This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer File: 3JDgruHswxBmy3RPin_u3vs_eTA.cer (raw, json) Hash identifier: eVKudl32nbrE9eXNsWVpK17WpSsRKZmdCalUjWdy1Cc= Subject key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6CA295E6B16C0CF4AB453E735A8E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21159 AS: 24875 AS: 209445 AS: 215224 IP: 45.14.12.0/22 IP: 80.89.224.0/20 IP: 85.208.184.0/22 IP: 89.105.192.0/19 IP: 185.80.232.0/22 IP: 185.92.148.0/22 IP: 185.147.12.0/22 IP: 185.224.215.0/24 IP: 2001:968::/29 IP: 2a00:11f8::/29 IP: 2a07:5440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ca:29:5e:6b:16:c0:cf:4a:b4:53:e7:35:a8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2e:73:28:b5:0b:8c:a3:d7:21:0c:dc:76:7b: 06:1f:fa:07:34:1a:78:37:d9:8d:e7:43:72:6b:24: f1:ae:1a:1b:cb:87:4a:8d:2e:cd:5a:35:38:1b:bb: 86:ae:2b:b9:b7:9c:47:f3:ad:f4:a8:6f:72:c8:c3: 17:46:4b:1b:0a:8f:b9:78:83:cb:19:48:63:df:76: dd:d5:46:ee:b7:2a:39:16:d2:c7:b4:11:17:a4:3c: b1:d7:07:f9:bd:9a:5d:fe:84:a2:43:72:4d:bd:56: cb:fd:19:e5:7b:98:c3:3d:44:58:6a:c6:e0:fb:11: 4e:58:7e:ff:db:9c:5b:a1:36:34:ce:4a:1e:bf:af: 7d:63:88:1f:a9:fa:3b:71:20:9d:5a:dc:1a:26:63: 85:86:72:ca:6f:23:22:bf:38:1e:a9:b0:a9:d7:45: b4:b9:3a:3c:72:d5:03:fc:91:f5:a8:68:c5:d9:2e: 63:a2:0e:b5:85:b3:78:48:93:06:50:e5:83:6d:59: e6:3f:87:09:0c:b6:7f:72:4d:30:83:b1:ae:6f:cb: 7a:3e:13:2e:7a:55:51:8b:20:a1:92:b5:4a:05:dd: a2:59:71:4b:54:3d:4b:c5:c3:0f:d4:8b:e8:91:0a: 0e:48:53:1f:d4:cd:c6:d8:5c:7c:c1:7f:8f:cc:d3: 90:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.12.0/22 80.89.224.0/20 85.208.184.0/22 89.105.192.0/19 185.80.232.0/22 185.92.148.0/22 185.147.12.0/22 185.224.215.0/24 IPv6: 2001:968::/29 2a00:11f8::/29 2a07:5440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21159 24875 209445 215224 Signature Algorithm: sha256WithRSAEncryption 64:99:67:31:50:57:e4:a4:92:f1:9c:5e:ce:fe:bf:db:0e:7d: 08:fd:54:0b:27:65:43:08:23:e5:4e:93:d5:a8:8a:93:55:da: 39:58:97:ca:ff:db:a0:4d:2d:5f:d5:bd:21:04:4c:e4:2a:41: 31:52:11:35:26:d8:73:a8:16:3e:d9:0e:c2:49:d2:b5:44:47: b2:f7:a8:64:2b:89:a2:9a:0c:9a:54:c8:42:33:e9:62:12:86: 4c:25:b6:2d:2f:6e:5d:2b:6e:8d:95:92:73:8d:a3:08:08:8f: c4:a0:fa:ba:91:83:81:90:e0:19:0b:65:3e:f0:12:b9:84:e7: 23:9d:24:4b:85:47:75:cb:b9:b0:81:38:e9:c6:00:d4:67:38: 7f:dc:ea:cd:71:ce:52:f7:1b:88:4d:aa:77:b1:47:2e:fe:4d: f1:ac:53:a5:f8:ac:30:34:c4:4d:4f:0a:0d:84:22:00:26:bf: cd:17:78:83:ad:e9:71:53:ba:be:c2:47:11:40:63:36:c7:38: 98:d2:24:61:6f:73:4b:b6:17:13:42:15:6f:ca:bf:64:57:9b: d3:46:4f:18:96:bf:53:7d:66:d0:db:eb:0b:b1:92:a5:81:00: a0:6a:30:1a:26:de:ad:bc:ea:8b:d2:4a:53:5f:cd:e2:3f:00: 47:20:6a:89 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgISAZt+psopXmsWwM9KtFPnNajnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzkwZTBhZWUxZWNjMzEwNjZjYjc0NGY4YTdmZWVkZWZiM2Y3OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi5zKLULjKPXIQzcdnsGH/oHNBp4 N9mN50NyayTxrhoby4dKjS7NWjU4G7uGriu5t5xH8630qG9yyMMXRksbCo+5eIPL GUhj33bd1Ubutyo5FtLHtBEXpDyx1wf5vZpd/oSiQ3JNvVbL/Rnle5jDPURYasbg +xFOWH7/25xboTY0zkoev699Y4gfqfo7cSCdWtwaJmOFhnLKbyMivzgeqbCp10W0 uTo8ctUD/JH1qGjF2S5jog61hbN4SJMGUOWDbVnmP4cJDLZ/ck0wg7Gub8t6PhMu elVRiyChkrVKBd2iWXFLVD1LxcMP1IvokQoOSFMf1M3G2Fx8wX+PzNOQQwIDAQAB o4IC9DCCAvAwHQYDVR0OBBYEFNyQ4K7h7MMQZst0T4p/7t77P3kwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2Lzg3YjI2 Ny00OWMyLTQyNjktOWY2Ni0wMGJjZDliOTFjMWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvODdiMjY3 LTQ5YzItNDI2OS05ZjY2LTAwYmNkOWI5MWMxYi8xLzNKRGdydUhzd3hCbXkzUlBp bl91M3ZzX2VUQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGCCsGAQUF BwEHAQH/BFcwVTA2BAIAATAwAwQCLQ4MAwQEUFngAwQCVdC4AwQFWWnAAwQCuVDo AwQCuVyUAwQCuZMMAwQAueDXMBsEAgACMBUDBQMgAQloAwUDKgAR+AMFAyoHVEAw JwYIKwYBBQUHAQgBAf8EGDAWoBQwEgICUqcCAmErAgMDMiUCAwNIuDANBgkqhkiG 9w0BAQsFAAOCAQEAZJlnMVBX5KSS8Zxezv6/2w59CP1UCydlQwgj5U6T1aiKk1Xa OViXyv/boE0tX9W9IQRM5CpBMVIRNSbYc6gWPtkOwknStURHsveoZCuJopoMmlTI QjPpYhKGTCW2LS9uXStujZWSc42jCAiPxKD6upGDgZDgGQtlPvASuYTnI50kS4VH dcu5sIE46cYA1Gc4f9zqzXHOUvcbiE2qd7FHLv5N8axTpfisMDTETU8KDYQiACa/ zRd4g63pcVO6vsJHEUBjNsc4mNIkYW9zS7YXE0IVb8q/ZFeb00ZPGJa/U31m0Nvr C7GSpYEAoGowGiberbzqi9JKU1/N4j8ARyBqiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:41 2026 by rpki-client