This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3LvdnN1oHwNDXWI8gxkw8ifwub8.cer File: 3LvdnN1oHwNDXWI8gxkw8ifwub8.cer (raw, json) Hash identifier: k9mxyKN1lhUctnW3vSmAKf+6Z36AkohEEp1DpSQKCeY= Subject key identifier: DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EEC54209F2CFEC95C37DD27B5240783 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 13:36:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207610 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:ec:54:20:9f:2c:fe:c9:5c:37:dd:27:b5:24:07:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 13:36:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcbbdd9cdd681f03435d623c831930f227f0b9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:40:e6:ec:63:b0:79:cb:33:a9:e6:05:a0: 93:66:11:b9:62:ba:cf:e8:1f:d8:dd:df:10:3c:82: a2:11:53:1c:7e:e4:fa:47:99:56:73:d1:cc:5b:bd: 49:1b:b3:0b:43:98:f1:76:5f:f7:2f:e8:db:29:27: f8:dd:a6:71:8f:49:14:c2:11:17:2f:cb:8e:48:47: 18:a1:43:50:0f:11:be:78:f2:4b:b0:a8:4f:21:a3: 21:27:d0:de:7c:c0:50:cb:e7:e8:52:7d:f8:b4:bd: ab:4e:6d:c6:93:5f:09:8f:ed:f9:c2:58:28:ee:00: 22:f9:19:07:1c:79:1c:6d:7c:06:07:63:80:b1:f8: 81:18:6c:c3:ba:36:f7:14:c1:b8:e6:88:79:6c:3a: cc:f4:e8:1a:6e:a4:87:6d:a1:42:2f:04:3b:00:2f: 10:ee:30:ca:f9:16:c2:52:70:4c:c3:83:6e:48:2e: fc:4e:fc:63:78:1b:c7:43:cf:33:4d:fd:4d:4a:42: 03:40:3e:9b:83:75:5c:a6:af:03:43:a0:54:53:67: 00:cb:b3:46:e3:e0:bb:09:ff:e9:17:4c:f0:af:3b: 61:15:34:2b:cf:98:a0:d3:99:b2:fc:fc:3b:44:04: 41:20:ac:e6:0d:63:35:ed:77:45:c6:62:d7:04:54: 86:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BB:DD:9C:DD:68:1F:03:43:5D:62:3C:83:19:30:F2:27:F0:B9:BF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8aaa54-4315-48d4-9f7a-89846582cbad/1/3LvdnN1oHwNDXWI8gxkw8ifwub8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207610 Signature Algorithm: sha256WithRSAEncryption 02:89:53:d6:c0:ae:49:cf:16:4e:15:d3:8a:7a:01:af:6f:cd: 46:de:2f:f1:30:0f:92:40:5a:ed:74:79:43:8f:b9:f6:7d:1c: 76:a4:25:59:96:8d:f7:af:3b:2a:48:26:c6:95:b1:7f:24:18: 80:6e:cd:d8:34:4f:a4:79:d9:db:ce:f4:60:2e:b0:e0:5a:1d: 5c:cc:be:a9:8c:7e:f4:3f:1d:53:a6:41:5b:b9:9f:d7:fb:b8: 09:a2:de:5d:71:28:c7:89:ba:0c:12:0b:be:01:7a:7f:ea:be: e5:2f:3e:f7:46:15:de:47:5c:1f:f9:36:1a:13:87:d3:37:a6: 58:95:56:7c:28:62:6e:b6:ef:63:10:a8:a1:c9:ac:8e:04:c9: f4:03:33:f4:95:3b:12:c7:8e:7c:3f:fb:c3:4b:81:ce:f3:0f: 08:63:65:c7:a3:e4:25:83:f5:b5:4d:73:bf:cc:06:85:d7:9d: 45:d7:6b:e4:72:aa:59:b4:2d:34:8e:d1:f9:db:2d:6a:16:56: c9:16:13:57:b9:87:cc:17:ac:5f:49:6d:36:9d:02:bc:de:43: e9:99:3b:9c:12:26:63:df:c6:c9:7e:4b:73:2e:44:e5:94:40: b5:ff:05:d4:6f:02:4e:32:b6:17:e5:19:ff:35:63:b8:64:5a: c8:dc:76:93 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt+7FQgnyz+yVw33Se1JAeDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTMzNjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2JiZGQ5Y2RkNjgxZjAzNDM1ZDYyM2M4MzE5MzBmMjI3ZjBiOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXxA5uxjsHnLM6nmBaCTZhG5YrrP 6B/Y3d8QPIKiEVMcfuT6R5lWc9HMW71JG7MLQ5jxdl/3L+jbKSf43aZxj0kUwhEX L8uOSEcYoUNQDxG+ePJLsKhPIaMhJ9DefMBQy+foUn34tL2rTm3Gk18Jj+35wlgo 7gAi+RkHHHkcbXwGB2OAsfiBGGzDujb3FMG45oh5bDrM9OgabqSHbaFCLwQ7AC8Q 7jDK+RbCUnBMw4NuSC78TvxjeBvHQ88zTf1NSkIDQD6bg3Vcpq8DQ6BUU2cAy7NG 4+C7Cf/pF0zwrzthFTQrz5ig05my/Pw7RARBIKzmDWM17XdFxmLXBFSGzwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFNy73ZzdaB8DQ11iPIMZMPIn8Lm/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzhhYWE1 NC00MzE1LTQ4ZDQtOWY3YS04OTg0NjU4MmNiYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvOGFhYTU0 LTQzMTUtNDhkNC05ZjdhLTg5ODQ2NTgyY2JhZC8xLzNMdmRuTjFvSHdORFhXSThn eGt3OGlmd3ViOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMq+jANBgkqhkiG9w0BAQsFAAOCAQEAAolT1sCuSc8W ThXTinoBr2/NRt4v8TAPkkBa7XR5Q4+59n0cdqQlWZaN9687KkgmxpWxfyQYgG7N 2DRPpHnZ2870YC6w4FodXMy+qYx+9D8dU6ZBW7mf1/u4CaLeXXEox4m6DBILvgF6 f+q+5S8+90YV3kdcH/k2GhOH0zemWJVWfChibrbvYxCoocmsjgTJ9AMz9JU7EseO fD/7w0uBzvMPCGNlx6PkJYP1tU1zv8wGhdedRddr5HKqWbQtNI7R+dstahZWyRYT V7mHzBesX0ltNp0CvN5D6Zk7nBImY9/GyX5Lcy5E5ZRAtf8F1G8CTjK2F+UZ/zVj uGRayNx2kw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:31 2026 by rpki-client