This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer File: 1-3grePIKbktwZDBSvRpArxWlYzg.cer (raw, json) Hash identifier: KIdbgZyWQdJ1Zg+ji9BHWY8UeokNI6WzokUTewTwGLg= Subject key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C69E8EB8B4A5379DC9B67CB2A169EC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:44 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209689 IP: 185.174.148.0/22 IP: 212.87.208.0/22 IP: 2a09:dac0::/29 IP: 2a0a:580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9e:8e:b8:b4:a5:37:9d:c9:b6:7c:b2:a1:69:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cc:8b:50:6c:a5:11:7e:1e:a0:81:60:63:27: 19:74:36:89:b0:d3:bf:50:b0:15:8c:74:43:8d:37: 10:45:b9:bf:47:d3:76:d2:dc:6d:84:91:2a:08:b4: a0:05:87:52:78:df:dc:4f:9a:63:b7:2e:86:98:90: 47:24:6d:ea:10:a6:e8:71:2a:87:81:bc:36:d7:11: 03:5e:a4:2c:ba:17:ab:c0:23:bb:0a:09:29:d3:f8: 05:4a:d2:33:9b:25:13:8e:9c:32:56:27:e9:19:e6: ac:38:f5:42:59:9f:c7:b7:42:b7:ca:ba:b5:95:e1: 6b:79:50:57:d6:ee:8e:6d:23:4d:e5:bf:99:95:31: 85:8e:0f:d3:a2:45:a7:0c:e6:59:85:84:ee:ab:d0: b6:45:73:e8:47:ce:9b:e8:3b:0c:15:d6:9e:fc:e5: 24:e8:8c:d8:16:8a:1b:87:b1:3b:1c:4f:42:4a:27: 78:36:38:81:a2:6d:89:2d:78:dd:c3:84:89:05:7e: 93:a5:f1:20:d3:1f:7f:a4:e3:24:de:85:0b:84:d5: db:1d:c8:7a:72:9e:4e:f5:19:48:4b:85:59:22:f6: 03:78:21:a4:2d:ce:53:59:29:a6:51:fc:de:8c:35: 4d:78:62:53:47:fd:8c:94:77:ca:26:06:a4:36:c2: b0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.148.0/22 212.87.208.0/22 IPv6: 2a09:dac0::/29 2a0a:580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209689 Signature Algorithm: sha256WithRSAEncryption 07:8b:dd:26:68:08:2b:e6:aa:17:96:71:2f:12:23:c8:1a:b9: 1a:7e:21:26:b5:79:c6:31:bc:9d:30:4d:7d:c5:bc:93:50:ab: 9e:a3:49:77:1e:db:0b:44:03:ad:55:73:75:cf:f0:be:13:b4: d3:35:23:f3:f2:d5:ae:dc:ca:8c:7d:9e:d6:c0:94:bc:d8:b3: c8:3d:8d:2b:93:fe:0d:46:9e:f7:43:db:ad:1b:59:d8:d2:4d: 95:50:38:66:1a:8f:27:11:aa:0d:a9:f9:3b:bf:f3:4e:34:62: fe:72:a8:5f:88:77:9d:8a:fa:c5:d4:aa:8c:0a:2c:38:4b:07: 2b:40:3d:7a:7b:38:2a:9f:7a:a2:9b:6e:85:a5:14:96:ad:92: 08:5a:be:95:10:c9:0d:39:1b:48:97:d4:ba:db:1c:ed:86:fc: 79:88:18:aa:98:15:be:35:37:30:14:c2:56:3e:80:37:28:3d: 3b:b8:28:32:a4:31:7f:cc:77:47:f1:76:1f:2b:82:16:0f:8c: de:d3:4e:24:7b:0b:12:8a:e3:c9:a7:85:7d:77:9a:61:45:23: 06:02:8e:b9:25:6f:6a:be:0f:cc:ce:3c:3f:75:b3:11:af:25: 51:9b:39:42:30:fb:68:e6:0c:bb:29:dc:33:30:3a:44:dc:57: 8b:78:e3:bb -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZt3xp6OuLSlN53JtnyyoWnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjc4MmI3OGYyMGE2ZTRiNzA2NDMwNTJiZDFhNDBhZjE1YTU2MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8yLUGylEX4eoIFgYycZdDaJsNO/ ULAVjHRDjTcQRbm/R9N20txthJEqCLSgBYdSeN/cT5pjty6GmJBHJG3qEKbocSqH gbw21xEDXqQsuherwCO7Cgkp0/gFStIzmyUTjpwyVifpGeasOPVCWZ/Ht0K3yrq1 leFreVBX1u6ObSNN5b+ZlTGFjg/TokWnDOZZhYTuq9C2RXPoR86b6DsMFdae/OUk 6IzYFoobh7E7HE9CSid4NjiBom2JLXjdw4SJBX6TpfEg0x9/pOMk3oULhNXbHch6 cp5O9RlIS4VZIvYDeCGkLc5TWSmmUfzejDVNeGJTR/2MlHfKJgakNsKw5wIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFPt4K3jyCm5LcGQwUr0aQK8VpWM4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzlkYzkz My01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMxYmUvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMz LTVjMGQtNDQ2MS1hNDVkLThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJT dlJwQXJ4V2xZemcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEF BQcBBwEB/wQsMCowEgQCAAEwDAMEArmulAMEAtRX0DAUBAIAAjAOAwUDKgnawAMF AyoKBYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAzMZMA0GCSqGSIb3DQEBCwUA A4IBAQAHi90maAgr5qoXlnEvEiPIGrkafiEmtXnGMbydME19xbyTUKueo0l3HtsL RAOtVXN1z/C+E7TTNSPz8tWu3MqMfZ7WwJS82LPIPY0rk/4NRp73Q9utG1nY0k2V UDhmGo8nEaoNqfk7v/NONGL+cqhfiHedivrF1KqMCiw4SwcrQD16ezgqn3qim26F pRSWrZIIWr6VEMkNORtIl9S62xzthvx5iBiqmBW+NTcwFMJWPoA3KD07uCgypDF/ zHdH8XYfK4IWD4ze004kewsSiuPJp4V9d5phRSMGAo65JW9qvg/Mzjw/dbMRryVR mzlCMPto5gy7KdwzMDpE3FeLeOO7 -----END CERTIFICATE-----Generated at Tue Feb 3 08:31:15 2026 by rpki-client