This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer File: 3R2uzTCut0ZSu92l2tlnbOSIqkk.cer (raw, json) Hash identifier: 2RKj7U8TdVUwpm79MeZUt2oLvTb6pYbj+icVshqwTY0= Subject key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B3E7A9893B35C8D5D2EA50338AD7C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21343 AS: 25393 AS: 28907 IP: 5.149.120.0/21 IP: 46.30.160.0/21 IP: 77.87.192.0/21 IP: 78.27.192.0/18 IP: 82.193.96.0/19 IP: 89.184.64.0/19 IP: 91.223.19.0/24 IP: 91.224.24.0/23 IP: 93.188.32.0/21 IP: 176.115.96.0/21 IP: 185.158.208.0/22 IP: 185.223.112.0/22 IP: 193.0.216.0/22 IP: 193.106.136.0/22 IP: 193.178.144.0/22 IP: 194.110.204.0/24 IP: 195.39.196.0/23 IP: 195.64.148.0/23 IP: 195.177.116.0/22 IP: 195.234.112.0/22 IP: 2a02:2278::/31 IP: 2a02:2610::/32 IP: 2a07:af40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3e:7a:98:93:b3:5c:8d:5d:2e:a5:03:38:ad:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:47:e1:3a:a2:1f:8e:5b:8a:1d:b6:0d:5f:db: 92:a9:2e:bf:a4:02:9b:e8:ce:2f:d6:db:73:ce:a3: e8:eb:3e:77:6a:2e:db:aa:1c:7c:f9:cf:8a:91:62: bf:8c:a0:c0:87:2a:45:38:cb:88:8c:6f:b9:7a:f2: 5a:aa:ff:d2:30:f1:6b:4b:fb:f3:e3:75:3d:c7:a2: 49:69:92:a8:6d:e7:f1:50:e4:48:f0:12:e5:1d:19: ef:eb:41:10:9e:69:d3:10:67:07:c2:f0:fc:a5:34: 91:7a:9b:6b:6c:9d:02:5d:92:3e:17:08:89:22:16: d1:ab:a2:45:a6:45:f3:02:d6:a7:ac:38:e2:af:4e: 71:cb:55:83:9d:ce:11:a0:13:1d:cb:da:b5:29:61: 98:1f:a1:13:db:4c:bc:22:d0:30:ad:75:07:9c:8b: 2c:d2:40:18:2f:3e:e9:a9:23:bd:51:a3:68:ec:e8: c5:8d:62:8d:21:fb:b4:18:14:b1:17:2d:c4:0a:a3: 97:ad:fa:83:aa:c2:6b:22:33:5f:49:86:74:f2:24: ea:27:e7:22:85:15:fd:2e:cf:61:34:d6:e4:3b:5f: fa:9b:3c:6d:02:27:58:50:50:8f:34:ea:c6:40:38: f6:a9:8f:01:70:37:94:35:00:64:9e:8e:c1:78:cc: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.120.0/21 46.30.160.0/21 77.87.192.0/21 78.27.192.0/18 82.193.96.0/19 89.184.64.0/19 91.223.19.0/24 91.224.24.0/23 93.188.32.0/21 176.115.96.0/21 185.158.208.0/22 185.223.112.0/22 193.0.216.0/22 193.106.136.0/22 193.178.144.0/22 194.110.204.0/24 195.39.196.0/23 195.64.148.0/23 195.177.116.0/22 195.234.112.0/22 IPv6: 2a02:2278::/31 2a02:2610::/32 2a07:af40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21343 25393 28907 Signature Algorithm: sha256WithRSAEncryption 39:3a:3b:fa:84:7c:62:07:a9:6a:0a:b7:72:83:ed:23:e6:82: a7:16:9b:a9:03:44:b5:f4:c6:c4:81:f7:42:e0:19:56:7f:3e: 