This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer File: hF3ocysQFxOPhwMrcPo7e4d273E.cer (raw, json) Hash identifier: nICMp+z82y2G9UEEhMU4GMJhHLvPehgQEoxJmM9vbhI= Subject key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5D36C9278B3180D131A7A7FDE4704E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.213.133.0/24 IP: 195.200.94.0/23 IP: 2001:67c:136c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:36:c9:27:8b:31:80:d1:31:a7:a7:fd:e4:70:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=845de8732b1017138f87032b70fa3b7b8776ef71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:ea:1d:39:6a:5f:76:77:c2:77:7b:d0:b3: 1e:84:3d:06:f2:cc:8f:73:d3:49:fc:60:ec:33:66: 55:f6:b9:52:66:2f:ad:cc:fc:95:61:f3:05:91:2c: 4a:2d:1b:4d:ee:5f:89:61:86:b3:b5:36:31:29:11: 11:e0:68:da:19:3e:50:aa:af:5f:5d:61:fc:f7:43: c7:6d:87:9e:a1:cf:60:a1:57:d6:36:a6:a9:79:b8: d9:5b:35:b2:57:64:b8:7e:35:d8:c0:34:1b:b0:0f: 8f:f6:b1:f3:55:ec:d5:6c:34:ce:fd:22:0d:75:f1: ec:89:98:99:9a:42:0a:04:5c:7f:b1:fe:fc:df:90: 16:1d:65:a0:5f:c0:27:e4:9c:2d:d5:65:03:7f:7e: 2b:ea:41:73:a1:62:0e:14:39:76:a9:6d:1a:b9:c7: 19:af:6d:40:6d:3d:62:6c:61:96:f1:2e:c6:ae:cb: 12:8e:98:9a:68:f4:18:85:10:86:e4:ff:4f:03:4d: fd:59:b7:67:23:74:6d:1e:01:08:03:d4:9a:e9:c4: c6:02:a1:af:e2:d1:bd:22:db:8b:a0:a6:c9:59:0d: 15:b5:4b:ec:49:d8:c2:f4:69:5e:49:97:64:df:16: 38:a2:ac:b7:27:38:a0:00:1e:c5:46:4a:65:a7:14: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.133.0/24 195.200.94.0/23 IPv6: 2001:67c:136c::/48 Signature Algorithm: sha256WithRSAEncryption 4a:7f:63:f4:1c:69:1c:d1:15:59:5d:9f:d9:1d:87:6b:23:04: 0c:ab:31:66:39:9f:fe:89:cd:04:f6:cc:97:83:9d:97:52:5b: fd:8f:82:10:2c:c9:e5:2f:04:5e:78:d0:7a:7e:b4:6a:c8:c7: fb:8b:f3:f9:04:54:31:c8:fe:d0:a5:3e:97:eb:c4:f9:59:1c: 93:9c:b3:3e:23:6f:97:36:15:40:59:c9:48:18:0b:b0:98:37: a2:b1:f2:bf:bf:eb:22:6d:16:b7:42:83:ee:c6:9d:6d:35:75: 67:45:4d:bb:fb:92:f4:53:05:6c:af:19:4b:46:7d:5b:f2:f5: c3:e0:49:3a:08:c5:09:87:c4:43:de:9e:a5:be:55:8a:29:8e: 6e:b9:92:40:2e:09:3a:df:d2:9f:b0:6c:15:e6:c9:c7:97:3b: 1d:34:a4:46:c9:5e:90:a9:ae:77:c4:03:d8:b8:55:de:1d:a7: e1:d1:18:9d:fb:23:ba:49:7a:46:96:0e:c3:e2:31:3c:19:3c: af:9d:5d:63:de:14:30:6a:9c:cd:1c:67:b3:91:7f:ff:8d:e9: f0:4d:6f:5f:e7:9a:50:8e:f5:a5:ed:95:3d:fb:10:d6:7d:99: 60:29:90:88:86:f8:86:49:ac:47:16:f6:17:27:7a:ff:14:f5: b6:59:50:57 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt9XTbJJ4sxgNExp6f95HBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDVkZTg3MzJiMTAxNzEzOGY4NzAzMmI3MGZhM2I3Yjg3NzZlZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDnqHTlqX3Z3wnd70LMehD0G8syP c9NJ/GDsM2ZV9rlSZi+tzPyVYfMFkSxKLRtN7l+JYYaztTYxKRER4GjaGT5Qqq9f XWH890PHbYeeoc9goVfWNqapebjZWzWyV2S4fjXYwDQbsA+P9rHzVezVbDTO/SIN dfHsiZiZmkIKBFx/sf7835AWHWWgX8An5Jwt1WUDf34r6kFzoWIOFDl2qW0auccZ r21AbT1ibGGW8S7GrssSjpiaaPQYhRCG5P9PA039WbdnI3RtHgEIA9Sa6cTGAqGv 4tG9ItuLoKbJWQ0VtUvsSdjC9GleSZdk3xY4oqy3JzigAB7FRkplpxRNvwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFIRd6HMrEBcTj4cDK3D6O3uHdu9xMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmLzlhZmIz My1lMGFhLTQ5M2ItYTQ2ZC1hODg1ZmI0MGQ5MGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvOWFmYjMz LWUwYWEtNDkzYi1hNDZkLWE4ODVmYjQwZDkwZC8xL2hGM29jeXNRRnhPUGh3TXJj UG83ZTRkMjczRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAW9WFAwQBw8heMA8EAgACMAkDBwAgAQZ8E2ww DQYJKoZIhvcNAQELBQADggEBAEp/Y/QcaRzRFVldn9kdh2sjBAyrMWY5n/6JzQT2 zJeDnZdSW/2PghAsyeUvBF540Hp+tGrIx/uL8/kEVDHI/tClPpfrxPlZHJOcsz4j b5c2FUBZyUgYC7CYN6Kx8r+/6yJtFrdCg+7GnW01dWdFTbv7kvRTBWyvGUtGfVvy 9cPgSToIxQmHxEPenqW+VYopjm65kkAuCTrf0p+wbBXmyceXOx00pEbJXpCprnfE A9i4Vd4dp+HRGJ37I7pJekaWDsPiMTwZPK+dXWPeFDBqnM0cZ7ORf/+N6fBNb1/n mlCO9aXtlT37ENZ9mWApkIiG+IZJrEcW9hcnev8U9bZZUFc= -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:18 2026 by rpki-client