This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer File: 3Bo6oM-N-pFn0k2S7YoW6054BEw.cer (raw, json) Hash identifier: /RtEBt7i3SstZhYco5unGRXhQsPTJEzaZ4R2W65H/qk= Subject key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15D415095A3EFD522DC8379E6EA03D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48385 IP: 91.209.139.0/24 IP: 91.229.66.0/23 IP: 193.105.41.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d4:15:09:5a:3e:fd:52:2d:c8:37:9e:6e:a0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:01:8b:1d:a6:5a:71:ce:56:ac:04:a0:ca: c8:2d:fa:ed:98:03:a1:1a:e1:b4:80:8c:16:ff:12: 01:a3:74:ed:fe:17:1d:1b:3f:2f:5f:96:95:9a:8c: 74:ea:57:90:dc:73:24:55:94:4f:0c:47:33:58:59: fb:35:d7:a6:15:7b:1e:b2:6a:16:8f:02:d7:35:95: 16:e3:63:8d:c2:da:3f:8a:c9:bc:44:44:ed:9b:44: 94:95:ba:3c:b5:ce:a5:98:cd:35:dd:14:89:f1:d4: 71:32:0e:fc:95:44:d7:a7:c9:c1:60:f7:7d:7c:c4: 8b:39:3e:6c:03:b1:64:4f:8b:d9:81:05:d3:8b:13: 27:89:4c:d0:7f:8d:97:43:77:64:80:13:c1:f1:30: 37:21:fa:95:57:4e:72:74:0e:b9:4b:d3:1a:59:b0: 8d:78:5c:0b:d9:8a:7f:08:06:f2:27:63:c9:73:8e: f1:54:45:9d:3b:fc:0e:13:72:03:28:ff:a8:7e:fe: 92:49:8c:f5:b4:e6:5f:84:67:5b:d6:33:a1:dc:1c: a1:72:52:ab:35:3e:c3:da:34:99:4b:14:fa:52:aa: 63:e6:87:34:a2:b0:c6:b1:1f:40:e2:c5:9e:6d:66: d0:58:ea:c7:f1:31:50:b0:dd:3f:a6:fd:59:16:1e: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.139.0/24 91.229.66.0/23 193.105.41.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48385 Signature Algorithm: sha256WithRSAEncryption 06:1f:4c:87:90:8c:74:b1:c9:95:60:72:c7:65:f7:a8:12:f3: 85:71:d1:c0:a9:e6:29:16:b4:b2:8c:e0:2a:cf:9b:d8:88:52: c1:f0:3b:33:91:c4:5a:4f:b5:61:1c:60:c2:2e:1b:a0:c7:e3: 26:5e:64:f6:46:41:88:ca:2a:4b:82:20:c9:43:14:d5:35:18: 8e:ca:45:98:2b:ce:3e:1c:cd:4b:a4:4c:9e:a2:b8:30:50:fe: ce:b8:67:5f:d8:66:a3:5b:a8:bf:eb:d7:67:0a:62:fd:a4:36: fd:da:49:fd:8e:dd:54:13:ae:78:e5:36:da:81:c8:33:6a:33: 55:67:82:2a:0d:de:67:d1:2f:ed:c3:04:5f:ac:3b:66:a6:7b: 64:21:e2:81:49:60:f8:ee:f9:77:78:00:42:bc:9a:6a:fe:0e: d2:66:88:05:43:6f:58:45:70:c3:65:d7:28:f1:65:52:5c:08: 79:ad:e4:74:5d:5f:9c:35:88:cb:93:24:5b:96:61:74:0a:93: 20:f0:27:85:08:c4:b3:7e:ce:24:d5:09:70:78:e1:b6:51:08: df:1a:20:4b:97:45:93:f4:ff:2d:78:50:5c:d0:4c:ae:4b:25: fb:2d:70:81:58:57:7a:b4:ff:eb:3d:8f:04:b2:db:e1:b1:39: ba:e2:23:90 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt/FdQVCVo+/VItyDeebqA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzFhM2FhMGNmOGRmYTkxNjdkMjRkOTJlZDhhMTZlYjRlNzgwNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYYBix2mWnHOVqwEoMrILfrtmAOh GuG0gIwW/xIBo3Tt/hcdGz8vX5aVmox06leQ3HMkVZRPDEczWFn7NdemFXsesmoW jwLXNZUW42ONwto/ism8RETtm0SUlbo8tc6lmM013RSJ8dRxMg78lUTXp8nBYPd9 fMSLOT5sA7FkT4vZgQXTixMniUzQf42XQ3dkgBPB8TA3IfqVV05ydA65S9MaWbCN eFwL2Yp/CAbyJ2PJc47xVEWdO/wOE3IDKP+ofv6SSYz1tOZfhGdb1jOh3ByhclKr NT7D2jSZSxT6Uqpj5oc0orDGsR9A4sWebWbQWOrH8TFQsN0/pv1ZFh4AjwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFNwaOqDPjfqRZ9JNku2KFutOeARMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzk5MTg0 Zi0xYzgwLTQ3Y2QtYTY4NS0yZGQ2NTBlYTRhYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvOTkxODRm LTFjODAtNDdjZC1hNjg1LTJkZDY1MGVhNGFjMy8xLzNCbzZvTS1OLXBGbjBrMlM3 WW9XNjA1NEJFdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAW9GLAwQBW+VCAwQAwWkpMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwC9ATANBgkqhkiG9w0BAQsFAAOCAQEABh9Mh5CMdLHJlWBy x2X3qBLzhXHRwKnmKRa0sozgKs+b2IhSwfA7M5HEWk+1YRxgwi4boMfjJl5k9kZB iMoqS4IgyUMU1TUYjspFmCvOPhzNS6RMnqK4MFD+zrhnX9hmo1uov+vXZwpi/aQ2 /dpJ/Y7dVBOueOU22oHIM2ozVWeCKg3eZ9Ev7cMEX6w7ZqZ7ZCHigUlg+O75d3gA Qryaav4O0maIBUNvWEVww2XXKPFlUlwIea3kdF1fnDWIy5MkW5ZhdAqTIPAnhQjE s37OJNUJcHjhtlEI3xogS5dFk/T/LXhQXNBMrksl+y1wgVhXerT/6z2PBLLb4bE5 uuIjkA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:25 2026 by rpki-client