This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer File: P-3YXB7Mtf9LqTARenMpCZwP8us.cer (raw, json) Hash identifier: GM4N2JaB5LBKAPLldFSR//NRg/Ov5kFrUlcKGgpsINc= Subject key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA582A76D047D7943EAE37300BB6DB808 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 08:23:14 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 8203 AS: 8551 IP: 31.168.0.0/16 IP: 62.219.0.0/16 IP: 79.176.0.0/13 IP: 81.218.0.0/16 IP: 82.80.0.0/15 IP: 84.108.0.0 -- 84.111.135.255 IP: 84.111.144.0 -- 84.111.207.255 IP: 84.111.216.0 -- 84.111.255.255 IP: 85.130.128.0/17 IP: 109.64.0.0/14 IP: 185.145.212.0/22 IP: 185.187.32.0/22 IP: 192.114.11.0/24 IP: 192.114.40.0/21 IP: 192.114.64.0 -- 192.114.83.255 IP: 192.114.144.0/22 IP: 192.115.8.0/22 IP: 192.115.16.0/20 IP: 192.115.56.0/21 IP: 192.115.104.0/22 IP: 192.115.128.0/21 IP: 192.115.184.0/21 IP: 192.116.24.0/21 IP: 192.117.96.0/19 IP: 192.117.232.0/21 IP: 212.25.64.0/18 IP: 212.179.0.0/16 IP: 217.22.112.0/20 IP: 2001:4cd0::/29 IP: 2a10:8000::/27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:82:a7:6d:04:7d:79:43:ea:e3:73:00:bb:6d:b8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 08:23:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:8b:02:ab:b7:e5:80:38:0c:54:e4:50:9a: 03:29:14:2d:79:4b:77:2a:fe:a6:c2:f2:d6:39:4c: 47:c4:2d:01:1a:10:24:7e:49:23:9d:38:90:4a:ca: 05:5f:8a:de:82:e9:48:d0:05:21:a7:30:cc:64:97: b3:7b:9a:28:be:e2:07:f8:ea:51:c8:e4:69:eb:98: ff:06:a3:22:56:1d:90:36:c6:1a:cf:52:70:1f:1c: 35:92:69:bb:d0:25:6c:5b:0f:17:15:ac:7e:6a:e9: 7e:18:a3:6c:61:0d:a8:2c:6b:02:3c:62:8c:69:f6: 21:0c:a6:9e:a8:31:25:46:b8:a5:ff:2e:37:e6:89: 3e:ab:9c:f6:63:a3:69:3f:5e:ed:61:9b:bd:22:4a: 33:34:77:7a:0d:fd:d6:f0:42:4c:0c:07:4b:4f:df: e9:b7:77:d9:bf:58:d7:58:57:f4:88:84:fc:1c:1c: dc:74:1e:a3:36:c9:47:f9:d1:7e:45:42:a7:62:1f: 09:67:c9:e8:a9:97:4f:f3:9d:fa:c0:4a:9a:ac:8b: c8:60:13:56:07:13:e8:3b:77:8f:87:3b:e0:39:11: bd:cc:eb:85:9e:37:b2:d6:6f:fe:eb:02:e0:9c:81: e0:23:21:ea:61:df:0a:f1:45:29:ec:4f:13:45:d3: 60:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.168.0.0/16 62.219.0.0/16 79.176.0.0/13 81.218.0.0/16 82.80.0.0/15 84.108.0.0-84.111.135.255 84.111.144.0-84.111.207.255 84.111.216.0-84.111.255.255 85.130.128.0/17 109.64.0.0/14 185.145.212.0/22 185.187.32.0/22 192.114.11.0/24 192.114.40.0/21 192.114.64.0-192.114.83.255 192.114.144.0/22 192.115.8.0/22 192.115.16.0/20 192.115.56.0/21 192.115.104.0/22 192.115.128.0/21 192.115.184.0/21 192.116.24.0/21 192.117.96.0/19 192.117.232.0/21 212.25.64.0/18 212.179.0.0/16 217.22.112.0/20 IPv6: 2001:4cd0::/29 2a10:8000::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8203 8551 