This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer File: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer (raw, json) Hash identifier: Dsne/GPWXCgHdwT4x81TLhTpnXBjK1EMAcnHPfO1pT8= Subject key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EB7A1CA6B000FFEB23CC321E4CE03A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 41141 AS: 43890 IP: 31.14.21.0/24 IP: 45.14.236.0/22 IP: 45.67.36.0/22 IP: 45.82.28.0/23 IP: 84.247.23.0/24 IP: 86.105.193.0/24 IP: 89.34.100.0/23 IP: 89.39.0.0/21 IP: 89.40.224.0/23 IP: 89.42.132.0/23 IP: 89.42.135.0/24 IP: 92.114.2.0/23 IP: 93.174.160.0/22 IP: 93.174.166.0/23 IP: 94.177.26.0/24 IP: 176.223.114.0/24 IP: 185.220.184.0/22 IP: 185.248.136.0/22 IP: 188.240.0.0/24 IP: 188.241.72.0/22 IP: 193.16.144.0/24 IP: 193.138.122.0/24 IP: 193.200.62.0/23 IP: 2a03:9c00::/32 IP: 2a05:5680::/29 IP: 2a07:c440::/29 IP: 2a09:7740::/29 IP: 2a0b:4480::/29 IP: 2a0b:fb40::/29 IP: 2a0e:1680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7a:1c:a6:b0:00:ff:eb:23:cc:32:1e:4c:e0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:77:d5:2d:af:90:91:41:ba:17:2e:e9:02:70: 12:1b:c7:39:12:ff:cf:9a:91:25:d9:5f:55:c0:18: 91:00:65:5a:e0:49:01:a5:15:e8:47:ec:f1:41:6c: 33:3f:3b:d0:fa:9e:6b:24:55:3f:77:30:58:fb:64: a3:2c:a8:08:ad:ed:7f:32:5c:bb:11:ec:82:c7:e4: 5f:84:74:6e:b9:2b:24:7a:d7:ad:41:f7:f2:00:4d: cc:96:29:94:52:5f:1b:7c:2f:25:e6:5a:7c:59:5d: ee:e2:fa:ab:1d:dd:3f:fb:92:da:a0:73:88:85:9c: 5f:ec:30:5b:94:3c:7b:5c:43:4d:09:86:d1:3b:67: 50:17:ba:59:70:1f:df:7b:bf:0c:31:9c:25:aa:0b: 73:e6:c4:80:f8:c0:d4:cd:bd:eb:41:57:3b:18:18: 14:ed:9f:ca:31:01:a2:72:0a:2d:67:a7:b0:24:ad: c7:a0:8b:9d:e5:99:e9:81:37:14:72:3a:9e:39:79: 9c:6f:6b:f6:57:4e:da:ce:03:91:09:f0:57:7a:03: 49:0b:d9:f5:94:24:d2:81:60:18:4b:32:00:c2:89: 4b:af:61:b5:a7:1f:32:16:44:f6:6c:2e:21:54:5c: f7:b8:29:e8:05:45:f3:b6:9d:39:c3:83:7f:d0:b1: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.21.0/24 45.14.236.0/22 45.67.36.0/22 45.82.28.0/23 84.247.23.0/24 86.105.193.0/24 89.34.100.0/23 89.39.0.0/21 89.40.224.0/23 89.42.132.0/23 89.42.135.0/24 92.114.2.0/23 93.174.160.0/22 93.174.166.0/23 94.177.26.0/24 176.223.114.0/24 185.220.184.0/22 185.248.136.0/22 188.240.0.0/24 188.241.72.0/22 193.16.144.0/24 193.138.122.0/24 193.200.62.0/23 IPv6: 2a03:9c00::/32 2a05:5680::/29 2a07:c440::/29 2a09:7740::/29 2a0b:4480::/29 2a0b:fb40::/29 2a0e:1680::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41141 43890 Signature Algorithm: sha256WithRSAEncryption 