This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer File: 3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer (raw, json) Hash identifier: 3LwpbiLUE4rsG52HrrfvWlf1x194Dqnkl+2e19V1HNc= Subject key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B8B1B9C2824201FB0EE1370C59E61 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13046 IP: 89.164.0.0/16 IP: 141.136.128.0/17 IP: 141.138.0.0/18 IP: 213.191.128.0/19 IP: 213.202.64.0/18 IP: 2001:1af0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8b:1b:9c:28:24:20:1f:b0:ee:13:70:c5:9e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:41:5c:f5:ac:93:f5:8d:f4:7a:b2:c2:00: f5:db:a6:1c:7a:e1:a4:b7:4d:a4:af:ea:7c:fa:c6: a0:72:64:92:c1:7a:6d:bb:cc:be:dd:1b:17:4f:d5: 83:f9:30:10:cf:0c:fb:7c:8a:b1:b4:7b:fd:5c:4b: 96:5c:7d:29:52:4a:f1:8d:2f:9a:6c:7a:d6:d5:6c: ba:de:f1:0f:6c:8c:54:9e:f7:56:b7:8d:79:e9:8d: 84:65:ba:0f:fd:0e:14:b7:60:3f:9b:38:b3:db:96: 58:70:99:14:ec:a6:72:14:38:51:0e:06:f7:35:88: 9f:15:cd:94:68:13:92:ff:ea:9d:85:d3:f4:a1:67: 88:04:28:10:e8:16:b6:34:dc:da:4c:7b:9c:d2:b5: a8:ff:be:cc:a9:6f:06:11:12:29:4a:79:e0:d9:f4: a7:fe:96:48:b1:bc:35:59:fc:dd:3e:d6:bb:83:aa: ac:01:1b:89:c0:a1:ef:02:7c:68:75:a3:99:d1:5d: dd:51:a5:e1:da:0c:40:6f:16:0a:ec:91:04:d0:0c: 64:13:7c:3a:37:b5:3d:e4:98:75:68:65:18:e0:30: ef:83:52:ae:bf:38:ff:06:e0:f3:a3:f5:a9:96:c4: d5:b4:3a:b9:24:d1:6c:1e:b4:1d:d8:b7:24:75:a4: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.164.0.0/16 141.136.128.0/17 141.138.0.0/18 213.191.128.0/19 213.202.64.0/18 IPv6: 2001:1af0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13046 Signature Algorithm: sha256WithRSAEncryption 4d:3e:18:18:18:d8:4d:fa:d7:38:5b:30:aa:eb:f1:5b:8b:2a: f5:1c:68:bf:22:d7:d3:b0:a9:96:0b:49:40:b1:ee:37:92:56: 37:61:81:1a:c6:77:5a:87:6c:1e:b1:c3:51:dd:e4:9d:a1:20: 97:5b:64:cd:d9:31:ac:06:95:95:33:fa:f3:66:d0:7e:b6:3b: 3d:96:d8:b2:e0:8e:23:27:d6:13:80:20:e7:b5:5d:dc:3b:af: 21:e1:19:d5:29:2a:ec:69:21:3c:b0:33:59:8a:a3:50:f0:93: 4c:13:28:0d:b9:76:53:9d:eb:bb:f7:6a:2c:0d:dd:d8:2e:33: ee:15:ad:f9:b7:64:7d:f2:74:29:39:83:79:87:a4:cb:b4:1f: 0c:ca:0d:ab:68:bc:fe:c6:f2:b3:ee:2c:94:e8:ff:4e:e1:4c: d8:11:87:fe:d1:32:2c:d6:b2:70:65:a7:6f:73:b6:f0:f7:6f: ea:61:65:23:67:2e:87:8d:a8:cf:be:2d:dd:ed:6a:24:a0:9c: 65:ff:07:e0:62:44:8e:74:57:a9:74:d6:a1:e9:08:24:f1:e8: 11:57:63:6f:de:67:f3:9e:d2:f9:71:1c:d9:57:50:c9:ce:a9: 98:18:34:85:aa:0c:ef:13:b4:4f:b8:88:74:9c:38:bf:d9:3e: fe:79:9a:7d -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgISAZt6W4sbnCgkIB+w7hNwxZ5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzVjNTMyZjNjZDVlMTFlMTlmZWIxOTY1NWQ0ZjE5OTI2ZjAyMDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCRBXPWsk/WN9HqywgD126YceuGk t02kr+p8+sagcmSSwXptu8y+3RsXT9WD+TAQzwz7fIqxtHv9XEuWXH0pUkrxjS+a bHrW1Wy63vEPbIxUnvdWt4156Y2EZboP/Q4Ut2A/mziz25ZYcJkU7KZyFDhRDgb3 NYifFc2UaBOS/+qdhdP0oWeIBCgQ6Ba2NNzaTHuc0rWo/77MqW8GERIpSnng2fSn /pZIsbw1WfzdPta7g6qsARuJwKHvAnxodaOZ0V3dUaXh2gxAbxYK7JEE0AxkE3w6 N7U95Jh1aGUY4DDvg1Kuvzj/BuDzo/WplsTVtDq5JNFsHrQd2LckdaTZIwIDAQAB o4ICxTCCAsEwHQYDVR0OBBYEFNxcUy881eEeGf6xllXU8Zkm8CAgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2RiMjZi YS03NTRkLTQxMTgtYmUzMS00YjZjMWNmOWZlNGYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZGIyNmJh LTc1NGQtNDExOC1iZTMxLTRiNmMxY2Y5ZmU0Zi8xLzNGeFRMenpWNFI0Wl9yR1dW ZFR4bVNid0lDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEUGCCsGAQUF BwEHAQH/BDYwNDAjBAIAATAdAwMAWaQDBAeNiIADBAaNigADBAXVv4ADBAbVykAw DQQCAAIwBwMFAyABGvAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICMvYwDQYJKoZI hvcNAQELBQADggEBAE0+GBgY2E361zhbMKrr8VuLKvUcaL8i19OwqZYLSUCx7jeS VjdhgRrGd1qHbB6xw1Hd5J2hIJdbZM3ZMawGlZUz+vNm0H62Oz2W2LLgjiMn1hOA IOe1Xdw7ryHhGdUpKuxpITywM1mKo1Dwk0wTKA25dlOd67v3aiwN3dguM+4Vrfm3 ZH3ydCk5g3mHpMu0HwzKDatovP7G8rPuLJTo/07hTNgRh/7RMizWsnBlp29ztvD3 b+phZSNnLoeNqM++Ld3taiSgnGX/B+BiRI50V6l01qHpCCTx6BFXY2/eZ/Oe0vlx HNlXUMnOqZgYNIWqDO8TtE+4iHScOL/ZPv55mn0= -----END CERTIFICATE-----Generated at Mon Jan 26 01:54:58 2026 by rpki-client