This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer File: 3ye5OZNKLMIG_7przpyQ_cujnHE.cer (raw, json) Hash identifier: pBCed4lHks/yNXHRq3sE1fRxu+I8sMot/n2mf262Bnw= Subject key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E385A544C4CF787BE37924C71682C2D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:41 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 58331 IP: 185.75.204.0/22 IP: 193.242.194.0/23 IP: 2a05:5440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:5a:54:4c:4c:f7:87:be:37:92:4c:71:68:2c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:4b:cd:65:8d:f6:c6:f9:a9:a5:eb:42:04: 03:60:0b:a7:a6:7b:7a:e0:d2:d8:56:c4:b8:4e:23: d9:cb:bd:44:d7:9e:f3:67:30:2c:45:31:82:29:bb: 38:73:6d:7a:be:c3:3b:e5:a5:69:5a:6c:b4:f9:6b: 17:6e:fc:b7:e1:6f:9e:0a:a3:44:3e:49:ea:3c:88: 95:ff:15:6a:04:28:fd:cb:54:f0:c0:c8:d3:ce:90: cd:83:42:b8:fe:02:f9:1d:1d:86:e8:e8:5c:fc:8e: f9:b8:29:f6:58:55:98:28:d4:a8:b5:08:30:c0:fc: 6d:2f:6a:01:9c:40:ac:93:1b:33:9d:7a:46:83:a4: 18:0c:e5:83:ab:c3:88:0b:51:68:38:cc:3b:11:7b: 1d:ab:2c:8c:df:30:3f:9a:91:cf:cb:ba:29:d7:ee: 12:65:fa:b0:d1:94:09:e9:b6:bd:79:aa:86:cb:fe: 3e:a8:09:5b:17:a8:ca:8f:51:ed:27:1e:85:ab:5e: 8e:4c:82:52:5b:c5:d5:5e:6a:d8:c9:c5:df:ce:a6: d8:ba:cf:12:62:b0:19:da:31:db:1f:00:0b:79:2f: 49:a5:c7:8b:11:2b:ff:4d:cb:cd:b4:eb:e1:6e:6c: 4b:24:32:cd:1a:df:a6:22:30:d3:4d:ae:66:f8:00: b0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.204.0/22 193.242.194.0/23 IPv6: 2a05:5440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58331 Signature Algorithm: sha256WithRSAEncryption 16:41:85:98:50:9b:e9:35:fc:a6:8c:4a:b0:38:2e:c0:31:37: 55:34:9e:c9:64:92:92:a0:46:83:53:de:ea:19:36:34:6c:20: e7:b3:88:74:cf:ce:88:9d:2a:63:8c:2b:6b:d5:38:48:f6:d6: 9b:10:0d:d4:8e:c0:35:a3:1e:99:6d:18:cb:d9:ea:2e:b6:3e: 72:0c:72:41:d3:d3:25:88:53:62:3d:6f:63:e0:8d:28:ee:47: e1:6f:ef:67:ab:08:63:54:b4:7b:cf:16:95:b3:01:65:8b:5d: 44:3a:08:5c:cd:8a:53:f8:45:39:df:3a:e4:0e:aa:7b:d1:f3: 22:32:d6:19:38:fb:43:1e:62:08:03:7e:3b:03:ab:f9:7e:92: 30:d3:c1:5a:a7:db:d2:78:41:ce:b8:27:d6:f6:5d:83:fc:84: 77:e2:f2:33:d3:29:ac:b0:aa:96:bf:1f:dd:dc:16:6d:db:a6: 2e:01:cb:2d:80:e3:e6:6f:74:2a:96:20:24:57:14:95:cc:de: bc:b7:00:2a:b1:3d:41:a6:9b:a4:b0:a6:a3:be:b1:38:23:d1: a9:c9:20:34:18:27:df:8d:cf:5e:11:c4:9d:66:7a:00:df:b7: b4:ab:49:9d:d5:3b:a2:69:d5:d5:64:f1:11:4b:97:48:3b:30: 5f:40:ca:29 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt+OFpUTEz3h743kkxxaCwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjI3YjkzOTkzNGEyY2MyMDZmZmJhNmJjZTljOTBmZGNiYTM5YzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIxLzWWN9sb5qaXrQgQDYAunpnt6 4NLYVsS4TiPZy71E157zZzAsRTGCKbs4c216vsM75aVpWmy0+WsXbvy34W+eCqNE PknqPIiV/xVqBCj9y1TwwMjTzpDNg0K4/gL5HR2G6Ohc/I75uCn2WFWYKNSotQgw wPxtL2oBnECskxsznXpGg6QYDOWDq8OIC1FoOMw7EXsdqyyM3zA/mpHPy7op1+4S Zfqw0ZQJ6ba9eaqGy/4+qAlbF6jKj1HtJx6Fq16OTIJSW8XVXmrYycXfzqbYus8S YrAZ2jHbHwALeS9JpceLESv/TcvNtOvhbmxLJDLNGt+mIjDTTa5m+ACw/wIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFN8nuTmTSizCBv+6a86ckP3Lo5xxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2Lzk2NjI2 MS04M2I1LTRlYWQtYTQ2OC02ZWQ1NGQzZmU0ZjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvOTY2MjYx LTgzYjUtNGVhZC1hNDY4LTZlZDU0ZDNmZTRmNC8xLzN5ZTVPWk5LTE1JR183cHJ6 cHlRX2N1am5IRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuUvMAwQBwfLCMA0EAgACMAcDBQMqBVRAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDj2zANBgkqhkiG9w0BAQsFAAOCAQEAFkGF mFCb6TX8poxKsDguwDE3VTSeyWSSkqBGg1Pe6hk2NGwg57OIdM/OiJ0qY4wra9U4 SPbWmxAN1I7ANaMemW0Yy9nqLrY+cgxyQdPTJYhTYj1vY+CNKO5H4W/vZ6sIY1S0 e88WlbMBZYtdRDoIXM2KU/hFOd865A6qe9HzIjLWGTj7Qx5iCAN+OwOr+X6SMNPB Wqfb0nhBzrgn1vZdg/yEd+LyM9MprLCqlr8f3dwWbdumLgHLLYDj5m90KpYgJFcU lczevLcAKrE9QaabpLCmo76xOCPRqckgNBgn343PXhHEnWZ6AN+3tKtJndU7omnV 1WTxEUuXSDswX0DKKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:19 2026 by rpki-client