This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer (raw, json) Hash identifier: EjbNbvjgYAcJ5OEAI7SUTX8TPIu6bJNvhMAvBG8XXhE= Subject key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA610ABC2EE7F63B05A85DB75325E0F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 202354 IP: 194.127.108.0/22 IP: 2a07:ce80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:10:ab:c2:ee:7f:63:b0:5a:85:db:75:32:5e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dee623e2aff7b03afeb94260348c1633b54d9056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:9e:c8:95:53:df:37:f4:00:87:2a:6d:b5: 31:3d:00:5b:5b:ff:8d:ce:62:94:87:cf:3b:df:e1: 80:b8:c8:c5:02:25:f9:61:87:89:c3:30:5f:b1:59: ba:53:06:f2:db:99:5b:f0:19:27:af:93:3e:e2:a8: 7e:e6:4c:e6:0d:a8:c3:30:8c:24:f9:e4:52:69:ff: 10:ca:25:6a:3d:40:7a:e3:27:09:84:fb:bb:13:d9: 40:3d:84:e2:f6:1c:34:63:8e:f5:c0:e8:34:8f:c3: 78:82:3d:07:0b:01:9e:7e:f3:bb:1a:d3:09:24:8f: 19:a7:3f:6f:4f:27:cc:02:89:2d:e4:02:60:fe:a3: bc:d2:e1:d4:b9:b2:7c:68:89:19:32:6c:fc:0f:db: 56:5a:5c:0d:f5:5c:43:03:8d:cf:f1:6e:98:72:c7: c5:7f:6e:07:2b:2b:8e:88:2d:d0:06:c1:5d:1f:52: e1:67:c3:ff:37:59:9b:36:45:c0:f7:af:fa:36:28: b6:05:c5:fd:cd:18:b8:39:c0:a9:9c:fa:07:89:4d: 2e:88:70:dd:8b:9a:fa:d9:15:29:70:21:1f:7e:7b: 6e:ed:f5:e5:b4:09:6b:28:23:98:1d:70:66:24:f9: 7d:8b:92:c7:47:35:81:e9:ba:4a:27:b2:db:67:06: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.108.0/22 IPv6: 2a07:ce80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202354 Signature Algorithm: sha256WithRSAEncryption 3b:ed:a2:27:e5:07:1f:f0:e5:e9:ef:ed:a5:40:23:28:03:dc: d8:42:34:68:95:d0:1f:8f:e1:d3:19:9e:7e:f6:27:8f:a3:6a: 5e:b5:5f:7b:f6:f1:47:6a:bc:33:a0:cc:d8:c4:19:c0:98:0e: 17:f2:61:6d:53:19:5c:b2:f0:02:ce:8f:95:b0:24:8e:89:eb: 3e:46:6c:41:e4:40:f1:dd:2f:fc:87:f5:35:61:c4:2f:86:0a: 10:3a:2a:d5:20:73:7b:f0:18:b2:23:5d:32:e1:b4:55:c1:74: 7c:ec:60:03:73:fb:0b:23:2d:83:b0:ce:59:13:b7:a4:eb:65: c3:38:9d:db:6a:ce:9d:0f:65:02:54:0b:f7:c2:44:ff:16:d4: 55:2e:a2:95:6f:55:e4:15:1b:8e:07:8a:8c:40:0a:f9:43:7e: e4:ce:d9:33:1f:70:95:c9:20:e5:42:e6:24:76:ef:80:17:25: 84:7d:4a:d2:01:48:89:a0:8e:3a:d4:c4:e0:2a:b1:5e:aa:7c: 3f:6a:6e:6d:75:c7:83:da:59:2c:ee:aa:80:b0:23:c5:cc:a2: 35:f2:89:f8:8e:cb:a4:cf:24:cd:b4:71:5e:06:84:de:8d:d8: 4d:6c:d4:a0:88:04:a2:9f:ce:b6:94:7a:11:8c:0f:4b:15:58: 99:2a:d4:bd -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt+phCrwu5/Y7Bahdt1Ml4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWU2MjNlMmFmZjdiMDNhZmViOTQyNjAzNDhjMTYzM2I1NGQ5MDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKOeyJVT3zf0AIcqbbUxPQBbW/+N zmKUh8873+GAuMjFAiX5YYeJwzBfsVm6Uwby25lb8Bknr5M+4qh+5kzmDajDMIwk +eRSaf8QyiVqPUB64ycJhPu7E9lAPYTi9hw0Y471wOg0j8N4gj0HCwGefvO7GtMJ JI8Zpz9vTyfMAokt5AJg/qO80uHUubJ8aIkZMmz8D9tWWlwN9VxDA43P8W6YcsfF f24HKyuOiC3QBsFdH1LhZ8P/N1mbNkXA96/6Nii2BcX9zRi4OcCpnPoHiU0uiHDd i5r62RUpcCEffntu7fXltAlrKCOYHXBmJPl9i5LHRzWB6bpKJ7LbZwbDcwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN7mI+Kv97A6/rlCYDSMFjO1TZBWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzk4NzFm Zi0zZjI2LTRiOTQtYTQ2NC02Y2MxZDNlYTgzMmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvOTg3MWZm LTNmMjYtNGI5NC1hNDY0LTZjYzFkM2VhODMyZS8xLzN1WWo0cV8zc0RyLXVVSmdO SXdXTTdWTmtGWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCwn9sMA0EAgACMAcDBQMqB86AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMWcjANBgkqhkiG9w0BAQsFAAOCAQEAO+2iJ+UHH/Dl 6e/tpUAjKAPc2EI0aJXQH4/h0xmefvYnj6NqXrVfe/bxR2q8M6DM2MQZwJgOF/Jh bVMZXLLwAs6PlbAkjonrPkZsQeRA8d0v/If1NWHEL4YKEDoq1SBze/AYsiNdMuG0 VcF0fOxgA3P7CyMtg7DOWRO3pOtlwzid22rOnQ9lAlQL98JE/xbUVS6ilW9V5BUb jgeKjEAK+UN+5M7ZMx9wlckg5ULmJHbvgBclhH1K0gFIiaCOOtTE4CqxXqp8P2pu bXXHg9pZLO6qgLAjxcyiNfKJ+I7LpM8kzbRxXgaE3o3YTWzUoIgEop/OtpR6EYwP SxVYmSrUvQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:55:12 2026 by rpki-client