This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer (raw, json) Hash identifier: GnHNjLzNu5EZ7jKrq/UGY+9o7RXmozrO6pSjEAThT04= Subject key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAD230BBFA59A16AA211A989211275 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:20:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60555 IP: 91.217.114.0/23 IP: 93.113.254.0/24 IP: 185.13.212.0/22 IP: 2a03:a640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d2:30:bb:fa:59:a1:6a:a2:11:a9:89:21:12:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:7d:35:80:8b:5a:aa:d6:04:25:9b:0d:8d: 72:8a:42:1f:58:62:ff:d7:01:d1:f1:5b:28:1d:93: 6f:45:e9:06:32:fe:cb:1b:a6:3c:c2:8e:ce:bd:1e: a7:fc:dd:7c:c9:24:a0:3b:97:f4:c2:15:b7:a8:cd: 84:64:61:b3:d9:ad:95:e3:3b:9e:3e:86:4e:07:eb: d5:3c:c2:f0:76:36:dc:f6:ef:57:58:5f:15:eb:a7: e1:c8:79:55:f8:9f:77:cc:37:08:a9:78:f6:86:68: 0b:f6:3b:62:12:e0:45:98:8c:4d:42:15:94:95:97: 42:75:6f:f9:3f:e9:2a:b9:8b:64:96:b8:7a:a8:4b: 06:3d:27:3a:7d:f8:f6:a8:8e:91:43:5c:36:60:6b: de:0c:52:ab:5f:fd:65:5d:b2:9e:62:5c:82:80:2d: dd:74:fb:0e:4d:20:b0:60:bb:fb:c1:a8:15:dc:29: 0d:b7:81:43:6c:a8:9b:7f:03:a8:a1:04:86:4e:23: 47:c1:bc:ae:8b:49:f3:ac:ef:b8:f0:fc:e4:df:06: 27:1f:3a:09:db:85:ae:78:92:06:c3:1f:af:8d:16: 05:c7:3a:65:e3:c2:67:c0:7f:b9:81:44:00:55:a1: 4a:6b:b7:28:8d:29:94:7f:79:5c:14:af:60:be:c3: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.114.0/23 93.113.254.0/24 185.13.212.0/22 IPv6: 2a03:a640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60555 Signature Algorithm: sha256WithRSAEncryption 22:7f:12:27:5e:e5:9a:59:4d:4e:02:aa:21:1b:fb:31:57:63: 40:2f:22:a2:24:a6:de:92:ef:ef:d7:58:bc:4f:e2:db:1f:a8: 18:97:c9:ec:99:d6:7e:4e:50:b9:1a:e5:56:de:4a:d3:3a:fa: e3:7e:08:43:bc:5f:bf:a7:22:d1:d4:75:89:01:ec:45:a6:01: 49:24:d5:85:8a:84:ae:b2:2c:f8:70:89:ab:c1:11:69:40:6b: 20:70:10:83:85:84:1a:58:2e:db:47:da:b1:f0:2c:09:19:f6: 34:47:b7:27:4b:ba:27:83:34:a2:1d:d8:3b:07:b4:e7:74:f6: 76:80:15:1f:cd:d5:34:07:7e:e9:76:9a:13:83:d6:9a:83:50: c0:49:3f:e8:66:07:25:cf:c0:8d:f6:9f:2b:7d:0b:c7:f6:63: a2:6e:6e:ee:ff:d3:14:df:8a:cb:1f:ff:43:49:d0:88:72:7d: 23:34:29:03:28:96:39:ba:1b:c2:57:21:86:b9:ea:2b:6c:ee: 1d:67:e1:2f:96:05:55:31:f5:96:1a:60:b9:26:52:0b:48:68: 63:84:c3:1b:8c:c7:9b:ac:9a:ea:97:5b:9d:2f:59:4e:1d:f6: 50:f8:36:c3:b8:77:5e:84:c5:10:21:a3:22:a3:8e:27:a5:cc: 60:87:d0:ca -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9ytIwu/pZoWqiEamJIRJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzdjMjA3MzcxMTZiYzZkNWU1YjIyNDkzMWNmMTNkZDdmNzlmOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVh9NYCLWqrWBCWbDY1yikIfWGL/ 1wHR8VsoHZNvRekGMv7LG6Y8wo7OvR6n/N18ySSgO5f0whW3qM2EZGGz2a2V4zue PoZOB+vVPMLwdjbc9u9XWF8V66fhyHlV+J93zDcIqXj2hmgL9jtiEuBFmIxNQhWU lZdCdW/5P+kquYtklrh6qEsGPSc6ffj2qI6RQ1w2YGveDFKrX/1lXbKeYlyCgC3d dPsOTSCwYLv7wagV3CkNt4FDbKibfwOooQSGTiNHwbyui0nzrO+48Pzk3wYnHzoJ 24WueJIGwx+vjRYFxzpl48JnwH+5gUQAVaFKa7cojSmUf3lcFK9gvsMUxQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFId8IHNxFrxtXlsiSTHPE91/eflbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmL2FjYjk1 Ni1lMWI1LTQ2ODItODBiOC1lNzIzMmY4NDQ4YjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvYWNiOTU2 LWUxYjUtNDY4Mi04MGI4LWU3MjMyZjg0NDhiMC8xL2gzd2djM0VXdkcxZVd5SkpN YzhUM1g5NS1Wcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQBW9lyAwQAXXH+AwQCuQ3UMA0EAgACMAcDBQAq A6ZAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDsizANBgkqhkiG9w0BAQsFAAOC AQEAIn8SJ17lmllNTgKqIRv7MVdjQC8ioiSm3pLv79dYvE/i2x+oGJfJ7JnWfk5Q uRrlVt5K0zr6434IQ7xfv6ci0dR1iQHsRaYBSSTVhYqErrIs+HCJq8ERaUBrIHAQ g4WEGlgu20fasfAsCRn2NEe3J0u6J4M0oh3YOwe053T2doAVH83VNAd+6XaaE4PW moNQwEk/6GYHJc/AjfafK30Lx/Zjom5u7v/TFN+Kyx//Q0nQiHJ9IzQpAyiWObob wlchhrnqK2zuHWfhL5YFVTH1lhpguSZSC0hoY4TDG4zHm6ya6pdbnS9ZTh32UPg2 w7h3XoTFECGjIqOOJ6XMYIfQyg== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:44 2026 by rpki-client