This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer (raw, json) Hash identifier: T9DStGqcKGJD6xipXM0e1I56RGXiIKzel5cw2bvfiCQ= Subject key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA2DF1F63C5BEA0FEDC52FB3F7A00 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 91.209.171.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a2:df:1f:63:c5:be:a0:fe:dc:52:fb:3f:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:54:9a:7c:49:ed:28:45:bd:e2:81:a0:40: cd:7c:43:5d:ec:de:f2:2f:fa:b4:0a:86:7d:b5:1e: 0e:1b:c7:ca:86:da:3c:86:6c:75:56:e5:6f:46:8c: d4:e4:28:2d:47:6c:39:7a:84:b6:65:0a:6b:b3:3d: a9:9c:e8:68:95:c2:17:35:83:5f:e2:44:be:8d:64: 5c:ab:88:0c:8e:03:f2:a0:0f:a8:b5:87:5e:1b:3b: 23:00:3d:81:3c:53:50:1b:f1:1f:ef:63:27:ae:6a: d9:1d:71:c7:e4:8a:10:07:73:b7:30:04:9d:d3:f6: 9c:5c:e7:8c:61:57:c9:4f:d9:51:f2:3a:8c:01:00: 84:61:85:07:2d:b2:a2:a1:73:54:11:a7:06:f4:cd: 70:fd:d8:20:b7:c5:4d:ed:d7:c5:e8:e1:2f:bb:5e: b3:8b:bf:69:cb:75:19:6b:c5:f2:90:a3:9a:3f:ce: e1:f3:59:bf:60:45:75:af:30:31:1b:34:53:28:d8: dd:c5:78:81:86:6b:1c:02:e8:4d:1d:9d:d5:5c:20: ac:f3:40:a2:0c:61:ea:d7:ae:92:1c:30:d3:0e:56: 8b:2a:cd:f1:1a:ac:8d:f2:e3:46:7f:db:c2:cd:5d: 73:26:7e:f9:b8:77:eb:13:97:2f:d8:6d:26:6d:fd: 69:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.171.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:c4:14:27:1e:0e:4a:14:bd:a8:45:b3:10:4d:aa:c8:68:fb: f2:70:a4:e2:43:71:66:bf:68:f2:ae:59:21:da:d1:74:37:bb: 7b:82:fa:dd:e6:37:f8:d7:c7:b3:42:c0:bf:d4:fa:a7:33:e2: b2:57:9e:c5:45:eb:6b:ea:67:13:51:33:25:70:1a:26:8a:8e: af:f9:b1:8b:61:3a:9f:1c:c4:67:55:fb:c3:41:6c:ca:63:91: b0:24:09:63:15:74:19:c8:3f:43:9a:6a:10:8b:01:00:ad:ba: 32:7c:0d:76:61:c5:2f:6e:ae:6f:6d:5c:48:9a:b8:57:b2:eb: 80:00:6f:e7:71:87:2d:88:9e:a6:c7:0a:a1:d5:5b:c1:fb:b8: f3:5b:d8:1a:df:dd:b1:98:e4:ab:ab:a5:3d:01:38:cc:57:48: dd:df:78:70:37:5f:d6:d6:eb:bb:08:51:41:ba:f3:9f:1b:9f: ce:ee:d7:2e:1b:d6:b8:89:3d:f4:25:c6:51:aa:86:af:fc:41: 31:0e:9d:78:58:0d:42:c3:b6:9e:fa:34:6e:96:f8:25:ad:c2: 2d:fd:c5:65:5e:fc:54:b1:35:a1:b5:cb:1b:ac:78:f9:9b:46: 75:03:c8:f0:d2:e8:5e:11:b3:91:4c:24:7a:9e:16:a6:cc:2d: bb:dd:68:fd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9yqLfH2PFvqD+3FL7P3oAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2ZmODViYjhhMzc1OTUyM2UwY2M5ZjhhOTFkYmRhZjQ3NGQ2YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BNUmnxJ7ShFveKBoEDNfENd7N7y L/q0CoZ9tR4OG8fKhto8hmx1VuVvRozU5CgtR2w5eoS2ZQprsz2pnOholcIXNYNf 4kS+jWRcq4gMjgPyoA+otYdeGzsjAD2BPFNQG/Ef72MnrmrZHXHH5IoQB3O3MASd 0/acXOeMYVfJT9lR8jqMAQCEYYUHLbKioXNUEacG9M1w/dggt8VN7dfF6OEvu16z i79py3UZa8XykKOaP87h81m/YEV1rzAxGzRTKNjdxXiBhmscAuhNHZ3VXCCs80Ci DGHq166SHDDTDlaLKs3xGqyN8uNGf9vCzV1zJn75uHfrE5cv2G0mbf1p1wIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4L2VjZDdm Yy0zZWY3LTQzMjYtYTRlZi01YmMzMDJiNGI1ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvZWNkN2Zj LTNlZjctNDMyNi1hNGVmLTViYzMwMmI0YjVmYy8xLzNQLUZ1NG8zV1ZJLURNbjRx UjI5cjBkTmEzdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9GrMA0GCSqGSIb3DQEBCwUAA4IBAQA7xBQn Hg5KFL2oRbMQTarIaPvycKTiQ3Fmv2jyrlkh2tF0N7t7gvrd5jf418ezQsC/1Pqn M+KyV57FRetr6mcTUTMlcBomio6v+bGLYTqfHMRnVfvDQWzKY5GwJAljFXQZyD9D mmoQiwEArboyfA12YcUvbq5vbVxImrhXsuuAAG/ncYctiJ6mxwqh1VvB+7jzW9ga 392xmOSrq6U9ATjMV0jd33hwN1/W1uu7CFFBuvOfG5/O7tcuG9a4iT30JcZRqoav /EExDp14WA1Cw7ae+jRulvglrcIt/cVlXvxUsTWhtcsbrHj5m0Z1A8jw0uheEbOR TCR6nhamzC273Wj9 -----END CERTIFICATE-----Generated at Mon Jan 26 01:18:06 2026 by rpki-client