This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.cer (raw, json) Hash identifier: v2O9scOwlJRMSi7IskZNFrR2ACL+IcAMf1ssW483gUc= Subject key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5A8E4C2B56597812CAA67FBCB15729 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197177 IP: 81.161.100.0/24 IP: 91.223.52.0/24 IP: 109.106.4.0/22 IP: 185.174.12.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8e:4c:2b:56:59:78:12:ca:a6:7f:bc:b1:57:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd4670c2a6fd7223327f68badbe6d08322b78058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:c2:9f:a7:9e:88:fe:d5:22:0a:1e:f0:23: 7c:15:d9:c3:33:b0:8e:da:1b:73:b3:90:da:4b:c5: 74:c7:ba:55:a0:39:c0:c5:6f:4a:9b:79:f0:07:69: 4c:27:60:8f:ca:c1:6e:88:7a:f9:d7:a8:98:1a:f2: 1b:35:cc:01:37:53:23:60:50:2d:48:cf:e2:09:f1: ea:75:80:98:b0:d5:a7:f8:52:80:51:1a:0d:de:51: ff:5a:d2:2b:10:04:f3:2f:01:f9:7f:4f:0b:bd:5c: 48:93:09:e2:58:79:aa:5c:ad:67:aa:5e:a1:b5:e4: 9b:93:da:e1:17:2d:39:86:26:b8:fb:8e:fb:47:61: 4e:7d:1d:0b:a7:5b:af:46:f2:12:26:af:65:16:d0: 6b:a6:1d:76:cb:5e:29:1c:06:34:b0:9c:21:b6:96: 7b:5c:14:f2:be:5e:44:ec:ee:57:47:d4:8f:d0:6e: 84:5a:fd:3c:76:54:0a:9d:bc:0d:0a:3c:4c:7a:00: 88:51:a7:3f:ea:6c:93:b4:73:32:fc:f6:cb:6c:88: 78:5d:5d:36:35:12:e1:51:e3:ad:97:ab:f8:bb:f2: a1:c3:48:56:af:fb:92:a8:aa:da:b3:cd:ac:e2:f5: 17:b8:c9:d2:2a:2b:9c:45:38:53:da:0e:0f:63:f1: 2b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.100.0/24 91.223.52.0/24 109.106.4.0/22 185.174.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197177 Signature Algorithm: sha256WithRSAEncryption 55:4b:62:e2:5d:5b:40:22:19:b6:9a:40:d2:8a:48:b3:af:fc: 72:b7:b0:29:2f:45:c2:f8:45:bb:ba:e4:87:d6:94:88:18:6f: 22:88:23:bd:37:88:da:a9:c6:60:12:f3:80:aa:0f:60:17:d3: f4:f8:24:81:99:49:d3:15:51:9b:d8:ff:d7:73:8b:e1:b0:08: 4a:78:9d:c7:59:7a:a4:fd:3c:18:2f:6d:fb:75:e9:f2:db:b5: 5a:37:fe:2f:83:50:00:d7:bd:ab:aa:c5:c9:92:95:0a:ab:2d: 88:c8:26:18:43:f4:00:51:8c:ae:58:f6:4e:7f:b8:e4:56:35: a4:e9:88:15:6a:43:5d:55:ac:6a:29:21:c9:47:38:9a:a8:f2: 88:bb:09:1c:0f:12:b4:fc:f9:8d:90:5e:ac:09:ee:ac:73:de: a5:9a:08:d2:b8:ca:e7:6e:d8:47:7f:5f:74:9b:ab:2c:d5:ff: 36:cf:4f:1b:a4:a0:68:b4:9f:0a:89:ec:62:00:ce:3b:ec:a8: ef:77:ce:fc:28:b7:cb:60:26:ca:ec:27:10:1e:52:a4:ed:46: 57:de:f9:56:b2:11:f9:66:95:3f:32:5a:5e:a3:3e:2c:29:a8: 2e:2e:88:5d:a7:af:4e:4b:f7:d0:0d:7e:e6:45:2c:c7:96:9f: 36:05:d0:fb -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZt6Wo5MK1ZZeBLKpn+8sVcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDQ2NzBjMmE2ZmQ3MjIzMzI3ZjY4YmFkYmU2ZDA4MzIyYjc4MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdPCn6eeiP7VIgoe8CN8FdnDM7CO 2htzs5DaS8V0x7pVoDnAxW9Km3nwB2lMJ2CPysFuiHr516iYGvIbNcwBN1MjYFAt SM/iCfHqdYCYsNWn+FKAURoN3lH/WtIrEATzLwH5f08LvVxIkwniWHmqXK1nql6h teSbk9rhFy05hia4+477R2FOfR0Lp1uvRvISJq9lFtBrph12y14pHAY0sJwhtpZ7 XBTyvl5E7O5XR9SP0G6EWv08dlQKnbwNCjxMegCIUac/6myTtHMy/PbLbIh4XV02 NRLhUeOtl6v4u/Khw0hWr/uSqKras82s4vUXuMnSKiucRThT2g4PY/ErDQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFN1GcMKm/XIjMn9outvm0IMit4BYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzdhNzc4 MS05YjRjLTQ4MmItYjI5NS05Y2QzYzZhMTg4NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvN2E3Nzgx LTliNGMtNDgyYi1iMjk1LTljZDNjNmExODg2Ni8xLzNVWnd3cWI5Y2lNeWYyaTYy LWJRZ3lLM2dGZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF BwEHAQH/BCIwIDAeBAIAATAYAwQAUaFkAwQAW980AwQCbWoEAwQCua4MMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwMCOTANBgkqhkiG9w0BAQsFAAOCAQEAVUti4l1b QCIZtppA0opIs6/8crewKS9FwvhFu7rkh9aUiBhvIogjvTeI2qnGYBLzgKoPYBfT 9PgkgZlJ0xVRm9j/13OL4bAISnidx1l6pP08GC9t+3Xp8tu1Wjf+L4NQANe9q6rF yZKVCqstiMgmGEP0AFGMrlj2Tn+45FY1pOmIFWpDXVWsaikhyUc4mqjyiLsJHA8S tPz5jZBerAnurHPepZoI0rjK527YR39fdJurLNX/Ns9PG6SgaLSfConsYgDOO+yo 73fO/Ci3y2AmyuwnEB5SpO1GV975VrIR+WaVPzJaXqM+LCmoLi6IXaevTkv30A1+ 5kUsx5afNgXQ+w== -----END CERTIFICATE-----Generated at Mon Jan 26 10:17:50 2026 by rpki-client