This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.cer (raw, json) Hash identifier: jah4mntYw3HDSqo2HZgEOmlQnFSf6iJ8kldc8krURNE= Subject key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834F5A2E2B4494B0DAEF17182685283 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204726 IP: 91.219.22.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:a2:e2:b4:49:4b:0d:ae:f1:71:82:68:52:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:36:8e:6f:c0:80:45:0a:1f:ba:92:4a:af: 45:df:6b:f1:19:c3:8c:ec:15:47:db:e4:19:60:29: cb:e3:7b:62:19:ef:97:83:dd:33:76:39:a2:f5:8c: 81:df:1b:37:16:34:a9:37:d6:aa:3e:da:d0:4b:63: 48:ff:03:02:07:ff:ae:0e:1b:aa:d3:fe:1f:87:3d: 4f:4d:68:80:69:83:b9:29:9c:b0:5b:be:5f:68:eb: 8d:d7:e1:a1:3e:ca:2d:20:18:26:ca:c1:26:9a:ab: 1b:6d:dd:e2:42:12:39:49:44:5d:fc:2b:e8:4e:58: e8:61:ee:8a:0f:3b:64:a4:f0:54:2f:38:a9:04:09: 58:80:7e:8d:38:42:ad:00:db:39:3a:b1:5e:38:1a: b9:16:dc:09:40:c9:40:4e:b0:75:5f:94:22:f9:75: c5:05:95:3e:5b:a3:3c:73:ce:bb:db:be:60:7f:04: 13:00:a1:1b:a0:ee:43:4b:55:2d:0e:df:6a:e0:82: 26:e2:3e:53:9c:12:47:00:54:6c:52:f3:02:8e:51: b3:6f:a9:18:e1:82:2c:b4:83:a0:94:2f:33:d4:ff: 49:0b:1b:8e:c6:f0:e7:0d:9e:59:92:da:f0:48:cc: 64:e5:e2:7d:a9:33:91:3d:da:ef:04:7a:8f:1e:c0: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.22.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204726 Signature Algorithm: sha256WithRSAEncryption 44:c2:f0:8b:27:b8:74:48:09:ba:a5:40:cc:c1:85:5a:33:17: da:0d:69:1e:d3:c1:f9:7b:95:7f:52:e4:19:73:c0:18:5d:c2: 65:cc:b3:8a:0a:9f:7e:9d:9e:fe:d0:f1:26:82:1e:d9:1f:5a: 43:03:a4:3c:d9:bc:0a:8a:b8:5d:12:df:ff:b7:c7:9d:52:95: 61:bf:f1:c1:55:bd:7d:15:d1:bb:39:3c:b1:cc:c0:c7:00:68: 4c:03:9b:0e:e2:f2:92:ad:32:d1:83:a6:d8:ba:33:bb:8e:ae: 06:f7:07:f2:ed:1a:10:44:64:5f:0c:b0:10:37:4a:a4:29:e7: 8d:37:57:da:fc:62:44:66:73:59:6d:39:c6:a3:5a:0e:2c:f5: 67:ae:d3:cb:c4:ca:63:d1:16:47:0c:fe:e5:ae:af:f7:91:87: b5:a6:1a:63:f2:c9:b4:52:22:48:c9:84:d9:e5:54:8d:7b:d6: 91:a9:9f:14:2f:3c:ec:37:48:99:28:a7:32:6d:48:1f:7f:f4: 6c:7d:75:c9:40:3e:27:57:38:33:c2:63:48:e3:7c:69:6e:e5: 4b:9e:c4:d5:73:d7:98:97:45:8e:3f:39:dd:18:14:df:e3:68: e7:34:eb:cb:6f:cf:78:f6:18:25:68:36:9c:23:db:17:7c:81: a9:e0:d8:88 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt4NPWi4rRJSw2u8XGCaFKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDVlZTY1YmEzNjhhZDc0ZDlhMDNmZjI4MjQ0MGM4NTc3YTIxNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts82jm/AgEUKH7qSSq9F32vxGcOM 7BVH2+QZYCnL43tiGe+Xg90zdjmi9YyB3xs3FjSpN9aqPtrQS2NI/wMCB/+uDhuq 0/4fhz1PTWiAaYO5KZywW75faOuN1+GhPsotIBgmysEmmqsbbd3iQhI5SURd/Cvo TljoYe6KDztkpPBULzipBAlYgH6NOEKtANs5OrFeOBq5FtwJQMlATrB1X5Qi+XXF BZU+W6M8c867275gfwQTAKEboO5DS1UtDt9q4IIm4j5TnBJHAFRsUvMCjlGzb6kY 4YIstIOglC8z1P9JCxuOxvDnDZ5ZktrwSMxk5eJ9qTORPdrvBHqPHsBbyQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN1e5lujaK102aA/8oJEDIV3ohWWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmL2RjNjhk ZC0xZGM4LTQ4ODgtYTNlZC1lYmQ3M2IxOWVhZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvZGM2OGRk LTFkYzgtNDg4OC1hM2VkLWViZDczYjE5ZWFlNC8xLzNWN21XNk5vclhUWm9EX3ln a1FNaFhlaUZaWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9sWMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMftjANBgkqhkiG9w0BAQsFAAOCAQEARMLwiye4dEgJuqVAzMGFWjMX2g1pHtPB +XuVf1LkGXPAGF3CZcyzigqffp2e/tDxJoIe2R9aQwOkPNm8Coq4XRLf/7fHnVKV Yb/xwVW9fRXRuzk8sczAxwBoTAObDuLykq0y0YOm2Lozu46uBvcH8u0aEERkXwyw EDdKpCnnjTdX2vxiRGZzWW05xqNaDiz1Z67Ty8TKY9EWRwz+5a6v95GHtaYaY/LJ tFIiSMmE2eVUjXvWkamfFC887DdImSinMm1IH3/0bH11yUA+J1c4M8JjSON8aW7l S57E1XPXmJdFjj853RgU3+No5zTry2/PePYYJWg2nCPbF3yBqeDYiA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:18 2026 by rpki-client