This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer File: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer (raw, json) Hash identifier: mgxb963o6P/j8sX17sf+XRbtEsRY9/yL2EdkW2mTe9s= Subject key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791100524C4114F40B26F9C867F68247 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 56496 IP: 89.19.52.0/22 IP: 91.224.210.0/23 IP: 2a0d:bac0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:00:52:4c:41:14:f4:0b:26:f9:c8:67:f6:82:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:6d:74:8b:04:ef:df:21:cc:78:6e:4a:90: f3:0b:06:1f:2b:01:3a:a9:93:72:78:3a:3e:ca:e7: 47:c2:90:bb:ab:57:b4:05:07:d0:c6:8e:48:0c:27: 4a:95:a3:67:8c:ae:d4:81:30:07:99:02:d8:4c:d5: f7:80:14:d4:48:5a:e6:37:c5:b9:1f:7f:87:e7:94: 28:c8:4e:06:da:85:40:13:7f:58:28:27:8d:ab:3b: 5d:9e:6e:9f:04:85:85:33:08:e0:9c:39:73:03:8c: a1:d7:e7:c0:c2:0d:45:d1:54:23:56:4d:75:45:b9: 4e:e1:94:98:fb:f2:e1:69:b9:10:18:d5:f2:e9:37: e0:3c:d8:12:93:ec:77:40:91:e9:2b:ad:b0:21:96: d3:0c:60:dd:3b:6a:95:90:8c:34:c0:6f:e2:10:1d: 97:57:38:ca:72:a2:82:ce:ec:1a:bd:e9:87:da:ba: 97:d6:38:54:f5:e1:0c:bf:2b:5d:d5:d4:9c:75:13: c0:32:c7:3b:70:ed:99:b7:3d:99:1e:b3:c9:06:f9: 15:48:3e:24:df:19:e6:30:59:19:13:6e:ac:bb:1a: 32:23:22:90:b3:7e:79:85:f8:29:2c:ce:c8:62:c0: 54:1e:0e:c7:43:5b:92:c6:38:64:91:ba:4e:dc:5d: c5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.52.0/22 91.224.210.0/23 IPv6: 2a0d:bac0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56496 Signature Algorithm: sha256WithRSAEncryption 83:a0:c1:c9:62:4c:eb:ae:39:53:a8:03:04:b4:ca:f5:c5:24: 42:70:06:5a:1c:ee:ee:70:56:94:bd:37:ae:47:ef:f8:49:f6: 3a:67:4d:2a:a1:0b:32:0d:ba:86:40:9c:a4:cf:c7:c0:65:4d: 86:cc:cb:44:aa:81:7f:d3:34:c7:7f:76:fa:c3:28:9a:bc:d6: 4c:77:00:3d:b6:be:0e:bd:cf:ce:e3:d8:a5:d1:4e:42:dd:7c: ef:70:a5:de:a0:7d:fa:a1:1c:05:d8:14:a9:d5:d6:6c:31:4b: 65:d2:41:6d:0c:70:a0:80:95:70:ce:42:8c:9c:9c:a0:c9:68: ce:bb:7b:1e:58:fa:e9:61:5c:9a:a6:6d:57:83:48:ce:d1:ef: 98:ad:8d:a6:3d:98:6c:7a:a9:05:7a:37:62:76:ca:d7:a5:97: fa:f2:bf:08:49:35:09:78:e8:a8:9f:d1:f1:71:d7:8b:93:7a: 8b:75:78:4d:85:72:8a:eb:85:aa:35:18:e2:87:68:af:41:c6: b4:63:85:da:cd:fc:b7:fc:57:9a:be:3f:fb:f8:c2:35:7d:91: 83:4b:c0:a2:65:b6:54:d1:ff:56:ca:9b:5f:91:70:75:1e:db: 30:84:37:94:41:06:a3:28:31:69:91:74:b5:c2:85:4f:e1:31: a6:b1:cc:d2 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5EQBSTEEU9Asm+chn9oJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzJjMmZlZjljOGNhZjhmMmYwODIxMWVmMDJjM2QwYWQzNDc0OTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4htdIsE798hzHhuSpDzCwYfKwE6 qZNyeDo+yudHwpC7q1e0BQfQxo5IDCdKlaNnjK7UgTAHmQLYTNX3gBTUSFrmN8W5 H3+H55QoyE4G2oVAE39YKCeNqztdnm6fBIWFMwjgnDlzA4yh1+fAwg1F0VQjVk11 RblO4ZSY+/LhabkQGNXy6TfgPNgSk+x3QJHpK62wIZbTDGDdO2qVkIw0wG/iEB2X VzjKcqKCzuwavemH2rqX1jhU9eEMvytd1dScdRPAMsc7cO2Ztz2ZHrPJBvkVSD4k 3xnmMFkZE26suxoyIyKQs355hfgpLM7IYsBUHg7HQ1uSxjhkkbpO3F3FxQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNwsL++cjK+PLwghHvAsPQrTR0kXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdiLzA4NTMx Yi1iZDY2LTRmY2UtYTU2OS04NjQ0YzU4MTRjOWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2IvMDg1MzFi LWJkNjYtNGZjZS1hNTY5LTg2NDRjNTgxNGM5YS8xLzNDd3Y3NXlNcjQ4dkNDRWU4 Q3c5Q3ROSFNSYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCWRM0AwQBW+DSMA0EAgACMAcDBQMqDbrAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDcsDANBgkqhkiG9w0BAQsFAAOCAQEAg6DB yWJM6645U6gDBLTK9cUkQnAGWhzu7nBWlL03rkfv+En2OmdNKqELMg26hkCcpM/H wGVNhszLRKqBf9M0x392+sMomrzWTHcAPba+Dr3PzuPYpdFOQt1873Cl3qB9+qEc BdgUqdXWbDFLZdJBbQxwoICVcM5CjJycoMlozrt7Hlj66WFcmqZtV4NIztHvmK2N pj2YbHqpBXo3YnbK16WX+vK/CEk1CXjoqJ/R8XHXi5N6i3V4TYVyiuuFqjUY4odo r0HGtGOF2s38t/xXmr4/+/jCNX2Rg0vAomW2VNH/VsqbX5FwdR7bMIQ3lEEGoygx aZF0tcKFT+ExprHM0g== -----END CERTIFICATE-----Generated at Mon Feb 2 09:28:50 2026 by rpki-client