This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer (raw, json) Hash identifier: 89wXJyI776YJdSxSsavf4Vz9CS7qeDEqyFy2xLQvlRI= Subject key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F12FE113E3448D4DE9A7C86D6BFB8DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.127.72.0/22 IP: 2a06:c7c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:12:fe:11:3e:34:48:d4:de:9a:7c:86:d6:bf:b8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:84:3a:bb:dc:90:4f:49:48:37:86:ad:d3: ec:1f:f2:0b:f0:4a:b2:67:95:c5:eb:35:3b:5a:60: f0:ad:09:10:3b:9d:96:c4:08:09:06:b6:85:74:86: f7:b5:17:0b:f8:91:37:a7:e4:0d:93:15:e1:bc:9e: 4a:34:5a:bc:52:ad:c3:49:4c:e8:e0:41:36:26:c6: 21:64:f4:80:35:74:f6:41:68:c6:68:f0:b5:8e:08: 1e:2b:7f:df:1f:e3:23:78:39:2a:2d:ae:d3:c6:38: 3d:55:69:49:3b:43:c1:cd:4e:f1:02:8a:24:e6:49: 7e:14:02:20:e1:31:f9:80:a8:8b:17:81:c7:3e:4a: 56:b7:80:ef:dd:b7:77:eb:46:cc:29:17:f6:9b:ea: ef:6f:5b:9b:41:52:2f:6b:8b:44:10:6f:e1:d4:ae: 9c:23:31:62:af:8d:8a:6b:77:42:f1:e7:ca:5d:3b: 09:28:ce:d1:f7:37:eb:96:98:d9:0c:87:55:72:2c: 6b:34:6a:83:ec:d5:38:8f:e4:f9:7b:ed:4b:fe:12: 08:01:cb:06:a2:ed:9b:6f:9c:83:20:ad:49:c6:d6: 02:1c:e4:50:d3:2c:df:9b:b0:ef:1d:48:17:ea:38: 39:03:db:d3:df:8b:0d:52:be:a4:f5:98:28:26:57: bf:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.72.0/22 IPv6: 2a06:c7c0::/29 Signature Algorithm: sha256WithRSAEncryption 56:ea:7d:b5:8c:c5:c1:0a:20:c6:ab:ee:41:45:3b:a1:95:1e: af:4a:91:80:37:40:b5:8b:c9:ed:70:c7:48:e2:25:be:a5:75: 6a:50:a6:bb:21:5d:41:fd:0a:2e:60:ee:81:13:38:05:6e:0b: 97:25:44:7d:cd:65:82:f3:86:a5:de:82:fb:76:02:6c:72:9d: a2:bc:7c:15:21:54:fc:39:0f:fb:7b:df:ba:12:a1:3e:c2:48: 12:b4:67:52:74:50:13:15:45:cb:9d:24:3d:38:69:6b:ec:c8: 7d:25:23:40:fe:3d:97:83:05:ad:d4:73:1e:73:82:26:fe:87: 2b:cc:5f:6d:1b:9a:06:b9:ea:ed:8c:dc:f0:e4:18:77:7e:03: 32:e2:cf:be:c8:ab:ab:70:75:6a:6f:d6:9e:68:a7:04:86:9f: 94:96:eb:b9:db:37:53:83:de:83:34:1e:cd:7e:39:17:73:f6: 50:7c:44:51:ec:d1:0c:39:8c:cb:f2:bf:51:54:62:29:9a:04: 2c:de:0f:6c:d9:73:06:36:62:64:c0:bb:04:f7:77:6d:2b:78: 01:a7:1d:9f:1b:13:2d:e9:88:2d:df:69:af:21:66:2a:0c:67: a5:45:7a:7c:d6:4a:5f:a1:d5:d0:55:09:f9:49:c1:07:de:21: 1d:48:dc:30 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt/Ev4RPjRI1N6afIbWv7jeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmY4NjJkZmUwYzM0ODc0MTIwZDJjYzE2OWZjMzE0NDkzOGVlOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm2EOrvckE9JSDeGrdPsH/IL8Eqy Z5XF6zU7WmDwrQkQO52WxAgJBraFdIb3tRcL+JE3p+QNkxXhvJ5KNFq8Uq3DSUzo 4EE2JsYhZPSANXT2QWjGaPC1jggeK3/fH+MjeDkqLa7Txjg9VWlJO0PBzU7xAook 5kl+FAIg4TH5gKiLF4HHPkpWt4Dv3bd360bMKRf2m+rvb1ubQVIva4tEEG/h1K6c IzFir42Ka3dC8efKXTsJKM7R9zfrlpjZDIdVcixrNGqD7NU4j+T5e+1L/hIIAcsG ou2bb5yDIK1JxtYCHORQ0yzfm7DvHUgX6jg5A9vT34sNUr6k9ZgoJle/MQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFHL4Yt/gw0h0Eg0swWn8MUSTjujZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2LzEzNWZj NC1iMzVhLTQyZGItODE0MS0yMjA3NjRkYzM0NWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvMTM1ZmM0 LWIzNWEtNDJkYi04MTQxLTIyMDc2NGRjMzQ1Yy8xL2N2aGkzLUREU0hRU0RTekJh Znd4UkpPTzZOay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuX9IMA0EAgACMAcDBQMqBsfAMA0GCSqGSIb3 DQEBCwUAA4IBAQBW6n21jMXBCiDGq+5BRTuhlR6vSpGAN0C1i8ntcMdI4iW+pXVq UKa7IV1B/QouYO6BEzgFbguXJUR9zWWC84al3oL7dgJscp2ivHwVIVT8OQ/7e9+6 EqE+wkgStGdSdFATFUXLnSQ9OGlr7Mh9JSNA/j2XgwWt1HMec4Im/ocrzF9tG5oG uertjNzw5Bh3fgMy4s++yKurcHVqb9aeaKcEhp+Uluu52zdTg96DNB7NfjkXc/ZQ fERR7NEMOYzL8r9RVGIpmgQs3g9s2XMGNmJkwLsE93dtK3gBpx2fGxMt6Ygt32mv IWYqDGelRXp81kpfodXQVQn5ScEH3iEdSNww -----END CERTIFICATE-----Generated at Mon Jan 12 22:23:59 2026 by rpki-client