This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer (raw, json) Hash identifier: XcJkILnuCaY0zIqkNEyp001O8XZvy5+a6iL4rg9fYk4= Subject key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CB76A5D7D4D03E658C5ABC7D2ECEA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:19:46 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48345 AS: 198446 IP: 91.223.220.0/24 IP: 91.234.215.0/24 IP: 94.232.112.0/21 IP: 185.168.168.0/22 IP: 2001:67c:174::/48 IP: 2001:67c:15b8::/48 IP: 2001:67c:28d8::/48 IP: 2a0e:d340::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b7:6a:5d:7d:4d:03:e6:58:c5:ab:c7:d2:ec:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb723706d0e83758ba52138e9db4207b5a5c189c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:61:35:63:fb:14:cd:27:44:3a:6f:43:bf: 29:fd:68:12:04:4b:68:46:ee:f1:c3:4d:97:16:6c: 4a:ee:be:55:88:b4:92:44:67:25:87:34:c8:c8:a9: 3f:5b:73:bc:4c:8e:a9:83:23:49:b1:84:70:f5:bb: 3f:c3:ae:2f:a5:1a:c2:84:d2:24:07:64:8d:45:56: 0b:f8:dc:b2:99:91:90:a0:1f:71:f3:9f:b5:e9:95: 85:13:77:f5:af:bc:fa:00:cd:f5:2d:dc:b1:28:c0: cc:65:bb:e4:93:e5:c8:89:ec:94:1c:e5:eb:52:0c: c0:91:9b:54:a5:e5:7d:ea:eb:cf:9e:f5:ce:83:b2: a3:21:c3:d4:dc:ae:e5:8a:77:30:93:f7:05:24:e5: 3d:4d:43:2d:54:53:bc:26:02:af:45:3e:98:ab:7c: f8:ec:a4:73:30:6a:7e:84:e9:19:63:1f:47:ae:9c: 9b:25:c7:3c:1a:a0:f4:f5:52:66:80:90:1c:e4:cc: 9f:08:8d:3e:b7:1f:07:92:e7:d3:71:21:9c:57:d3: 93:9a:0d:7d:1d:0d:24:dd:be:d7:60:7f:21:20:cb: 3c:8b:bd:10:bc:26:2f:2a:bc:48:85:81:4c:36:23: 65:56:39:c7:9f:c9:c2:6d:85:ab:45:be:88:8d:75: 46:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.220.0/24 91.234.215.0/24 94.232.112.0/21 185.168.168.0/22 IPv6: 2001:67c:174::/48 2001:67c:15b8::/48 2001:67c:28d8::/48 2a0e:d340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48345 198446 Signature Algorithm: sha256WithRSAEncryption 90:1d:4e:21:26:77:95:99:9d:a7:c2:25:c2:dd:e0:6b:01:0e: 8b:d1:7d:4a:7d:1d:5b:ba:70:76:61:e0:f6:73:6b:29:13:d4: 74:3e:3a:6e:5d:2a:61:f3:49:8b:c1:45:3e:0b:71:f8:b3:55: 16:ac:bb:fb:40:66:99:3e:d0:54:3c:53:6d:6a:e4:8e:52:1c: 71:a7:54:69:ef:4a:0f:71:d8:ce:7c:2d:a9:fc:9b:3a:cf:7d: dd:9f:8f:cd:f1:d4:80:22:81:96:d9:ca:e1:45:ed:7a:e1:63: 7a:43:d6:40:7a:3b:32:11:15:a0:a9:99:2a:79:8d:86:e8:6e: 72:a0:99:d6:cf:7d:ba:40:9b:f9:cc:48:09:7f:32:30:5d:54: b6:b7:ce:47:38:a4:2c:f7:f7:ed:3d:25:a8:74:08:97:ab:44: 80:3f:9d:38:eb:b3:dc:d3:1e:80:05:2a:17:7d:4b:1e:e3:84: 2a:bc:11:a7:e0:0a:c4:f8:58:37:9a:22:6f:6b:79:d0:2a:e9: 6c:24:eb:bb:52:49:d6:1e:fc:bc:ad:0e:1e:21:cf:00:5a:00: 84:74:94:44:1f:d5:a0:42:9c:a7:b2:52:55:6c:c4:99:84:29: 6b:f3:56:0a:4a:d6:ca:af:70:7d:5f:f0:b4:47:f2:bb:dd:f6: d5:be:88:cf -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZt9XLdqXX1NA+ZYxavH0uzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjcyMzcwNmQwZTgzNzU4YmE1MjEzOGU5ZGI0MjA3YjVhNWMxODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx09hNWP7FM0nRDpvQ78p/WgSBEto Ru7xw02XFmxK7r5ViLSSRGclhzTIyKk/W3O8TI6pgyNJsYRw9bs/w64vpRrChNIk B2SNRVYL+NyymZGQoB9x85+16ZWFE3f1r7z6AM31LdyxKMDMZbvkk+XIieyUHOXr UgzAkZtUpeV96uvPnvXOg7KjIcPU3K7lincwk/cFJOU9TUMtVFO8JgKvRT6Yq3z4 7KRzMGp+hOkZYx9HrpybJcc8GqD09VJmgJAc5MyfCI0+tx8HkufTcSGcV9OTmg19 HQ0k3b7XYH8hIMs8i70QvCYvKrxIhYFMNiNlVjnHn8nCbYWrRb6IjXVGeQIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFPtyNwbQ6DdYulITjp20IHtaXBicMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2NmYWMz MS04MzU2LTQzMmQtYTM0ZC1iNjE0MzYxMTk2ZmQvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvY2ZhYzMx LTgzNTYtNDMyZC1hMzRkLWI2MTQzNjExOTZmZC8xLzEtM0kzQnREb04xaTZVaE9P bmJRZ2UxcGNHSncubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBggrBgEF BQcBBwEB/wRMMEowHgQCAAEwGAMEAFvf3AMEAFvq1wMEA17ocAMEArmoqDAoBAIA AjAiAwcAIAEGfAF0AwcAIAEGfBW4AwcAIAEGfCjYAwUAKg7TQDAfBggrBgEFBQcB CAEB/wQQMA6gDDAKAgMAvNkCAwMHLjANBgkqhkiG9w0BAQsFAAOCAQEAkB1OISZ3 lZmdp8Ilwt3gawEOi9F9Sn0dW7pwdmHg9nNrKRPUdD46bl0qYfNJi8FFPgtx+LNV Fqy7+0BmmT7QVDxTbWrkjlIccadUae9KD3HYznwtqfybOs993Z+PzfHUgCKBltnK 4UXteuFjekPWQHo7MhEVoKmZKnmNhuhucqCZ1s99ukCb+cxICX8yMF1UtrfORzik LPf37T0lqHQIl6tEgD+dOOuz3NMegAUqF31LHuOEKrwRp+AKxPhYN5oib2t50Crp bCTru1JJ1h78vK0OHiHPAFoAhHSURB/VoEKcp7JSVWzEmYQpa/NWCkrWyq9wfV/w tEfyu9321b6Izw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:29 2026 by rpki-client