This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer File: M3L10Rir0Ska4kjmxp1kqZqa7wY.cer (raw, json) Hash identifier: npYtzpN1zZvfKKy9sojMyhsURTa8n6BUQGyk4NgBl/w= Subject key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C6B6F836D059D6977464064442D387 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39345 IP: 195.178.102.0/23 IP: 2001:678:164::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b6:f8:36:d0:59:d6:97:74:64:06:44:42:d3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:2e:68:19:84:9e:74:ab:83:3b:c0:9d:43: 3a:47:1a:1d:55:dd:e2:9a:5a:ea:56:ae:2b:2d:5e: ed:9c:54:c0:f3:73:7a:dc:c1:9e:05:1f:17:73:54: f8:04:9d:c5:61:8f:e3:83:8d:3b:de:17:63:80:24: 7b:83:05:62:3a:c9:38:86:50:32:af:48:e4:7b:c2: cd:f3:31:6f:59:20:1c:f2:e3:ec:e9:3e:1b:4b:e3: b5:69:a3:c2:d0:57:22:d2:b9:0e:d3:d8:63:b8:a1: 0c:c2:98:c1:61:86:f5:fe:50:76:76:64:33:e9:60: f2:81:62:69:a8:88:fd:25:1c:31:fa:a2:c9:a0:08: 4b:ee:ac:03:54:b0:5a:30:ea:09:1b:b2:3d:ab:a0: 3e:62:8e:99:8a:73:c6:7f:c6:de:23:3f:3f:b3:dc: ea:f8:81:87:3b:2d:d5:e8:74:43:cb:62:4b:bd:7a: d7:95:8a:02:82:2e:20:7a:2f:75:b7:46:66:47:77: 36:cf:4c:d6:e3:6f:2c:41:94:09:b5:72:b3:d7:e4: e9:53:35:42:ec:7a:18:69:29:f9:45:db:0e:69:af: 45:3f:60:6a:6f:77:d1:74:03:3b:a2:8c:62:8b:90: 6f:6a:79:bf:4a:e3:bf:3b:da:d0:7e:65:05:d6:17: 74:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.102.0/23 IPv6: 2001:678:164::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39345 Signature Algorithm: sha256WithRSAEncryption 6a:32:fa:29:b9:69:42:e3:5d:af:48:e1:cc:dd:23:bd:a3:79: 8d:3f:9f:f9:e8:f1:74:d4:53:fd:eb:8a:18:10:d6:d3:14:24: f5:6f:b4:b2:df:72:5e:d0:a7:95:36:f2:b7:dd:e5:ae:8f:6e: 51:9f:c8:82:89:2d:c2:79:5a:14:c6:38:4e:8e:a9:80:73:e1: bd:00:ae:b2:ec:de:84:d5:9c:a0:0c:30:f6:f8:ad:10:b7:e1: b7:36:69:14:1d:e1:48:86:41:3b:bf:d7:06:87:dd:96:a7:6b: 20:9f:97:69:59:0a:58:15:8a:1d:45:9d:6f:73:c4:f0:ac:69: e0:38:2f:26:61:73:8f:ad:32:7f:75:f1:1d:df:f8:a2:a9:0c: 27:9d:db:a6:ad:e7:fa:7c:d2:14:7d:af:cf:39:6b:9d:1c:08: 9c:f8:f8:01:11:13:26:1e:ba:90:a6:f3:d6:d2:a6:a7:a3:70: 17:c3:a2:f3:44:20:24:34:65:22:6a:d8:cb:7c:e6:38:fd:ed: 97:28:3e:51:27:e6:ab:ba:ec:54:ab:39:d9:19:48:80:2f:b9: c0:12:6f:3a:9b:51:e9:d7:36:fd:86:62:67:32:44:20:c6:c7: ea:f9:31:a0:0b:65:e4:9c:61:9b:86:7c:fb:a4:0b:37:93:ad: 1d:74:7c:53 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt3xrb4NtBZ1pd0ZAZEQtOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzcyZjVkMTE4YWJkMTI5MWFlMjQ4ZTZjNjlkNjRhOTlhOWFlZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyIuaBmEnnSrgzvAnUM6RxodVd3i mlrqVq4rLV7tnFTA83N63MGeBR8Xc1T4BJ3FYY/jg4073hdjgCR7gwViOsk4hlAy r0jke8LN8zFvWSAc8uPs6T4bS+O1aaPC0Fci0rkO09hjuKEMwpjBYYb1/lB2dmQz 6WDygWJpqIj9JRwx+qLJoAhL7qwDVLBaMOoJG7I9q6A+Yo6ZinPGf8beIz8/s9zq +IGHOy3V6HRDy2JLvXrXlYoCgi4gei91t0ZmR3c2z0zW428sQZQJtXKz1+TpUzVC 7HoYaSn5RdsOaa9FP2Bqb3fRdAM7ooxii5Bvanm/SuO/O9rQfmUF1hd0FQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFDNy9dEYq9EpGuJI5sadZKmamu8GMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2EyZGRh ZC03ZDRkLTQxY2ItYTY5My1kMmQ5MjQxZWM1ZGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvYTJkZGFk LTdkNGQtNDFjYi1hNjkzLWQyZDkyNDFlYzVkYi8xL00zTDEwUmlyMFNrYTRram14 cDFrcVpxYTd3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBw7JmMA8EAgACMAkDBwAgAQZ4AWQwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAJmxMA0GCSqGSIb3DQEBCwUAA4IBAQBqMvopuWlC 412vSOHM3SO9o3mNP5/56PF01FP964oYENbTFCT1b7Sy33Je0KeVNvK33eWuj25R n8iCiS3CeVoUxjhOjqmAc+G9AK6y7N6E1ZygDDD2+K0Qt+G3NmkUHeFIhkE7v9cG h92Wp2sgn5dpWQpYFYodRZ1vc8TwrGngOC8mYXOPrTJ/dfEd3/iiqQwnndumref6 fNIUfa/POWudHAic+PgBERMmHrqQpvPW0qano3AXw6LzRCAkNGUiatjLfOY4/e2X KD5RJ+aruuxUqznZGUiAL7nAEm86m1Hp1zb9hmJnMkQgxsfq+TGgC2XknGGbhnz7 pAs3k60ddHxT -----END CERTIFICATE-----Generated at Mon Jan 26 08:00:30 2026 by rpki-client