This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer File: 3MIAShrwMLqZ_PRR872I78U4Rqk.cer (raw, json) Hash identifier: sjDDuvr4Y5RyNhwJYJOznBHTaZ0Hhc6dvhWeaJbr5/4= Subject key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7758C5BAE322069AF4E1D1D425641443 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:17:45 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31665 IP: 193.23.124.0/24 IP: 194.35.32.0/22 IP: 2a0d:fd40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c5:ba:e3:22:06:9a:f4:e1:d1:d4:25:64:14:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:9f:a5:98:0d:1e:e4:9a:af:13:51:89:8e: 5f:5e:40:34:e4:36:9f:f1:73:b6:02:3e:8b:29:ef: 2f:d9:7d:09:31:88:b9:d2:2a:cb:6a:0a:15:8c:3b: 02:b6:1a:76:3b:f0:ad:7e:c2:ed:bf:dc:e5:1d:ac: a7:51:dd:f1:91:d4:5f:3b:63:22:ab:ce:2d:06:b5: c0:dc:db:2a:61:aa:3a:20:ea:97:da:2d:33:14:92: 07:0a:3f:b7:6e:c1:44:4a:df:1a:05:62:7e:6e:81: a4:89:75:aa:ef:88:69:f9:91:65:a7:14:2f:4a:11: b5:12:c0:63:2e:ba:27:fc:d2:5f:21:92:b4:44:09: e9:2e:18:66:d7:af:49:6e:76:e5:4e:9e:12:94:49: 35:71:76:29:fe:c4:0a:f9:62:04:06:95:51:32:50: c8:23:fd:f3:9f:25:ee:18:d6:1f:4f:4a:d6:f2:82: c5:32:83:21:34:0c:f6:e7:a6:70:7b:e9:1f:1d:e1: 2b:cd:2a:ba:e4:be:bf:f3:d4:fb:6d:e0:b8:57:b7: 45:08:4e:e0:04:70:13:21:13:4a:65:a5:05:0e:e1: e0:cb:47:d7:e4:6f:c6:54:a5:e8:ea:91:a2:c1:06: bc:37:8a:81:3a:ec:92:f3:47:f6:3d:68:5e:76:f0: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.124.0/24 194.35.32.0/22 IPv6: 2a0d:fd40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31665 Signature Algorithm: sha256WithRSAEncryption 26:72:f7:47:15:e0:5d:35:71:4c:3b:00:20:67:fa:7b:23:8c: f9:1c:de:5e:f0:78:e2:54:2b:37:2c:33:1f:c6:67:cb:e1:9a: 93:ae:cc:81:16:4a:12:10:47:1b:50:69:4a:1f:5c:cd:01:e2: 8e:dc:62:c8:38:0a:c8:8a:06:64:a9:14:cd:38:ff:4a:b3:5b: 21:aa:25:03:8b:b1:f8:df:ec:c6:99:22:ac:16:37:c3:57:1a: 70:5f:94:f2:7c:7f:4f:82:1c:0a:5e:eb:a0:d6:e8:2d:8e:57: d6:78:2b:a3:00:f3:78:16:df:5b:8d:5a:eb:22:ae:80:69:55: 80:f1:10:e1:3c:66:0d:69:46:a0:e4:3b:b4:9b:69:18:83:9c: a7:b3:b2:c6:af:1e:cb:34:49:f2:b4:ab:b3:9c:db:17:6f:82: 54:90:8e:56:6f:36:eb:8e:b7:e4:19:ca:6b:83:b4:be:77:49: b8:09:d5:2c:57:a0:ba:44:ad:f0:61:d1:01:a8:c7:cd:d5:87: 0f:32:96:84:74:52:04:b2:15:19:14:17:de:fc:9b:d6:f8:95: 6a:fa:83:fe:dc:44:2d:0f:11:cd:c2:06:5a:ba:0f:fe:7b:55: fc:99:06:55:1f:10:25:49:9f:a8:8c:d8:b5:a9:61:18:eb:97: 65:0f:f7:cc -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt3WMW64yIGmvTh0dQlZBRDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2MyMDA0YTFhZjAzMGJhOTlmY2Y0NTFmM2JkODhlZmM1Mzg0NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmOfpZgNHuSarxNRiY5fXkA05Daf 8XO2Aj6LKe8v2X0JMYi50irLagoVjDsCthp2O/CtfsLtv9zlHaynUd3xkdRfO2Mi q84tBrXA3NsqYao6IOqX2i0zFJIHCj+3bsFESt8aBWJ+boGkiXWq74hp+ZFlpxQv ShG1EsBjLron/NJfIZK0RAnpLhhm169JbnblTp4SlEk1cXYp/sQK+WIEBpVRMlDI I/3znyXuGNYfT0rW8oLFMoMhNAz256Zwe+kfHeErzSq65L6/89T7beC4V7dFCE7g BHATIRNKZaUFDuHgy0fX5G/GVKXo6pGiwQa8N4qBOuyS80f2PWhedvCTAQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFNzCAEoa8DC6mfz0UfO9iO/FOEapMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcxLzcxMmI0 MC01M2FlLTQ5NTMtYWZmNS01NmEzMzA1NzQ5N2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvNzEyYjQw LTUzYWUtNDk1My1hZmY1LTU2YTMzMDU3NDk3Yi8xLzNNSUFTaHJ3TUxxWl9QUlI4 NzJJNzhVNFJxay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAwRd8AwQCwiMgMA0EAgACMAcDBQMqDf1AMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnuxMA0GCSqGSIb3DQEBCwUAA4IBAQAmcvdH FeBdNXFMOwAgZ/p7I4z5HN5e8HjiVCs3LDMfxmfL4ZqTrsyBFkoSEEcbUGlKH1zN AeKO3GLIOArIigZkqRTNOP9Ks1shqiUDi7H43+zGmSKsFjfDVxpwX5TyfH9PghwK Xuug1ugtjlfWeCujAPN4Ft9bjVrrIq6AaVWA8RDhPGYNaUag5Du0m2kYg5yns7LG rx7LNEnytKuznNsXb4JUkI5WbzbrjrfkGcprg7S+d0m4CdUsV6C6RK3wYdEBqMfN 1YcPMpaEdFIEshUZFBfe/JvW+JVq+oP+3EQtDxHNwgZaug/+e1X8mQZVHxAlSZ+o jNi1qWEY65dlD/fM -----END CERTIFICATE-----Generated at Mon Jan 26 06:05:00 2026 by rpki-client