This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer (raw, json) Hash identifier: Sfz4JA+F8Xfby+sgliVNdLcfpEQFLbA1liTnKQtHpHA= Subject key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834FF304760E6834B0C61979D3AE962 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:17 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8364 AS: 8501 AS: 9112 AS: 13293 AS: 35628 AS: 196844 AS: 206239 IP: 62.3.160.0/19 IP: 185.1.164.0/24 IP: 185.116.136.0/22 IP: 195.216.96.0/19 IP: 212.126.0.0/19 IP: 2001:7f8:f0::/48 IP: 2001:808::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ff:30:47:60:e6:83:4b:0c:61:97:9d:3a:e9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:8f:ba:1a:3c:13:1a:a7:e3:db:a2:12:c8: 05:0b:65:47:27:19:a9:61:0b:13:bd:d3:ee:10:f1: 5e:96:d3:b6:77:70:6f:77:d4:2f:43:ce:4b:10:d2: b5:13:7f:e3:1c:1f:d9:db:ec:0e:10:87:13:d7:c2: 78:36:ae:45:1c:14:d9:5e:18:70:b9:46:a9:06:16: b2:1d:49:f8:ea:02:45:99:a6:b7:de:fa:2c:ad:40: 46:32:89:8a:e5:b4:21:87:4f:27:5d:51:08:38:d9: 4a:9f:03:5e:94:43:69:f2:7c:60:08:b2:a1:91:f8: f3:ac:78:b7:79:56:3e:83:24:33:40:fd:13:1e:47: 91:20:68:6b:92:d4:5b:9d:92:b2:05:4a:ad:56:fd: c1:51:b8:10:1c:2f:22:5f:f8:ce:3e:08:b9:84:2f: ac:68:d2:05:93:83:00:5f:b6:e6:a7:b5:2d:1c:0c: ba:22:cd:22:7a:8b:11:72:1f:7c:93:8c:79:0e:82: c4:83:1f:c9:d4:24:48:24:c7:ed:01:1f:17:b2:2c: e9:25:2a:5e:c4:3f:0a:ff:a1:b4:60:45:7c:3d:e4: 06:07:bc:19:0a:77:4d:65:f8:ac:c5:7a:da:16:79: 78:4d:bd:b8:58:63:05:e2:5f:ef:a6:ba:7a:24:d5: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.160.0/19 185.1.164.0/24 185.116.136.0/22 195.216.96.0/19 212.126.0.0/19 IPv6: 2001:7f8:f0::/48 2001:808::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8364 8501 9112 13293 35628 196844 206239 Signature Algorithm: sha256WithRSAEncryption 16:2b:45:d9:d8:fd:a6:e4:ce:21:ab:0f:73:c2:6b:76:e7:18: d8:21:89:86:03:70:37:a1:a5:98:3a:d3:dd:eb:50:11:58:c9: 2e:91:6a:e7:7f:63:b4:e9:95:23:a2:8f:84:bd:5c:b3:07:d7: 1e:d5:df:27:c2:a9:30:de:e4:cf:6b:f0:10:60:dd:ff:2b:c7: 6f:ae:51:6e:91:0d:95:bf:ae:24:86:ab:c1:f8:6e:ac:19:53: 8d:ed:10:5e:b7:51:a7:3a:12:e8:be:53:71:e1:d4:d8:66:25: 42:bf:14:92:9b:86:70:d9:0b:46:0d:4c:d5:de:87:fd:41:d6: c5:1d:93:b1:d6:0e:11:82:72:4c:f6:c7:4e:65:eb:b9:75:be: 7a:75:e7:11:0d:59:52:05:93:b5:f7:6a:5a:74:34:70:4b:1c: 23:37:f7:64:6c:fc:27:c7:16:87:18:a9:9f:c7:d3:65:b3:70: 2f:21:58:b7:f7:b1:76:8f:b5:bc:ee:ba:22:f6:be:5d:b4:b3: 9b:a5:d7:86:92:1c:39:cd:5d:54:8d:5f:36:32:50:cf:ed:e9: c5:2a:97:dc:a5:5a:c8:83:8a:94:67:50:9d:fa:8a:5b:f9:7a: 0a:11:c0:97:93:1d:48:f8:85:31:a9:87:7b:1f:d2:99:57:d4: 93:03:00:76 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt4NP8wR2Dmg0sMYZedOuliMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzY1MTY2OTJjNjM4MmIzZjgzZGFlOTkxZmQ4OWRkMWIwY2VmNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXOPuho8Exqn49uiEsgFC2VHJxmp YQsTvdPuEPFeltO2d3Bvd9QvQ85LENK1E3/jHB/Z2+wOEIcT18J4Nq5FHBTZXhhw uUapBhayHUn46gJFmaa33vosrUBGMomK5bQhh08nXVEIONlKnwNelENp8nxgCLKh kfjzrHi3eVY+gyQzQP0THkeRIGhrktRbnZKyBUqtVv3BUbgQHC8iX/jOPgi5hC+s aNIFk4MAX7bmp7UtHAy6Is0ieosRch98k4x5DoLEgx/J1CRIJMftAR8XsizpJSpe xD8K/6G0YEV8PeQGB7wZCndNZfisxXraFnl4Tb24WGMF4l/vprp6JNWOGQIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFNxlFmksY4Kz+D2umR/YndGwzvV5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE0L2NkOWZk My1hM2VlLTRlYzUtOGM1NC0yZjM4M2U4NWViYzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvY2Q5ZmQz LWEzZWUtNGVjNS04YzU0LTJmMzgzZTg1ZWJjMC8xLzNHVVdhU3hqZ3JQNFBhNlpI OWlkMGJETzlYay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjAkBAIAATAeAwQFPgOgAwQAuQGkAwQCuXSIAwQFw9hgAwQF1H4A MBYEAgACMBADBwAgAQf4APADBQMgAQgIMDQGCCsGAQUFBwEIAQH/BCUwI6AhMB8C AiCsAgIhNQICI5gCAjPtAgMAiywCAwMA7AIDAyWfMA0GCSqGSIb3DQEBCwUAA4IB AQAWK0XZ2P2m5M4hqw9zwmt25xjYIYmGA3A3oaWYOtPd61ARWMkukWrnf2O06ZUj oo+EvVyzB9ce1d8nwqkw3uTPa/AQYN3/K8dvrlFukQ2Vv64khqvB+G6sGVON7RBe t1GnOhLovlNx4dTYZiVCvxSSm4Zw2QtGDUzV3of9QdbFHZOx1g4RgnJM9sdOZeu5 db56decRDVlSBZO192padDRwSxwjN/dkbPwnxxaHGKmfx9Nls3AvIVi397F2j7W8 7roi9r5dtLObpdeGkhw5zV1UjV82MlDP7enFKpfcpVrIg4qUZ1Cd+opb+XoKEcCX kx1I+IUxqYd7H9KZV9STAwB2 -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:07 2026 by rpki-client