This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer File: 3KRrH82StH9PVfrQOMlYE0Cp03A.cer (raw, json) Hash identifier: e1uh7bmBbKQa23pE4VrRFPfFhg13QMgVHyTZude4dxQ= Subject key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F855EAF4639785B2AE977CA1738F534 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:25 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 43019 IP: 77.75.88.0/21 IP: 185.206.200.0/22 IP: 2a0b:3f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5e:af:46:39:78:5b:2a:e9:77:ca:17:38:f5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7f:5d:d4:af:86:1c:8b:6a:17:f6:7d:dc:3d: 5c:17:dc:06:36:9a:9a:24:b1:72:84:6c:8e:f5:ae: 09:4e:a3:58:2f:66:d5:c3:ce:7e:7e:96:60:6d:bd: 71:42:3b:78:63:00:70:15:5d:0a:0f:41:67:72:bb: 07:4b:72:05:75:6d:e2:52:7a:33:5c:6e:74:db:06: 1b:28:ab:7d:37:36:f7:57:0a:86:44:65:c7:75:aa: 95:6e:60:94:c2:18:6c:5a:2e:d6:1d:41:00:14:a1: b2:8d:8e:7f:1d:80:ae:74:97:83:63:3c:23:10:5e: bf:6d:7a:52:18:4b:50:c3:54:9b:30:7c:fe:8f:7e: 9c:59:1e:6b:ab:e0:01:f9:37:e0:a1:0a:fd:99:b7: bd:8d:72:1c:a8:4a:9e:16:a5:a9:6e:ba:a9:4c:2f: c3:2f:ab:06:71:7e:94:87:25:54:40:2f:45:d1:dd: e1:13:b4:ad:72:35:72:8f:8d:c1:71:d1:3e:eb:0f: 71:79:b2:00:8e:c4:7f:7c:47:ec:9c:cf:f8:0d:0e: dd:63:9e:ce:89:18:e4:f7:88:65:49:c0:e5:49:45: 01:e1:27:f3:6b:04:64:ef:c0:e5:43:63:4e:41:c2: c4:50:b4:9a:bb:0a:37:0f:2a:79:e7:d7:4e:ac:9e: dc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.88.0/21 185.206.200.0/22 IPv6: 2a0b:3f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 43019 Signature Algorithm: sha256WithRSAEncryption 3b:91:07:4f:13:2a:07:42:b4:a2:4c:a5:f9:d3:6b:a9:3f:98: 85:70:6c:be:32:c7:3d:08:b8:2c:15:95:88:f5:28:0f:8b:0b: cc:7e:83:1a:82:5c:c6:e8:35:81:91:8f:44:23:10:2a:77:da: 15:c5:e4:12:97:74:97:94:af:3a:d9:f2:f2:09:9b:fa:8c:d8: 26:aa:6e:39:5b:a3:57:1d:5e:04:78:c8:16:12:1c:86:1e:63: 59:c7:7c:69:72:15:c6:3d:38:84:bb:18:26:d1:35:84:8e:c7: 38:ea:54:91:34:55:01:8a:7a:7a:60:68:e7:f6:be:f1:f0:06: 9c:34:6b:01:1a:0a:da:e8:1d:8b:cc:de:21:f5:3b:85:06:b4: 63:ea:f4:3d:b9:42:57:f7:57:96:6b:0d:0d:f2:8e:bd:39:fb: b0:cf:ce:dd:56:ae:ea:85:12:63:46:20:98:8b:77:b8:f8:3e: a0:d4:2d:2c:b0:de:23:ec:f6:c4:5e:47:e5:86:b7:52:12:33: 42:71:c2:70:8f:70:56:e0:92:e8:41:bf:e8:d6:3f:85:e1:cc: 09:b8:a9:aa:d0:c4:6a:87:b4:b6:40:65:b8:c1:ac:26:3d:10: 9e:dc:62:d1:c2:25:33:99:87:cd:85:ad:0a:79:2f:85:f6:f0: af:51:e0:aa -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/hV6vRjl4Wyrpd8oXOPU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2E0NmIxZmNkOTJiNDdmNGY1NWZhZDAzOGM5NTgxMzQwYTlkMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA139d1K+GHItqF/Z93D1cF9wGNpqa JLFyhGyO9a4JTqNYL2bVw85+fpZgbb1xQjt4YwBwFV0KD0FncrsHS3IFdW3iUnoz XG502wYbKKt9Nzb3VwqGRGXHdaqVbmCUwhhsWi7WHUEAFKGyjY5/HYCudJeDYzwj EF6/bXpSGEtQw1SbMHz+j36cWR5rq+AB+TfgoQr9mbe9jXIcqEqeFqWpbrqpTC/D L6sGcX6UhyVUQC9F0d3hE7StcjVyj43BcdE+6w9xebIAjsR/fEfsnM/4DQ7dY57O iRjk94hlScDlSUUB4SfzawRk78DlQ2NOQcLEULSauwo3Dyp559dOrJ7cfwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNykax/NkrR/T1X60DjJWBNAqdNwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzkwYWI4 ZS1lNTczLTQxYzQtYTFiYi1jNmQyYjhkMWY1NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOTBhYjhl LWU1NzMtNDFjNC1hMWJiLWM2ZDJiOGQxZjU2Ni8xLzNLUnJIODJTdEg5UFZmclFP TWxZRTBDcDAzQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDTUtYAwQCuc7IMA0EAgACMAcDBQMqCz+AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwCoCzANBgkqhkiG9w0BAQsFAAOCAQEAO5EH TxMqB0K0okyl+dNrqT+YhXBsvjLHPQi4LBWViPUoD4sLzH6DGoJcxug1gZGPRCMQ KnfaFcXkEpd0l5SvOtny8gmb+ozYJqpuOVujVx1eBHjIFhIchh5jWcd8aXIVxj04 hLsYJtE1hI7HOOpUkTRVAYp6emBo5/a+8fAGnDRrARoK2ugdi8zeIfU7hQa0Y+r0 PblCV/dXlmsNDfKOvTn7sM/O3Vau6oUSY0YgmIt3uPg+oNQtLLDeI+z2xF5H5Ya3 UhIzQnHCcI9wVuCS6EG/6NY/heHMCbipqtDEaoe0tkBluMGsJj0Qntxi0cIlM5mH zYWtCnkvhfbwr1Hgqg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:18 2026 by rpki-client