Signature Algorithm: sha256WithRSAEncryption 9e:07:4c:3c:62:ee:47:2c:d7:c1:c5:d0:d6:c8:55:53:f1:45: 4b:55:b0:51:a8:38:3a:0b:d8:71:60:24:43:44:1b:b4:fb:a1: 03:42:ea:42:bc:02:e7:65:3a:10:02:97:4f:b5:19:f8:0e:a6: e1:3d:e8:c0:e2:c4:89:0f:e5:ca:50:52:6f:8f:f2:ff:23:3f: 21:3c:8f:48:1a:70:12:bc:04:1e:ea:8d:ae:82:bd:bb:e3:ea: 20:4d:00:fe:8f:fc:29:b4:a4:05:43:0e:ba:82:2e:ed:00:79: b5:80:3c:0f:6d:cb:4f:ae:52:3c:31:2a:bf:ec:ed:bd:76:a4: 36:98:64:be:36:a9:fe:c0:a7:c0:d2:da:d8:89:e8:c7:4c:b6: 9e:b4:d0:c5:53:56:da:c7:4c:91:cd:6b:0b:a9:57:86:2a:ef: ea:02:74:e7:eb:65:39:32:4a:46:e7:7f:70:41:5c:64:51:8d: d6:70:21:57:ef:e9:67:72:52:10:85:c9:d0:25:fa:55:50:b0: 5d:53:d1:1b:dd:69:c8:f6:ac:ae:64:c7:7e:71:f5:40:36:68: 03:09:62:15:63:79:5d:65:d6:67:5e:b9:97:cd:4c:0b:56:40: e1:ff:09:32:72:9b:50:83:49:d8:a7:9d:ec:80:a5:37:19:58: 00:03:d2:e9 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISAZqlgqdtBH15Q+rjcwC7bbgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMDgyMzE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmVkZDg1YzFlY2NiNWZmNGJhOTMwMTE3YTczMjkwOTljMGZmMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQmLAqu35YA4DFTkUJoDKRQteUt3 Kv6mwvLWOUxHxC0BGhAkfkkjnTiQSsoFX4regulI0AUhpzDMZJeze5oovuIH+OpR yORp65j/BqMiVh2QNsYaz1JwHxw1kmm70CVsWw8XFax+aul+GKNsYQ2oLGsCPGKM afYhDKaeqDElRril/y435ok+q5z2Y6NpP17tYZu9IkozNHd6Df3W8EJMDAdLT9/p t3fZv1jXWFf0iIT8HBzcdB6jNslH+dF+RUKnYh8JZ8noqZdP8536wEqarIvIYBNW BxPoO3ePhzvgORG9zOuFnjey1m/+6wLgnIHgIyHqYd8K8UUp7E8TRdNgXQIDAQAB o4IDdzCCA3MwHQYDVR0OBBYEFD/t2FwezLX/S6kwEXpzKQmcD/LrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzQxYzMy MS0zNDdlLTRjM2UtYWZmZC1lMmI1Mjc3MjhlOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNDFjMzIx LTM0N2UtNGMzZS1hZmZkLWUyYjUyNzcyOGU5Ni8xL1AtM1lYQjdNdGY5THFUQVJl bk1wQ1p3UDh1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHyBggrBgEF BQcBBwEB/wSB4jCB3zCBxgQCAAEwgb8DAwAfqAMDAD7bAwMDT7ADAwBR2gMDAVJQ MAsDAwJUbAMEA1RvgDAMAwQEVG+QAwQEVG/AMAsDBANUb9gDAwRUYAMEB1WCgAMD Am1AAwQCuZHUAwQCubsgAwQAwHILAwQDwHIoMAwDBAbAckADBALAclADBALAcpAD BALAcwgDBATAcxADBAPAczgDBALAc2gDBAPAc4ADBAPAc7gDBAPAdBgDBAXAdWAD BAPAdegDBAbUGUADAwDUswMEBNkWcDAUBAIAAjAOAwUDIAFM0AMFBSoQgAAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICIAsCAiFnMA0GCSqGSIb3DQEBCwUAA4IBAQCe B0w8Yu5HLNfBxdDWyFVT8UVLVbBRqDg6C9hxYCRDRBu0+6EDQupCvALnZToQApdP tRn4DqbhPejA4sSJD+XKUFJvj/L/Iz8hPI9IGnASvAQe6o2ugr274+ogTQD+j/wp tKQFQw66gi7tAHm1gDwPbctPrlI8MSq/7O29dqQ2mGS+Nqn+wKfA0trYiejHTLae tNDFU1bax0yRzWsLqVeGKu/qAnTn62U5MkpG539wQVxkUY3WcCFX7+lnclIQhcnQ JfpVULBdU9Eb3WnI9qyuZMd+cfVANmgDCWIVY3ldZdZnXrmXzUwLVkDh/wkycptQ g0nYp53sgKU3GVgAA9Lp -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:50 2025 by rpki-client