This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer File: P_xs3-GW1bOdLqYOkMldtwRF2bk.cer (raw, json) Hash identifier: QpBIfTHCVy6EkUQ9y5iI+NJjycIsQGyoV6wGUzB1VKo= Subject key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834DF09BAE8532900BAC412E8F860C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 195.20.146.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:df:09:ba:e8:53:29:00:ba:c4:12:e8:f8:60:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:d4:30:6e:6e:13:db:7e:7a:c9:b1:d1:b9: 89:f8:a3:33:fb:8a:a7:2f:fc:98:5c:e9:cc:85:36: 6b:61:57:27:46:52:8e:6c:e2:be:f6:b6:52:3f:15: 65:4d:25:1e:90:4e:50:90:57:a8:8a:e9:0d:19:47: 68:3f:62:ce:b0:b8:20:5b:21:1d:67:16:83:c3:7b: 8e:7f:d8:24:d1:96:96:65:5a:37:8d:4a:47:e5:ce: de:45:92:f5:17:2a:4d:63:a6:72:eb:39:80:ce:f7: de:3e:ea:fc:5e:e4:10:c0:c7:a9:5a:30:5a:f9:d5: 76:30:b9:75:05:12:75:a7:9b:dc:69:71:60:a0:84: 65:44:80:8a:47:4f:d0:61:94:52:59:68:0e:35:cb: ca:96:7d:8e:4f:73:15:8b:68:42:81:9d:6a:cf:15: 47:4f:e1:0d:4c:4a:83:84:57:3a:7d:d4:44:57:46: aa:ee:fe:c8:06:ac:98:3a:13:4f:48:da:59:44:d3: 6b:c6:5d:83:77:da:e6:7d:96:e6:ed:5d:67:d0:8d: f4:c4:05:c3:45:d1:65:06:f8:b8:d1:52:34:2f:48: e0:a6:0e:48:c7:1f:dd:43:cd:86:18:02:3a:ca:1c: ce:bc:3f:42:e8:ab:3a:a3:27:3b:b8:d5:01:a6:ac: 97:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.146.0/24 Signature Algorithm: sha256WithRSAEncryption 99:d8:40:5b:ad:77:de:f5:11:f4:71:4d:4c:bd:dc:63:5e:91: 53:0c:2b:1d:74:ce:ee:94:eb:f8:54:b9:ad:ad:ab:ea:51:98: ff:10:ba:b0:85:03:40:fe:5c:9d:93:03:0e:a7:52:84:61:bc: 94:8c:16:d4:84:e9:cd:f1:89:cb:f1:bf:99:ad:43:e1:e5:06: e4:7f:d6:69:3b:0d:1c:de:2f:2f:43:8c:43:7c:90:6d:88:ba: 7c:fe:78:7e:6b:49:b7:7b:63:87:ae:4f:f9:24:cb:91:c4:5b: 1d:c6:89:e2:d9:d0:dc:fd:39:f6:a2:bb:b5:56:ed:78:a3:50: de:a9:31:80:52:10:7f:35:2a:d5:7d:7a:d9:44:bd:7d:f1:d2: 19:57:fa:a6:7f:02:f6:63:f3:0a:22:2f:97:a4:b4:e9:15:be: 11:ce:56:2c:65:c0:a3:d7:23:07:15:ea:d1:de:86:c1:c9:03: 4c:9a:27:66:b9:95:c4:26:fa:da:83:b7:59:76:a2:5f:a5:ae: 20:ef:4a:0a:10:58:62:67:cf:8d:32:d7:8b:2b:5f:4b:43:b5: f1:64:bf:54:e9:90:0c:76:52:5a:f4:37:36:19:b6:73:df:65: 79:75:98:55:61:c7:01:9b:2c:9f:77:ca:c0:bc:d1:ee:ff:28: 88:70:83:d4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt4NN8JuuhTKQC6xBLo+GDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmZjNmNkZmUxOTZkNWIzOWQyZWE2MGU5MGM5NWRiNzA0NDVkOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmfUMG5uE9t+esmx0bmJ+KMz+4qn L/yYXOnMhTZrYVcnRlKObOK+9rZSPxVlTSUekE5QkFeoiukNGUdoP2LOsLggWyEd ZxaDw3uOf9gk0ZaWZVo3jUpH5c7eRZL1FypNY6Zy6zmAzvfePur8XuQQwMepWjBa +dV2MLl1BRJ1p5vcaXFgoIRlRICKR0/QYZRSWWgONcvKln2OT3MVi2hCgZ1qzxVH T+ENTEqDhFc6fdREV0aq7v7IBqyYOhNPSNpZRNNrxl2Dd9rmfZbm7V1n0I30xAXD RdFlBvi40VI0L0jgpg5Ixx/dQ82GGAI6yhzOvD9C6Ks6oyc7uNUBpqyXLwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFD/8bN/hltWznS6mDpDJXbcERdm5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JjLzRhYmY4 MS01NDE3LTQzYWMtYjU5Yy0xNTViMzllMDc2YzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNGFiZjgx LTU0MTctNDNhYy1iNTljLTE1NWIzOWUwNzZjMi8xL1BfeHMzLUdXMWJPZExxWU9r TWxkdHdSRjJiay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwxSSMA0GCSqGSIb3DQEBCwUAA4IBAQCZ2EBb rXfe9RH0cU1MvdxjXpFTDCsddM7ulOv4VLmtravqUZj/ELqwhQNA/lydkwMOp1KE YbyUjBbUhOnN8YnL8b+ZrUPh5Qbkf9ZpOw0c3i8vQ4xDfJBtiLp8/nh+a0m3e2OH rk/5JMuRxFsdxoni2dDc/Tn2oru1Vu14o1DeqTGAUhB/NSrVfXrZRL198dIZV/qm fwL2Y/MKIi+XpLTpFb4RzlYsZcCj1yMHFerR3obByQNMmidmuZXEJvrag7dZdqJf pa4g70oKEFhiZ8+NMteLK19LQ7XxZL9U6ZAMdlJa9Dc2GbZz32V5dZhVYccBmyyf d8rAvNHu/yiIcIPU -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:10 2026 by rpki-client