This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.cer (raw, json) Hash identifier: KTrwTK//zurTRDE7fFlGf5EH9pQGMp5iTa2ZQxTeTAc= Subject key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C13566C093FC116E0C1AA7FAD9FFA8E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:20:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205197 IP: 185.223.88.0/22 IP: 2a0d:fa00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:56:6c:09:3f:c1:16:e0:c1:aa:7f:ad:9f:fa:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c5:6d:a4:c3:58:6f:63:a6:77:d8:7b:1a:d0: df:32:13:91:30:6e:81:b0:2b:db:61:08:5b:c1:7e: 41:6f:ae:cb:49:77:eb:9f:d1:90:b7:81:4c:cc:b1: 25:a3:95:00:e7:53:a3:3d:e8:95:fd:6d:02:d2:73: c4:98:95:d8:65:05:73:cf:38:e8:ac:93:21:d2:63: ae:ed:00:3a:11:fb:d6:ec:4f:62:71:62:10:93:a6: ba:d3:6c:01:cf:81:ef:ea:bf:f6:e1:35:a9:92:65: 36:2d:6d:94:75:4a:45:24:59:73:8d:20:85:ca:45: d5:96:da:14:9c:29:6b:cb:8a:65:78:34:dd:4e:7f: 3f:84:1a:33:fa:98:40:40:da:2c:a2:b1:93:51:47: 32:e8:b9:08:d6:d5:08:dc:40:3d:5f:cb:0b:8c:d1: 96:1d:bb:f8:be:3e:da:1b:4a:3b:7e:92:55:c4:0b: e7:0a:40:e3:55:50:18:73:ef:5e:4c:7c:a3:4b:bc: 33:14:d0:07:d6:40:99:f6:75:c7:a4:c3:ac:2e:a6: cd:56:7d:b3:b0:74:a6:8a:45:71:1a:ea:b4:41:a8: 94:be:56:f8:2d:a1:7f:54:eb:d8:8f:14:79:c3:5a: f7:64:4c:86:06:67:ba:42:a9:a9:93:aa:12:59:da: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.88.0/22 IPv6: 2a0d:fa00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205197 Signature Algorithm: sha256WithRSAEncryption 0b:0f:8e:0b:d4:e0:38:9c:7d:85:5f:e7:01:34:67:c4:28:78: 24:82:95:b1:b5:8f:c5:48:ce:f0:9c:99:d7:b3:24:8a:ee:f8: 6c:ea:cb:88:49:17:1c:c0:61:4c:75:a8:d1:dd:73:c8:ae:4a: 26:2c:6f:82:f2:3f:68:a8:bc:3b:b4:2b:5f:18:8e:73:67:35: ec:cf:5d:54:03:0c:c6:dd:00:04:f0:95:1a:3d:3d:cd:24:6f: 54:b5:ca:ea:ae:0c:9e:2d:0b:8f:c8:c8:c0:f5:42:67:9c:e3: ac:41:d5:9d:e7:07:77:c7:ae:bb:e5:81:51:cb:4d:73:37:50: e2:4c:bb:48:44:0f:cd:05:d4:55:09:ee:2e:66:6a:6f:1e:c2: 7a:68:b6:28:c4:cf:f1:eb:78:ad:35:eb:67:75:b8:c8:52:e4: d5:13:1f:cf:8d:d7:57:f7:64:21:59:53:ab:61:72:03:6d:ea: f7:15:1f:e1:8c:2e:b9:a6:ed:af:a8:d2:44:63:b1:9e:01:b4: 6c:98:cb:d6:0c:bd:95:5a:1a:a5:44:c3:44:6c:1f:9b:51:02: cd:7a:d0:cd:97:c9:8b:fa:80:7f:ca:e0:fa:a7:99:de:44:cd: 1a:8d:3e:22:a6:30:8f:2d:06:cb:87:5d:9b:dc:51:fc:56:b7: f4:88:03:5f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8E1ZsCT/BFuDBqn+tn/qOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2FlNGIwNDcxYTYxODcyYzQwNDE0MmUxZjkwZjUwNzRmMGQ2ZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48VtpMNYb2Omd9h7GtDfMhORMG6B sCvbYQhbwX5Bb67LSXfrn9GQt4FMzLElo5UA51OjPeiV/W0C0nPEmJXYZQVzzzjo rJMh0mOu7QA6EfvW7E9icWIQk6a602wBz4Hv6r/24TWpkmU2LW2UdUpFJFlzjSCF ykXVltoUnClry4pleDTdTn8/hBoz+phAQNosorGTUUcy6LkI1tUI3EA9X8sLjNGW Hbv4vj7aG0o7fpJVxAvnCkDjVVAYc+9eTHyjS7wzFNAH1kCZ9nXHpMOsLqbNVn2z sHSmikVxGuq0QaiUvlb4LaF/VOvYjxR5w1r3ZEyGBme6Qqmpk6oSWdqQKwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNyuSwRxphhyxAQULh+Q9QdPDW8VMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzY3Zjlh Ny1hNmU4LTQyNmUtYmFjNC00YjY4YjE1ZDMwMWEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvNjdmOWE3 LWE2ZTgtNDI2ZS1iYWM0LTRiNjhiMTVkMzAxYS8xLzNLNUxCSEdtR0hMRUJCUXVI NUQxQjA4TmJ4VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCud9YMA0EAgACMAcDBQMqDfoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMhjTANBgkqhkiG9w0BAQsFAAOCAQEACw+OC9TgOJx9 hV/nATRnxCh4JIKVsbWPxUjO8JyZ17Mkiu74bOrLiEkXHMBhTHWo0d1zyK5KJixv gvI/aKi8O7QrXxiOc2c17M9dVAMMxt0ABPCVGj09zSRvVLXK6q4Mni0Lj8jIwPVC Z5zjrEHVnecHd8euu+WBUctNczdQ4ky7SEQPzQXUVQnuLmZqbx7Cemi2KMTP8et4 rTXrZ3W4yFLk1RMfz43XV/dkIVlTq2FyA23q9xUf4Ywuuabtr6jSRGOxngG0bJjL 1gy9lVoapUTDRGwfm1ECzXrQzZfJi/qAf8rg+qeZ3kTNGo0+IqYwjy0Gy4ddm9xR /Fa39IgDXw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:47 2026 by rpki-client