:5e:02:13:f7:ec:5c:86:a8:18:4a: 3b:4c:e8:46:34:e5:95:89:af:e4:ba:9b:43:62:b6: c6:c6:7c:0f:69:c5:3a:0c:23:e3:a3:5b:f2:a8:d5: 41:fb:f7:40:ed:ff:7f:fa:bb:59:a2:98:b2:93:ad: 3f:74:b4:46:84:2e:0e:48:98:22:ab:db:3b:cc:fd: f4:1f:f4:08:71:b7:cc:6c:9b:cf:38:36:fe:c4:f8: aa:2f:cf:d7:72:35:a5:70:70:b2:48:7f:c2:67:50: f7:de:8f:34:89:71:b3:6d:3a:3f:5c:1a:64:2b:c0: 68:8f:6d:45:d4:a2:35:50:ac:96:ba:fb:3e:69:d1: 54:95:cd:35:3e:04:a4:9b:73:f8:f4:2e:0a:c4:96: 55:9b:45:1d:1f:14:c2:3d:9f:b7:16:43:a0:ad:0b: 4a:63:17:cd:7a:d3:41:7a:d0:75:96:18:ce:08:84: 21:fb:76:89:83:31:e7:82:ba:51:36:f8:ae:63:b5: 3c:fc:d0:29:5b:72:e4:60:ff:70:62:6e:f6:7d:3b: 92:97:6f:7a:b9:19:03:f9:f0:65:a9:21:f9:30:62: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.246.122.0/24 Signature Algorithm: sha256WithRSAEncryption 69:91:f3:74:57:54:b1:e3:fc:8a:45:d7:f2:e8:c0:86:c2:5d: 44:01:d8:b8:04:6a:63:e2:e2:68:ae:9c:42:d3:71:e4:04:17: c0:4b:72:cc:a8:24:83:44:be:51:b1:76:b1:84:8b:03:37:2c: 6c:b8:08:23:e4:dd:aa:00:2d:1f:5c:66:fa:5c:2a:f7:0d:01: ed:6a:41:de:96:04:c3:92:bc:d9:81:16:fb:22:28:58:d5:d2: 32:1b:61:f7:0c:84:0a:09:e4:75:7e:1c:07:ae:05:13:18:d5: ce:ea:d5:b2:23:0b:72:32:ca:ed:3e:6a:76:dc:88:f4:18:e3: 1c:1a:0f:8c:15:b5:41:2c:3b:e3:49:87:34:38:d6:e1:6a:a4: 63:12:27:07:20:61:73:53:00:9c:91:29:51:6d:b6:da:35:88: 30:b3:c2:c1:69:32:fe:df:e2:92:a7:06:37:d4:05:2d:b5:7f: 41:f3:5e:9c:48:28:5b:12:9f:9b:8d:fd:ff:b2:4b:57:dd:13: 6c:49:4f:a4:97:e7:72:74:b5:90:54:ae:ae:f0:61:0a:29:31: 4f:85:86:92:e2:f1:df:1d:02:02:ac:c4:41:3d:e3:59:da:ac: aa:75:1f:56:26:c9:dc:b6:1f:df:80:9f:56:ea:bc:d2:70:c3: dd:66:10:0f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt87Tnorz95mKeQLljYqxMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzdjNDlkM2Y2MjczMzUxOTBlM2MyZWMzNjU0ZTE1NGNmZDQ1Mzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfB9k8tjuFg0vymwqjv+Gi8TgPAe 1VTCmkarD2PmCSpvNl4CE/fsXIaoGEo7TOhGNOWVia/kuptDYrbGxnwPacU6DCPj o1vyqNVB+/dA7f9/+rtZopiyk60/dLRGhC4OSJgiq9s7zP30H/QIcbfMbJvPODb+ xPiqL8/XcjWlcHCySH/CZ1D33o80iXGzbTo/XBpkK8Boj21F1KI1UKyWuvs+adFU lc01PgSkm3P49C4KxJZVm0UdHxTCPZ+3FkOgrQtKYxfNetNBetB1lhjOCIQh+3aJ gzHngrpRNviuY7U8/NApW3LkYP9wYm72fTuSl296uRkD+fBlqSH5MGK0bQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHd8SdP2JzNRkOPC7DZU4VTP1FOYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzVlN2Ez MS1lZTYzLTQxMjAtOTUyYy1jZDJmOGM5NGY5NzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvNWU3YTMx LWVlNjMtNDEyMC05NTJjLWNkMmY4Yzk0Zjk3NC8xL2QzeEowX1luTTFHUTQ4THNO bFRoVk1fVVU1Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwfZ6MA0GCSqGSIb3DQEBCwUAA4IBAQBpkfN0 V1Sx4/yKRdfy6MCGwl1EAdi4BGpj4uJorpxC03HkBBfAS3LMqCSDRL5RsXaxhIsD NyxsuAgj5N2qAC0fXGb6XCr3DQHtakHelgTDkrzZgRb7IihY1dIyG2H3DIQKCeR1 fhwHrgUTGNXO6tWyIwtyMsrtPmp23Ij0GOMcGg+MFbVBLDvjSYc0ONbhaqRjEicH IGFzUwCckSlRbbbaNYgws8LBaTL+3+KSpwY31AUttX9B816cSChbEp+bjf3/sktX 3RNsSU+kl+dydLWQVK6u8GEKKTFPhYaS4vHfHQICrMRBPeNZ2qyqdR9WJsncth/f gJ9W6rzScMPdZhAP -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:28 2026 by rpki-client