This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer File: 3B_QB9_6UI8wBj--TVOisuHoxN4.cer (raw, json) Hash identifier: 2lKwm+WbAp3aUvmoDH+NWLLxQX2gyn/a69OG9mjB6aI= Subject key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154742083AA8304510D729F9A53F4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:59 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12502 AS: 33843 IP: 45.150.68.0/22 IP: 46.231.136.0/21 IP: 85.236.192.0/19 IP: 86.62.8.0/22 IP: 94.176.147.0/24 IP: 193.96.243.0/24 IP: 194.55.100.0/23 IP: 212.71.192.0/19 IP: 2001:14f8::/32 IP: 2a01:1e8::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:47:42:08:3a:a8:30:45:10:d7:29:f9:a5:3f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:94:71:ff:92:af:c1:e5:93:74:dd:38:72: e0:84:4f:77:a9:ca:47:d3:6a:ff:73:98:c3:70:2a: 30:25:1e:3d:ac:9b:3b:3f:b5:14:7e:66:ee:1d:94: 55:36:60:56:80:9e:ab:8a:cb:a6:fa:8e:48:94:22: fc:d4:c9:21:20:07:f0:f5:11:58:ce:24:26:78:6d: f5:ac:05:70:0e:7f:41:88:d7:3b:7c:48:0c:cd:1c: 97:44:ea:4e:c8:84:82:c4:ec:f9:a8:67:e8:41:9b: 71:f2:56:c3:5b:53:a2:ee:84:26:94:d7:62:77:ea: 2c:a4:3a:9e:b3:21:3b:89:18:c5:ce:c5:44:40:90: 31:e9:5a:3e:d5:0e:38:4c:13:af:9c:2b:d5:5c:7b: 01:97:c4:dc:8b:ec:28:4c:a5:0e:2b:cd:70:57:28: 30:47:87:e5:ce:36:78:2d:03:2b:99:e2:66:7a:6c: a1:e9:26:4c:6f:7f:5d:e1:63:4f:1b:a5:fd:de:d4: 5f:85:67:e3:37:04:cf:ea:a3:ca:42:d4:d8:68:76: 31:63:18:93:c7:9c:5f:da:f3:92:b1:9a:86:f1:b7: 02:03:92:d7:9c:95:40:bf:d7:7e:a0:ca:04:10:cd: 53:9f:82:dd:54:2b:7c:0c:ab:25:5a:de:e4:16:14: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.68.0/22 46.231.136.0/21 85.236.192.0/19 86.62.8.0/22 94.176.147.0/24 193.96.243.0/24 194.55.100.0/23 212.71.192.0/19 IPv6: 2001:14f8::/32 2a01:1e8::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12502 33843 Signature Algorithm: sha256WithRSAEncryption 1e:18:50:e1:7f:2a:05:c3:7f:72:5d:88:1a:4e:0c:a7:05:bd: 1c:b0:31:f7:ea:dc:5f:7e:bb:6f:52:04:74:09:89:14:99:5b: 3d:5c:15:bc:bf:7a:3f:8d:55:ef:a4:17:41:29:73:58:1f:0c: d9:87:8a:7b:e2:f4:70:50:f7:bf:ca:a8:54:ea:74:73:93:3d: 10:66:44:b7:05:45:b8:27:49:22:d3:a8:0d:9c:53:99:b9:38: 11:de:af:cc:db:db:67:57:69:4b:be:69:ce:d1:ad:7f:cb:43: ff:0d:4a:8d:d6:08:4f:84:03:85:f8:fd:d6:85:12:f5:6c:78: e5:df:60:e7:cb:52:7a:a0:8f:0a:67:c7:fa:57:f6:4b:77:9e: e8:b8:2b:ed:cc:02:2c:0f:22:cc:7d:e8:7f:6e:0f:95:43:1b: 1c:28:dc:db:9d:76:0e:7a:d9:62:2f:a1:06:9e:c9:78:06:fe: 53:1e:86:42:2c:4a:3d:bb:87:62:17:72:56:c3:c1:50:3d:0d: 73:99:06:0d:eb:de:56:9b:f7:38:ee:68:df:94:44:04:a8:a8: 2d:f4:20:80:0a:23:11:04:59:50:58:9e:ee:4c:57:c2:86:5b: 38:8a:d4:8f:a6:88:99:99:10:94:46:5e:35:bc:3e:fb:19:c9: 2c:e0:c9:cb -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgISAZt/FUdCCDqoMEUQ1yn5pT9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzFmZDAwN2RmZmE1MDhmMzAwNjNmYmU0ZDUzYTJiMmUxZThjNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0GUcf+Sr8Hlk3TdOHLghE93qcpH 02r/c5jDcCowJR49rJs7P7UUfmbuHZRVNmBWgJ6risum+o5IlCL81MkhIAfw9RFY ziQmeG31rAVwDn9BiNc7fEgMzRyXROpOyISCxOz5qGfoQZtx8lbDW1Oi7oQmlNdi d+ospDqesyE7iRjFzsVEQJAx6Vo+1Q44TBOvnCvVXHsBl8Tci+woTKUOK81wVygw R4flzjZ4LQMrmeJmemyh6SZMb39d4WNPG6X93tRfhWfjNwTP6qPKQtTYaHYxYxiT x5xf2vOSsZqG8bcCA5LXnJVAv9d+oMoEEM1Tn4LdVCt8DKslWt7kFhQS0wIDAQAB o4IC5DCCAuAwHQYDVR0OBBYEFNwf0Aff+lCPMAY/vk1TorLh6MTeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzA3NTM3 Ny1lNDI2LTQ5MmYtYTU5Yy1hZTRjOTVjOTQwMDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMDc1Mzc3 LWU0MjYtNDkyZi1hNTljLWFlNGM5NWM5NDAwNS8xLzNCX1FCOV82VUk4d0JqLS1U Vk9pc3VIb3hONC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQCLZZEAwQDLueIAwQFVezAAwQCVj4IAwQAXrCT AwQAwWDzAwQBwjdkAwQF1EfAMBQEAgACMA4DBQAgART4AwUDKgEB6DAeBggrBgEF BQcBCAEB/wQPMA2gCzAJAgIw1gIDAIQzMA0GCSqGSIb3DQEBCwUAA4IBAQAeGFDh fyoFw39yXYgaTgynBb0csDH36txffrtvUgR0CYkUmVs9XBW8v3o/jVXvpBdBKXNY HwzZh4p74vRwUPe/yqhU6nRzkz0QZkS3BUW4J0ki06gNnFOZuTgR3q/M29tnV2lL vmnO0a1/y0P/DUqN1ghPhAOF+P3WhRL1bHjl32Dny1J6oI8KZ8f6V/ZLd57ouCvt zAIsDyLMfeh/bg+VQxscKNzbnXYOetliL6EGnsl4Bv5THoZCLEo9u4diF3JWw8FQ PQ1zmQYN695Wm/c47mjflEQEqKgt9CCACiMRBFlQWJ7uTFfChls4itSPpoiZmRCU Rl41vD77Gcks4MnL -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:10 2026 by rpki-client