This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer (raw, json) Hash identifier: xHZTb9Fend8CfJZoNp4Z6LPFuE6X9hLfAYDY9Deb6qU= Subject key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C72D00D682E05109457651815C2261 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:20 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41923 IP: 193.34.56.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2d:00:d6:82:e0:51:09:45:76:51:81:5c:22:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:53:bb:10:d8:1a:8c:6f:28:fc:a0:36:c7:bb: 4c:2c:ee:ea:23:3b:db:1f:d8:d2:12:ba:62:2b:8c: ee:f3:49:14:eb:3a:1a:e9:2a:d7:e7:3b:1c:28:99: 99:83:be:73:36:10:9d:70:b5:17:ac:ee:26:37:ef: 21:be:a8:5a:4e:9b:9a:f7:ed:19:b3:c8:b4:28:b4: ab:00:23:3c:78:68:c9:37:ac:7b:62:f5:b4:3b:34: 64:e3:d4:c8:97:66:55:3d:cc:bf:d9:6e:33:8e:66: 3a:d1:0d:0e:87:e7:42:78:f0:d0:f4:49:b4:14:f2: 3d:42:69:e2:85:cb:51:a9:9b:99:65:4f:e9:62:d8: f2:68:32:ec:ab:35:00:a5:9f:51:5c:81:d2:ed:4b: a1:ee:05:9f:d8:39:01:e7:56:18:4a:fe:77:8a:5e: 4f:11:71:ef:fe:fa:73:9f:91:9e:77:06:da:f0:65: 3e:2c:c9:1f:27:b8:89:15:78:69:7c:d7:3b:b6:b9: 8b:de:39:d8:d5:d2:9a:71:e0:66:5b:e5:3b:c6:78: e4:4e:41:65:18:57:5b:32:50:65:0a:79:50:83:f0: c3:aa:45:85:6a:47:c0:c4:9c:43:26:81:31:e2:59: e5:28:4a:b9:af:2c:f0:cf:c9:13:c9:e3:cd:61:e1: 4c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41923 Signature Algorithm: sha256WithRSAEncryption 1c:53:32:2f:d9:eb:2e:21:ee:67:0b:d8:f9:24:62:67:c6:f4: 78:bd:21:1c:47:33:82:21:ec:5a:3b:b7:6c:26:6c:1e:66:6d: d6:ab:fc:6b:f7:30:c1:45:a9:6c:7a:29:75:10:50:19:63:06: 86:e6:5d:b1:5b:ca:fa:6c:14:3c:ef:d9:04:5e:ac:8c:22:ab: 7b:cb:bf:36:42:dd:bf:65:8b:78:12:d1:51:14:19:6a:a6:5b: b0:c3:d7:c2:38:84:d0:d7:61:99:1f:10:ef:bc:73:65:f4:e1: 26:a7:42:d5:29:cd:63:54:e4:17:98:fe:3c:d7:60:dd:62:5c: ad:1f:88:52:7a:ca:df:ea:45:8d:2b:eb:6f:7f:d7:bf:7e:63: c5:90:6c:f3:8f:81:02:1b:7e:bc:e3:bc:d6:89:69:c4:e7:f2: b8:5d:60:43:f2:33:83:ac:01:09:a0:34:e2:8d:76:b4:71:60: 5c:25:f4:40:88:98:ab:3c:32:52:cc:ba:5f:ed:72:fc:31:92: fb:62:23:c6:10:e4:7f:18:74:2f:ce:7b:15:62:98:db:1a:7c: 97:bf:67:22:75:ec:9f:cd:7d:e0:02:28:6d:cb:67:7b:87:20: 81:b7:7a:9b:70:e3:26:53:ea:14:6f:ed:8f:2c:fe:83:fc:e3: 11:13:a0:b7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt3xy0A1oLgUQlFdlGBXCJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGQ5NzcwYzMwN2VhMzk2MGM4ZGEyNjhhODg2NWE0YTlmYTYzNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VO7ENgajG8o/KA2x7tMLO7qIzvb H9jSErpiK4zu80kU6zoa6SrX5zscKJmZg75zNhCdcLUXrO4mN+8hvqhaTpua9+0Z s8i0KLSrACM8eGjJN6x7YvW0OzRk49TIl2ZVPcy/2W4zjmY60Q0Oh+dCePDQ9Em0 FPI9QmnihctRqZuZZU/pYtjyaDLsqzUApZ9RXIHS7Uuh7gWf2DkB51YYSv53il5P EXHv/vpzn5Gedwba8GU+LMkfJ7iJFXhpfNc7trmL3jnY1dKaceBmW+U7xnjkTkFl GFdbMlBlCnlQg/DDqkWFakfAxJxDJoEx4lnlKEq5ryzwz8kTyePNYeFMowIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUzLzQ0NDRh Yi0zZGEzLTQxOGItYTEwNS1mMmZlMGQwNGJmYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTMvNDQ0NGFi LTNkYTMtNDE4Yi1hMTA1LWYyZmUwZDA0YmZiZi8xLzNkbDNEREItbzVZTWphSm9x SVphU3AtbU5Nay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCwSI4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCjwzANBgkqhkiG9w0BAQsFAAOCAQEAHFMyL9nrLiHuZwvY+SRiZ8b0eL0hHEcz giHsWju3bCZsHmZt1qv8a/cwwUWpbHopdRBQGWMGhuZdsVvK+mwUPO/ZBF6sjCKr e8u/NkLdv2WLeBLRURQZaqZbsMPXwjiE0NdhmR8Q77xzZfThJqdC1SnNY1TkF5j+ PNdg3WJcrR+IUnrK3+pFjSvrb3/Xv35jxZBs84+BAht+vOO81olpxOfyuF1gQ/Iz g6wBCaA04o12tHFgXCX0QIiYqzwyUsy6X+1y/DGS+2IjxhDkfxh0L857FWKY2xp8 l79nInXsn8194AIobctne4cggbd6m3DjJlPqFG/tjyz+g/zjEROgtw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:42:01 2026 by rpki-client