This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer File: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer (raw, json) Hash identifier: SDDLybCEzGtHLGrK4qBvhb1VlWKDQzh4pCRQV+YnoJU= Subject key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78351B69EEF0637337D5910173206C5A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 28756 IP: 145.64.0.0/16 IP: 2a04:9d80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1b:69:ee:f0:63:73:37:d5:91:01:73:20:6c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:03:af:d1:45:72:c1:aa:7f:16:fa:84:94:67: 5f:77:87:b7:af:3c:fd:9a:e8:d3:33:1f:17:e3:80: 0a:42:c9:c8:e2:01:a3:d2:a9:b7:dc:51:b1:37:05: 6f:da:ea:48:92:04:6e:a7:6a:b4:31:3f:33:4a:1a: 01:d8:ac:fe:75:27:1e:39:34:3b:55:d8:6b:13:8d: af:e5:ac:05:eb:05:7c:f1:22:71:5d:fd:8b:38:eb: c4:ea:3e:d8:c2:e8:34:4f:f0:b1:fb:e0:9b:0f:10: 50:8e:8a:bd:60:63:eb:60:b0:34:73:f7:c1:d6:f9: c2:62:f3:a1:90:85:fc:b2:d7:1c:43:c8:69:78:8d: 9d:01:38:7d:ff:2e:e6:60:65:20:ed:4c:59:ff:2b: ed:03:b4:1d:56:05:d1:18:f0:99:b9:a1:35:56:87: 35:59:37:b8:de:f6:72:30:cb:85:d3:8d:3c:c4:ad: c8:1d:02:9d:2f:03:4f:19:d3:d1:6a:ad:5b:46:a5: f7:a4:19:dc:c9:a9:b6:bc:5c:fd:24:21:57:2d:f7: b0:ca:79:95:80:5c:14:f0:a2:eb:c5:22:bd:31:ba: 28:8b:a8:3f:5e:66:a5:1d:32:b7:6d:f9:7b:09:de: 5e:2f:97:5c:a1:c3:04:4b:ef:43:5e:91:e7:d0:0d: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.64.0.0/16 IPv6: 2a04:9d80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28756 Signature Algorithm: sha256WithRSAEncryption 6b:cb:d1:f8:cd:4a:f8:40:f7:fe:a1:4b:8e:4c:80:7c:cc:73: a9:40:d2:38:f8:1e:54:b3:53:ce:db:79:1e:9a:38:a8:9a:a8: f5:64:68:31:51:98:13:b4:ae:9d:89:39:bb:53:7a:8d:5f:8d: 9d:52:67:23:c1:a2:e5:f9:e2:76:3b:ac:d8:af:62:8d:9b:18: 2d:1f:2e:b7:a3:23:5f:c6:6d:95:8b:ce:55:cb:cb:54:ac:1e: 4a:24:aa:fa:c7:3a:45:a0:db:48:45:66:92:0d:c6:a5:b1:3e: c2:cc:c8:60:70:7e:44:dc:b4:9d:d8:42:39:2a:58:b6:1e:9c: 5b:50:75:eb:45:85:56:35:d2:ab:82:2f:5e:de:05:95:0f:95: 9c:18:3e:ea:52:b5:de:cc:cc:2b:c0:75:53:23:68:ea:4c:73: ab:f7:ad:54:de:f1:db:70:df:eb:f3:27:78:64:f0:2e:8a:81: f9:36:a5:99:92:53:4f:3a:35:1a:89:32:4d:99:7c:a4:44:73: 01:ae:15:52:15:12:97:3f:c5:75:d5:24:78:b4:a4:70:17:5f: 59:7d:b7:1b:98:29:31:33:8d:34:0f:bc:2e:a5:4a:e8:6e:67: 7a:46:39:69:75:e5:0b:91:a8:77:f5:d4:50:01:e5:8a:ca:56: 83:5a:76:eb -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAZt4NRtp7vBjczfVkQFzIGxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzM3N2I1ZDAyMmJmMGJlNGE2MjI0YjQ3ZWVhNmNhMGI4MWJmMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwOv0UVywap/FvqElGdfd4e3rzz9 mujTMx8X44AKQsnI4gGj0qm33FGxNwVv2upIkgRup2q0MT8zShoB2Kz+dSceOTQ7 VdhrE42v5awF6wV88SJxXf2LOOvE6j7Ywug0T/Cx++CbDxBQjoq9YGPrYLA0c/fB 1vnCYvOhkIX8stccQ8hpeI2dATh9/y7mYGUg7UxZ/yvtA7QdVgXRGPCZuaE1Voc1 WTe43vZyMMuF0408xK3IHQKdLwNPGdPRaq1bRqX3pBncyam2vFz9JCFXLfewynmV gFwU8KLrxSK9Mbooi6g/XmalHTK3bfl7Cd5eL5dcocMES+9DXpHn0A0AjQIDAQAB o4ICrTCCAqkwHQYDVR0OBBYEFNw3e10CK/C+SmIktH7qbKC4G/A3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg0L2NjNTU4 Yy0zNWU1LTRkZDYtODY3Yi04YjA1Yjc3OGUwZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvY2M1NThj LTM1ZTUtNGRkNi04NjdiLThiMDViNzc4ZTBkNS8xLzNEZDdYUUlyOEw1S1lpUzBm dXBzb0xnYjhEYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUF BwEHAQH/BB4wHDALBAIAATAFAwMAkUAwDQQCAAIwBwMFAyoEnYAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICcFQwDQYJKoZIhvcNAQELBQADggEBAGvL0fjNSvhA9/6h S45MgHzMc6lA0jj4HlSzU87beR6aOKiaqPVkaDFRmBO0rp2JObtTeo1fjZ1SZyPB ouX54nY7rNivYo2bGC0fLrejI1/GbZWLzlXLy1SsHkokqvrHOkWg20hFZpINxqWx PsLMyGBwfkTctJ3YQjkqWLYenFtQdetFhVY10quCL17eBZUPlZwYPupStd7MzCvA dVMjaOpMc6v3rVTe8dtw3+vzJ3hk8C6Kgfk2pZmSU086NRqJMk2ZfKREcwGuFVIV Epc/xXXVJHi0pHAXX1l9txuYKTEzjTQPvC6lSuhuZ3pGOWl15QuRqHf11FAB5YrK VoNadus= -----END CERTIFICATE-----Generated at Mon Feb 9 18:24:25 2026 by rpki-client