This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer File: rh3Biksfv-LCur2Lu0f-H9HPIvg.cer (raw, json) Hash identifier: Z+EM07wYXYLDDVn/qrbZnSXth6YanXTQ48B6qv9Co6o= Subject key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B20BD95649B5BB42E09E95F891DAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203889 IP: 194.99.113.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:20:bd:95:64:9b:5b:b4:2e:09:e9:5f:89:1d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:2f:1c:dd:12:3e:e7:7c:4b:55:b5:3d:89: 56:9e:15:2a:30:ff:da:82:6d:09:6e:10:fb:78:3c: b8:65:90:25:0e:4a:cc:ae:c8:d6:26:96:92:c8:2e: 6d:ac:95:d8:b0:ed:da:9b:43:c6:8a:8a:cf:5e:ab: 00:49:2d:f6:66:9b:8f:31:31:60:e3:de:e0:e7:b9: 22:e4:f7:69:c6:78:0f:5b:7f:f9:6e:23:e1:2b:1a: a5:c7:5a:8d:2b:0f:07:cc:93:ef:40:ac:91:55:23: 9e:53:f9:8f:10:b7:20:88:e5:2e:82:0b:89:e9:8b: 99:7a:2c:06:20:e6:fe:f4:8e:5d:28:4a:57:2d:94: f7:15:a0:57:f8:cc:c5:35:cf:91:60:02:94:29:f1: ac:e1:6d:2a:d2:93:9d:1e:a5:5c:d3:11:93:e7:e2: 69:60:40:b9:b6:e0:5f:ec:4f:8f:d2:51:b5:ae:8c: 68:c2:bf:b1:10:2d:76:d8:db:40:c2:b9:26:cf:55: aa:10:f1:36:c0:c8:da:db:46:3b:e5:06:6c:6e:9c: 43:86:9a:44:b9:e4:98:be:1e:f7:77:58:1a:6a:b6: b1:fc:ea:d0:8a:49:e0:9f:2a:96:85:f0:3c:ce:bd: c3:fd:9b:d1:1a:29:03:2b:08:89:c1:70:5f:07:ca: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.113.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203889 Signature Algorithm: sha256WithRSAEncryption 1d:4e:c0:10:d7:8b:60:81:41:8f:ad:3c:87:34:25:4a:02:61: c0:e4:2f:10:29:de:0e:81:a8:80:c9:e0:af:e6:ef:25:c5:95: 4e:66:ff:f0:6e:7a:36:6b:ec:2e:cf:33:34:8d:bc:b6:05:aa: 76:53:4d:d2:6d:7c:fd:22:e9:6f:1b:d0:7d:ee:a1:2a:a7:0c: 21:3e:6f:48:33:53:3f:5b:dc:19:70:42:d9:26:3b:48:37:51: 45:eb:50:58:0e:3f:16:1e:ed:53:e4:dc:0a:8e:c5:21:69:2a: 74:95:d5:bb:d2:33:0c:6a:73:e2:dc:8f:9b:ad:10:f6:7f:03: d8:55:e6:b7:4f:a9:5d:f6:1e:d2:41:d4:ef:4c:4e:c5:e0:ce: 1b:65:de:b4:77:5a:d4:99:a0:52:4c:ca:c7:7d:c3:de:a7:16: ff:85:e3:0b:2c:3b:a0:14:34:e0:34:fb:d3:f2:9e:3f:7c:0a: 22:31:93:b6:92:47:6a:7d:ad:61:09:12:00:79:e1:dd:f2:bf: 65:f3:3d:ec:3b:0f:96:85:bd:7e:c1:ce:f9:67:60:05:0a:50: 6e:01:eb:52:8e:7f:19:87:e5:5d:0f:46:32:87:6d:0b:ec:bc: dc:bd:85:19:ab:8e:7d:ce:c1:ff:a9:dd:f0:25:7f:a5:df:df: e3:87:bb:50 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt6WyC9lWSbW7QuCelfiR2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTFkYzE4YTRiMWZiZmUyYzJiYWJkOGJiYjQ3ZmUxZmQxY2YyMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK0vHN0SPud8S1W1PYlWnhUqMP/a gm0JbhD7eDy4ZZAlDkrMrsjWJpaSyC5trJXYsO3am0PGiorPXqsASS32ZpuPMTFg 497g57ki5PdpxngPW3/5biPhKxqlx1qNKw8HzJPvQKyRVSOeU/mPELcgiOUugguJ 6YuZeiwGIOb+9I5dKEpXLZT3FaBX+MzFNc+RYAKUKfGs4W0q0pOdHqVc0xGT5+Jp YEC5tuBf7E+P0lG1roxowr+xEC122NtAwrkmz1WqEPE2wMja20Y75QZsbpxDhppE ueSYvh73d1gaarax/OrQikngnyqWhfA8zr3D/ZvRGikDKwiJwXBfB8qK4QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFK4dwYpLH7/iwrq9i7tH/h/RzyL4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzAzNzZk MS0xMmNhLTQxMzUtOTQ4My04ZTcxNDlmMDRhNGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMDM3NmQx LTEyY2EtNDEzNS05NDgzLThlNzE0OWYwNGE0ZS8xL3JoM0Jpa3Nmdi1MQ3VyMkx1 MGYtSDlIUEl2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwmNxMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMccTANBgkqhkiG9w0BAQsFAAOCAQEAHU7AENeLYIFBj608hzQlSgJhwOQvECne DoGogMngr+bvJcWVTmb/8G56NmvsLs8zNI28tgWqdlNN0m18/SLpbxvQfe6hKqcM IT5vSDNTP1vcGXBC2SY7SDdRRetQWA4/Fh7tU+TcCo7FIWkqdJXVu9IzDGpz4tyP m60Q9n8D2FXmt0+pXfYe0kHU70xOxeDOG2XetHda1JmgUkzKx33D3qcW/4XjCyw7 oBQ04DT70/KeP3wKIjGTtpJHan2tYQkSAHnh3fK/ZfM97DsPloW9fsHO+WdgBQpQ bgHrUo5/GYflXQ9GModtC+y83L2FGauOfc7B/6nd8CV/pd/f44e7UA== -----END CERTIFICATE-----Generated at Mon Jan 26 03:31:00 2026 by rpki-client