This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer File: dE3LcujLR4z8SyWusfA7QGJmN1w.cer (raw, json) Hash identifier: TTlDTCQLMx/T/87vDhavNZpxPpFeuxA/81blFNhn0Ko= Subject key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB276D54042D2FD80AE94991C90CB9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.246.207.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:27:6d:54:04:2d:2f:d8:0a:e9:49:91:c9:0c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f4:68:fe:2f:28:d2:4e:a1:5e:59:43:f3:64: c0:e0:f0:17:33:ad:0a:31:d8:72:51:4b:bf:b0:8c: cb:bb:99:ec:68:f0:56:53:47:c0:06:1c:9b:ae:d6: e8:9d:9c:60:47:3a:57:dc:73:be:1a:47:ec:7d:47: ea:c4:97:fc:a8:52:2d:79:11:d1:72:88:3e:65:c5: ef:5a:dd:58:79:73:11:ef:72:23:70:a4:c7:f8:38: 50:7f:af:2a:0c:bd:b2:6b:89:dc:b1:50:f2:a4:10: 50:7e:dd:5d:14:77:f6:e8:00:0c:63:f4:df:9b:da: 0b:ef:a1:59:c0:ce:1a:72:5c:75:76:22:83:a3:f5: 6d:ac:6d:cf:77:10:4a:14:de:e9:17:2b:da:f0:d5: f5:1c:9e:bd:df:97:0a:42:5e:62:1a:72:fd:4c:d3: f4:72:a2:fb:dd:66:61:3a:a0:bb:9a:df:13:8e:e4: 36:ec:0b:8a:3d:f7:37:8d:c4:f6:05:7a:de:ee:0f: 01:1a:49:3c:5b:5e:e2:90:bf:15:45:8e:b8:af:0f: a9:86:78:e2:bc:a4:8b:97:e5:a7:f3:e6:1e:8d:d8: a7:6e:08:7f:ef:ce:85:44:1d:56:33:70:f5:27:89: de:85:6a:1d:37:5c:82:88:13:f6:e1:65:04:fa:1e: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.246.207.0/24 Signature Algorithm: sha256WithRSAEncryption 53:4c:b1:9d:c0:18:f2:36:48:40:63:dd:ef:64:17:ed:f5:91: 43:9d:64:d8:12:e3:4a:dd:1c:f7:a1:15:cf:e2:48:6f:8a:83: c7:ea:d4:11:8a:2e:07:9d:7c:76:02:d3:1d:8d:2d:94:49:38: a0:ed:bf:2c:39:2b:a3:63:7b:6f:50:ab:ca:16:bf:78:7e:d0: 3a:82:8f:c9:ce:47:12:6d:d5:55:72:08:8d:30:69:17:98:d0: 0b:ba:3e:d0:2d:27:7e:c5:4b:0c:94:cb:73:f7:d4:66:27:91: 43:09:f0:85:27:12:a0:a3:1c:88:9d:bb:91:d0:f1:13:0a:b8: 0c:a8:60:21:ac:ce:6d:20:02:e8:7d:29:8e:e6:78:8a:ee:7d: ec:f9:46:52:ac:c1:2d:9b:3d:bd:66:df:44:c6:14:26:83:d5: 89:2f:6b:fb:9b:16:78:35:0f:30:74:10:8c:f4:f0:ae:bd:44: ca:33:8c:70:3a:6a:98:44:05:d8:ba:e6:ee:77:43:79:7b:f7: bf:42:72:96:f3:46:21:f7:9d:51:48:f2:63:b1:f4:a6:94:d0: e0:6a:b0:82:9c:45:86:7c:de:38:68:e3:b7:77:2c:f2:be:ac: e3:04:01:c0:d0:46:e6:02:2c:16:87:f9:18:a8:60:17:fb:10: 24:e6:23:4a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt26ydtVAQtL9gK6UmRyQy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDRkY2I3MmU4Y2I0NzhjZmM0YjI1YWViMWYwM2I0MDYyNjYzNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Ro/i8o0k6hXllD82TA4PAXM60K MdhyUUu/sIzLu5nsaPBWU0fABhybrtbonZxgRzpX3HO+GkfsfUfqxJf8qFIteRHR cog+ZcXvWt1YeXMR73IjcKTH+DhQf68qDL2ya4ncsVDypBBQft1dFHf26AAMY/Tf m9oL76FZwM4aclx1diKDo/VtrG3PdxBKFN7pFyva8NX1HJ6935cKQl5iGnL9TNP0 cqL73WZhOqC7mt8TjuQ27AuKPfc3jcT2BXre7g8BGkk8W17ikL8VRY64rw+phnji vKSLl+Wn8+Yejdinbgh/786FRB1WM3D1J4nehWodN1yCiBP24WUE+h4L9QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFHRNy3Loy0eM/EslrrHwO0BiZjdcMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzVlMWJl OS1lNGVhLTRjODQtYThiNy1kMGQ0NzZmNDFmZDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvNWUxYmU5 LWU0ZWEtNGM4NC1hOGI3LWQwZDQ3NmY0MWZkNi8xL2RFM0xjdWpMUjR6OFN5V3Vz ZkE3UUdKbU4xdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwfbPMA0GCSqGSIb3DQEBCwUAA4IBAQBTTLGd wBjyNkhAY93vZBft9ZFDnWTYEuNK3Rz3oRXP4khvioPH6tQRii4HnXx2AtMdjS2U STig7b8sOSujY3tvUKvKFr94ftA6go/JzkcSbdVVcgiNMGkXmNALuj7QLSd+xUsM lMtz99RmJ5FDCfCFJxKgoxyInbuR0PETCrgMqGAhrM5tIALofSmO5niK7n3s+UZS rMEtmz29Zt9ExhQmg9WJL2v7mxZ4NQ8wdBCM9PCuvUTKM4xwOmqYRAXYuubud0N5 e/e/QnKW80Yh951RSPJjsfSmlNDgarCCnEWGfN44aOO3dyzyvqzjBAHA0EbmAiwW h/kYqGAX+xAk5iNK -----END CERTIFICATE-----Generated at Mon Jan 26 11:41:54 2026 by rpki-client