This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer (raw, json) Hash identifier: MHScEh0jSmb37KZh+zSxf2zy7E41kCpxrhYiQ1rnAPw= Subject key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B9FB93BBCD3388C7E0C521B91C2F9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 79.170.64.0/21 IP: 87.237.80.0/21 IP: 185.186.200.0/22 IP: 2001:1a58::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:9f:b9:3b:bc:d3:38:8c:7e:0c:52:1b:91:c2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded353e2f5d318c348772a8ff105aa70719e4135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:96:6f:d9:b1:9f:0d:a4:cf:9b:e1:7c:71:2d: ef:de:a2:4a:75:24:97:32:44:49:57:4d:f1:72:1e: ae:3c:aa:3a:c8:82:d2:1c:fb:d4:3d:cf:18:35:18: 21:76:43:11:4b:2c:f4:ec:22:01:e3:7a:91:30:6e: ab:e7:dc:b3:35:86:44:ff:be:61:5c:9d:80:1a:84: 51:07:e8:51:dd:c0:d3:28:5e:07:45:7b:55:8b:4a: 85:bd:99:a1:39:1b:0c:59:b0:c7:0e:b1:94:ee:bd: b6:58:77:a8:87:bb:c8:92:7f:3e:07:6a:7e:70:e8: d5:70:83:1d:6b:b2:1a:57:95:bf:11:9f:ee:1c:f1: fe:50:98:91:7c:15:e1:5d:8d:e2:0e:62:38:3d:44: f7:06:e1:e3:40:5c:be:6a:b0:43:d1:21:e3:bf:9a: 5c:34:ef:ce:7d:ef:7d:95:3c:2c:8b:cb:d4:b7:9e: fe:3a:b0:35:58:9d:fa:46:9a:2d:29:b6:71:cd:43: 83:7a:ab:60:f9:89:2a:0e:36:df:1f:fa:a7:40:16: 34:50:bf:d4:c7:e5:9f:88:6e:49:fd:4b:bb:0a:55: e0:fc:53:a5:d3:e9:4b:cd:e0:d0:4d:e8:35:e0:88: 9f:57:a3:6b:53:f2:85:9a:f3:33:a9:fb:76:5d:1c: db:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.64.0/21 87.237.80.0/21 185.186.200.0/22 IPv6: 2001:1a58::/32 Signature Algorithm: sha256WithRSAEncryption 5d:d2:bc:23:45:45:99:d7:e0:fb:48:aa:e4:fb:0d:8b:aa:62: cf:36:23:d0:d1:49:13:ff:7f:65:ed:c2:64:a3:25:78:eb:fb: f1:29:14:90:27:16:33:9d:ff:c9:7b:15:cd:87:b1:87:8b:3b: d3:04:1e:e9:cc:df:75:e4:8f:d2:1b:0d:ec:0b:e9:a7:12:24: e3:0c:c6:6f:c8:3f:78:31:82:e3:95:8c:bf:9f:e4:7e:24:e8: c0:12:cb:7c:1b:21:47:72:b9:be:87:25:2e:58:c4:42:4f:7d: e9:72:69:cf:e9:29:91:d5:d8:07:ca:9b:c5:0b:71:ad:1a:f4: a5:9f:32:40:41:21:67:1f:77:09:c1:54:17:a7:02:6b:04:f2: 03:ba:b4:64:ac:ce:12:95:47:db:4f:75:64:7b:cc:bc:a4:78: ba:9c:72:09:b8:ea:97:1e:12:24:c0:eb:d8:12:a7:14:92:c5: 7c:94:47:95:8f:2b:e8:17:56:1c:43:d6:5c:07:6c:05:c1:23: 57:18:68:6a:a4:cb:af:40:b5:c0:50:15:dd:e1:30:d2:02:f6: 64:25:33:d9:aa:0a:9e:1c:7d:0a:72:d9:f6:cb:28:cc:48:6a: 34:85:e6:6a:8f:78:3a:f6:41:9e:f1:2f:83:06:d5:1d:ee:73: b7:5a:7b:9c -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt9W5+5O7zTOIx+DFIbkcL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQzNTNlMmY1ZDMxOGMzNDg3NzJhOGZmMTA1YWE3MDcxOWU0MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6pZv2bGfDaTPm+F8cS3v3qJKdSSX MkRJV03xch6uPKo6yILSHPvUPc8YNRghdkMRSyz07CIB43qRMG6r59yzNYZE/75h XJ2AGoRRB+hR3cDTKF4HRXtVi0qFvZmhORsMWbDHDrGU7r22WHeoh7vIkn8+B2p+ cOjVcIMda7IaV5W/EZ/uHPH+UJiRfBXhXY3iDmI4PUT3BuHjQFy+arBD0SHjv5pc NO/Ofe99lTwsi8vUt57+OrA1WJ36RpotKbZxzUODeqtg+YkqDjbfH/qnQBY0UL/U x+WfiG5J/Uu7ClXg/FOl0+lLzeDQTeg14IifV6NrU/KFmvMzqft2XRzbTwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFN7TU+L10xjDSHcqj/EFqnBxnkE1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2NiYWNj ZS1lZmJmLTRmMzItOGQ4OC00ZTg1ZGFiZDY0NzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvY2JhY2Nl LWVmYmYtNGYzMi04ZDg4LTRlODVkYWJkNjQ3NC8xLzN0TlQ0dlhUR01OSWR5cVA4 UVdxY0hHZVFUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDT6pAAwQDV+1QAwQCubrIMA0EAgACMAcDBQAg ARpYMA0GCSqGSIb3DQEBCwUAA4IBAQBd0rwjRUWZ1+D7SKrk+w2LqmLPNiPQ0UkT /39l7cJkoyV46/vxKRSQJxYznf/JexXNh7GHizvTBB7pzN915I/SGw3sC+mnEiTj DMZvyD94MYLjlYy/n+R+JOjAEst8GyFHcrm+hyUuWMRCT33pcmnP6SmR1dgHypvF C3GtGvSlnzJAQSFnH3cJwVQXpwJrBPIDurRkrM4SlUfbT3Vke8y8pHi6nHIJuOqX HhIkwOvYEqcUksV8lEeVjyvoF1YcQ9ZcB2wFwSNXGGhqpMuvQLXAUBXd4TDSAvZk JTPZqgqeHH0Kctn2yyjMSGo0heZqj3g69kGe8S+DBtUd7nO3Wnuc -----END CERTIFICATE-----Generated at Sun Jan 25 07:47:51 2026 by rpki-client