This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer (raw, json) Hash identifier: EIEYXcHZqirYlqqVGm6wNokoeHSoArxZ88dgUjjI9dM= Subject key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA632E84162553C92CA6B97EDA96354 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:39 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.24.120.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:32:e8:41:62:55:3c:92:ca:6b:97:ed:a9:63:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc4f90a93dc9427855644903cb70c1f74b931786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:da:28:a0:35:4d:b3:1d:78:01:fc:81:0e:d8: a4:69:82:04:a1:a9:0d:db:2c:12:22:be:09:10:1c: 0a:35:eb:0c:5d:93:d8:b0:ab:05:a3:98:63:ef:60: 23:0f:42:a3:ef:3e:83:96:79:09:71:56:78:20:c7: bf:0f:f8:85:84:48:bc:14:67:78:38:10:95:9f:7c: e7:d7:79:3d:73:d7:70:88:57:f9:7c:bc:dd:b8:51: eb:8b:74:2c:23:30:59:66:49:10:1f:f6:83:19:28: 16:9f:38:cc:ae:dd:0a:88:2b:e0:b2:75:5c:65:eb: 28:27:5c:1a:9d:ed:9c:c9:ea:24:5e:1d:b7:f8:ca: 94:33:1f:6e:34:ca:5d:e9:3f:fd:91:4d:47:c5:03: 43:66:85:aa:63:26:70:22:18:a8:72:59:69:15:36: c5:67:c1:1a:59:e6:53:e8:27:5b:69:ec:86:67:2f: a3:c2:0e:aa:1f:13:de:6e:01:26:f3:9e:16:cc:c9: 26:99:72:93:55:3b:4e:5d:db:b9:9f:04:59:20:cc: 54:ae:ff:6f:ef:e4:84:64:dc:db:36:2e:8a:d5:b6: b3:60:cb:86:b9:e4:7f:e4:13:fa:9e:6b:b4:e2:a6: b0:2f:49:5c:84:2b:8a:be:6b:05:ca:31:5c:84:90: cd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.120.0/24 Signature Algorithm: sha256WithRSAEncryption a3:71:92:21:fc:49:de:e0:01:69:b2:32:21:a9:29:88:34:1c: b7:37:cc:b0:e2:b3:bc:8d:f4:73:fa:66:36:dc:40:75:a1:e8: 58:3d:8e:b1:df:79:5b:1c:47:67:a4:8f:5b:93:2f:35:0d:e6: c7:a8:09:66:44:d4:49:5a:d8:62:f2:2c:70:cd:41:07:89:44: bd:16:99:46:46:91:05:a9:dd:73:c6:29:d0:2a:39:67:ef:d7: e5:53:4e:07:1a:ec:b7:0f:02:15:f9:e1:86:a1:b1:b1:2e:72: 02:f2:6b:63:c0:3c:00:4f:9b:eb:d2:21:39:88:27:d5:ae:16: 41:f0:8d:57:ab:bd:80:46:a3:99:3f:1d:e1:8e:72:85:2d:f8: 31:9c:bc:28:8e:70:b3:6d:de:11:93:36:de:e7:b9:ba:9c:32: 6c:8d:55:74:4c:20:a3:58:6d:79:42:f6:94:8e:d5:a8:a6:6e: b5:ff:47:47:20:44:6a:36:cd:54:4a:66:61:cd:b6:6b:a8:15: 50:e9:1b:be:85:5a:04:0c:9b:2c:99:07:be:d7:29:c7:33:1e: 89:2a:17:0e:10:69:54:95:c4:ae:77:6e:9c:6e:0e:4b:83:22: 75:0c:ee:f0:aa:4e:2d:0d:71:40:9c:fe:ec:e3:39:e9:5b:0e: 63:2f:14:f4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+pjLoQWJVPJLKa5ftqWNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzRmOTBhOTNkYzk0Mjc4NTU2NDQ5MDNjYjcwYzFmNzRiOTMxNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktoooDVNsx14AfyBDtikaYIEoakN 2ywSIr4JEBwKNesMXZPYsKsFo5hj72AjD0Kj7z6DlnkJcVZ4IMe/D/iFhEi8FGd4 OBCVn3zn13k9c9dwiFf5fLzduFHri3QsIzBZZkkQH/aDGSgWnzjMrt0KiCvgsnVc ZesoJ1wane2cyeokXh23+MqUMx9uNMpd6T/9kU1HxQNDZoWqYyZwIhiocllpFTbF Z8EaWeZT6CdbaeyGZy+jwg6qHxPebgEm854WzMkmmXKTVTtOXdu5nwRZIMxUrv9v 7+SEZNzbNi6K1bazYMuGueR/5BP6nmu04qawL0lchCuKvmsFyjFchJDNdwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNxPkKk9yUJ4VWRJA8twwfdLkxeGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E3LzIzODAw Mi03ZGNjLTQ0YWMtODY0NS02MzE3N2ZiMTlhYmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMjM4MDAy LTdkY2MtNDRhYy04NjQ1LTYzMTc3ZmIxOWFiZS8xLzNFLVFxVDNKUW5oVlpFa0R5 M0RCOTB1VEY0WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRh4MA0GCSqGSIb3DQEBCwUAA4IBAQCjcZIh /Ene4AFpsjIhqSmINBy3N8yw4rO8jfRz+mY23EB1oehYPY6x33lbHEdnpI9bky81 DebHqAlmRNRJWthi8ixwzUEHiUS9FplGRpEFqd1zxinQKjln79flU04HGuy3DwIV +eGGobGxLnIC8mtjwDwAT5vr0iE5iCfVrhZB8I1Xq72ARqOZPx3hjnKFLfgxnLwo jnCzbd4Rkzbe57m6nDJsjVV0TCCjWG15QvaUjtWopm61/0dHIERqNs1USmZhzbZr qBVQ6Ru+hVoEDJssmQe+1ynHMx6JKhcOEGlUlcSud26cbg5LgyJ1DO7wqk4tDXFA nP7s4znpWw5jLxT0 -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:39 2026 by rpki-client