This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.cer (raw, json) Hash identifier: ddpE+7u5Z4u5U+mTZqfR7/oWhfnob/QRg2y+EIhY7Mo= Subject key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB9F9A09FA2763520C2E55B601CCF2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199006 IP: 91.198.125.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9f:9a:09:fa:27:63:52:0c:2e:55:b6:01:cc:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6e:59:6e:61:e9:58:74:00:f6:59:51:ab:21: d3:99:ef:74:85:0b:fb:19:da:5a:aa:db:5e:2e:0f: 22:73:a1:22:55:ae:d2:a2:bb:02:ed:4b:ba:3a:45: 00:ed:d2:bd:26:20:24:85:ff:27:38:3d:f4:9d:a4: 6f:20:23:52:bd:cf:66:89:a6:01:f1:b5:2f:d8:3f: db:f8:3e:a2:76:3c:02:ca:d4:10:23:ab:39:b3:4b: 14:de:de:e5:32:ed:24:c7:47:eb:13:64:eb:9f:d0: 8b:91:f4:56:d8:4a:31:af:96:f1:52:9f:76:61:05: 84:d7:13:41:33:4e:bc:4c:01:25:68:b5:2a:c2:87: 95:da:a2:9a:7f:80:f3:a1:08:5d:f3:48:e3:33:89: 0b:c3:cf:7c:ab:24:55:a9:a2:06:98:b3:01:59:4a: 55:27:7f:07:c5:4f:72:b4:75:5e:47:aa:a9:09:38: 93:b2:df:2b:9a:d1:90:85:84:d1:b0:ec:bd:f5:e4: 93:c7:8f:08:c7:58:f8:9f:44:45:47:07:fc:68:d4: c5:86:58:96:d8:9b:ce:f5:4a:e7:10:f3:fe:36:bb: 73:f3:12:de:c8:98:7b:40:c4:fc:62:6a:c2:9b:a9: 65:0f:0a:4c:4c:96:cf:45:5c:b1:0c:90:f5:7f:a9: 16:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.125.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199006 Signature Algorithm: sha256WithRSAEncryption 45:f5:ed:4a:de:90:81:29:67:3f:b0:9a:ac:db:b4:12:9f:77: 9b:85:ff:bf:39:fd:68:c9:27:78:3b:f9:30:1b:b4:e6:2b:06: 79:87:0f:f8:f4:78:9e:f9:41:e4:5c:94:2c:3f:af:d3:00:85: 7a:8d:8c:8f:0f:27:ab:da:51:3d:a9:a9:48:b9:5b:8e:2d:8a: b2:0b:b0:e9:52:b8:4f:58:4b:9a:d7:28:d1:31:a8:d1:d9:fd: a3:42:54:0a:d3:95:42:a2:1d:c5:26:98:71:78:1b:e0:6d:51: 6f:e8:91:39:05:1d:51:13:b4:74:40:6a:1f:e3:fb:2b:ee:58: 43:ac:5f:36:35:2e:01:58:08:cd:d1:ab:26:cf:d9:25:88:4f: 56:d3:dd:e9:2b:c5:42:a4:66:b3:bd:40:78:f4:53:6c:12:ed: 36:2b:6b:07:d5:fc:89:0c:94:61:f9:56:e4:e0:f4:45:4c:21: b1:3c:14:de:06:f7:61:a1:e2:67:37:18:4a:c5:c8:52:9e:f1: ca:08:f5:12:99:64:05:1c:de:11:1c:36:53:d5:fd:70:09:09: af:b8:f6:3d:08:57:32:5d:7a:ec:1a:1c:ac:cd:e5:a0:9e:33: fa:f5:12:61:d5:a9:42:a3:8c:e4:74:d2:18:ff:9f:5b:85:aa: e8:c4:55:79 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt265+aCfonY1IMLlW2AczyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzgyZDJjN2ViNWZhNTQzZTMyZjFlZWUxOWNkMzVhNTY3M2NmYWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim5ZbmHpWHQA9llRqyHTme90hQv7 GdpaqtteLg8ic6EiVa7SorsC7Uu6OkUA7dK9JiAkhf8nOD30naRvICNSvc9miaYB 8bUv2D/b+D6idjwCytQQI6s5s0sU3t7lMu0kx0frE2Trn9CLkfRW2Eoxr5bxUp92 YQWE1xNBM068TAElaLUqwoeV2qKaf4DzoQhd80jjM4kLw898qyRVqaIGmLMBWUpV J38HxU9ytHVeR6qpCTiTst8rmtGQhYTRsOy99eSTx48Ix1j4n0RFRwf8aNTFhliW 2JvO9UrnEPP+Nrtz8xLeyJh7QMT8YmrCm6llDwpMTJbPRVyxDJD1f6kWRQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFNyC0sfrX6VD4y8e7hnNNaVnPPrmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzg0MmI1 Yi05ODVjLTQ0ZDctOTU5OC0wMzlkZWE1MDY5NGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvODQyYjVi LTk4NWMtNDRkNy05NTk4LTAzOWRlYTUwNjk0ZS8xLzNJTFN4LXRmcFVQakx4N3VH YzAxcFdjOC11WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW8Z9MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMJXjANBgkqhkiG9w0BAQsFAAOCAQEARfXtSt6QgSlnP7CarNu0Ep93m4X/vzn9 aMkneDv5MBu05isGeYcP+PR4nvlB5FyULD+v0wCFeo2Mjw8nq9pRPampSLlbji2K sguw6VK4T1hLmtco0TGo0dn9o0JUCtOVQqIdxSaYcXgb4G1Rb+iROQUdURO0dEBq H+P7K+5YQ6xfNjUuAVgIzdGrJs/ZJYhPVtPd6SvFQqRms71AePRTbBLtNitrB9X8 iQyUYflW5OD0RUwhsTwU3gb3YaHiZzcYSsXIUp7xygj1EplkBRzeERw2U9X9cAkJ r7j2PQhXMl167BocrM3loJ4z+vUSYdWpQqOM5HTSGP+fW4Wq6MRVeQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:05:14 2026 by rpki-client