This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer File: cF3hUpBmZK56yfIIesTQBoWl1_A.cer (raw, json) Hash identifier: qLmhb/44dGh+iZTPMxc1sDKjqunuMMfLFYxdI6etkUc= Subject key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB373CB74B04F4CF85F72DF07ABDAD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.241.88.0/22 IP: 195.191.50.0/23 IP: 2001:67c:26a0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:37:3c:b7:4b:04:f4:cf:85:f7:2d:f0:7a:bd:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:68:77:66:a0:e5:ae:55:fc:e8:da:8f:56:a1: 07:ad:b8:1c:d1:f2:4a:63:87:03:af:52:33:0c:2f: ad:05:90:a8:59:41:d9:3c:1a:d7:7c:da:7e:7c:bd: 07:0e:b3:b4:1a:ba:6f:e1:bc:50:a0:cd:50:81:34: 13:5e:f1:ce:9f:d2:18:dc:0a:ae:fe:33:4b:25:af: 6e:35:e3:df:75:d8:91:b0:b5:c5:01:37:5f:d6:4c: 1c:34:ec:98:02:10:6c:6b:b5:6b:b6:14:67:15:62: 87:d8:08:9b:fc:ed:0f:62:32:2b:15:c5:32:93:b0: 33:1b:c6:31:1d:af:ce:84:6a:e5:a2:dc:2f:30:42: 3b:de:11:d4:60:43:31:1c:aa:db:6a:05:9a:2a:a7: bc:07:19:b6:c8:2b:4f:d1:07:ac:fa:ef:7e:fe:c2: 80:9f:93:b4:72:ca:66:8b:02:28:5a:91:b2:ba:f8: 75:a4:96:88:8d:5c:1e:aa:0f:88:60:06:fe:90:39: 4a:2e:6a:6d:d3:ed:d6:27:83:6b:90:eb:aa:f8:24: 1e:bd:11:71:8a:db:9b:83:30:84:09:5a:fe:04:8a: 62:4b:15:7d:d5:57:cb:16:82:f1:63:f1:0e:ca:15: 77:ae:c9:20:ff:79:0a:f2:28:f4:a8:98:d3:7a:30: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.88.0/22 195.191.50.0/23 IPv6: 2001:67c:26a0::/48 Signature Algorithm: sha256WithRSAEncryption 1a:8e:d4:c7:13:b7:1f:3f:26:bd:9a:0c:b0:a8:71:39:f0:80: db:81:09:a2:08:8a:0c:3a:a2:8f:6c:e6:c0:34:23:75:6e:1b: 2d:d4:06:48:ce:a0:e0:a0:80:fe:b2:df:25:2a:0b:8f:e8:61: 3b:22:3d:df:7b:dd:08:e0:63:a9:70:c3:05:0d:c1:60:48:16: 40:52:95:01:90:84:06:e8:9b:c7:62:e5:87:20:35:b4:f6:91: 69:b8:fb:78:ae:51:a4:70:f0:a3:23:6b:20:13:dc:7f:d8:51: 79:e9:c1:d2:52:a9:15:bd:7d:5a:a5:12:ad:67:21:95:db:98: 92:c8:9f:ef:73:62:2f:02:c8:c5:80:c4:94:66:e3:4a:c9:51: 6a:2f:a5:d3:ef:af:df:c0:a9:9b:5c:e8:bd:ac:70:23:0a:57: d2:b9:9c:bb:0d:46:5a:97:48:44:15:02:07:3f:42:14:b4:3d: 64:cd:2f:41:bd:93:f4:1e:f1:dd:7d:c0:9c:b9:da:c7:ff:8f: f8:5e:d9:af:b8:bf:d4:d6:9f:96:6e:0c:db:45:84:ca:c9:28: 31:b5:3a:96:8c:6a:f3:dc:f8:b9:2b:3b:06:3c:68:06:57:24: db:3e:4d:60:ac:32:ea:44:55:6b:64:7e:58:be:8b:e5:77:85: 49:28:a6:13 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt26zc8t0sE9M+F9y3wer2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDVkZTE1MjkwNjY2NGFlN2FjOWYyMDg3YWM0ZDAwNjg1YTVkN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2h3ZqDlrlX86NqPVqEHrbgc0fJK Y4cDr1IzDC+tBZCoWUHZPBrXfNp+fL0HDrO0Grpv4bxQoM1QgTQTXvHOn9IY3Aqu /jNLJa9uNePfddiRsLXFATdf1kwcNOyYAhBsa7VrthRnFWKH2Aib/O0PYjIrFcUy k7AzG8YxHa/OhGrlotwvMEI73hHUYEMxHKrbagWaKqe8Bxm2yCtP0Qes+u9+/sKA n5O0cspmiwIoWpGyuvh1pJaIjVweqg+IYAb+kDlKLmpt0+3WJ4NrkOuq+CQevRFx itubgzCECVr+BIpiSxV91VfLFoLxY/EOyhV3rskg/3kK8ij0qJjTejDeMQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFHBd4VKQZmSuesnyCHrE0AaFpdfwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiLzIxMmE3 Ni03OTM0LTRjYzEtODJjNC1mNTYxODQ3N2Y4ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMjEyYTc2 LTc5MzQtNGNjMS04MmM0LWY1NjE4NDc3ZjhkNC8xL2NGM2hVcEJtWks1NnlmSUll c1RRQm9XbDFfQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQCW/FYAwQBw78yMA8EAgACMAkDBwAgAQZ8JqAw DQYJKoZIhvcNAQELBQADggEBABqO1McTtx8/Jr2aDLCocTnwgNuBCaIIigw6oo9s 5sA0I3VuGy3UBkjOoOCggP6y3yUqC4/oYTsiPd973QjgY6lwwwUNwWBIFkBSlQGQ hAbom8di5YcgNbT2kWm4+3iuUaRw8KMjayAT3H/YUXnpwdJSqRW9fVqlEq1nIZXb mJLIn+9zYi8CyMWAxJRm40rJUWovpdPvr9/AqZtc6L2scCMKV9K5nLsNRlqXSEQV Agc/QhS0PWTNL0G9k/Qe8d19wJy52sf/j/he2a+4v9TWn5ZuDNtFhMrJKDG1OpaM avPc+LkrOwY8aAZXJNs+TWCsMupEVWtkfli+i+V3hUkophM= -----END CERTIFICATE-----Generated at Mon Jan 12 01:10:42 2026 by rpki-client