This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3AXfbkBO-SDmpZKNiWPmpfjWESA.cer File: 3AXfbkBO-SDmpZKNiWPmpfjWESA.cer (raw, json) Hash identifier: LLNQ3FM2QO4iOL/e7W4Ybgy12XFYW/aaiQZFoc1bgD0= Subject key identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758FE8D9A47176163DCED31953AC9F0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.40.64.0/22 IP: 2a04:82c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fe:8d:9a:47:17:61:63:dc:ed:31:95:3a:c9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc05df6e404ef920e6a5928d8963e6a5f8d61120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:c9:b2:ff:a5:b1:30:e2:7c:fd:ff:e5:0f: c9:eb:57:66:cc:48:16:c5:e1:aa:ee:85:17:2e:c3: d0:1d:05:31:26:bf:73:58:34:a6:bb:57:04:49:d7: 0f:a0:2c:e1:df:6f:32:35:55:d8:e3:01:5e:99:0a: 79:a9:55:bf:5e:9a:7c:40:80:ee:61:6f:32:3a:26: c7:39:16:84:94:8e:c5:43:06:c4:59:33:9e:76:54: a4:6e:d6:1e:a7:e4:51:5d:c6:22:f6:0a:fe:42:75: d9:27:6c:f3:a0:6b:36:83:35:25:57:04:0b:65:99: 8d:7c:e2:5a:07:c0:5f:89:14:94:ff:b3:e7:5a:8d: 80:49:9c:2c:2e:08:72:d7:1d:cd:36:c5:2f:6f:ef: 2a:10:99:b8:45:17:f4:f6:03:93:cc:d3:9d:77:53: ca:2a:a5:43:25:d9:f0:48:5d:da:83:6d:33:c6:0d: e3:29:e3:d8:6d:8b:26:4f:ce:06:ee:19:e7:1b:d4: c9:ef:f9:78:1f:a6:91:b7:b3:9b:cb:28:f1:81:46: c1:81:44:61:fa:73:db:48:7c:45:38:19:c4:9d:ef: 9d:0c:5c:d7:dd:f0:9c:b7:a7:cb:1e:55:6e:5a:f7: 03:67:72:33:5f:a9:ea:e6:5b:6f:4c:42:6c:72:d7: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:DF:6E:40:4E:F9:20:E6:A5:92:8D:89:63:E6:A5:F8:D6:11:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0c3886-a32d-4435-ab74-bce934205ae8/1/3AXfbkBO-SDmpZKNiWPmpfjWESA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.64.0/22 IPv6: 2a04:82c0::/29 Signature Algorithm: sha256WithRSAEncryption 46:c5:81:12:4a:b8:a3:d8:55:cf:4a:68:1b:63:a8:4d:7f:c7: 90:75:9a:2a:a1:c2:32:0e:01:73:7d:b9:23:0a:37:9f:11:2e: 20:73:bb:ad:5b:4f:c4:8d:f3:cb:eb:81:b3:06:e3:3e:20:dd: 7b:4d:aa:ff:c6:23:48:93:82:ff:81:46:89:75:9c:bc:d5:e1: a3:b7:6d:70:89:d3:78:b6:73:d1:99:70:24:b9:ee:f9:f7:ae: 0d:09:9a:07:5b:89:41:e4:ad:f9:3f:a1:0a:ad:78:8d:2c:92: 07:71:46:c9:04:61:bf:0c:0f:bd:85:fb:ea:e3:63:36:8e:7b: 11:d4:d4:c9:89:54:f3:4d:e7:7d:48:f3:8b:51:be:aa:5b:8f: 0c:ce:c4:e5:90:db:e9:8c:11:5b:2d:b0:7c:71:d3:02:52:50: 67:03:fb:5b:a3:4c:25:ea:5b:0d:36:a5:12:35:8a:07:f0:cd: c0:29:bf:16:c4:d5:74:13:db:f7:96:3b:42:2d:7d:50:e0:70: 31:ac:b7:78:11:2d:57:56:31:18:52:2d:a4:bd:37:85:53:89: 0c:a0:35:8b:60:0b:b4:15:36:08:27:bb:36:1e:7d:58:71:91: 1b:99:97:a6:5f:08:f2:8f:6b:44:b0:7f:db:53:20:6a:38:dc: 39:3e:7d:c0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt3WP6NmkcXYWPc7TGVOsnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzA1ZGY2ZTQwNGVmOTIwZTZhNTkyOGQ4OTYzZTZhNWY4ZDYxMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjnJsv+lsTDifP3/5Q/J61dmzEgW xeGq7oUXLsPQHQUxJr9zWDSmu1cESdcPoCzh328yNVXY4wFemQp5qVW/Xpp8QIDu YW8yOibHORaElI7FQwbEWTOedlSkbtYep+RRXcYi9gr+QnXZJ2zzoGs2gzUlVwQL ZZmNfOJaB8BfiRSU/7PnWo2ASZwsLghy1x3NNsUvb+8qEJm4RRf09gOTzNOdd1PK KqVDJdnwSF3ag20zxg3jKePYbYsmT84G7hnnG9TJ7/l4H6aRt7ObyyjxgUbBgURh +nPbSHxFOBnEne+dDFzX3fCct6fLHlVuWvcDZ3IzX6nq5ltvTEJsctdL2QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNwF325ATvkg5qWSjYlj5qX41hEgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3LzBjMzg4 Ni1hMzJkLTQ0MzUtYWI3NC1iY2U5MzQyMDVhZTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMGMzODg2 LWEzMmQtNDQzNS1hYjc0LWJjZTkzNDIwNWFlOC8xLzNBWGZia0JPLVNEbXBaS05p V1BtcGZqV0VTQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuShAMA0EAgACMAcDBQMqBILAMA0GCSqGSIb3 DQEBCwUAA4IBAQBGxYESSrij2FXPSmgbY6hNf8eQdZoqocIyDgFzfbkjCjefES4g c7utW0/EjfPL64GzBuM+IN17Tar/xiNIk4L/gUaJdZy81eGjt21widN4tnPRmXAk ue75964NCZoHW4lB5K35P6EKrXiNLJIHcUbJBGG/DA+9hfvq42M2jnsR1NTJiVTz Ted9SPOLUb6qW48MzsTlkNvpjBFbLbB8cdMCUlBnA/tbo0wl6lsNNqUSNYoH8M3A Kb8WxNV0E9v3ljtCLX1Q4HAxrLd4ES1XVjEYUi2kvTeFU4kMoDWLYAu0FTYIJ7s2 Hn1YcZEbmZemXwjyj2tEsH/bUyBqONw5Pn3A -----END CERTIFICATE-----Generated at Sun Jan 25 18:51:46 2026 by rpki-client