This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer File: 3VShBsGZ81M-VritvPpLGsPmkJ8.cer (raw, json) Hash identifier: PIHKeVQjHKdrK09rQCZkoj6hPgTHF8AUjHxUSa3HYsc= Subject key identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5AE64BBDA7548711BC8C274220D725 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 29282 IP: 77.95.144.0/21 IP: 217.69.48.0/20 IP: 2a00:9b00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e6:4b:bd:a7:54:87:11:bc:8c:27:42:20:d7:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:85:c3:ab:0b:cd:51:29:1c:20:70:4d:bb: c5:4f:af:ae:b9:2e:d4:93:24:12:1b:cf:f6:fd:ab: 44:e1:0b:24:04:68:08:65:0a:67:64:53:7a:ee:44: cf:a2:48:35:ab:1b:40:56:9c:95:7c:94:b9:18:1c: 3c:61:cd:40:01:10:23:14:58:a4:dc:c8:45:71:39: 3e:94:12:f0:f2:b0:c8:a7:44:9c:83:0d:c9:77:9c: 0b:a0:70:f2:93:ae:85:67:ed:d0:cb:12:bc:5d:1e: 2a:f7:a9:e8:39:58:6b:24:15:bc:35:6a:14:42:5a: bd:5a:f4:0a:4d:27:fc:2e:64:2d:7f:5b:49:03:f4: e5:34:6c:cb:2a:fd:56:13:4b:c1:6b:04:ee:0c:b5: 5b:25:37:02:5d:de:3f:0d:89:e7:09:c9:44:84:3c: d5:27:2d:f7:38:d1:6e:99:bf:e3:ff:0e:a9:ee:7d: 0c:69:79:0f:4e:91:eb:7d:0f:07:97:de:85:ea:4f: a9:8d:3b:fb:35:3e:bb:15:c1:51:31:2b:b0:79:66: 84:37:95:5f:63:55:97:3b:13:52:7a:e9:99:5a:a8: a0:55:9d:f6:f8:3e:b5:a0:6e:e3:af:41:e6:fd:24: 0c:89:57:b7:8c:db:1c:96:c0:24:58:42:13:62:ff: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.144.0/21 217.69.48.0/20 IPv6: 2a00:9b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29282 Signature Algorithm: sha256WithRSAEncryption 92:ce:62:06:0d:0c:3f:b5:82:94:1c:ee:d0:fb:94:40:d1:01: 9e:a1:f2:c3:e3:1e:de:dc:10:2f:24:4e:26:9f:e9:47:8a:e8: 18:90:41:34:a2:5f:45:c4:40:f8:42:62:d7:25:b2:d6:f9:fe: 44:9d:5e:8d:22:37:74:f0:f8:43:67:83:cb:6e:9b:9b:0a:0a: 31:f5:f5:e7:8d:21:ad:e5:09:51:35:79:d2:8f:cd:db:2f:51: db:eb:7a:ce:ff:61:79:73:13:b0:1e:ab:52:70:30:ae:b8:1d: 9f:50:b9:d2:8f:98:bf:22:b9:ff:8d:57:cc:72:f6:23:4c:f8: 44:f9:5a:eb:d8:3f:76:c4:a0:db:86:9f:08:c9:e5:2a:65:3a: 7f:2d:85:bb:49:25:18:f9:08:c2:65:c5:b7:a4:61:c3:33:2c: b8:ec:d9:ca:65:75:3c:18:72:ff:7f:2f:24:5c:d6:96:0d:95: 20:b7:11:b2:d8:a3:01:8a:83:f2:6e:68:86:5b:a1:c3:41:c8: b9:9a:9d:59:55:aa:71:c6:97:85:48:1a:c2:67:8d:d2:68:e6: 79:20:cb:ba:4c:d3:62:79:00:42:3f:5f:ad:59:e2:66:36:25: be:48:58:08:ba:39:3b:bc:7d:f8:9b:af:9f:79:1b:d8:95:54: 5a:00:c6:05 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt9WuZLvadUhxG8jCdCINclMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDU0YTEwNmMxOTlmMzUzM2U1NmI4YWRiY2ZhNGIxYWMzZTY5MDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0OFw6sLzVEpHCBwTbvFT6+uuS7U kyQSG8/2/atE4QskBGgIZQpnZFN67kTPokg1qxtAVpyVfJS5GBw8Yc1AARAjFFik 3MhFcTk+lBLw8rDIp0Scgw3Jd5wLoHDyk66FZ+3QyxK8XR4q96noOVhrJBW8NWoU Qlq9WvQKTSf8LmQtf1tJA/TlNGzLKv1WE0vBawTuDLVbJTcCXd4/DYnnCclEhDzV Jy33ONFumb/j/w6p7n0MaXkPTpHrfQ8Hl96F6k+pjTv7NT67FcFRMSuweWaEN5Vf Y1WXOxNSeumZWqigVZ32+D61oG7jr0Hm/SQMiVe3jNsclsAkWEITYv9CQwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFN1UoQbBmfNTPla4rbz6SxrD5pCfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0L2M4ZjI2 Yy1iMjYyLTQ4N2YtYWQ0Ny0zNDFhZjFmMDc2OWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvYzhmMjZj LWIyNjItNDg3Zi1hZDQ3LTM0MWFmMWYwNzY5Yi8xLzNWU2hCc0daODFNLVZyaXR2 UHBMR3NQbWtKOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDTV+QAwQE2UUwMA0EAgACMAcDBQAqAJsAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnJiMA0GCSqGSIb3DQEBCwUAA4IBAQCSzmIG DQw/tYKUHO7Q+5RA0QGeofLD4x7e3BAvJE4mn+lHiugYkEE0ol9FxED4QmLXJbLW +f5EnV6NIjd08PhDZ4PLbpubCgox9fXnjSGt5QlRNXnSj83bL1Hb63rO/2F5cxOw HqtScDCuuB2fULnSj5i/Irn/jVfMcvYjTPhE+Vrr2D92xKDbhp8IyeUqZTp/LYW7 SSUY+QjCZcW3pGHDMyy47NnKZXU8GHL/fy8kXNaWDZUgtxGy2KMBioPybmiGW6HD Qci5mp1ZVapxxpeFSBrCZ43SaOZ5IMu6TNNieQBCP1+tWeJmNiW+SFgIujk7vH34 m6+feRvYlVRaAMYF -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:44 2026 by rpki-client