4d:da:e9:4a:77:dd:02:1a:1d:65:c8:a6:dc:5b:c1:a3:c1:de: 5f:a3:b9:7a:bd:e9:dc:e6:f6:52:e3:32:78:4d:55:2c:63:45: 73:75:35:78:a1:d6:ac:f8:aa:ef:a0:e6:26:1d:a1:95:56:2d: 1d:14:f6:c7:2b:44:cd:0b:11:6d:24:1d:9e:1f:7b:e9:a6:e4: 19:9c:4b:02:e4:e7:d5:cb:fc:d9:40:3f:9e:04:1a:ed:32:3d: dc:28:64:95:07:da:2f:46:74:ac:39:23:dd:62:ad:11:f0:45: ec:da:20:70:86:39:93:65:02:e8:af:c1:0d:9b:18:fa:b2:da: 6e:26:b9:61:00:b5:ad:bf:e5:4b:7e:17:93:47:32:27:0c:0e: c5:2a:f0:24:9e:fc:8e:b1:94:39:ed:3d:1a:4b:e6:0d:53:e4: 46:c6:18:c6:b8:0c:1b:e6:6b:ab:02:6a:b0:a4:10:39:c9:ff: b9:c2:96:2b:cc:d9:c5:18:0e:b5:a5:56:df:e3:aa:90:36:ab: aa:b5:af:6b:b0:da:e5:35:67:9e:38:cc:13:74:4c:30:ac:db: 66:a3:92:cd:e2:8b:25:d5:0f:57:42:ed:6c:ff:95:8e:b5:a0: e8:88:70:c0:d9:95:4b:5f:68:00:f2:9e:db:e7:04:c8:0c:4c: ce:d2:43:2c -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISAZt263ocprAA/+sjzDIeTOA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2VmNThkNGNmYTM1NTQzZjg0ODhhMjc1NmU2OTI0ZTY0N2I0NTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HfVLa+QkUG6Fy7pAnASG8c5Ev/P mpEl2V9VwBiRAGVa4EkBpRXoR+zxQWwzPzvQ+p5rJFU/dzBY+2SjLKgIre1/Mly7 EeyCx+RfhHRuuSsketetQffyAE3MlimUUl8bfC8l5lp8WV3u4vqrHd0/+5LaoHOI hZxf7DBblDx7XENNCYbRO2dQF7pZcB/fe78MMZwlqgtz5sSA+MDUzb3rQVc7GBgU 7Z/KMQGicgotZ6ewJK3HoIud5ZnpgTcUcjqeOXmcb2v2V07azgORCfBXegNJC9n1 lCTSgWAYSzIAwolLr2G1px8yFkT2bC4hVFz3uCnoBUXztp05w4N/0LHhwwIDAQAB o4IDZzCCA2MwHQYDVR0OBBYEFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2VhNDQ1 NS03ODM2LTQ0YzQtYjJhMy0yZWNlMDRlMTg1YzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvZWE0NDU1 LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8xLzNPOVkxTS1qVlVQNFNJb25W dWFTVG1SN1JZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHgBggrBgEF BQcBBwEB/wSB0DCBzTCBkQQCAAEwgYoDBAAfDhUDBAItDuwDBAItQyQDBAEtUhwD BABU9xcDBABWacEDBAFZImQDBANZJwADBAFZKOADBAFZKoQDBABZKocDBAFccgID BAJdrqADBAFdrqYDBABesRoDBACw33IDBAK53LgDBAK5+IgDBAC88AADBAK88UgD BADBEJADBADBinoDBAHByD4wNwQCAAIwMQMFACoDnAADBQMqBVaAAwUDKgfEQAMF AyoJd0ADBQMqC0SAAwUDKgv7QAMFAyoOFoAwHwYIKwYBBQUHAQgBAf8EEDAOoAww CgIDAKC1AgMAq3IwDQYJKoZIhvcNAQELBQADggEBAE3a6Up33QIaHWXIptxbwaPB 3l+juXq96dzm9lLjMnhNVSxjRXN1NXih1qz4qu+g5iYdoZVWLR0U9scrRM0LEW0k HZ4fe+mm5BmcSwLk59XL/NlAP54EGu0yPdwoZJUH2i9GdKw5I91irRHwRezaIHCG OZNlAuivwQ2bGPqy2m4muWEAta2/5Ut+F5NHMicMDsUq8CSe/I6xlDntPRpL5g1T 5EbGGMa4DBvma6sCarCkEDnJ/7nClivM2cUYDrWlVt/jqpA2q6q1r2uw2uU1Z544 zBN0TDCs22ajks3iiyXVD1dC7Wz/lY61oOiIcMDZlUtfaADyntvnBMgMTM7SQyw= -----END CERTIFICATE-----Generated at Wed Jan 21 09:24:53 2026 by rpki-client