This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer File: P-3YXB7Mtf9LqTARenMpCZwP8us.cer (raw, json) Hash identifier: 5bPF7VXEaulbmNYf4S1Bxh01hryxYrC3eyqzI2LA+1A= Subject key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB8767CD1CAE5582CBA5117BB0E782 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8203 AS: 8551 IP: 31.168.0.0/16 IP: 62.219.0.0/16 IP: 79.176.0.0/13 IP: 81.218.0.0/16 IP: 82.80.0.0/15 IP: 84.108.0.0 -- 84.111.135.255 IP: 84.111.144.0 -- 84.111.207.255 IP: 84.111.216.0 -- 84.111.255.255 IP: 85.130.128.0/17 IP: 109.64.0.0/14 IP: 185.145.212.0/22 IP: 185.187.32.0/22 IP: 192.114.11.0/24 IP: 192.114.40.0/21 IP: 192.114.64.0 -- 192.114.83.255 IP: 192.114.144.0/22 IP: 192.115.8.0/22 IP: 192.115.16.0/20 IP: 192.115.56.0/21 IP: 192.115.104.0/22 IP: 192.115.128.0/21 IP: 192.115.184.0/21 IP: 192.116.24.0/21 IP: 192.117.96.0/19 IP: 192.117.232.0/21 IP: 212.25.64.0/18 IP: 212.179.0.0/16 IP: 217.22.112.0/20 IP: 2001:4cd0::/29 IP: 2a10:8000::/27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:87:67:cd:1c:ae:55:82:cb:a5:11:7b:b0:e7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:8b:02:ab:b7:e5:80:38:0c:54:e4:50:9a: 03:29:14:2d:79:4b:77:2a:fe:a6:c2:f2:d6:39:4c: 47:c4:2d:01:1a:10:24:7e:49:23:9d:38:90:4a:ca: 05:5f:8a:de:82:e9:48:d0:05:21:a7:30:cc:64:97: b3:7b:9a:28:be:e2:07:f8:ea:51:c8:e4:69:eb:98: ff:06:a3:22:56:1d:90:36:c6:1a:cf:52:70:1f:1c: 35:92:69:bb:d0:25:6c:5b:0f:17:15:ac:7e:6a:e9: 7e:18:a3:6c:61:0d:a8:2c:6b:02:3c:62:8c:69:f6: 21:0c:a6:9e:a8:31:25:46:b8:a5:ff:2e:37:e6:89: 3e:ab:9c:f6:63:a3:69:3f:5e:ed:61:9b:bd:22:4a: 33:34:77:7a:0d:fd:d6:f0:42:4c:0c:07:4b:4f:df: e9:b7:77:d9:bf:58:d7:58:57:f4:88:84:fc:1c:1c: dc:74:1e:a3:36:c9:47:f9:d1:7e:45:42:a7:62:1f: 09:67:c9:e8:a9:97:4f:f3:9d:fa:c0:4a:9a:ac:8b: c8:60:13:56:07:13:e8:3b:77:8f:87:3b:e0:39:11: bd:cc:eb:85:9e:37:b2:d6:6f:fe:eb:02:e0:9c:81: e0:23:21:ea:61:df:0a:f1:45:29:ec:4f:13:45:d3: 60:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.168.0.0/16 62.219.0.0/16 79.176.0.0/13 81.218.0.0/16 82.80.0.0/15 84.108.0.0-84.111.135.255 84.111.144.0-84.111.207.255 84.111.216.0-84.111.255.255 85.130.128.0/17 109.64.0.0/14 185.145.212.0/22 185.187.32.0/22 192.114.11.0/24 192.114.40.0/21 192.114.64.0-192.114.83.255 192.114.144.0/22 192.115.8.0/22 192.115.16.0/20 192.115.56.0/21 192.115.104.0/22 192.115.128.0/21 192.115.184.0/21 192.116.24.0/21 192.117.96.0/19 192.117.232.0/21 212.25.64.0/18 212.179.0.0/16 217.22.112.0/20 IPv6: 2001:4cd0::/29 2a10:8000::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8203 8551 Signature Algorithm: sha256WithRSAEncryption 