This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer File: 3RWKDaAyZt8UTImntuNadhxJmPc.cer (raw, json) Hash identifier: qapyOrtuY6cB7vnVoRI9gYZtKC50D9m78vAbeSxWYVQ= Subject key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AB47085179B3E73049B99190E3C87 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 46.36.200.0/24 IP: 2a0c:6240::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b4:70:85:17:9b:3e:73:04:9b:99:19:0e:3c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd158a0da03266df144c89a7b6e35a761c4998f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ab:94:31:db:5c:8c:92:2b:53:a3:73:df:60: d9:62:7b:87:20:39:d3:d9:3a:8d:00:e9:1e:0b:5c: 09:af:cb:d8:0b:d7:5a:b6:b9:3a:58:22:e2:65:c7: b9:28:e2:29:da:8d:f7:82:e2:fb:e5:a6:25:30:63: b5:dc:9d:af:a0:e9:0d:5b:19:0d:79:9e:0e:25:e1: ea:9b:aa:ff:4c:81:f7:39:18:a1:10:01:8a:50:cd: b1:d8:3e:74:5d:71:95:a3:58:f3:c3:55:1a:5e:fe: c9:7d:25:95:d3:06:7e:74:80:ca:43:df:37:cb:ef: 14:ea:b4:c9:2a:c0:b2:2e:79:74:25:85:f3:a5:d7: 68:a1:ad:19:95:bf:02:a1:76:ee:09:0f:8f:e0:e0: 66:22:a0:9a:a2:02:c9:ea:c5:db:37:fd:87:59:7b: 9b:e3:7e:96:10:2c:57:ec:70:49:5f:1d:55:6c:35: 40:ae:b7:ad:c6:69:80:ed:f8:07:2b:01:d7:60:b8: 1c:5a:15:9a:a5:5f:e4:0a:dd:db:ab:5d:14:20:98: c2:b6:01:8b:1d:31:2a:02:c0:83:05:c4:19:09:6e: 9e:73:49:92:03:7e:6e:28:e3:8a:6f:5d:45:17:bb: b7:ec:cd:39:72:94:ef:97:05:6e:5e:c5:37:fe:43: f5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.200.0/24 IPv6: 2a0c:6240::/29 Signature Algorithm: sha256WithRSAEncryption 52:3d:4a:d1:ce:1f:af:fd:3d:85:02:2f:4f:bb:be:71:6f:33: 75:16:ab:b1:a1:b2:e9:4f:8b:f6:52:85:3a:b6:c1:cf:fc:d4: 0c:7d:07:57:f1:b2:17:5e:70:ed:b5:bf:4f:89:75:88:de:2d: 74:7a:91:14:02:05:94:72:70:12:92:45:75:e8:34:e4:c2:0e: cd:6f:f8:43:95:7e:b7:44:27:f1:e8:87:02:3d:33:1d:5b:a0: 43:6f:cd:73:7e:76:38:69:c8:16:f8:c2:d5:e8:b9:f8:31:6f: a4:94:cb:97:4a:af:18:44:df:2f:79:79:27:76:9e:70:eb:9e: 32:80:bc:9c:87:be:9d:af:74:1b:39:4e:bb:ec:54:36:b1:3f: 95:4e:37:09:33:7c:84:e5:5c:48:cd:22:ec:e5:cb:8c:48:2e: e7:25:6d:09:19:da:ae:7c:b5:e8:62:ad:32:bd:1f:07:c1:75: 74:d2:e4:51:68:93:99:8b:f4:a8:b6:98:a3:b1:8d:b0:cd:52: 5e:72:14:69:79:25:67:4d:0a:4a:43:8d:32:8f:7b:11:b5:03: fd:44:bc:99:d3:56:3a:e4:43:6b:4e:72:06:a1:2d:4c:7d:b4: da:38:fc:ba:10:75:4b:9d:a4:64:72:30:26:6c:80:63:06:10: c3:b6:e5:4e -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt9WrRwhRebPnMEm5kZDjyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDE1OGEwZGEwMzI2NmRmMTQ0Yzg5YTdiNmUzNWE3NjFjNDk5OGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8auUMdtcjJIrU6Nz32DZYnuHIDnT 2TqNAOkeC1wJr8vYC9datrk6WCLiZce5KOIp2o33guL75aYlMGO13J2voOkNWxkN eZ4OJeHqm6r/TIH3ORihEAGKUM2x2D50XXGVo1jzw1UaXv7JfSWV0wZ+dIDKQ983 y+8U6rTJKsCyLnl0JYXzpddooa0Zlb8CoXbuCQ+P4OBmIqCaogLJ6sXbN/2HWXub 436WECxX7HBJXx1VbDVArretxmmA7fgHKwHXYLgcWhWapV/kCt3bq10UIJjCtgGL HTEqAsCDBcQZCW6ec0mSA35uKOOKb11FF7u37M05cpTvlwVuXsU3/kP1lQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFN0Vig2gMmbfFEyJp7bjWnYcSZj3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q1LzBiNTVh Yi1hY2M4LTQxZGEtOWM4MC1lOGYyMGFhZGRlOTkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvMGI1NWFi LWFjYzgtNDFkYS05YzgwLWU4ZjIwYWFkZGU5OS8xLzNSV0tEYUF5WnQ4VVRJbW50 dU5hZGh4Sm1QYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALiTIMA0EAgACMAcDBQMqDGJAMA0GCSqGSIb3 DQEBCwUAA4IBAQBSPUrRzh+v/T2FAi9Pu75xbzN1FquxobLpT4v2UoU6tsHP/NQM fQdX8bIXXnDttb9PiXWI3i10epEUAgWUcnASkkV16DTkwg7Nb/hDlX63RCfx6IcC PTMdW6BDb81zfnY4acgW+MLV6Ln4MW+klMuXSq8YRN8veXkndp5w654ygLych76d r3QbOU677FQ2sT+VTjcJM3yE5VxIzSLs5cuMSC7nJW0JGdqufLXoYq0yvR8HwXV0 0uRRaJOZi/SotpijsY2wzVJechRpeSVnTQpKQ40yj3sRtQP9RLyZ01Y65ENrTnIG oS1MfbTaOPy6EHVLnaRkcjAmbIBjBhDDtuVO -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:34 2026 by rpki-client