This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/arQ3nhGecQAczf7r9PKvLPXwego.cer File: arQ3nhGecQAczf7r9PKvLPXwego.cer (raw, json) Hash identifier: VO3GgtwXsAbu2nSqGULkbwF6YBVhrIJvtM5/MmPA8qE= Subject key identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7911259761C666AC125CFE1560F8C15B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 160.20.148.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:25:97:61:c6:66:ac:12:5c:fe:15:60:f8:c1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ab4379e119e71001ccdfeebf4f2af2cf5f07a0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:95:6c:72:91:db:28:f7:c4:cc:57:7a:22: fd:8b:f7:4d:7e:72:6c:cb:3f:06:40:39:af:35:e7: 55:f7:06:bf:8b:eb:cb:55:d5:0c:d0:bb:7e:e8:5b: 6f:05:fa:8a:a1:14:fd:09:f3:3c:60:6c:17:28:60: 0c:6d:27:e1:97:be:c4:53:7c:69:66:81:eb:ee:b6: a8:4c:68:c9:2e:05:24:18:47:8e:c4:5c:21:7d:5c: e6:85:3a:97:aa:0c:e2:c4:28:be:9d:9c:a9:77:8a: 86:3c:55:fd:b9:13:62:e1:3d:b8:97:11:bd:e8:71: fc:38:32:38:c0:28:c4:40:75:04:0d:b8:03:32:1f: 3d:60:63:72:a4:bf:ca:58:84:8d:4e:cf:f6:b3:ae: 34:06:06:8a:0e:a2:af:4a:dd:b4:c1:c2:1d:74:44: b2:bb:46:54:4a:2b:70:ee:dd:13:7e:e5:a1:e3:1a: ac:c4:37:97:0a:c4:f5:36:f6:60:a7:ee:56:65:65: 13:e3:d1:92:e0:81:4b:47:4e:88:6b:ce:38:f9:98: a4:c7:40:a6:4c:1c:94:d5:07:cb:02:cb:a1:41:7f: 6b:cc:c2:10:06:ed:96:39:93:bc:0c:91:d1:b7:6c: 88:19:f0:97:01:3b:fd:4e:83:1a:29:ae:ad:21:bb: ad:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B4:37:9E:11:9E:71:00:1C:CD:FE:EB:F4:F2:AF:2C:F5:F0:7A:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89a4bf-325a-4675-bb00-0a4338cdf97b/1/arQ3nhGecQAczf7r9PKvLPXwego.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.20.148.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:ff:95:1c:ca:08:a4:22:72:bb:dd:e3:97:4e:2c:f7:83:35: 04:d1:6c:a3:76:c9:f3:78:97:ed:3e:47:a5:f4:f2:b0:52:48: 7d:e3:cf:3f:6f:99:c0:1a:35:36:4f:24:cd:80:38:c4:1d:9f: 51:27:bd:7d:be:8a:83:5d:a1:0b:23:7a:3f:28:58:35:8a:c7: 12:a1:6f:1b:cf:b8:75:30:c2:c1:33:60:8a:3b:08:98:db:f0: fa:22:e8:90:1f:44:b6:14:9c:39:5f:c9:89:41:a2:40:d8:b5: 77:2d:8a:07:88:0a:a1:3a:b4:92:5f:60:c9:f7:dd:7e:e7:5c: 8b:33:1e:49:41:8c:8f:a4:c4:56:63:c7:a4:c7:f2:6f:12:c8: 9c:6a:c8:ef:ff:ae:4f:01:51:0b:b3:26:5e:cc:dc:4c:78:49: ed:59:ed:ed:c9:62:e2:9c:aa:cd:ec:55:6e:93:ef:9f:4c:b7: 6d:3b:ea:0f:cf:16:80:d2:32:09:01:a3:c1:64:ca:0f:c4:3e: 51:34:14:69:ac:f6:01:3f:db:d9:74:1d:5c:e0:ac:d0:e3:58: d6:5a:52:24:bc:5f:f0:84:7e:90:68:4c:c9:db:20:69:94:5c: 15:64:3c:89:a8:e7:96:12:75:cd:70:19:8d:5d:f5:e9:18:33: e9:63:9c:c0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ESWXYcZmrBJc/hVg+MFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWI0Mzc5ZTExOWU3MTAwMWNjZGZlZWJmNGYyYWYyY2Y1ZjA3YTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuViVbHKR2yj3xMxXeiL9i/dNfnJs yz8GQDmvNedV9wa/i+vLVdUM0Lt+6FtvBfqKoRT9CfM8YGwXKGAMbSfhl77EU3xp ZoHr7raoTGjJLgUkGEeOxFwhfVzmhTqXqgzixCi+nZypd4qGPFX9uRNi4T24lxG9 6HH8ODI4wCjEQHUEDbgDMh89YGNypL/KWISNTs/2s640BgaKDqKvSt20wcIddESy u0ZUSitw7t0TfuWh4xqsxDeXCsT1NvZgp+5WZWUT49GS4IFLR06Ia844+Zikx0Cm TByU1QfLAsuhQX9rzMIQBu2WOZO8DJHRt2yIGfCXATv9ToMaKa6tIbut1QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGq0N54RnnEAHM3+6/Tyryz18HoKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzg5YTRi Zi0zMjVhLTQ2NzUtYmIwMC0wYTQzMzhjZGY5N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvODlhNGJm LTMyNWEtNDY3NS1iYjAwLTBhNDMzOGNkZjk3Yi8xL2FyUTNuaEdlY1FBY3pmN3I5 UEt2TFBYd2Vnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCoBSUMA0GCSqGSIb3DQEBCwUAA4IBAQBr/5Uc ygikInK73eOXTiz3gzUE0WyjdsnzeJftPkel9PKwUkh9488/b5nAGjU2TyTNgDjE HZ9RJ719voqDXaELI3o/KFg1iscSoW8bz7h1MMLBM2CKOwiY2/D6IuiQH0S2FJw5 X8mJQaJA2LV3LYoHiAqhOrSSX2DJ991+51yLMx5JQYyPpMRWY8ekx/JvEsicasjv /65PAVELsyZezNxMeEntWe3tyWLinKrN7FVuk++fTLdtO+oPzxaA0jIJAaPBZMoP xD5RNBRprPYBP9vZdB1c4KzQ41jWWlIkvF/whH6QaEzJ2yBplFwVZDyJqOeWEnXN cBmNXfXpGDPpY5zA -----END CERTIFICATE-----Generated at Fri Jan 2 16:57:07 2026 by rpki-client