This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer File: 3MstX7JThS8YI8ZUNOjydtBOTgw.cer (raw, json) Hash identifier: A2WFtgzK6re+1g9mbK884f1Vs8UhXO5t4WjHhcIBFQY= Subject key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FD4360391C0DEDE76000CCBC41737 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:30 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35592 AS: 212224 IP: 46.29.184.0/21 IP: 87.236.192.0/21 IP: 89.187.128.0/19 IP: 91.245.16.0/21 IP: 185.162.4.0/22 IP: 2a01:5f0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:d4:36:03:91:c0:de:de:76:00:0c:cb:c4:17:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5d:46:25:46:8e:10:9e:56:26:99:e2:0e:b5: c7:a9:a6:66:f3:bc:16:2b:71:f7:e9:79:a3:5d:c4: 47:0d:4b:80:4d:83:f5:ec:8a:f4:97:c8:ab:22:a1: bd:d4:6a:77:42:f9:48:01:df:53:48:fe:64:c4:7f: c4:f1:26:e9:91:c7:c7:e6:35:b0:19:35:4a:ca:b3: 0a:75:6a:44:28:ba:f3:e0:17:f4:8a:4a:61:18:e8: ae:d6:6b:60:ec:34:28:d3:d4:72:71:07:ed:66:20: 82:00:3f:15:73:0f:77:bd:42:07:c4:cf:f4:c9:12: 49:31:98:d6:80:91:17:16:65:b5:f2:df:a4:9e:ad: 80:27:f7:f5:4f:65:90:14:d6:01:e7:53:e6:4d:f2: 69:eb:57:5e:74:aa:fe:d9:41:01:17:d2:5a:ec:96: bd:6f:ac:76:91:9d:d6:6d:89:39:60:d4:a9:19:b5: 0c:bb:13:88:f5:1a:d0:52:20:64:9e:16:b3:17:29: 95:16:e1:40:bd:30:ed:9e:87:c8:1f:06:f8:c2:19: a8:a9:73:fc:fd:d2:a6:2d:cb:29:e3:22:4b:72:8d: 1c:29:e5:a5:6f:49:8f:09:1a:f7:12:6c:66:75:96: a9:c6:65:a6:3b:e0:cd:6b:d2:f9:77:cc:2e:e6:33: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.184.0/21 87.236.192.0/21 89.187.128.0/19 91.245.16.0/21 185.162.4.0/22 IPv6: 2a01:5f0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35592 212224 Signature Algorithm: sha256WithRSAEncryption 26:f6:5c:57:22:80:03:d8:fc:0b:3b:44:12:ef:c3:22:88:1d: 1d:01:2f:7b:e9:e7:b3:14:0c:66:f4:ab:74:2d:ca:b5:20:f3: 6d:3a:17:1c:79:f4:bd:f4:62:21:0e:0d:f4:2c:35:af:c8:1e: 5d:47:f0:30:a1:fe:26:97:8e:65:be:bf:0b:5a:42:a0:eb:ae: 80:08:51:1a:89:7d:78:0c:bf:53:c5:e5:8f:25:75:60:ae:c5: 2c:b1:0d:99:53:3c:a0:10:cb:40:06:ad:8e:d2:de:41:3e:7b: 1c:25:48:d9:c1:0d:1f:9d:2b:52:03:03:52:4c:61:50:b3:a9: 1b:90:40:98:df:d1:89:c1:d1:18:ac:cf:26:0b:e0:35:a9:fb: 4d:33:02:42:1c:c2:0d:7d:01:12:ce:51:e3:f9:46:c6:73:65: bd:71:0a:43:f9:4d:28:9c:29:cd:e2:d5:58:a8:3a:9d:ce:19: 7d:43:07:80:f4:02:ae:08:04:d3:0d:5f:5c:ee:69:83:d7:4e: a2:94:13:e7:d8:d5:1d:78:ac:c6:8f:28:4d:d4:24:e7:33:f5: 9f:47:9b:67:78:0e:4c:b3:19:59:b8:e7:11:4f:dc:24:28:cc: bf:6f:c1:83:57:6c:14:2d:ef:c4:c9:45:d7:61:19:0d:fb:84: 2d:ff:3e:6f -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZt8f9Q2A5HA3t52AAzLxBc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2NiMmQ1ZmIyNTM4NTJmMTgyM2M2NTQzNGU4ZjI3NmQwNGU0ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzV1GJUaOEJ5WJpniDrXHqaZm87wW K3H36XmjXcRHDUuATYP17Ir0l8irIqG91Gp3QvlIAd9TSP5kxH/E8SbpkcfH5jWw GTVKyrMKdWpEKLrz4Bf0ikphGOiu1mtg7DQo09RycQftZiCCAD8Vcw93vUIHxM/0 yRJJMZjWgJEXFmW18t+knq2AJ/f1T2WQFNYB51PmTfJp61dedKr+2UEBF9Ja7Ja9 b6x2kZ3WbYk5YNSpGbUMuxOI9RrQUiBknhazFymVFuFAvTDtnofIHwb4whmoqXP8 /dKmLcsp4yJLco0cKeWlb0mPCRr3EmxmdZapxmWmO+DNa9L5d8wu5jPXXwIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFNzLLV+yU4UvGCPGVDTo8nbQTk4MMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxLzdjMWMy OS1jYTAyLTQ5MGItYWE4NC1lMWE4YTZmMWQ1OWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvN2MxYzI5 LWNhMDItNDkwYi1hYTg0LWUxYThhNmYxZDU5YS8xLzNNc3RYN0pUaFM4WUk4WlVO T2p5ZHRCT1Rndy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDLh24AwQDV+zAAwQFWbuAAwQDW/UQAwQCuaIE MA0EAgACMAcDBQMqAQXwMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCLCAIDAz0A MA0GCSqGSIb3DQEBCwUAA4IBAQAm9lxXIoAD2PwLO0QS78MiiB0dAS976eezFAxm 9Kt0Lcq1IPNtOhccefS99GIhDg30LDWvyB5dR/Awof4ml45lvr8LWkKg666ACFEa iX14DL9TxeWPJXVgrsUssQ2ZUzygEMtABq2O0t5BPnscJUjZwQ0fnStSAwNSTGFQ s6kbkECY39GJwdEYrM8mC+A1qftNMwJCHMINfQESzlHj+UbGc2W9cQpD+U0onCnN 4tVYqDqdzhl9QweA9AKuCATTDV9c7mmD106ilBPn2NUdeKzGjyhN1CTnM/WfR5tn eA5MsxlZuOcRT9wkKMy/b8GDV2wULe/EyUXXYRkN+4Qt/z5v -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:20 2026 by rpki-client