This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer (raw, json) Hash identifier: pM5TKrZWxlLfBCYyOYYwaRoqFNmRzesRJFof1zEUcWA= Subject key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7FF2C1CFB7FBE7C63F151397AFC25F1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 18:22:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211750 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:c1:cf:b7:fb:e7:c6:3f:15:13:97:af:c2:5f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 18:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:76:ae:46:06:b7:19:7d:3a:17:f5:5d:f7: 6f:19:4c:0a:5a:12:d6:64:27:a6:28:6b:2a:35:ea: 0e:6d:37:4c:36:33:d0:5e:6f:d8:02:4a:51:4c:86: e7:0a:3c:7d:12:58:b7:8a:3b:01:56:c7:55:c7:cd: 6a:69:09:73:ef:95:a8:00:be:49:de:60:87:86:40: ce:30:f1:9e:48:04:57:85:b2:e2:6a:82:a5:6a:90: 65:2e:4d:ff:50:6e:bb:bb:35:f3:19:59:6b:78:8f: 74:b5:fc:ad:b7:79:a3:1d:48:0e:a5:09:10:82:a1: 0f:f6:8f:8b:63:d9:59:0b:04:5d:f5:58:08:1f:a8: 23:97:26:8e:e8:67:84:12:d8:e0:4a:00:83:d4:66: 36:c6:1d:f6:17:17:e8:05:c1:6d:32:35:29:17:17: 03:a4:82:d4:65:89:0a:bf:e7:90:de:82:64:b5:b9: e8:0a:20:bf:59:a8:0a:c4:fa:84:1e:d0:54:44:53: bc:ef:56:fa:35:b0:4d:36:ae:a1:e1:16:0a:7b:6e: 09:fb:c2:b9:05:00:06:96:28:31:1b:45:9d:fd:47: 44:2b:73:22:a7:bb:c3:a6:80:ee:94:38:d1:9b:d2: bc:19:46:bd:32:95:25:22:57:a7:5e:13:a8:5f:b1: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 211750 Signature Algorithm: sha256WithRSAEncryption 94:42:19:dc:04:30:f4:79:aa:c2:15:6c:b6:55:92:7f:b2:46: e2:a8:47:5d:b4:e8:05:0d:c7:5d:2c:0f:ba:d4:27:dc:ed:ea: d7:dc:29:29:12:12:16:f9:05:ed:c8:1b:72:1e:36:ab:d8:2f: 84:4a:d2:22:21:c6:07:87:c9:88:91:34:13:c8:8e:51:63:12: 6d:75:40:c0:fa:b4:f4:a0:3b:02:e0:24:77:a7:6a:58:c9:58: c8:80:e9:f7:1f:1c:a2:ec:a7:85:cf:f6:18:02:6f:e0:96:aa: bb:18:3d:92:91:a6:e6:34:bc:f4:18:24:22:ba:ce:d2:2a:92: 7c:0a:d5:fc:ac:a6:8d:76:e9:db:3e:0c:ef:52:f5:51:b3:f0: e1:75:28:64:3c:41:52:7b:9b:5e:41:23:fa:10:78:be:f6:47: 60:32:84:2f:a1:b0:93:5b:4f:68:e6:8c:f2:16:86:11:7a:11: a7:b6:92:b4:0c:9b:cb:f5:7f:a9:8d:0a:97:5d:b0:6a:62:f8: 52:21:41:f0:6f:38:e0:6d:a0:f1:d2:df:1c:b5:22:80:62:08: e5:1c:72:a8:e0:d2:63:76:f7:97:d4:63:34:d5:2e:f1:9b:2c: b4:d3:b0:6c:9f:ed:2f:7b:aa:10:7d:d4:4c:f9:11:28:4e:f4: 9d:63:48:9a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt/8sHPt/vnxj8VE5evwl8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTgyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzM2NjMxY2EyMGVjOTJkMTk1YzE2YThkNzBhNjNmMzcyZTU5ZjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+p2rkYGtxl9Ohf1XfdvGUwKWhLW ZCemKGsqNeoObTdMNjPQXm/YAkpRTIbnCjx9Eli3ijsBVsdVx81qaQlz75WoAL5J 3mCHhkDOMPGeSARXhbLiaoKlapBlLk3/UG67uzXzGVlreI90tfytt3mjHUgOpQkQ gqEP9o+LY9lZCwRd9VgIH6gjlyaO6GeEEtjgSgCD1GY2xh32FxfoBcFtMjUpFxcD pILUZYkKv+eQ3oJktbnoCiC/WagKxPqEHtBURFO871b6NbBNNq6h4RYKe24J+8K5 BQAGligxG0Wd/UdEK3Mip7vDpoDulDjRm9K8GUa9MpUlIlenXhOoX7GUFQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNw2YxyiDsktGVwWqNcKY/Ny5Z8kMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFlLzRhYzE2 Mi1lMTZlLTQwNmUtYjk4NS01ZWY1NmY4NmFiODMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvNGFjMTYy LWUxNmUtNDA2ZS1iOTg1LTVlZjU2Zjg2YWI4My8xLzNEWmpIS0lPeVMwWlhCYW8x d3BqODNMbG55US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM7JjANBgkqhkiG9w0BAQsFAAOCAQEAlEIZ3AQw9Hmq whVstlWSf7JG4qhHXbToBQ3HXSwPutQn3O3q19wpKRISFvkF7cgbch42q9gvhErS IiHGB4fJiJE0E8iOUWMSbXVAwPq09KA7AuAkd6dqWMlYyIDp9x8couynhc/2GAJv 4Jaquxg9kpGm5jS89BgkIrrO0iqSfArV/KymjXbp2z4M71L1UbPw4XUoZDxBUnub XkEj+hB4vvZHYDKEL6Gwk1tPaOaM8haGEXoRp7aStAyby/V/qY0Kl12wamL4UiFB 8G844G2g8dLfHLUigGII5RxyqODSY3b3l9RjNNUu8ZsstNOwbJ/tL3uqEH3UTPkR KE70nWNImg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:59 2026 by rpki-client