This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer File: 3I4FnV63dkn78ZuErzX2iR2cWAc.cer (raw, json) Hash identifier: g30gDUuTx6/zZTW94J0YEvLxCOfbrowGE+riU69hp4U= Subject key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA62AB9D350741BC263AEB78814E263 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:19:37 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 25081 IP: 81.89.192.0/20 IP: 185.213.96.0/22 IP: 2a04:c940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:2a:b9:d3:50:74:1b:c2:63:ae:b7:88:14:e2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:30:3a:2d:6b:17:1a:ae:22:c9:df:0d:3d:8f: 94:a1:df:a7:0e:18:ae:78:8d:bb:fb:27:ad:13:b5: 84:8c:79:c7:04:88:24:65:ce:67:aa:48:55:d8:da: bf:f0:30:c2:14:dd:f2:85:78:00:15:9b:c9:90:dd: db:3e:4d:e7:dc:6d:9c:42:2e:68:1f:d6:28:c4:02: 89:49:c7:0f:03:82:46:e5:5b:49:ec:03:84:f2:fd: 5f:3b:0a:89:a8:72:43:37:48:66:d6:23:95:65:95: 44:29:ad:e5:af:64:1a:01:7d:7f:a4:8b:7e:c1:4b: 08:36:1b:e4:62:47:28:43:cd:f8:16:de:19:03:ef: 66:56:dd:2a:53:d8:c7:d9:b8:b0:8e:41:68:77:99: 65:4a:46:a5:d4:2f:2d:f6:10:01:4c:42:cc:e6:de: 2f:f8:fe:2c:48:4a:61:a9:7e:f0:0a:07:31:eb:2b: 53:fe:d4:b3:67:42:84:4e:82:02:96:cf:df:96:7b: 1f:7e:70:82:40:3c:a8:5a:dd:e9:e5:d9:fd:cb:fa: b2:d9:57:a0:d1:c3:3a:e8:01:ba:c3:f5:3e:5b:71: d8:ea:b8:10:58:de:a9:5b:8c:8a:06:df:94:b6:1a: bc:ab:5e:90:0d:c9:7a:9a:db:9f:02:98:d2:3c:c8: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.192.0/20 185.213.96.0/22 IPv6: 2a04:c940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25081 Signature Algorithm: sha256WithRSAEncryption 7e:74:9b:85:a0:84:65:83:f9:4e:2f:83:95:c6:12:d8:c8:fe: e9:3d:be:39:74:b2:03:41:24:49:ab:55:51:40:c3:78:cf:2f: 96:01:f0:6b:e6:57:b2:56:bf:b6:c1:7f:d4:46:89:49:ab:22: 53:99:6a:56:77:0e:5b:f2:7b:71:a4:de:96:af:2b:2b:e9:e9: 5d:56:3d:df:68:56:68:31:b8:63:7a:51:4d:c8:4c:cd:4d:eb: fb:3e:c7:6c:99:69:8d:23:27:ca:4e:c4:e9:ca:3f:08:b4:e1: b9:f7:34:3a:51:c2:bf:99:c9:2e:27:1b:55:85:f9:83:34:6d: a0:fa:3d:c4:f2:1a:ac:09:1f:79:87:c4:9d:a5:36:25:8a:50: 37:54:0b:2b:a6:3e:57:49:e4:c5:36:ff:11:75:e6:7a:4c:b5: e7:d2:d9:96:33:78:bb:c7:54:78:9b:b2:e2:8b:5c:a2:a2:e3: b5:85:00:91:b3:07:90:1b:26:c7:d2:61:d3:09:7b:88:b5:80: bc:66:e8:cc:90:cb:cb:5e:88:1a:71:5e:cc:6f:80:d8:f1:13: 40:03:5f:e7:0f:cd:52:e7:67:8e:f3:a5:c9:2e:bf:54:30:a5: 95:1f:14:9b:33:6a:65:9a:71:93:df:30:f3:45:8e:96:3a:fa: 61:98:d4:31 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt+piq501B0G8JjrreIFOJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhlMDU5ZDVlYjc3NjQ5ZmJmMTliODRhZjM1ZjY4OTFkOWM1ODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDA6LWsXGq4iyd8NPY+Uod+nDhiu eI27+yetE7WEjHnHBIgkZc5nqkhV2Nq/8DDCFN3yhXgAFZvJkN3bPk3n3G2cQi5o H9YoxAKJSccPA4JG5VtJ7AOE8v1fOwqJqHJDN0hm1iOVZZVEKa3lr2QaAX1/pIt+ wUsINhvkYkcoQ834Ft4ZA+9mVt0qU9jH2biwjkFod5llSkal1C8t9hABTELM5t4v +P4sSEphqX7wCgcx6ytT/tSzZ0KEToICls/flnsffnCCQDyoWt3p5dn9y/qy2Veg 0cM66AG6w/U+W3HY6rgQWN6pW4yKBt+Uthq8q16QDcl6mtufApjSPMgXTwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFNyOBZ1et3ZJ+/GbhK819okdnFgHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhLzRmNmVl NC1mYTZlLTQzNmUtYjM0OS02ZWY3ZTExOTk2OTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvNGY2ZWU0 LWZhNmUtNDM2ZS1iMzQ5LTZlZjdlMTE5OTY5OC8xLzNJNEZuVjYzZGtuNzhadUVy elgyaVIyY1dBYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQEUVnAAwQCudVgMA0EAgACMAcDBQMqBMlAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmH5MA0GCSqGSIb3DQEBCwUAA4IBAQB+dJuF oIRlg/lOL4OVxhLYyP7pPb45dLIDQSRJq1VRQMN4zy+WAfBr5leyVr+2wX/URolJ qyJTmWpWdw5b8ntxpN6Wrysr6eldVj3faFZoMbhjelFNyEzNTev7PsdsmWmNIyfK TsTpyj8ItOG59zQ6UcK/mckuJxtVhfmDNG2g+j3E8hqsCR95h8SdpTYlilA3VAsr pj5XSeTFNv8RdeZ6TLXn0tmWM3i7x1R4m7Lii1yiouO1hQCRsweQGybH0mHTCXuI tYC8ZujMkMvLXogacV7Mb4DY8RNAA1/nD81S52eO86XJLr9UMKWVHxSbM2plmnGT 3zDzRY6WOvphmNQx -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:05 2026 by rpki-client