76:25:63:ee:ce:a9:d3:c9:ea:d9:81:9c:25:83:09:b9:3b:cf: 6d:ef:ff:60:b5:8c:32:60:b7:1c:29:df:17:11:e3:55:b4:8e: 06:a0:a9:21:72:86:04:aa:f8:9a:18:27:fe:fe:1f:ff:e3:0a: fc:1f:ee:ff:94:f7:a2:89:73:ea:01:bd:87:89:88:21:fd:6d: aa:c2:6c:aa:f3:12:f8:23:0e:3b:65:b3:ef:78:91:0d:b6:49: 18:f0:f1:4a:84:0c:e3:81:13:ed:db:d8:fa:c4:4f:91:5a:75: 1d:3b:7d:5f:bc:6b:f4:9f:ea:a3:3c:9e:f8:21:c0:5f:35:82: da:f2:8f:5e:56:81:b0:59:51:32:46:d3:c1:df:9d:88:f7:51: 5f:0d:6c:02:22:15:f5:a2:d0:be:1f:90:6d:d2:a5:b8:8e:35: 28:a9:0e:8b:01:9e:81:97:cf:13:63:b2:a5:fc:c8:b8:26:bf: 0f:7a:87:d6:2f:fd:e4:4e:07:f6:eb:4f:7f:a9:e8:7f:58:d6: 49:10:65:da:27:db:da:87:59:ac:49:34:7f:5c:bf:eb:e0:41: a3:1d:04:05:8b:c8:4e:e1:b9:68:a1:34:a4:99:5c:a0:ae:f8: c0:64:e5:99:65:5f:8f:a6:fc:c6:06:51:94:36:d1:dc:85:50: db:ad:fa:f2 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgISAZt264dnzRyuVYLLpRF7sOeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmVkZDg1YzFlY2NiNWZmNGJhOTMwMTE3YTczMjkwOTljMGZmMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQmLAqu35YA4DFTkUJoDKRQteUt3 Kv6mwvLWOUxHxC0BGhAkfkkjnTiQSsoFX4regulI0AUhpzDMZJeze5oovuIH+OpR yORp65j/BqMiVh2QNsYaz1JwHxw1kmm70CVsWw8XFax+aul+GKNsYQ2oLGsCPGKM afYhDKaeqDElRril/y435ok+q5z2Y6NpP17tYZu9IkozNHd6Df3W8EJMDAdLT9/p t3fZv1jXWFf0iIT8HBzcdB6jNslH+dF+RUKnYh8JZ8noqZdP8536wEqarIvIYBNW BxPoO3ePhzvgORG9zOuFnjey1m/+6wLgnIHgIyHqYd8K8UUp7E8TRdNgXQIDAQAB o4IDdzCCA3MwHQYDVR0OBBYEFD/t2FwezLX/S6kwEXpzKQmcD/LrMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzQxYzMy MS0zNDdlLTRjM2UtYWZmZC1lMmI1Mjc3MjhlOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNDFjMzIx LTM0N2UtNGMzZS1hZmZkLWUyYjUyNzcyOGU5Ni8xL1AtM1lYQjdNdGY5THFUQVJl bk1wQ1p3UDh1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHyBggrBgEF BQcBBwEB/wSB4jCB3zCBxgQCAAEwgb8DAwAfqAMDAD7bAwMDT7ADAwBR2gMDAVJQ MAsDAwJUbAMEA1RvgDAMAwQEVG+QAwQEVG/AMAsDBANUb9gDAwRUYAMEB1WCgAMD Am1AAwQCuZHUAwQCubsgAwQAwHILAwQDwHIoMAwDBAbAckADBALAclADBALAcpAD BALAcwgDBATAcxADBAPAczgDBALAc2gDBAPAc4ADBAPAc7gDBAPAdBgDBAXAdWAD BAPAdegDBAbUGUADAwDUswMEBNkWcDAUBAIAAjAOAwUDIAFM0AMFBSoQgAAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICIAsCAiFnMA0GCSqGSIb3DQEBCwUAA4IBAQB2 JWPuzqnTyerZgZwlgwm5O89t7/9gtYwyYLccKd8XEeNVtI4GoKkhcoYEqviaGCf+ /h//4wr8H+7/lPeiiXPqAb2HiYgh/W2qwmyq8xL4Iw47ZbPveJENtkkY8PFKhAzj gRPt29j6xE+RWnUdO31fvGv0n+qjPJ74IcBfNYLa8o9eVoGwWVEyRtPB352I91Ff DWwCIhX1otC+H5Bt0qW4jjUoqQ6LAZ6Bl88TY7Kl/Mi4Jr8PeofWL/3kTgf2609/ qeh/WNZJEGXaJ9vah1msSTR/XL/r4EGjHQQFi8hO4blooTSkmVygrvjAZOWZZV+P pvzGBlGUNtHchVDbrfry -----END CERTIFICATE-----Generated at Sun Jan 25 14:43:31 2026 by rpki-client