This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer (raw, json) Hash identifier: /t+cQoWJofUyps3jsYYAqbbThNw9JjF3PtsRApZ06aI= Subject key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83D58A2C6A9D4A3C13832B54658CA1 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213490 IP: 193.141.183.0/24 IP: 193.141.188.0/24 IP: 2001:67c:d18::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d5:8a:2c:6a:9d:4a:3c:13:83:2b:54:65:8c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9a:57:3c:12:ee:ce:c1:11:35:d9:ac:71:1d: 2e:0e:e8:1d:a5:49:0d:e5:3d:d4:20:7e:76:7d:2b: 2e:88:37:4a:d6:d6:bb:77:e6:94:f4:ab:2f:7b:ec: b8:85:2a:76:11:bf:7e:fc:9a:50:9a:a2:89:81:8d: d3:e7:9f:b6:c5:1b:4d:e2:55:45:35:3b:38:56:ef: 84:d4:3e:cc:a7:b8:44:08:71:ad:8d:f5:4f:5a:88: 43:93:45:ef:b6:1d:8b:97:53:49:6b:1d:d0:54:1e: 78:fe:39:7a:cf:a9:81:e8:d4:02:58:32:7d:22:83: 77:3f:3e:fd:56:86:be:3a:43:1b:9e:8a:82:c6:95: c6:f6:fb:67:4e:79:a8:f6:fa:4e:0b:97:43:6c:84: 2e:2a:26:a3:2b:fc:d9:ca:d9:93:a3:07:90:28:a4: b7:45:2d:62:86:dc:a6:93:6c:bf:36:85:71:f9:4a: 65:b9:51:1d:e4:16:a8:9d:bb:e4:46:ea:ac:8c:69: 25:e8:bf:f0:8a:d9:ac:64:e5:30:6f:1f:79:47:e1: d8:bc:12:eb:79:3e:5e:ba:0c:a4:6c:72:a5:de:55: 09:58:69:4e:43:46:92:9e:23:fa:1f:d2:40:e4:79: cf:84:03:c3:ec:f4:bc:ba:32:87:0b:9d:4c:5b:44: d5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.183.0/24 193.141.188.0/24 IPv6: 2001:67c:d18::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213490 Signature Algorithm: sha256WithRSAEncryption 8e:d5:35:34:e7:a9:5d:d7:a5:d4:c2:64:f8:63:55:92:52:3d: 89:cf:e1:f9:fd:69:d3:f2:47:52:d8:0f:58:49:7d:f5:38:0a: d5:8b:a1:98:ea:52:15:1e:b3:47:81:d9:35:ad:64:91:ba:33: 8c:ef:81:6c:18:c5:57:cf:ab:02:7c:ff:06:fe:01:34:1e:68: f4:e2:ac:1e:e0:3c:18:67:ed:bf:99:1c:61:e1:34:d2:0f:1e: 65:5c:7e:f3:78:99:13:f0:0a:1f:28:48:25:b2:38:0f:ef:dd: 97:b0:71:42:34:fa:f7:67:52:d1:24:d1:84:80:5a:c3:16:aa: 33:6f:30:da:25:2e:5b:29:ef:c8:1f:11:6e:7b:af:cd:07:a1: 19:95:90:df:26:e6:52:ac:71:e7:c5:6f:fc:ba:48:4f:a0:c6: 0b:65:c7:79:e0:95:92:c9:87:9e:a3:29:0f:9b:e4:de:9b:71: e7:04:cb:3d:b8:f1:15:05:8a:3f:15:69:6f:e6:85:5f:c4:f3: b7:98:a8:b1:db:a6:2d:13:0e:ec:96:79:f3:96:b4:ab:14:5c: 03:b2:62:93:4e:4a:89:79:a1:15:d2:30:1f:0d:47:05:77:04: 7a:62:71:dd:c8:4e:d0:8b:e6:3f:ca:aa:a0:15:44:6f:4a:47: b9:8e:77:a1 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt/g9WKLGqdSjwTgytUZYyhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDVmNzJmMGZhY2Y1MjcwNTcyN2MwMzliZGMxZmJiN2NjOTdkNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZpXPBLuzsERNdmscR0uDugdpUkN 5T3UIH52fSsuiDdK1ta7d+aU9Ksve+y4hSp2Eb9+/JpQmqKJgY3T55+2xRtN4lVF NTs4Vu+E1D7Mp7hECHGtjfVPWohDk0Xvth2Ll1NJax3QVB54/jl6z6mB6NQCWDJ9 IoN3Pz79Voa+OkMbnoqCxpXG9vtnTnmo9vpOC5dDbIQuKiajK/zZytmToweQKKS3 RS1ihtymk2y/NoVx+UpluVEd5BaonbvkRuqsjGkl6L/witmsZOUwbx95R+HYvBLr eT5eugykbHKl3lUJWGlOQ0aSniP6H9JA5HnPhAPD7PS8ujKHC51MW0TVfwIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFN1fcvD6z1JwVyfAOb3B+7fMl9QoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzcyLzJmMzNl ZS01NTkwLTRhMjItYjhlMi0yODgwNjEyNzA1ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvMmYzM2Vl LTU1OTAtNGEyMi1iOGUyLTI4ODA2MTI3MDVlZS8xLzNWOXk4UHJQVW5CWEo4QTV2 Y0g3dDh5WDFDZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF BwEHAQH/BCcwJTASBAIAATAMAwQAwY23AwQAwY28MA8EAgACMAkDBwAgAQZ8DRgw GgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDA0HyMA0GCSqGSIb3DQEBCwUAA4IBAQCO 1TU056ld16XUwmT4Y1WSUj2Jz+H5/WnT8kdS2A9YSX31OArVi6GY6lIVHrNHgdk1 rWSRujOM74FsGMVXz6sCfP8G/gE0Hmj04qwe4DwYZ+2/mRxh4TTSDx5lXH7zeJkT 8AofKEglsjgP792XsHFCNPr3Z1LRJNGEgFrDFqozbzDaJS5bKe/IHxFue6/NB6EZ lZDfJuZSrHHnxW/8ukhPoMYLZcd54JWSyYeeoykPm+Tem3HnBMs9uPEVBYo/FWlv 5oVfxPO3mKix26YtEw7slnnzlrSrFFwDsmKTTkqJeaEV0jAfDUcFdwR6YnHdyE7Q i+Y/yqqgFURvSke5jneh -----END CERTIFICATE-----Generated at Sun Jan 25 21:35:55 2026 by rpki-client