This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer File: 3-xclF0DU12WcwlREFRrHJjmGGA.cer (raw, json) Hash identifier: CUHzTuPnSd45SerFaAQs/QKxVvHLUZvhO+j5AKma8Ic= Subject key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7B36EBC4F4BDF36CA654DC3682FBF1B0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 20:19:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197799 IP: 31.193.200.0/21 IP: 2a03:1e40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:eb:c4:f4:bd:f3:6c:a6:54:dc:36:82:fb:f1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 20:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfec5c945d03535d9673095110546b1c98e61860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:89:5c:87:26:f0:ec:7a:8a:d1:af:aa:c8: c0:17:a8:69:46:fb:5a:01:89:9f:ce:ab:02:42:2f: 30:5b:d2:5f:58:fa:f8:65:e5:43:03:d6:b0:df:54: e1:33:aa:b8:74:ce:d5:14:45:a9:5d:9e:fc:6d:28: 19:98:e1:07:62:60:c1:52:64:b6:8c:97:23:35:26: 35:51:14:36:62:ac:0a:1c:cc:14:48:8f:0c:c1:9e: 6d:c1:00:e3:ff:94:83:a9:af:44:e9:cb:c4:60:be: 22:ce:e1:43:b5:e9:a9:31:a9:0f:2a:0f:5d:7d:7f: 21:12:68:cf:38:4e:e4:df:dc:87:9a:a7:ac:6f:3b: fb:5d:02:1b:31:a0:bf:43:f6:97:e8:ed:1f:a5:7e: fa:6c:64:f6:5e:47:14:88:38:56:d6:b0:92:bd:1c: b4:9d:20:71:0a:65:c6:51:53:cb:ce:8f:07:67:65: a5:34:75:c4:c9:3e:0c:da:cc:dc:aa:bb:f2:23:f3: 1a:5a:b4:42:fc:e6:af:7a:2c:78:c8:f6:5f:1e:76: ad:64:c8:9e:0e:98:f3:1e:f7:54:92:fa:f6:b5:05: 04:96:81:67:07:fa:7e:d0:bf:1e:23:81:b0:d1:9f: 10:3b:86:b4:fb:38:80:2f:e2:d0:6b:27:77:ed:37: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.200.0/21 IPv6: 2a03:1e40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197799 Signature Algorithm: sha256WithRSAEncryption 24:10:c7:e3:f0:71:eb:88:85:b6:2a:ad:2f:4d:c7:bf:5e:2b: 94:43:1c:e8:ea:ff:3d:fe:37:ed:17:ef:d1:1f:de:e3:f1:76: 04:dc:fb:3e:ec:aa:d0:36:1b:00:16:38:87:35:c3:8f:d5:07: 7b:7c:00:06:19:0e:7f:89:22:9c:22:bb:f7:c3:3c:6b:ce:71: 3a:0b:8e:d2:a2:56:82:41:c1:f2:44:16:83:b0:ff:6e:eb:da: b3:75:38:40:38:ab:8b:d0:ae:75:7c:6d:1c:56:58:50:0b:76: 6a:3b:fa:cf:a6:e6:3b:cc:ef:9c:42:7f:b4:5a:96:45:9d:59: 1a:80:70:53:bd:23:d5:ae:bd:94:47:54:a6:c5:69:60:3c:b0: 9c:a3:f7:b3:86:8b:72:47:56:1a:10:57:6a:f5:4e:0c:a1:d0: 49:01:28:9e:fe:4b:21:3a:56:44:32:6f:59:6c:81:0f:70:0c: 16:a8:2e:2e:43:a6:0b:bf:81:42:a6:a1:47:6f:43:01:8d:a3: b7:14:ed:77:ca:bd:e4:84:f9:90:9a:34:80:ac:d5:ca:9a:b2: 6a:24:bf:e8:0b:5f:70:ed:65:9d:9f:71:16:ba:d8:f4:0b:a7: 98:ae:52:d5:b4:28:8d:8f:0f:15:a0:bc:c5:d1:e9:83:23:87: fc:95:93:b6 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt7NuvE9L3zbKZU3DaC+/GwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmVjNWM5NDVkMDM1MzVkOTY3MzA5NTExMDU0NmIxYzk4ZTYxODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkWJXIcm8Ox6itGvqsjAF6hpRvta AYmfzqsCQi8wW9JfWPr4ZeVDA9aw31ThM6q4dM7VFEWpXZ78bSgZmOEHYmDBUmS2 jJcjNSY1URQ2YqwKHMwUSI8MwZ5twQDj/5SDqa9E6cvEYL4izuFDtempMakPKg9d fX8hEmjPOE7k39yHmqesbzv7XQIbMaC/Q/aX6O0fpX76bGT2XkcUiDhW1rCSvRy0 nSBxCmXGUVPLzo8HZ2WlNHXEyT4M2szcqrvyI/MaWrRC/Oaveix4yPZfHnatZMie DpjzHvdUkvr2tQUEloFnB/p+0L8eI4Gw0Z8QO4a0+ziAL+LQayd37TdJWQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN/sXJRdA1NdlnMJURBUaxyY5hhgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2Y0MDZj My0yNzg5LTQzYTUtYjFkNi1kZGRkZWYyNDEyMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZjQwNmMz LTI3ODktNDNhNS1iMWQ2LWRkZGRlZjI0MTIxNi8xLzMteGNsRjBEVTEyV2N3bFJF RlJySEpqbUdHQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDH8HIMA0EAgACMAcDBQAqAx5AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMEpzANBgkqhkiG9w0BAQsFAAOCAQEAJBDH4/Bx64iF tiqtL03Hv14rlEMc6Or/Pf437Rfv0R/e4/F2BNz7Puyq0DYbABY4hzXDj9UHe3wA BhkOf4kinCK798M8a85xOguO0qJWgkHB8kQWg7D/buvas3U4QDiri9CudXxtHFZY UAt2ajv6z6bmO8zvnEJ/tFqWRZ1ZGoBwU70j1a69lEdUpsVpYDywnKP3s4aLckdW GhBXavVODKHQSQEonv5LITpWRDJvWWyBD3AMFqguLkOmC7+BQqahR29DAY2jtxTt d8q95IT5kJo0gKzVypqyaiS/6AtfcO1lnZ9xFrrY9AunmK5S1bQojY8PFaC8xdHp gyOH/JWTtg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:22 2026 by rpki-client