69:bb:23:bb:b9:28:f7:9f:d9:2e:8a:56:a9:90:b1:54:11:f3: 1c:00:be:9f:19:cd:d5:cb:06:8c:cc:03:fc:bf:e3:a9:0d:10: a5:d2:21:49:eb:e5:21:f5:70:72:4f:c6:d5:c9:a7:55:67:aa: 1d:1c:1b:eb:c3:a4:3d:08:90:e1:a6:98:76:b5:71:fe:cf:19: 78:e8:1b:4d:59:e6:74:ba:96:5a:28:cc:ed:f8:32:11:93:ad: 46:78:2d:f5:6c:eb:f1:e3:0a:ca:cb:e4:99:fe:82:ee:1c:c2: 50:e1:46:a0:44:a7:60:29:9e:9b:19:b6:6c:6f:36:32:ab:57: 01:c3:74:93:8c:b5:3a:e9:b3:80:59:cd:73:3f:e0:0b:02:93: 5e:13:f1:e4:ad:a6:77:02:c9:d7:f0:ba:84:d9:3b:4f:2c:91: c6:fa:af:31:63:c3:08:45:43:19:67:7c:fb:f7:68:d4:a5:cd: 69:a6:eb:6b:7c:88:99:e1:e8:d9:a6:e6:53:50:14:45:f5:88: 27:10:4a:fa:dd:82:69:bf:3a:89:d0:34:69:bc:eb:ee:a6:d4: af:21:33:14 -----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgISAZt6Wz56mJOzXI1dLqUDOK18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDFkYWVjZDMwYWViNzQ2NTJiYmRkYTVkYWQ5Njc2Y2U0ODhhYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EfhOqIfjluKHbYNX9uSqS6/pAKb 6M4v1ttzzqPo6z53ai7bqhx8+c+KkWK/jKDAhypFOMuIjG+5evJaqv/SMPFrS/vz 43U9x6JJaZKobefxUORI8BLlHRnv60EQnmnTEGcHwvD8pTSReptrbJ0CXZI+FwiJ IhbRq6JFpkXzAtanrDjir05xy1WDnc4RoBMdy9q1KWGYH6ET20y8ItAwrXUHnIss 0kAYLz7pqSO9UaNo7OjFjWKNIfu0GBSxFy3ECqOXrfqDqsJrIjNfSYZ08iTqJ+ci hRX9Ls9hNNbkO1/6mzxtAidYUFCPNOrGQDj2qY8BcDeUNQBkno7BeMyYjQIDAQAB o4IDOTCCAzUwHQYDVR0OBBYEFN0drs0wrrdGUrvdpdrZZ2zkiKpJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzRhNzUz OS1iMTQ5LTQ4ZTktODhlNy0wNjBhYzA4OTA5NjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvNGE3NTM5 LWIxNDktNDhlOS04OGU3LTA2MGFjMDg5MDk2Ni8xLzNSMnV6VEN1dDBaU3U5Mmwy dGxuYk9TSXFray5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGwBggrBgEF BQcBBwEB/wSBoDCBnTB+BAIAATB4AwQDBZV4AwQDLh6gAwQDTVfAAwQGThvAAwQF UsFgAwQFWbhAAwQAW98TAwQBW+AYAwQDXbwgAwQDsHNgAwQCuZ7QAwQCud9wAwQC wQDYAwQCwWqIAwQCwbKQAwQAwm7MAwQBwyfEAwQBw0CUAwQCw7F0AwQCw+pwMBsE AgACMBUDBQEqAiJ4AwUAKgImEAMFAyoHr0AwIQYIKwYBBQUHAQgBAf8EEjAQoA4w DAICU18CAmMxAgJw6zANBgkqhkiG9w0BAQsFAAOCAQEAOTo7+oR8Ygepagq3coPt I+aCpxabqQNEtfTGxIH3QuAZVn8+absju7ko95/ZLopWqZCxVBHzHAC+nxnN1csG jMwD/L/jqQ0QpdIhSevlIfVwck/G1cmnVWeqHRwb68OkPQiQ4aaYdrVx/s8ZeOgb TVnmdLqWWijM7fgyEZOtRngt9Wzr8eMKysvkmf6C7hzCUOFGoESnYCmemxm2bG82 MqtXAcN0k4y1OumzgFnNcz/gCwKTXhPx5K2mdwLJ1/C6hNk7TyyRxvqvMWPDCEVD GWd8+/do1KXNaabra3yImeHo2abmU1AURfWIJxBK+t2Cab86idA0abzr7qbUryEz FA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:34 2026 by rpki-client