This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer File: 3F-syhTeCBdO9clskfHngl9C0Hs.cer (raw, json) Hash identifier: ZVSBtnjMrut6trBJXB8sgDo1OY7zNEodyTtDPY9X8sg= Subject key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797EC5A55ACA810D2D70FEA3B565994B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205330 IP: 37.130.216.0/21 IP: 185.109.56.0/22 IP: 2a0f:cec0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c5:a5:5a:ca:81:0d:2d:70:fe:a3:b5:65:99:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:24:fa:cb:07:9b:84:c1:3f:ae:37:cf:7e: 17:02:9b:34:3e:18:b8:03:2e:a5:ae:36:fb:44:b0: 7f:ec:b2:1f:32:bc:77:8f:7a:43:30:f4:a2:09:54: b6:a6:d0:bc:fb:f6:cd:e9:1e:69:53:1b:7c:09:f6: 04:8d:b3:2f:99:ab:c9:b4:03:da:5e:fd:c4:4d:b6: d2:c3:d4:c4:85:09:c0:d7:d9:98:a7:55:99:b5:a8: 7b:16:1e:cd:03:a2:94:d6:1a:25:82:5f:28:fe:fd: 59:5b:0d:b4:23:d8:db:5d:bc:10:79:0a:85:50:29: 38:4c:8e:14:a1:66:34:54:8b:bd:1f:28:91:a2:97: e1:8e:96:0f:07:87:ea:7e:32:c2:5c:d2:24:a3:c0: c6:e6:44:a6:5b:a5:fb:a9:4a:92:82:45:c6:c4:dd: fa:42:60:d5:66:0b:65:02:96:a3:07:86:f6:ec:f1: 36:fb:8d:9e:27:33:9c:ce:7e:88:eb:67:4d:dc:56: 9b:88:60:fd:52:66:19:cd:bc:ce:e0:b6:10:21:e2: 51:36:e0:45:ab:5e:1a:17:a0:d6:e0:f1:c3:a3:a9: 86:53:c6:97:01:d6:e9:ec:a8:cf:2f:93:93:73:80: a2:85:82:bd:c3:52:52:32:20:09:7f:15:40:d8:d6: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.130.216.0/21 185.109.56.0/22 IPv6: 2a0f:cec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205330 Signature Algorithm: sha256WithRSAEncryption 85:ba:77:71:0e:f5:f6:89:9d:51:f9:fd:e2:9b:c3:4d:37:a3: 76:09:1c:fb:0b:75:8a:99:1f:4e:2b:6f:93:b1:25:a0:64:04: 91:0b:b6:6f:cc:81:52:ae:de:bc:dd:99:8b:ad:84:56:e4:c6: b1:7b:24:c5:d8:7f:ef:92:e1:00:6b:1b:a5:26:e1:08:22:8c: 2d:b2:60:f7:16:20:8b:04:3c:d9:a6:7c:0b:b3:2a:1a:64:51: 0c:f8:39:36:01:f5:e6:ab:1a:34:99:02:06:47:90:0e:b1:20: 7f:87:0b:c4:bb:42:c7:23:59:3c:42:a4:cd:fa:eb:d4:6f:17: dd:5e:dd:a3:99:3d:6a:64:82:21:ac:5e:18:6a:e3:ae:03:c5: 20:e6:b4:7a:bc:32:8d:30:bd:e9:dd:23:49:bb:83:52:fc:c7: a6:41:5c:53:a6:98:56:51:9d:73:a8:55:85:77:db:d8:00:d5: 24:73:57:d9:a6:ba:73:e9:98:e8:4e:1a:3d:b8:d7:cd:de:dc: 01:8f:09:5f:a6:e6:b8:40:03:6f:1a:d1:cf:aa:c8:47:d4:04: ef:49:0b:0a:17:b2:cc:1a:a0:34:f9:48:90:06:70:cf:62:fc: 4c:23:4d:7a:8b:c1:18:77:4a:b2:66:7d:a9:8b:d8:22:59:82: b8:95:30:e8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt5fsWlWsqBDS1w/qO1ZZlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzVmYWNjYTE0ZGUwODE3NGVmNWM5NmM5MWYxZTc4MjVmNDJkMDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK8k+ssHm4TBP643z34XAps0Phi4 Ay6lrjb7RLB/7LIfMrx3j3pDMPSiCVS2ptC8+/bN6R5pUxt8CfYEjbMvmavJtAPa Xv3ETbbSw9TEhQnA19mYp1WZtah7Fh7NA6KU1holgl8o/v1ZWw20I9jbXbwQeQqF UCk4TI4UoWY0VIu9HyiRopfhjpYPB4fqfjLCXNIko8DG5kSmW6X7qUqSgkXGxN36 QmDVZgtlApajB4b27PE2+42eJzOczn6I62dN3FabiGD9UmYZzbzO4LYQIeJRNuBF q14aF6DW4PHDo6mGU8aXAdbp7KjPL5OTc4CihYK9w1JSMiAJfxVA2NbZxwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNxfrMoU3ggXTvXJbJHx54JfQtB7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzA4OTNm MS1mZmI0LTQ2YjMtYmYyNy1hNzAxNjk4MGM4NmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMDg5M2Yx LWZmYjQtNDZiMy1iZjI3LWE3MDE2OTgwYzg2Zi8xLzNGLXN5aFRlQ0JkTzljbHNr ZkhuZ2w5QzBIcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDJYLYAwQCuW04MA0EAgACMAcDBQAqD87AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMiEjANBgkqhkiG9w0BAQsFAAOCAQEAhbp3 cQ719omdUfn94pvDTTejdgkc+wt1ipkfTitvk7EloGQEkQu2b8yBUq7evN2Zi62E VuTGsXskxdh/75LhAGsbpSbhCCKMLbJg9xYgiwQ82aZ8C7MqGmRRDPg5NgH15qsa NJkCBkeQDrEgf4cLxLtCxyNZPEKkzfrr1G8X3V7do5k9amSCIaxeGGrjrgPFIOa0 erwyjTC96d0jSbuDUvzHpkFcU6aYVlGdc6hVhXfb2ADVJHNX2aa6c+mY6E4aPbjX zd7cAY8JX6bmuEADbxrRz6rIR9QE70kLCheyzBqgNPlIkAZwz2L8TCNNeovBGHdK smZ9qYvYIlmCuJUw6A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:55 2026 by rpki-client