This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.cer (raw, json) Hash identifier: euSFTDNzh2lGgT5jQOLz9lTF7sqLIl/ROjosCUEPT5I= Subject key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED06108A8B9011CE8A4572364DA611 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 45.13.84.0/22 IP: 2a12:fd00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:06:10:8a:8b:90:11:ce:8a:45:72:36:4d:a6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:58:eb:ea:02:19:07:d9:48:c7:ac:62:20: 6a:07:3e:f5:df:05:66:93:18:5f:7e:9e:ae:2e:99: 3c:37:81:38:a7:d0:7f:2c:4b:f1:82:f3:49:c0:80: 9d:b8:17:72:1d:ff:fc:cb:3b:fd:03:a4:c6:2f:11: 15:8f:5a:c8:0c:95:d6:d0:6b:58:09:89:a4:17:97: bc:3a:85:7c:e1:ff:eb:b2:2d:dd:29:90:a5:84:7d: ad:e1:d5:64:20:21:6d:a8:37:fa:f9:a5:d3:fc:d1: f9:14:2a:25:4d:bb:3e:1c:8d:a7:25:be:c4:86:fe: f2:ab:db:73:7d:d9:21:59:8c:a9:d7:92:66:16:33: a3:bd:e3:86:e8:d1:f6:c1:65:f0:1c:6d:25:a6:c0: 18:be:f4:9c:d9:84:96:20:bd:d4:3c:2d:eb:1f:64: 49:47:e6:52:6b:25:a4:86:4f:3d:87:4b:f4:c2:a6: 31:01:08:ac:4e:f9:d1:a3:cd:d2:ad:7c:0c:e4:8a: d7:49:5f:b4:1f:42:e8:00:23:80:d9:24:9d:bf:21: 0f:af:ab:78:29:43:8b:02:63:0f:2c:81:aa:0c:93: 27:ef:34:d4:d5:28:7a:70:04:4a:28:71:02:b8:c7: 39:a6:33:79:a0:9f:48:19:94:d5:3c:1e:23:e3:eb: 68:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.84.0/22 IPv6: 2a12:fd00::/32 Signature Algorithm: sha256WithRSAEncryption 3b:a6:0f:4d:85:56:f4:8f:62:91:3a:99:fe:6c:39:30:df:58: ad:2d:35:a4:de:79:ee:5a:8c:f8:77:69:b4:37:0a:f6:ce:a6: 01:db:eb:8e:f1:a6:ab:e6:df:59:cd:74:82:6e:23:16:7a:1f: 03:77:05:04:3f:d1:6b:30:88:06:12:78:83:89:77:87:d3:88: 01:37:de:08:54:f3:33:51:e9:65:af:b7:21:36:4f:d6:38:01: 00:a1:cd:05:19:f5:80:46:b4:dd:04:f1:1f:7e:36:ce:a7:09: 11:95:63:38:fc:94:15:64:3c:ff:76:04:2a:c8:f4:e3:7e:8a: 58:6e:27:2f:d9:cc:a7:e1:38:37:a5:a1:0a:63:d0:49:2b:63: bc:53:e5:f7:1f:92:d1:2b:6a:50:d4:61:aa:aa:1b:f9:53:f6: 36:68:4a:f3:c1:b0:c3:da:e8:37:28:15:d2:a0:d3:ea:1f:f0: 16:b8:b0:02:49:a2:3a:90:f3:df:9d:c2:5f:21:2c:be:37:bd: ee:e1:69:bd:e2:7b:d2:a1:ae:71:ff:b5:87:1d:60:87:53:c1: 8c:a2:27:18:0d:ad:63:d6:31:10:65:87:c1:be:11:db:4b:24: f2:ab:92:c7:2b:9b:4c:da:e6:12:8a:76:2e:45:18:bc:5b:30: 3d:6c:07:a4 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87QYQiouQEc6KRXI2TaYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzEwMmY2MTMxY2U1YTc0NmViNTk4MWRkNGMxZDZiNGUxN2IwMzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+dY6+oCGQfZSMesYiBqBz713wVm kxhffp6uLpk8N4E4p9B/LEvxgvNJwICduBdyHf/8yzv9A6TGLxEVj1rIDJXW0GtY CYmkF5e8OoV84f/rsi3dKZClhH2t4dVkICFtqDf6+aXT/NH5FColTbs+HI2nJb7E hv7yq9tzfdkhWYyp15JmFjOjveOG6NH2wWXwHG0lpsAYvvSc2YSWIL3UPC3rH2RJ R+ZSayWkhk89h0v0wqYxAQisTvnRo83SrXwM5IrXSV+0H0LoACOA2SSdvyEPr6t4 KUOLAmMPLIGqDJMn7zTU1Sh6cARKKHECuMc5pjN5oJ9IGZTVPB4j4+toQQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNwQL2Exzlp0brWYHdTB1rThewM/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkwL2M4ZDY1 ZS1lNWM4LTQxMjAtYWUxZC1iMDk3ZDlmOGVjMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAvYzhkNjVl LWU1YzgtNDEyMC1hZTFkLWIwOTdkOWY4ZWMyMi8xLzNCQXZZVEhPV25SdXRaZ2Qx TUhXdE9GN0F6OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLQ1UMA0EAgACMAcDBQAqEv0AMA0GCSqGSIb3 DQEBCwUAA4IBAQA7pg9NhVb0j2KROpn+bDkw31itLTWk3nnuWoz4d2m0Nwr2zqYB 2+uO8aar5t9ZzXSCbiMWeh8DdwUEP9FrMIgGEniDiXeH04gBN94IVPMzUellr7ch Nk/WOAEAoc0FGfWARrTdBPEffjbOpwkRlWM4/JQVZDz/dgQqyPTjfopYbicv2cyn 4Tg3paEKY9BJK2O8U+X3H5LRK2pQ1GGqqhv5U/Y2aErzwbDD2ug3KBXSoNPqH/AW uLACSaI6kPPfncJfISy+N73u4Wm94nvSoa5x/7WHHWCHU8GMoicYDa1j1jEQZYfB vhHbSyTyq5LHK5tM2uYSinYuRRi8WzA9bAek -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:54 2026 by rpki-client