This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer File: 1-3nCbzFXU0UVnIQO0nioeKklZhU.cer (raw, json) Hash identifier: idpOi3VMh7t2xzmhxVFbuGig13uZUZWbq2PGUks77EQ= Subject key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C68727882C0F850290E6F5AB77C000 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51430 IP: 31.3.152.0/21 IP: 37.46.112.0/20 IP: 79.142.64.0/20 IP: 91.214.44.0/22 IP: 128.127.104.0/21 IP: 185.2.28.0/22 IP: 185.7.32.0/22 IP: 185.10.56.0/22 IP: 213.5.64.0/21 IP: 2a00:7140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:87:27:88:2c:0f:85:02:90:e6:f5:ab:77:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb79c26f31575345159c840ed278a878a9256615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:40:ac:5e:63:ab:1e:9e:23:f4:ce:c3:c4: c7:38:ba:b6:0c:78:0d:6e:f4:f3:a9:c8:32:cc:fb: 61:64:66:fe:51:0c:ab:67:7e:83:91:51:8e:cf:6e: 4a:3a:32:0a:f0:01:ed:3a:ef:a3:aa:fe:01:74:18: 7e:21:70:f5:81:57:2c:a1:89:c7:42:72:57:09:60: b6:32:ad:74:06:fa:72:c8:77:fb:dd:17:91:65:41: e8:79:2a:c6:d7:55:83:b4:d0:8c:fa:1a:8c:ca:94: 47:cf:f4:ae:42:ba:7e:ea:64:80:63:2a:e1:14:1a: 7a:84:3d:9b:6b:78:e3:e2:94:a0:26:ef:16:2a:61: 53:b9:0b:02:7d:24:23:18:6f:fe:c9:47:a3:ca:cb: 78:21:40:8b:f8:af:94:e7:f9:d6:8b:e6:c3:0e:7e: c0:8a:34:94:a6:27:59:f8:30:8c:68:d8:cf:7a:e0: 25:e2:d9:84:81:9d:36:44:c3:58:4f:06:37:d2:79: 7f:3a:33:90:50:6c:aa:cc:40:26:4a:b6:8a:12:f3: 2d:b2:f8:2c:d6:38:8b:94:d5:58:0c:9b:8f:b5:75: 7b:32:1a:26:cb:71:13:4f:34:17:39:f2:c2:52:76: a7:c1:75:20:8e:05:21:53:f7:c2:3c:0c:12:eb:6f: 3c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.152.0/21 37.46.112.0/20 79.142.64.0/20 91.214.44.0/22 128.127.104.0/21 185.2.28.0/22 185.7.32.0/22 185.10.56.0/22 213.5.64.0/21 IPv6: 2a00:7140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51430 Signature Algorithm: sha256WithRSAEncryption 59:06:e8:8a:a1:56:7b:2c:b1:47:1e:58:79:90:be:4d:97:90: 4e:85:6e:7c:9c:7b:78:86:fa:96:2f:e3:56:38:68:3e:3b:e8: 79:cf:e6:bc:4c:4b:53:c9:03:68:78:48:43:48:02:b8:f9:49: 8e:e4:85:9c:e4:14:f4:05:89:91:b2:02:5c:4c:7e:71:be:82: a4:df:08:3b:16:77:c7:46:23:8f:24:78:31:12:31:ec:53:88: d1:7b:73:f5:fa:83:7e:4d:4a:a2:8e:27:2c:db:44:29:73:6e: d6:05:40:a7:6a:39:4f:fd:7d:01:96:e1:53:c9:74:df:59:5f: 4b:1d:2d:56:7e:cb:92:9e:8c:4a:59:61:69:44:06:89:2a:73: 0e:1a:a1:aa:17:e3:14:24:21:f3:14:d5:25:28:d9:8d:62:87: 21:87:a2:39:3f:76:52:92:a9:11:27:f0:e9:c4:40:1e:d2:ea: a7:71:00:f0:ca:a7:eb:9c:e0:c2:17:88:cd:2d:04:f0:34:75: cf:ab:ac:2b:39:b9:92:df:d5:ae:a1:59:98:60:6e:82:03:39: f1:d5:fd:15:4b:fa:b9:ff:39:c7:00:f2:14:72:5f:4c:04:7d: 90:a7:6e:f5:53:85:f4:66:2c:7d:a2:d3:b6:c6:a8:0a:95:4d: 82:73:24:d8 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZt3xocniCwPhQKQ5vWrd8AAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjc5YzI2ZjMxNTc1MzQ1MTU5Yzg0MGVkMjc4YTg3OGE5MjU2NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMdArF5jqx6eI/TOw8THOLq2DHgN bvTzqcgyzPthZGb+UQyrZ36DkVGOz25KOjIK8AHtOu+jqv4BdBh+IXD1gVcsoYnH QnJXCWC2Mq10BvpyyHf73ReRZUHoeSrG11WDtNCM+hqMypRHz/SuQrp+6mSAYyrh FBp6hD2ba3jj4pSgJu8WKmFTuQsCfSQjGG/+yUejyst4IUCL+K+U5/nWi+bDDn7A ijSUpidZ+DCMaNjPeuAl4tmEgZ02RMNYTwY30nl/OjOQUGyqzEAmSraKEvMtsvgs 1jiLlNVYDJuPtXV7Mhomy3ETTzQXOfLCUnanwXUgjgUhU/fCPAwS6288xwIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFPt5wm8xV1NFFZyEDtJ4qHipJWYVMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzEyZDY5 MS0zN2E0LTRiMTUtYTdlYS1iZDM3ZGEwZTQ0N2MvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkx LTM3YTQtNGIxNS1hN2VhLWJkMzdkYTBlNDQ3Yy8xLzEtM25DYnpGWFUwVVZuSVFP MG5pb2VLa2xaaFUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBggrBgEF BQcBBwEB/wRPME0wPAQCAAEwNgMEAx8DmAMEBCUucAMEBE+OQAMEAlvWLAMEA4B/ aAMEArkCHAMEArkHIAMEArkKOAMEA9UFQDANBAIAAjAHAwUDKgBxQDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAyOYwDQYJKoZIhvcNAQELBQADggEBAFkG6IqhVnss sUceWHmQvk2XkE6Fbnyce3iG+pYv41Y4aD476HnP5rxMS1PJA2h4SENIArj5SY7k hZzkFPQFiZGyAlxMfnG+gqTfCDsWd8dGI48keDESMexTiNF7c/X6g35NSqKOJyzb RClzbtYFQKdqOU/9fQGW4VPJdN9ZX0sdLVZ+y5KejEpZYWlEBokqcw4aoaoX4xQk IfMU1SUo2Y1ihyGHojk/dlKSqREn8OnEQB7S6qdxAPDKp+uc4MIXiM0tBPA0dc+r rCs5uZLf1a6hWZhgboIDOfHV/RVL+rn/OccA8hRyX0wEfZCnbvVThfRmLH2i07bG qAqVTYJzJNg= -----END CERTIFICATE-----Generated at Mon Jan 26 04:47:44 2026 by rpki-client