This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer File: i3-BpueC4hEYnE805Fm0Imx19KY.cer (raw, json) Hash identifier: MUGzSs2saNo1ufux7S2cBYjINbQVxr1YV2D/IAhV1h0= Subject key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC88D7C21F73985FBDB389EB5D1DD93 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43511 AS: 199236 IP: 45.86.116.0/22 IP: 45.87.196.0/22 IP: 45.91.44.0/22 IP: 45.128.164.0/22 IP: 45.128.172.0/22 IP: 89.37.88.0/22 IP: 91.194.248.0/23 IP: 91.211.240.0/22 IP: 185.4.120.0/22 IP: 193.177.216.0/22 IP: 194.113.24.0/22 IP: 195.54.172.0/23 IP: 2a02:7040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8d:7c:21:f7:39:85:fb:db:38:9e:b5:d1:dd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:0e:43:76:c7:cf:22:bd:19:36:05:e7:f9: d6:5d:f2:b7:a3:f3:06:47:c9:2d:63:15:f8:d8:74: 1d:a2:e3:53:7b:6e:fd:cf:3e:de:3c:08:5a:d2:39: 2e:e1:44:0f:05:44:de:e2:5a:8c:6b:b4:fa:1b:73: fa:b3:a8:16:95:2e:db:05:59:9d:b9:6b:2d:b5:7d: d4:bd:e2:26:7e:67:3e:0c:c4:a1:02:60:b9:e8:8a: e7:59:b0:39:eb:bf:47:63:c9:6f:2a:fa:f8:9a:8c: a1:11:1a:f6:55:da:19:bd:32:76:4d:2e:a7:14:da: 17:2e:2c:a7:9b:91:ac:62:0c:0e:6c:4f:d4:e6:20: 6d:b4:08:20:43:db:dc:4e:ec:10:3a:d2:8b:20:4b: c5:32:a0:c5:3c:fa:c5:b4:ff:12:c0:86:db:13:28: 33:11:6f:45:2a:ba:28:49:57:05:0e:28:1b:9f:c3: 57:37:d9:00:b6:1a:d1:e9:00:72:8b:79:82:cc:7c: 20:49:e5:41:7b:3d:1e:9e:3d:e5:b5:be:be:bc:cb: 2b:07:2c:8b:af:20:33:7c:8e:ce:c6:09:89:35:b8: 83:d7:2d:00:13:5f:11:45:91:8a:c7:9d:8b:48:aa: 40:dd:1d:7c:13:34:da:d7:0f:25:0e:cf:83:83:d6: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.116.0/22 45.87.196.0/22 45.91.44.0/22 45.128.164.0/22 45.128.172.0/22 89.37.88.0/22 91.194.248.0/23 91.211.240.0/22 185.4.120.0/22 193.177.216.0/22 194.113.24.0/22 195.54.172.0/23 IPv6: 2a02:7040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43511 199236 Signature Algorithm: sha256WithRSAEncryption 56:d1:79:a0:53:2e:9a:12:be:07:f2:15:40:16:ae:18:f7:9d: be:ea:c0:a3:ec:de:6d:10:0c:6c:4d:0d:a5:49:db:75:13:a3: e3:1c:e5:74:fa:fb:32:00:61:5f:12:04:ac:a1:e2:5c:4f:45: 5e:57:14:7f:79:12:10:d4:35:57:61:65:7b:2d:b4:34:6a:0f: 10:0f:4c:00:aa:50:e5:5b:15:7f:47:aa:c2:a2:8c:3b:b7:dc: 85:3f:94:99:7b:00:af:0f:00:c4:bf:a9:30:03:75:9f:a8:1e: 06:48:8c:4a:cd:67:04:a8:2f:7a:44:37:fb:b1:0f:c8:aa:cc: 3f:af:58:a1:67:29:ad:0b:ad:e3:23:71:3d:83:bd:fb:7b:54: 59:a0:0a:9f:9d:4f:83:0f:fa:a3:6b:15:31:14:34:4c:96:a9: fb:bf:18:6b:ef:0a:81:0d:00:d6:42:2e:a2:cf:cf:26:48:35: 73:e1:60:0a:78:a1:e7:71:b5:50:5b:cd:ef:b0:ab:d4:37:c9: 08:e8:bf:6b:ba:79:4c:ef:c9:1b:89:20:2b:cb:30:28:b1:d4: ad:92:f6:90:df:c6:77:75:59:d7:f6:40:85:74:73:ea:af:0b: 07:2b:5b:24:c5:c7:25:3d:a5:ef:a8:c1:5b:ff:4f:98:a7:47: 3a:8e:5a:18 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISAZt6yI18Ifc5hfvbOJ610d2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdmODFhNmU3ODJlMjExMTg5YzRmMzRlNDU5YjQyMjZjNzVmNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn8OQ3bHzyK9GTYF5/nWXfK3o/MG R8ktYxX42HQdouNTe279zz7ePAha0jku4UQPBUTe4lqMa7T6G3P6s6gWlS7bBVmd uWsttX3UveImfmc+DMShAmC56IrnWbA5679HY8lvKvr4moyhERr2VdoZvTJ2TS6n FNoXLiynm5GsYgwObE/U5iBttAggQ9vcTuwQOtKLIEvFMqDFPPrFtP8SwIbbEygz EW9FKrooSVcFDigbn8NXN9kAthrR6QByi3mCzHwgSeVBez0enj3ltb6+vMsrByyL ryAzfI7OxgmJNbiD1y0AE18RRZGKx52LSKpA3R18EzTa1w8lDs+Dg9ZrJQIDAQAB o4IC9jCCAvIwHQYDVR0OBBYEFIt/gabnguIRGJxPNORZtCJsdfSmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzliNjBl NS1mOThmLTRhYzYtOThhNS1mMmY0MjZlZmUwMzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvOWI2MGU1 LWY5OGYtNGFjNi05OGE1LWYyZjQyNmVmZTAzOS8xL2kzLUJwdWVDNGhFWW5FODA1 Rm0wSW14MTlLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHAGCCsGAQUF BwEHAQH/BGEwXzBOBAIAATBIAwQCLVZ0AwQCLVfEAwQCLVssAwQCLYCkAwQCLYCs AwQCWSVYAwQBW8L4AwQCW9PwAwQCuQR4AwQCwbHYAwQCwnEYAwQBwzasMA0EAgAC MAcDBQAqAnBAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCp9wIDAwpEMA0GCSqG SIb3DQEBCwUAA4IBAQBW0XmgUy6aEr4H8hVAFq4Y952+6sCj7N5tEAxsTQ2lSdt1 E6PjHOV0+vsyAGFfEgSsoeJcT0VeVxR/eRIQ1DVXYWV7LbQ0ag8QD0wAqlDlWxV/ R6rCoow7t9yFP5SZewCvDwDEv6kwA3WfqB4GSIxKzWcEqC96RDf7sQ/Iqsw/r1ih ZymtC63jI3E9g737e1RZoAqfnU+DD/qjaxUxFDRMlqn7vxhr7wqBDQDWQi6iz88m SDVz4WAKeKHncbVQW83vsKvUN8kI6L9runlM78kbiSAryzAosdStkvaQ38Z3dVnX 9kCFdHPqrwsHK1skxcclPaXvqMFb/0+Yp0c6jloY -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:47 2026 by rpki-client