This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer File: 3A3qTqJUbXoBmk74JDtetjVlyEc.cer (raw, json) Hash identifier: p99KYesi1UTxa6+SGccDpZyd+zEqW54YKuRV/tSykQQ= Subject key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E39017A9A92726040471D2DD528CE30 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:20:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 139.20.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:01:7a:9a:92:72:60:40:47:1d:2d:d5:28:ce:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f2:49:7e:d8:5c:f7:ef:77:b0:77:d6:ef:7b: 74:d2:aa:95:07:31:b7:5b:cf:ed:a8:a3:81:8c:54: 9c:37:42:9f:e4:e4:cb:b9:8b:da:6f:d9:04:53:0d: 76:2f:5a:69:2d:f4:bd:f3:db:0e:f9:67:b8:03:c3: 39:3c:46:0c:fc:5c:be:bf:fe:79:d2:06:a1:d4:65: dd:42:75:78:df:67:59:87:ba:9c:bf:1b:c9:65:05: 05:2b:99:5c:80:35:5d:c4:b0:04:9b:92:ad:51:bd: bf:2b:08:78:e4:8b:27:75:bc:15:68:8a:64:b4:2d: 0d:18:6c:33:5a:3b:7c:c0:84:ed:e7:e2:81:9e:76: 9b:46:ea:fd:aa:b7:ab:ce:e5:78:30:03:9a:bc:b7: 16:2f:2f:f5:46:02:71:57:73:8e:88:87:f5:0c:61: c4:ab:31:f7:81:0b:43:fb:c8:91:1a:d1:6c:15:45: 39:31:40:68:99:77:bc:0d:d0:2d:be:33:a8:07:dc: b7:93:70:f1:54:71:ce:e5:f2:e0:fe:7b:a8:b5:94: e1:4f:78:cb:19:e3:1e:52:db:66:98:f4:8d:8a:b0: 16:52:50:5e:37:f5:d0:59:04:61:db:79:20:43:59: ce:bc:f9:51:92:48:07:8e:7c:68:63:83:5a:d7:1f: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.20.0.0/16 Signature Algorithm: sha256WithRSAEncryption 02:dd:1f:3e:60:25:9e:23:5c:15:e9:97:13:dc:21:d4:a8:b8: 13:8a:51:ab:2f:46:19:3e:79:c0:bb:8d:5c:4f:a7:e5:43:11: dc:96:ac:d1:6d:06:2a:09:2d:75:39:ba:6f:ba:06:dd:ce:52: 1d:e2:03:bf:6d:e1:ab:88:25:7c:c8:ea:b9:50:0e:9e:a7:fd: 23:5b:a8:1a:44:e6:12:33:e2:14:fc:45:bb:c7:b5:0e:67:42: e9:e2:17:ea:5a:7e:0f:12:e6:09:f7:8c:6b:96:dd:74:19:71: de:b5:40:07:28:d1:9e:73:ad:29:ae:2d:09:ce:4d:05:f4:fd: d3:22:5c:8f:93:6e:46:a0:5e:b4:36:74:64:e9:f1:6e:67:40: 04:6b:46:c0:09:48:55:47:22:97:e1:93:1d:2d:f2:a4:28:7f: bc:38:a9:78:ff:be:f0:4e:a9:f5:ce:5c:42:85:0c:ac:68:06: eb:3f:9c:62:cf:ef:cb:01:92:d3:36:7e:3e:11:0c:8d:cb:75: 61:e8:f8:dc:13:e9:1b:ea:55:03:42:7f:0b:55:8c:25:b0:15: 11:43:c3:6c:1f:ee:1d:cc:15:6b:da:a5:70:19:a4:6c:78:9b: 09:d4:c1:4b:d8:d7:70:a7:06:c1:f4:68:fa:bc:26:39:7f:35: e3:00:4c:4a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZt+OQF6mpJyYEBHHS3VKM4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzBkZWE0ZWEyNTQ2ZDdhMDE5YTRlZjgyNDNiNWViNjM1NjVjODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fJJfthc9+93sHfW73t00qqVBzG3 W8/tqKOBjFScN0Kf5OTLuYvab9kEUw12L1ppLfS989sO+We4A8M5PEYM/Fy+v/55 0gah1GXdQnV432dZh7qcvxvJZQUFK5lcgDVdxLAEm5KtUb2/Kwh45IsndbwVaIpk tC0NGGwzWjt8wITt5+KBnnabRur9qrerzuV4MAOavLcWLy/1RgJxV3OOiIf1DGHE qzH3gQtD+8iRGtFsFUU5MUBomXe8DdAtvjOoB9y3k3DxVHHO5fLg/nuotZThT3jL GeMeUttmmPSNirAWUlBeN/XQWQRh23kgQ1nOvPlRkkgHjnxoY4Na1x+aGQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFNwN6k6iVG16AZpO+CQ7XrY1ZchHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzM1YTZl NS0zMzY0LTRhNzQtOTY0Yy0zZDRiMjgzZjMyMmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvMzVhNmU1 LTMzNjQtNGE3NC05NjRjLTNkNGIyODNmMzIyZC8xLzNBM3FUcUpVYlhvQm1rNzRK RHRldGpWbHlFYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAixQwDQYJKoZIhvcNAQELBQADggEBAALdHz5g JZ4jXBXplxPcIdSouBOKUasvRhk+ecC7jVxPp+VDEdyWrNFtBioJLXU5um+6Bt3O Uh3iA79t4auIJXzI6rlQDp6n/SNbqBpE5hIz4hT8RbvHtQ5nQuniF+pafg8S5gn3 jGuW3XQZcd61QAco0Z5zrSmuLQnOTQX0/dMiXI+TbkagXrQ2dGTp8W5nQARrRsAJ SFVHIpfhkx0t8qQof7w4qXj/vvBOqfXOXEKFDKxoBus/nGLP78sBktM2fj4RDI3L dWHo+NwT6RvqVQNCfwtVjCWwFRFDw2wf7h3MFWvapXAZpGx4mwnUwUvY13CnBsH0 aPq8Jjl/NeMATEo= -----END CERTIFICATE-----Generated at Mon Feb 9 20:50:02 2026 by rpki-client