This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer File: 3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer (raw, json) Hash identifier: 2g1srnDoGyNs8CoQAc5XRBfE7hMAhrZGQeJu8E5B0EU= Subject key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F14D827544241327EEC4530FF72FD9E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215230 IP: 2001:678:a30::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:d8:27:54:42:41:32:7e:ec:45:30:ff:72:fd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:f0:17:81:9d:0a:b5:98:c6:5e:39:95:8e: 47:f6:04:a1:2a:2d:53:39:47:b8:63:57:95:b9:86: fb:21:d9:d9:39:26:f5:1d:f0:23:ba:8d:2e:d4:88: 0d:94:ea:a6:75:6f:3c:fb:de:01:74:3d:8e:43:e3: fc:74:fb:08:1d:13:e9:0c:90:d0:35:69:ca:81:27: ef:b9:4a:a2:00:49:a9:1a:5b:e2:3e:a7:e8:be:e2: 37:93:06:61:5c:fd:d0:01:22:04:f4:68:24:85:2f: 77:1d:a2:55:57:27:00:d1:5b:42:75:4a:12:27:26: 28:77:48:17:a9:d5:ba:9f:45:ee:62:21:b2:e8:99: 77:eb:ca:dd:41:2f:b6:bd:ee:87:94:84:ee:8d:6c: 74:b4:d7:37:dd:89:64:5c:c1:0b:b5:33:94:8b:05: d8:0b:fb:07:bb:ce:e2:42:78:57:e3:15:e9:4f:7e: 5c:8b:b8:7a:a3:af:50:f7:fd:f7:87:94:70:6f:34: 14:2c:64:df:53:4f:9e:63:a0:9c:5e:c2:4c:df:d4: 7d:a9:a1:2c:66:66:0c:d0:35:12:63:ff:8f:d8:f8: db:09:73:af:2c:ee:a1:ca:8a:26:b7:6e:a7:59:cf: 1d:82:ee:40:3f:12:29:ec:b8:53:b0:24:ae:ac:e8: 48:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:a30::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215230 Signature Algorithm: sha256WithRSAEncryption a1:35:9a:4b:44:c0:24:ae:18:08:5d:3f:9c:ee:5d:c6:ff:ec: 29:27:b2:7e:52:3b:5d:b3:7b:14:bd:f1:d2:e7:e9:07:49:66: 66:44:a4:f4:51:de:f7:ff:08:eb:a9:8c:7c:ec:44:cd:6d:2d: a2:a5:8d:72:7e:28:0f:37:ac:95:e0:81:92:b8:ea:cb:1f:18: bd:08:de:ef:4e:26:7c:dd:c2:ff:e5:39:83:2b:e1:ae:fc:a5: c5:62:54:ca:e2:73:30:99:fc:58:8d:50:f5:01:3b:01:4a:07: 21:64:4a:54:b3:a7:61:c3:b9:ce:60:7b:af:83:7e:20:59:b4: 17:c6:9d:77:90:45:d9:ec:9d:47:79:07:14:15:92:9f:bd:db: 6f:d7:7f:56:38:06:6f:0e:bd:8e:ea:f3:a0:3f:97:dd:d5:18: ad:44:50:d9:2b:5e:5e:83:60:f5:c7:96:44:23:2d:98:74:fe: 6b:3f:f4:fa:4e:a4:01:ea:91:eb:51:a6:a4:29:fd:87:3c:e0: 0f:4a:c5:02:e9:79:27:19:1c:9f:39:bd:8e:66:61:55:48:79: 8a:e2:b9:a0:29:e7:e7:3a:f7:dd:0d:02:b2:a3:73:c8:64:b3: c6:68:26:8d:d2:2d:b6:f8:6e:3c:3b:0b:bc:bc:5c:ec:71:69: 37:6a:a8:03 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt/FNgnVEJBMn7sRTD/cv2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDhhZTRkOWFkODYzZGRhMTQwMWI0OTBjMjhjZmY4MmQ5OThlM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAvwF4GdCrWYxl45lY5H9gShKi1T OUe4Y1eVuYb7IdnZOSb1HfAjuo0u1IgNlOqmdW88+94BdD2OQ+P8dPsIHRPpDJDQ NWnKgSfvuUqiAEmpGlviPqfovuI3kwZhXP3QASIE9GgkhS93HaJVVycA0VtCdUoS JyYod0gXqdW6n0XuYiGy6Jl368rdQS+2ve6HlITujWx0tNc33YlkXMELtTOUiwXY C/sHu87iQnhX4xXpT35ci7h6o69Q9/33h5RwbzQULGTfU0+eY6CcXsJM39R9qaEs ZmYM0DUSY/+P2PjbCXOvLO6hyoomt26nWc8dgu5APxIp7LhTsCSurOhICQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFN2K5Nmthj3aFAG0kMKM/4LZmOO1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzM0N2Q3 MS1mZjc4LTRiM2EtYTVkYi00ZGU5MzQ1YzgzYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMzQ3ZDcx LWZmNzgtNGIzYS1hNWRiLTRkZTkzNDVjODNiZi8xLzNZcmsyYTJHUGRvVUFiU1F3 b3pfZ3RtWTQ3VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAowMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNIvjANBgkqhkiG9w0BAQsFAAOCAQEAoTWaS0TAJK4YCF0/nO5dxv/sKSey flI7XbN7FL3x0ufpB0lmZkSk9FHe9/8I66mMfOxEzW0toqWNcn4oDzesleCBkrjq yx8YvQje704mfN3C/+U5gyvhrvylxWJUyuJzMJn8WI1Q9QE7AUoHIWRKVLOnYcO5 zmB7r4N+IFm0F8add5BF2eydR3kHFBWSn73bb9d/VjgGbw69jurzoD+X3dUYrURQ 2SteXoNg9ceWRCMtmHT+az/0+k6kAeqR61GmpCn9hzzgD0rFAul5Jxkcnzm9jmZh VUh5iuK5oCnn5zr33Q0CsqNzyGSzxmgmjdIttvhuPDsLvLxc7HFpN2qoAw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:26 2026 by rpki-client