This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer File: R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer (raw, json) Hash identifier: eQJSl+vSFG5Uc/fuIDPi4W5MCm95JztdtxbcwlGQEHc= Subject key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F13693D52674868C010D0D938CBC24F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:18:57 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214329 IP: 209.131.126.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:69:3d:52:67:48:68:c0:10:d0:d9:38:cb:c2:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:4b:78:3a:99:b0:ca:8d:ec:cc:f0:08:ba: 10:3c:c9:d2:be:0d:0e:ab:ab:d0:b1:72:88:4d:16: 29:68:5e:48:00:45:e3:fe:5b:3d:32:1f:12:c8:dd: cd:a1:67:58:40:b5:74:2b:91:98:c1:20:de:8e:d9: 7a:a0:9d:f4:2c:cd:d1:31:23:c0:c5:f1:ef:c4:57: a2:3d:9e:9f:4e:10:6c:ae:2d:74:f6:8e:ee:ab:49: a0:ff:e6:d8:5c:95:8a:5a:7e:9b:e9:46:20:fb:76: bd:f1:a2:d0:3a:a9:6a:d3:ad:04:fe:b6:28:02:2b: 13:32:04:e0:80:d9:40:ba:c8:41:ae:de:94:7d:5b: 79:49:ee:5b:17:d9:da:9a:cc:cf:a0:88:a3:8d:b5: a4:01:1b:0b:25:96:91:b4:ea:f4:7b:1f:7a:fd:5a: ca:85:90:7e:c6:d2:e9:68:16:9d:5a:b9:d5:14:43: 7f:5d:17:d6:ff:41:e6:d7:45:0b:3f:88:88:45:5c: 7b:bc:23:10:12:be:12:9d:d6:0a:e6:7a:da:56:e0: 79:65:01:c8:8b:f3:46:a6:50:e5:1c:f8:96:9c:de: 82:b1:43:b5:39:07:f8:39:a8:2d:f9:70:03:e7:99: 58:53:26:0f:00:75:ae:d7:14:b8:40:13:2e:d2:8c: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.131.126.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214329 Signature Algorithm: sha256WithRSAEncryption 72:f2:29:4e:39:62:98:fc:88:15:41:b1:de:cd:ca:bc:0c:dd: ff:78:8c:a0:29:87:17:21:39:dd:fc:3a:70:d2:53:07:0b:43: c4:63:50:d9:7d:59:f8:79:0e:13:6b:e4:91:90:54:a9:5b:42: 01:b1:9d:ba:27:d2:14:12:20:6c:1f:1a:c6:2c:85:0d:c2:72: 3d:1b:02:e1:a3:26:90:1a:0c:7f:b5:a7:00:cb:27:af:f7:ff: d6:83:88:d3:ff:49:81:81:2a:67:fa:17:1b:cf:28:75:3c:82: 46:62:40:69:6e:5b:dc:a5:e9:b3:8c:1a:8f:31:5a:40:bb:c5: 3d:aa:51:55:2b:49:dd:8f:6f:f6:e9:0f:54:e9:7b:50:9d:d5: 96:c5:be:69:f8:c3:59:6a:ba:a7:9f:04:72:fe:e1:6e:c5:14: a8:ce:53:28:14:ed:df:30:af:52:be:e0:e0:eb:57:54:9a:f5: a0:15:5a:ef:65:1c:78:d2:92:56:5a:4d:c6:2b:13:7b:f6:23: 4e:9c:a8:09:4a:a9:ac:55:e2:fe:a4:f8:bb:3c:bd:73:82:6d: 60:00:88:c8:a1:df:66:35:3b:f1:88:6d:c9:5c:1c:20:60:cf: ec:66:81:1a:8f:8f:50:ba:b7:75:8a:e2:ca:ac:7f:ff:94:24: f3:7b:08:bd -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/E2k9UmdIaMAQ0Nk4y8JPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzczMjQzMDgxZWFkYzFlZjRhZTMyMzRmODZiMmJkNzI2MjJiNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXRLeDqZsMqN7MzwCLoQPMnSvg0O q6vQsXKITRYpaF5IAEXj/ls9Mh8SyN3NoWdYQLV0K5GYwSDejtl6oJ30LM3RMSPA xfHvxFeiPZ6fThBsri109o7uq0mg/+bYXJWKWn6b6UYg+3a98aLQOqlq060E/rYo AisTMgTggNlAushBrt6UfVt5Se5bF9namszPoIijjbWkARsLJZaRtOr0ex96/VrK hZB+xtLpaBadWrnVFEN/XRfW/0Hm10ULP4iIRVx7vCMQEr4SndYK5nraVuB5ZQHI i/NGplDlHPiWnN6CsUO1OQf4Oagt+XAD55lYUyYPAHWu1xS4QBMu0ozzMQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEdzJDCB6twe9K4yNPhrK9cmIrXEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmL2I1NDk4 OC04N2UxLTRhOWQtYTMzYi0zNGE5NDljOTIwNzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvYjU0OTg4 LTg3ZTEtNGE5ZC1hMzNiLTM0YTk0OWM5MjA3NC8xL1IzTWtNSUhxM0I3MHJqSTAt R3NyMXlZaXRjUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA0YN+MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwNFOTANBgkqhkiG9w0BAQsFAAOCAQEAcvIpTjlimPyIFUGx3s3KvAzd/3iMoCmH FyE53fw6cNJTBwtDxGNQ2X1Z+HkOE2vkkZBUqVtCAbGduifSFBIgbB8axiyFDcJy PRsC4aMmkBoMf7WnAMsnr/f/1oOI0/9JgYEqZ/oXG88odTyCRmJAaW5b3KXps4wa jzFaQLvFPapRVStJ3Y9v9ukPVOl7UJ3VlsW+afjDWWq6p58Ecv7hbsUUqM5TKBTt 3zCvUr7g4OtXVJr1oBVa72UceNKSVlpNxisTe/YjTpyoCUqprFXi/qT4uzy9c4Jt YACIyKHfZjU78YhtyVwcIGDP7GaBGo+PULq3dYriyqx//5Qk83sIvQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:47:46 2026 by rpki-client