This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer File: 3KonREWCbj15XD7RjCdwDurBymI.cer (raw, json) Hash identifier: bFRMdiwzA8drWD5uT19d2/+QKp2CcgOxRBUTjmYHnzo= Subject key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7A8DD98F2F4C817599DEFC544CEF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207040 IP: 185.163.132.0/22 IP: 2a0b:e800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7a:8d:d9:8f:2f:4c:81:75:99:de:fc:54:4c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e0:c2:21:92:e4:d2:b0:d0:b2:64:ac:de:3e: 26:de:33:10:48:d1:de:08:65:94:ad:1d:3c:51:e9: 42:53:21:16:13:ba:de:a3:4d:c5:11:0e:e8:b7:4c: 9f:51:09:a7:01:c3:82:7d:73:e5:7f:b1:04:08:f3: 87:f9:c6:c2:f4:ef:a1:24:83:d7:ed:fe:7a:5e:b3: 12:76:2d:7f:4b:d1:d1:9d:d9:0e:9d:45:d8:08:ca: b5:0d:3b:3a:92:fd:c6:32:6d:65:2d:24:e8:03:49: dd:bc:31:a0:9c:bc:bc:a6:0c:46:e1:89:79:72:c1: 48:2d:34:36:f8:12:f0:3a:72:ad:e6:86:a8:04:03: 17:fb:b1:62:f0:f7:dc:8d:3d:e9:eb:b2:f8:58:14: 64:7e:46:33:ee:2d:e6:ba:34:7f:79:44:eb:f1:2d: 49:80:fa:65:37:8a:b1:f6:0e:6f:3b:8c:16:ce:c1: d4:90:8e:2d:a4:71:a3:36:84:85:bb:ba:f9:aa:cf: 5f:38:f6:1a:bf:3a:75:26:89:64:28:f5:5b:7d:db: 6c:8d:c8:ad:0d:68:61:d2:86:0f:c2:dc:8e:a5:ce: 2c:12:06:47:6b:d4:55:d3:86:d1:04:51:df:a7:88: 8e:59:89:e9:3f:20:9d:88:a4:be:b3:32:c5:bc:e3: f7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.163.132.0/22 IPv6: 2a0b:e800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207040 Signature Algorithm: sha256WithRSAEncryption 78:90:2c:fc:14:82:33:54:e7:49:34:38:b8:c7:33:b1:67:e6: 29:8b:a2:5c:3c:7c:b6:1c:30:a0:17:28:f6:e3:56:6e:9b:1e: 67:5e:b7:4e:48:db:dc:ae:ed:ae:ca:29:b0:82:62:8f:b0:12: b1:aa:78:0d:61:38:b9:04:38:9e:a9:f6:3a:69:65:c3:09:ec: 01:77:de:64:64:31:8e:08:30:ac:15:91:e4:62:3a:3d:09:3a: dc:0e:7a:fd:41:32:25:70:f2:43:0f:f8:1b:ff:bb:5e:f8:59: da:62:78:10:b9:51:47:0d:5c:89:41:e9:40:c2:d1:f7:2d:44: f4:c4:60:42:50:ea:c0:31:0d:77:f2:03:84:92:b6:d0:13:2d: ad:b1:1d:aa:d5:20:0d:a9:2f:b4:46:27:94:db:e2:03:ea:12: 04:a4:7e:42:21:3d:09:8d:28:3c:2a:fe:2e:af:37:6d:e3:4a: a9:71:dd:13:ab:58:7e:a7:29:4e:62:39:ac:bb:7e:7e:b5:4d: 35:5d:7f:67:bf:ed:e6:2c:7c:2e:78:8b:f2:ab:e2:21:83:c1: 21:14:39:9f:08:48:4c:0f:61:52:5f:0b:b9:0f:9b:46:6b:be: 43:31:02:bb:08:db:fb:63:31:0a:b9:0b:9d:af:75:8e:1f:e6: 66:8f:04:fe -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt263qN2Y8vTIF1md78VEzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2FhMjc0NDQ1ODI2ZTNkNzk1YzNlZDE4YzI3NzAwZWVhYzFjYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ODCIZLk0rDQsmSs3j4m3jMQSNHe CGWUrR08UelCUyEWE7reo03FEQ7ot0yfUQmnAcOCfXPlf7EECPOH+cbC9O+hJIPX 7f56XrMSdi1/S9HRndkOnUXYCMq1DTs6kv3GMm1lLSToA0ndvDGgnLy8pgxG4Yl5 csFILTQ2+BLwOnKt5oaoBAMX+7Fi8PfcjT3p67L4WBRkfkYz7i3mujR/eUTr8S1J gPplN4qx9g5vO4wWzsHUkI4tpHGjNoSFu7r5qs9fOPYavzp1JolkKPVbfdtsjcit DWhh0oYPwtyOpc4sEgZHa9RV04bRBFHfp4iOWYnpPyCdiKS+szLFvOP3fwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNyqJ0RFgm49eVw+0YwncA7qwcpiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzE4ODIx OC05ZWU3LTQwY2MtOGQxMi05YTgyNDNlODRlNTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMTg4MjE4 LTllZTctNDBjYy04ZDEyLTlhODI0M2U4NGU1NC8xLzNLb25SRVdDYmoxNVhEN1Jq Q2R3RHVyQnltSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuaOEMA0EAgACMAcDBQMqC+gAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMowDANBgkqhkiG9w0BAQsFAAOCAQEAeJAs/BSCM1Tn STQ4uMczsWfmKYuiXDx8thwwoBco9uNWbpseZ163Tkjb3K7trsopsIJij7ASsap4 DWE4uQQ4nqn2OmllwwnsAXfeZGQxjggwrBWR5GI6PQk63A56/UEyJXDyQw/4G/+7 XvhZ2mJ4ELlRRw1ciUHpQMLR9y1E9MRgQlDqwDENd/IDhJK20BMtrbEdqtUgDakv tEYnlNviA+oSBKR+QiE9CY0oPCr+Lq83beNKqXHdE6tYfqcpTmI5rLt+frVNNV1/ Z7/t5ix8LniL8qviIYPBIRQ5nwhITA9hUl8LuQ+bRmu+QzECuwjb+2MxCrkLna91 jh/mZo8E/g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:14 2026 by rpki-client