This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer File: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer (raw, json) Hash identifier: sgWtIwaAbIGeo4PuQndEjVOea4ofE5mTTYe961mcDuw= Subject key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C71847F6CCCFE387D9D59158DCAB97 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 30758 AS: 50540 AS: 59887 AS: 62077 AS: 62095 IP: 185.48.24.0/22 IP: 2a04:b140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:18:47:f6:cc:cf:e3:87:d9:d5:91:58:dc:ab:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:77:98:d1:44:61:b3:00:21:8e:9a:5c:f8: e3:20:05:77:06:aa:0d:6a:f8:75:e0:14:3a:9c:f7: 73:1b:e3:f3:62:c2:30:1e:9a:1d:08:a5:52:f5:aa: 96:f9:c2:54:0e:b9:b9:c9:e2:11:ca:e4:f6:55:a2: 94:1a:0e:ef:f6:31:7f:5b:0a:a2:51:e6:bc:fc:18: 04:b4:13:78:35:33:a7:80:2f:dc:b1:82:50:65:21: 30:cf:7c:16:48:04:42:05:85:8e:85:0b:d4:6a:9f: 0f:a6:f9:4e:7d:4d:61:cc:ab:14:b9:6e:8d:1c:ef: fd:a9:52:97:67:70:63:c6:0b:58:ad:7b:bc:5d:0e: b5:4e:c1:ee:1f:c7:48:67:b5:5d:d8:26:fa:6b:4b: af:ea:68:3f:18:8b:37:0b:42:f0:fd:e2:a3:e3:d5: 2f:d4:95:2b:89:72:5d:e8:a2:e7:c5:2c:f4:a8:1b: 54:3c:e5:1c:7e:5a:01:42:dc:22:09:8d:c2:de:6f: c8:a7:df:f7:7c:37:de:ed:8e:d7:49:69:47:59:42: b0:e5:d3:24:54:d7:c4:01:11:fe:df:a6:24:4b:7a: ca:7a:34:2b:f5:19:50:ad:9f:4a:ec:17:5c:40:8f: 28:9d:1d:08:88:a0:d1:80:3a:2d:25:c1:df:5e:1b: 4b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.48.24.0/22 IPv6: 2a04:b140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30758 50540 59887 62077 62095 Signature Algorithm: sha256WithRSAEncryption 02:c4:18:5e:fb:ee:07:76:1e:7a:ff:7d:d8:86:c4:d8:bd:72: 66:4a:7f:b5:17:76:56:66:37:14:0c:a9:da:36:0d:2f:9d:a0: d4:9f:20:f0:9a:b0:0c:60:78:fe:c9:a1:9c:58:cb:30:38:42: 93:01:d9:07:df:e7:0e:2e:87:f3:19:0f:14:fe:e9:b3:06:c6: 5e:44:e6:85:87:cc:b6:01:2e:82:1f:d4:77:45:0d:bf:67:eb: bd:3b:40:2c:a9:25:84:00:e4:11:ff:f2:c6:6a:44:9e:ec:d6: bf:a5:7f:97:66:eb:cd:45:09:0b:10:6a:31:96:6d:a6:34:78: 58:c7:c6:ba:50:fa:63:a1:3d:f5:68:9f:96:0d:0e:71:5b:e4: 8e:2e:6e:2e:32:17:f1:16:2a:b6:e5:df:03:0d:ae:a6:47:12: e8:4f:b0:9f:fb:05:76:c0:9f:99:35:34:87:dd:fb:0f:72:be: e5:d7:55:80:f5:b1:2f:cc:bf:52:b4:46:31:3c:ac:78:0f:12: 88:1f:36:8c:4d:54:1e:57:f1:85:1b:35:90:ab:12:78:8c:0e: f5:70:c4:33:f7:12:2d:bd:65:ba:e8:9d:1b:eb:2a:55:0c:91: b4:8e:0e:32:63:6b:1d:4f:49:70:fb:81:06:23:a4:ad:ab:ca: 72:4a:ef:51 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZt3xxhH9szP44fZ1ZFY3KuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTZlZDA1NzljM2ZkMjUzNTk3ZWM4MmYwOTM5MTExYmE5ZDhjODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYx3mNFEYbMAIY6aXPjjIAV3BqoN avh14BQ6nPdzG+PzYsIwHpodCKVS9aqW+cJUDrm5yeIRyuT2VaKUGg7v9jF/Wwqi Uea8/BgEtBN4NTOngC/csYJQZSEwz3wWSARCBYWOhQvUap8PpvlOfU1hzKsUuW6N HO/9qVKXZ3BjxgtYrXu8XQ61TsHuH8dIZ7Vd2Cb6a0uv6mg/GIs3C0Lw/eKj49Uv 1JUriXJd6KLnxSz0qBtUPOUcfloBQtwiCY3C3m/Ip9/3fDfe7Y7XSWlHWUKw5dMk VNfEARH+36YkS3rKejQr9RlQrZ9K7BdcQI8onR0IiKDRgDotJcHfXhtLzQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFN5u0FecP9JTWX7ILwk5ERup2MiNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg1L2YxM2Y5 OC00ZTdhLTQzNWQtYjFiMC04Mzg2ZTcwYmRjNTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvZjEzZjk4 LTRlN2EtNDM1ZC1iMWIwLTgzODZlNzBiZGM1OC8xLzNtN1FWNXdfMGxOWmZzZ3ZD VGtSRzZuWXlJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuTAYMA0EAgACMAcDBQMqBLFAMC0GCCsGAQUF BwEIAQH/BB4wHKAaMBgCAngmAgMAxWwCAwDp7wIDAPJ9AgMA8o8wDQYJKoZIhvcN AQELBQADggEBAALEGF777gd2Hnr/fdiGxNi9cmZKf7UXdlZmNxQMqdo2DS+doNSf IPCasAxgeP7JoZxYyzA4QpMB2Qff5w4uh/MZDxT+6bMGxl5E5oWHzLYBLoIf1HdF Db9n6707QCypJYQA5BH/8sZqRJ7s1r+lf5dm681FCQsQajGWbaY0eFjHxrpQ+mOh PfVon5YNDnFb5I4ubi4yF/EWKrbl3wMNrqZHEuhPsJ/7BXbAn5k1NIfd+w9yvuXX VYD1sS/Mv1K0RjE8rHgPEogfNoxNVB5X8YUbNZCrEniMDvVwxDP3Ei29ZbronRvr KlUMkbSODjJjax1PSXD7gQYjpK2rynJK71E= -----END CERTIFICATE-----Generated at Mon Jan 26 11:46:48 2026 by rpki-client