This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.cer (raw, json) Hash identifier: wpfeiU1YHQHAqJ28D07Nb/M350c5KGJraNOugtYpb20= Subject key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8522D10E5F9A0F27D48DAF38915285 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:23:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210237 IP: 5.181.228.0/22 IP: 2a0e:1800::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:22:d1:0e:5f:9a:0f:27:d4:8d:af:38:91:52:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:23:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcef19adfa6945589bc2d100154e5a58c4498a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b5:67:79:ff:f4:2a:7a:19:b8:84:b8:2e:96: d4:bc:5a:e3:e9:c0:04:24:58:71:09:2e:ba:f8:63: 00:89:33:e3:90:78:00:90:84:44:99:46:7a:86:8c: 65:ff:8b:33:95:ec:d8:44:2a:e7:d8:45:fd:97:dc: dd:1a:fa:9f:e5:97:5b:b9:97:8f:2a:9c:b7:78:06: 26:f6:80:26:f9:8e:c3:e4:1e:8f:14:10:fc:78:16: 29:a5:d7:b2:bb:d8:a7:ac:ce:b2:0e:a6:16:a0:43: 5d:13:3b:1e:66:ed:91:f0:f1:ce:88:86:1c:22:e2: 60:d0:f6:89:a2:ba:76:f5:18:2d:fb:5f:f0:6f:b7: 2a:b1:25:76:b0:90:49:c8:a1:e6:01:34:9e:81:30: 62:5c:d7:22:8c:35:6d:d8:b0:86:6a:a5:01:2b:7c: 5c:76:ab:c2:97:5b:fa:ef:35:ea:d2:e8:66:18:43: 49:65:31:06:7f:7d:1b:df:87:e0:a3:0e:03:fc:08: 56:cd:b0:11:6e:f7:41:68:09:02:8a:6d:e7:ce:d6: 80:1f:6b:d6:85:88:17:4b:f2:56:27:b1:23:57:eb: b2:2d:fb:1c:70:00:a2:52:a3:19:58:ee:08:c2:89: cf:6e:30:1d:01:69:f3:2e:8f:93:e1:f5:0a:21:6a: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.228.0/22 IPv6: 2a0e:1800::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210237 Signature Algorithm: sha256WithRSAEncryption 1c:c3:57:5b:d1:2d:9f:1c:30:89:51:21:66:85:b2:84:b6:51: 07:6f:a4:de:ae:52:1f:f9:7d:e1:ad:5a:ff:c0:af:7f:c4:b6: 2f:d2:20:26:c0:b7:b2:0d:4f:12:22:04:ce:54:a6:23:8b:10: ec:65:70:c3:86:f2:5c:2e:38:0c:92:68:84:f6:79:18:a7:7c: 2c:1c:cb:8b:74:fb:cf:67:d5:58:0e:f1:6d:e5:6d:f9:59:12: cf:78:d1:0c:f8:73:6f:25:0c:a4:f9:d6:de:9d:4b:48:4b:93: b9:ad:8a:9a:2d:9c:f6:6a:2a:a9:1e:c4:81:e1:11:e6:94:d6: 8b:1f:6b:d8:46:54:b5:83:89:b9:74:b9:ae:63:5a:5a:1d:1a: 4a:c6:b0:cb:13:d3:c0:b5:b0:5c:8f:74:22:c3:e6:01:9a:db: 98:ad:aa:30:7b:7b:06:d2:9a:f5:35:0f:6d:17:e5:d2:b4:54: 15:43:42:fe:5b:d6:bb:59:f1:68:42:c4:ad:e0:31:2f:65:d5: da:06:bb:73:84:a1:a4:c9:63:57:b1:3d:cd:e9:9a:ab:d0:00: 17:74:4d:00:70:39:ee:68:0a:b6:9a:92:ea:9c:53:04:16:10: 86:41:1b:35:27:3b:0d:2d:57:b8:c7:16:6b:2f:8f:66:8a:4d: 63:f2:f8:d5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hSLRDl+aDyfUja84kVKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2VmMTlhZGZhNjk0NTU4OWJjMmQxMDAxNTRlNWE1OGM0NDk4YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37Vnef/0KnoZuIS4LpbUvFrj6cAE JFhxCS66+GMAiTPjkHgAkIREmUZ6hoxl/4szlezYRCrn2EX9l9zdGvqf5ZdbuZeP Kpy3eAYm9oAm+Y7D5B6PFBD8eBYppdeyu9inrM6yDqYWoENdEzseZu2R8PHOiIYc IuJg0PaJorp29Rgt+1/wb7cqsSV2sJBJyKHmATSegTBiXNcijDVt2LCGaqUBK3xc dqvCl1v67zXq0uhmGENJZTEGf30b34fgow4D/AhWzbARbvdBaAkCim3nztaAH2vW hYgXS/JWJ7EjV+uyLfsccACiUqMZWO4IwonPbjAdAWnzLo+T4fUKIWrwzwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNzvGa36aUVYm8LRABVOWljESYoUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UwLzYwMmMz NS1kMzY2LTQ3YzAtYTMzNC0yMWRlYWQwYzVlOWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAvNjAyYzM1 LWQzNjYtNDdjMC1hMzM0LTIxZGVhZDBjNWU5Yy8xLzNPOFpyZnBwUlZpYnd0RUFG VTVhV01SSmloUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCBbXkMA0EAgACMAcDBQMqDhgAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM1PTANBgkqhkiG9w0BAQsFAAOCAQEAHMNXW9Etnxww iVEhZoWyhLZRB2+k3q5SH/l94a1a/8Cvf8S2L9IgJsC3sg1PEiIEzlSmI4sQ7GVw w4byXC44DJJohPZ5GKd8LBzLi3T7z2fVWA7xbeVt+VkSz3jRDPhzbyUMpPnW3p1L SEuTua2Kmi2c9moqqR7EgeER5pTWix9r2EZUtYOJuXS5rmNaWh0aSsawyxPTwLWw XI90IsPmAZrbmK2qMHt7BtKa9TUPbRfl0rRUFUNC/lvWu1nxaELEreAxL2XV2ga7 c4ShpMljV7E9zemaq9AAF3RNAHA57mgKtpqS6pxTBBYQhkEbNSc7DS1XuMcWay+P ZopNY/L41Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:01 2026 by rpki-client