This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer File: 3KLzDk5paSsbT-zrrpH9VgS97JM.cer (raw, json) Hash identifier: UZxcDlJJpZwEyR8kFOvchp+WTMpCqaBCQvP/HFjio78= Subject key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA52BBC6B5E7F002F7C211D29A2FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.107.247.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a5:2b:bc:6b:5e:7f:00:2f:7c:21:1d:29:a2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:7a:b3:df:3e:f9:84:b2:01:85:c0:a7:15: 59:02:65:19:86:25:72:b8:7d:cb:7c:02:2e:1c:37: 10:3d:ab:f2:b8:9a:6d:15:d1:7a:e0:98:d5:64:e9: c9:ae:9f:d7:56:86:f4:9b:f6:04:b8:3d:db:20:3f: 82:28:f5:bf:c8:5d:a3:c5:e6:a5:2b:31:c5:e3:0c: 31:40:a4:61:ce:b7:a0:08:82:c9:5a:20:94:f3:54: a6:dc:bf:7b:67:9d:33:22:06:73:d7:7b:92:1c:af: 64:24:0f:a0:d7:e2:df:b2:4b:77:c3:fa:ad:4b:6c: 81:e0:66:56:1e:10:74:02:9e:3d:50:0a:f5:45:92: da:60:07:64:c0:a3:86:54:84:be:af:d3:ba:d0:5d: e2:61:f2:9a:cc:8a:88:a9:e8:43:8c:72:a7:de:89: 0f:55:8c:b0:89:8b:98:46:2a:00:a1:e4:fe:07:ec: 7e:c2:f7:37:d9:fa:30:7f:38:a2:a2:0c:67:28:a0: 48:11:de:ec:7f:0e:ae:6a:82:ce:5d:d1:8e:af:01: 9b:de:c8:9e:89:0d:af:f6:b1:7f:34:bc:27:0c:41: 4a:37:19:6e:a9:4a:08:e5:c5:bb:53:b0:c9:23:44: 3f:52:45:d4:fe:e2:2b:e3:1a:40:01:33:0d:65:cc: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.247.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:cd:54:4e:cb:5a:3d:02:58:a1:45:cf:5f:86:8e:4a:fa:62: f1:0d:c2:fd:a6:b1:bb:76:75:26:10:a6:5f:cb:58:2d:28:08: f6:83:2e:f7:bf:9c:97:25:c3:aa:85:99:be:99:13:37:77:b4: 1b:a2:da:17:57:39:6f:a0:76:90:9b:60:24:c9:cf:1f:b9:22: 6d:3f:4f:82:07:57:88:8e:0a:53:4c:c4:c4:07:d0:57:d7:02: 89:f0:1d:c8:1a:c1:e2:34:a6:83:fa:0a:72:f1:7e:f1:2a:03: e8:b0:42:9c:3b:a5:78:89:e1:15:e2:fb:d5:85:b5:b1:22:98: 5f:e4:6f:c8:a7:a2:2f:7d:2c:71:bf:6c:bb:e2:4a:33:8f:f3: 0a:ec:7a:6b:23:59:3b:6d:c3:a1:d2:27:72:6b:e4:fd:cd:d8: 3a:da:58:56:0d:4f:20:70:6d:0e:47:a0:5d:b1:73:e4:82:c6: b5:32:c7:2f:12:dc:cd:d6:9f:7b:1f:de:ab:a7:44:6e:37:f2: a5:85:85:48:6b:73:38:84:20:f9:8c:b0:4e:6a:be:86:3d:f6: 35:b0:49:5f:4a:e5:7b:67:c2:17:14:a2:97:36:67:31:fd:aa: df:1e:1f:9d:93:10:ae:1c:11:bf:da:dd:cf:1c:01:61:ba:e5: 4b:f1:f7:66 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt9yqUrvGtefwAvfCEdKaL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2EyZjMwZTRlNjk2OTJiMWI0ZmVjZWJhZTkxZmQ1NjA0YmRlYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX16s98++YSyAYXApxVZAmUZhiVy uH3LfAIuHDcQPavyuJptFdF64JjVZOnJrp/XVob0m/YEuD3bID+CKPW/yF2jxeal KzHF4wwxQKRhzregCILJWiCU81Sm3L97Z50zIgZz13uSHK9kJA+g1+Lfskt3w/qt S2yB4GZWHhB0Ap49UAr1RZLaYAdkwKOGVIS+r9O60F3iYfKazIqIqehDjHKn3okP VYywiYuYRioAoeT+B+x+wvc32fowfziiogxnKKBIEd7sfw6uaoLOXdGOrwGb3sie iQ2v9rF/NLwnDEFKNxluqUoI5cW7U7DJI0Q/UkXU/uIr4xpAATMNZczi6QIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNyi8w5OaWkrG0/s666R/VYEveyTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzAzNjU0 OS00NWQwLTQ1NjUtODI4Zi1lYjNlNzg1ZDkwOTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvMDM2NTQ5 LTQ1ZDAtNDU2NS04MjhmLWViM2U3ODVkOTA5Ny8xLzNLTHpEazVwYVNzYlQtenJy cEg5VmdTOTdKTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwWv3MA0GCSqGSIb3DQEBCwUAA4IBAQBrzVRO y1o9AlihRc9fho5K+mLxDcL9prG7dnUmEKZfy1gtKAj2gy73v5yXJcOqhZm+mRM3 d7QbotoXVzlvoHaQm2Akyc8fuSJtP0+CB1eIjgpTTMTEB9BX1wKJ8B3IGsHiNKaD +gpy8X7xKgPosEKcO6V4ieEV4vvVhbWxIphf5G/Ip6IvfSxxv2y74kozj/MK7Hpr I1k7bcOh0idya+T9zdg62lhWDU8gcG0OR6BdsXPkgsa1MscvEtzN1p97H96rp0Ru N/KlhYVIa3M4hCD5jLBOar6GPfY1sElfSuV7Z8IXFKKXNmcx/arfHh+dkxCuHBG/ 2t3PHAFhuuVL8fdm -----END CERTIFICATE-----Generated at Tue Jan 27 12:49:02 2026 by rpki-client