This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer File: r3NBCHBalXluhXcSXdMAx1Hf2ag.cer (raw, json) Hash identifier: hxUBKjAGQPqDrY907NgUiDDm6yQTOibD++HbLPz4jYw= Subject key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA73AC8284BD8997C9CA247CD6B5B47 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47308 AS: 47376 IP: 91.222.196.0/23 IP: 103.215.220.0/22 IP: 185.221.239.0/24 IP: 185.240.148.0/22 IP: 195.28.11.0/24 IP: 195.234.191.0/24 IP: 195.238.231.0/24 IP: 195.238.240.0/24 IP: 195.238.247.0/24 IP: 2a05:63c0::/29 IP: 2a0f:c040::/29 IP: 2a10:ef00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3a:c8:28:4b:d8:99:7c:9c:a2:47:cd:6b:5b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af734108705a95796e8577125dd300c751dfd9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:19:a5:ea:ee:d2:c1:4c:bd:73:15:9f:69: cd:60:a2:80:c9:67:f1:ce:71:1e:0f:83:1e:ae:94: cd:9f:f1:41:03:76:db:8e:1f:45:48:f4:9e:f0:62: 6a:43:ef:3f:4d:66:5c:e6:8c:60:9a:74:38:48:dc: 73:86:92:a4:67:85:c1:e3:4e:84:27:3e:fb:b4:64: 24:6a:5f:1f:17:17:7c:85:89:03:e3:4a:fc:69:8b: dc:65:17:43:3f:60:f7:c9:a5:f8:48:3d:09:d3:4a: d0:11:6b:b6:e9:d3:d7:55:12:f4:4d:e5:10:8f:2e: f2:96:9a:51:64:23:f4:71:99:45:5f:0c:84:60:12: 7f:c0:ca:29:1a:89:d3:5f:e9:4a:1d:a8:f8:6b:1b: 5a:60:14:28:bf:68:9f:87:7e:e7:fc:89:5b:7d:3e: 50:4a:a5:a7:23:72:8f:33:21:81:be:c4:ee:fc:2e: be:e3:76:dd:ed:2c:c9:3e:9a:3f:33:3f:f9:50:c9: 1d:11:cc:be:3b:fe:35:82:18:1d:38:c4:b1:b0:f7: 66:a8:7f:77:cb:c4:b5:da:86:30:08:eb:e8:62:d7: bf:84:85:3e:b1:53:e7:34:b0:38:0e:a2:c2:0a:fe: e9:79:fe:f8:ac:62:95:e9:56:9c:24:19:45:c4:e1: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.196.0/23 103.215.220.0/22 185.221.239.0/24 185.240.148.0/22 195.28.11.0/24 195.234.191.0/24 195.238.231.0/24 195.238.240.0/24 195.238.247.0/24 IPv6: 2a05:63c0::/29 2a0f:c040::/29 2a10:ef00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47308 47376 Signature Algorithm: sha256WithRSAEncryption 5a:83:6e:29:96:b4:3e:62:e0:ce:23:20:54:1f:54:ab:3f:c4: f1:84:46:e1:d9:f2:60:b3:3d:16:19:b8:75:f5:c8:2d:08:34: 1f:e5:a5:63:79:0b:a8:d2:61:e7:58:e9:47:1d:60:1f:84:5f: 20:87:dc:0f:11:dc:7c:de:66:5f:da:39:73:35:f8:d0:ce:99: 7c:4e:ce:32:ef:2c:da:d4:aa:8e:fe:98:c1:fe:1a:3d:53:af: 66:9d:5a:e8:08:62:bc:19:ce:51:ca:d2:be:80:53:e3:69:1b: a2:94:13:23:3a:cb:0d:1e:54:76:22:64:30:ea:b5:44:e5:cc: 6f:c2:61:e5:68:26:5d:6f:75:81:77:82:60:f8:39:d9:53:b2: ae:18:7e:7a:6b:2d:b8:62:df:ff:7d:be:01:c7:4f:63:1c:87: 04:83:8f:6b:4b:1c:f2:e8:14:98:1f:35:28:b5:3d:a6:a3:5f: d9:06:b9:19:92:41:fd:bc:65:eb:31:b4:3b:50:d2:b4:30:80: e0:ad:31:26:9d:93:bc:cb:3a:46:45:21:d3:61:ab:0c:dd:38: 9a:1d:56:86:97:ab:85:9d:4e:3a:7d:58:45:1c:f7:1d:eb:4f: c8:05:7f:11:02:7a:7d:4d:36:77:9e:f0:80:9d:f4:1f:b4:07: b3:94:f9:f3 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgISAZt+pzrIKEvYmXycokfNa1tHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjczNDEwODcwNWE5NTc5NmU4NTc3MTI1ZGQzMDBjNzUxZGZkOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnQZperu0sFMvXMVn2nNYKKAyWfx znEeD4MerpTNn/FBA3bbjh9FSPSe8GJqQ+8/TWZc5oxgmnQ4SNxzhpKkZ4XB406E Jz77tGQkal8fFxd8hYkD40r8aYvcZRdDP2D3yaX4SD0J00rQEWu26dPXVRL0TeUQ jy7ylppRZCP0cZlFXwyEYBJ/wMopGonTX+lKHaj4axtaYBQov2ifh37n/IlbfT5Q SqWnI3KPMyGBvsTu/C6+43bd7SzJPpo/Mz/5UMkdEcy+O/41ghgdOMSxsPdmqH93 y8S12oYwCOvoYte/hIU+sVPnNLA4DqLCCv7pef74rGKV6VacJBlFxOGZ8QIDAQAB o4IC8jCCAu4wHQYDVR0OBBYEFK9zQQhwWpV5boV3El3TAMdR39moMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2M5M2E2 Ni1jN2M3LTRjMzMtYTcyNS0xOGQxYTQwNmFhZWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYzkzYTY2 LWM3YzctNGMzMy1hNzI1LTE4ZDFhNDA2YWFlZC8xL3IzTkJDSEJhbFhsdWhYY1NY ZE1BeDFIZjJhZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUF BwEHAQH/BF0wWzA8BAIAATA2AwQBW97EAwQCZ9fcAwQAud3vAwQCufCUAwQAwxwL AwQAw+q/AwQAw+7nAwQAw+7wAwQAw+73MBsEAgACMBUDBQMqBWPAAwUDKg/AQAMF AyoQ7wAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDALjMAgMAuRAwDQYJKoZIhvcN AQELBQADggEBAFqDbimWtD5i4M4jIFQfVKs/xPGERuHZ8mCzPRYZuHX1yC0INB/l pWN5C6jSYedY6UcdYB+EXyCH3A8R3HzeZl/aOXM1+NDOmXxOzjLvLNrUqo7+mMH+ Gj1Tr2adWugIYrwZzlHK0r6AU+NpG6KUEyM6yw0eVHYiZDDqtUTlzG/CYeVoJl1v dYF3gmD4OdlTsq4YfnprLbhi3/99vgHHT2MchwSDj2tLHPLoFJgfNSi1PaajX9kG uRmSQf28ZesxtDtQ0rQwgOCtMSadk7zLOkZFIdNhqwzdOJodVoaXq4WdTjp9WEUc 9x3rT8gFfxECen1NNnee8ICd9B+0B7OU+fM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:20:31 2026 by rpki-client