This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3tsgAwkB_y3069H0nkiRyyj-BzA.cer File: 3tsgAwkB_y3069H0nkiRyyj-BzA.cer (raw, json) Hash identifier: LDtOgbZtRYmanPe/sZo2bWG94P+yt7aovsjGkdCrRXs= Subject key identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1355459AC2291A61811FBF6EDD720C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60847 IP: 91.244.227.0/24 IP: 185.92.12.0/22 IP: 2a05:f000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:55:45:9a:c2:29:1a:61:81:1f:bf:6e:dd:72:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dedb20030901ff2df4ebd1f49e4891cb28fe0730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:4b:ae:6b:eb:11:f8:49:c5:05:47:86:41: 0a:da:74:ca:02:25:fe:83:7c:66:de:06:e1:fe:68: 45:0f:8b:12:93:89:c3:85:8d:4e:73:ce:c0:03:29: 50:3c:1f:be:3c:7c:a7:2a:01:fc:d6:b7:d2:f7:93: 55:bf:71:3a:83:f6:9d:f2:9c:55:5d:5c:06:ea:9b: b2:e9:1e:82:a7:3c:ff:30:c3:8b:83:4b:33:4f:f9: eb:45:1e:e7:94:59:f2:1d:74:f4:dc:23:7f:d7:09: f9:a7:9d:3d:80:49:50:aa:da:2d:c4:13:37:a7:c5: 7d:a8:e3:7c:8a:83:83:77:f4:af:6b:49:25:08:9e: 41:44:e7:b0:a4:90:1b:bb:b2:92:15:84:6e:e0:f2: dc:0c:73:bf:15:3c:1a:87:c3:d0:a3:b3:0c:24:f6: 49:70:4c:d4:57:06:5d:65:cb:1e:74:1c:08:06:55: 0c:76:63:c1:b9:90:b0:de:a2:c1:12:4c:f3:c4:75: 07:fe:b7:86:02:ee:01:30:9b:b5:89:f9:9b:57:9a: fa:22:22:e0:6c:f5:4f:a8:9b:c5:58:8f:e7:f0:4d: e4:f8:fd:e8:1d:00:7f:ee:17:fa:26:10:07:9d:36: 0e:c3:f3:32:fb:33:91:6e:65:45:e8:84:be:39:26: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DB:20:03:09:01:FF:2D:F4:EB:D1:F4:9E:48:91:CB:28:FE:07:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/678964-d802-48f9-96f1-e3bfa72d7ef8/1/3tsgAwkB_y3069H0nkiRyyj-BzA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.244.227.0/24 185.92.12.0/22 IPv6: 2a05:f000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60847 Signature Algorithm: sha256WithRSAEncryption 73:32:04:49:c9:85:04:a8:b0:f5:44:e5:f9:88:b5:b9:54:a7: a7:76:89:48:10:26:78:cc:58:0e:4a:d7:ab:bf:d2:fa:51:0c: b1:93:af:4a:d3:f9:3f:8a:4f:e1:ce:2c:3c:17:b0:f8:28:55: 12:01:5e:60:44:7a:9a:3e:bc:54:29:93:f9:0e:df:19:f6:db: c8:52:36:ed:c3:2d:4e:2a:26:7f:93:5c:b6:0d:c6:96:3f:bb: 4a:32:58:74:7c:ae:91:ae:11:50:bd:f3:9d:f3:40:9b:61:bc: 9e:c2:35:35:66:d5:63:b5:75:dd:01:23:ae:9c:f8:29:ba:d5: 11:95:28:d1:2e:b0:67:87:14:ce:40:96:40:76:69:4a:e8:28: 2d:f0:ea:c9:5b:5c:af:13:2f:50:ea:f7:39:c9:80:05:2e:a9: 64:30:5a:df:ec:9a:4c:3f:a2:51:53:77:97:aa:50:66:95:d3: 8d:cb:b8:9a:2c:d7:dc:62:59:bc:88:55:70:64:a0:fa:f2:76: 25:d4:3a:4b:7b:c1:53:87:3c:67:e1:b8:b2:c9:a6:3f:81:b7: 42:45:5c:fa:14:ef:35:57:e5:a7:c6:41:a3:e8:86:37:c7:49: 36:17:22:f7:9c:0d:22:47:8e:fc:e2:c1:a0:65:e9:6d:20:d5: 11:2c:c3:46 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt8E1VFmsIpGmGBH79u3XIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWRiMjAwMzA5MDFmZjJkZjRlYmQxZjQ5ZTQ4OTFjYjI4ZmUwNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7lLrmvrEfhJxQVHhkEK2nTKAiX+ g3xm3gbh/mhFD4sSk4nDhY1Oc87AAylQPB++PHynKgH81rfS95NVv3E6g/ad8pxV XVwG6puy6R6Cpzz/MMOLg0szT/nrRR7nlFnyHXT03CN/1wn5p509gElQqtotxBM3 p8V9qON8ioODd/Sva0klCJ5BROewpJAbu7KSFYRu4PLcDHO/FTwah8PQo7MMJPZJ cEzUVwZdZcsedBwIBlUMdmPBuZCw3qLBEkzzxHUH/reGAu4BMJu1ifmbV5r6IiLg bPVPqJvFWI/n8E3k+P3oHQB/7hf6JhAHnTYOw/My+zORbmVF6IS+OSYQWwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFN7bIAMJAf8t9OvR9J5Ikcso/gcwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzY3ODk2 NC1kODAyLTQ4ZjktOTZmMS1lM2JmYTcyZDdlZjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvNjc4OTY0 LWQ4MDItNDhmOS05NmYxLWUzYmZhNzJkN2VmOC8xLzN0c2dBd2tCX3kzMDY5SDBu a2lSeXlqLUJ6QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW/TjAwQCuVwMMA0EAgACMAcDBQMqBfAAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtrzANBgkqhkiG9w0BAQsFAAOCAQEAczIE ScmFBKiw9UTl+Yi1uVSnp3aJSBAmeMxYDkrXq7/S+lEMsZOvStP5P4pP4c4sPBew +ChVEgFeYER6mj68VCmT+Q7fGfbbyFI27cMtTiomf5Nctg3Glj+7SjJYdHyuka4R UL3znfNAm2G8nsI1NWbVY7V13QEjrpz4KbrVEZUo0S6wZ4cUzkCWQHZpSugoLfDq yVtcrxMvUOr3OcmABS6pZDBa3+yaTD+iUVN3l6pQZpXTjcu4mizX3GJZvIhVcGSg +vJ2JdQ6S3vBU4c8Z+G4ssmmP4G3QkVc+hTvNVflp8ZBo+iGN8dJNhci95wNIkeO /OLBoGXpbSDVESzDRg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:59 2026 by rpki-client