This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3XzvizrZIDFjCqyiJqntebpgVYY.cer File: 3XzvizrZIDFjCqyiJqntebpgVYY.cer (raw, json) Hash identifier: 69HbWtr5D3B3q2FD95AsEyCsETAmIOB9/uhHDYbFSwY= Subject key identifier: DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C1291B95080FD565D56FC3B7A03D549 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 48439 IP: 195.162.0.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:91:b9:50:80:fd:56:5d:56:fc:3b:7a:03:d5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd7cef8b3ad92031630aaca226a9ed79ba605586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:a7:31:d0:c4:5c:34:23:f9:19:c3:92:ad: 24:d8:69:bd:9d:24:fd:cc:34:f7:6c:1f:67:6e:b3: 76:63:15:b7:98:aa:e4:e2:6c:20:ac:f1:31:16:05: c8:d5:61:62:67:da:b6:37:4d:35:2b:f6:5f:4b:c4: 02:ef:17:8b:d0:7a:cb:35:8d:c4:86:ad:2b:3a:fb: 24:ad:ed:7b:93:9c:9e:47:f7:1c:8e:23:b1:86:4c: 97:7f:cd:29:7a:e3:a3:04:c2:0a:54:22:59:90:45: 66:58:7b:eb:7b:ae:60:d7:33:a4:02:de:e9:b3:81: e1:3b:10:bb:89:c5:7d:d8:a8:32:96:dd:93:a4:fc: bb:9d:ba:4c:ac:30:7d:63:5a:e7:55:3c:4a:b9:e4: 85:30:00:5b:1e:ff:99:58:0a:d2:bb:2b:b6:2f:82: ca:34:91:cb:70:c8:df:08:8b:4a:6a:04:7d:2f:6d: 1c:9e:9f:0b:30:32:57:68:d5:b5:1d:06:e2:aa:c4: a5:57:42:35:03:90:18:08:7c:c9:d1:bd:fd:0c:2c: 20:79:9e:72:77:8e:b8:a7:1c:8a:a8:9b:ba:63:dc: 66:f0:c3:77:5a:9d:36:b6:43:df:0b:c0:26:b4:75: 3f:0b:ee:88:85:4d:a5:6b:91:b2:90:d5:2a:b7:16: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7C:EF:8B:3A:D9:20:31:63:0A:AC:A2:26:A9:ED:79:BA:60:55:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d98b0-4a4d-4190-bd85-372f65d99a9f/1/3XzvizrZIDFjCqyiJqntebpgVYY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.162.0.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48439 Signature Algorithm: sha256WithRSAEncryption 2a:b4:fa:e5:19:9b:0e:63:65:af:ad:e9:10:bc:f1:29:eb:4a: 8c:67:0c:8e:15:4e:2f:e7:ca:63:33:70:8d:57:31:40:22:a9: 11:56:bf:d1:f7:c6:46:b2:83:f6:8c:19:62:81:e3:71:2f:dd: 79:36:52:cc:ec:b0:92:83:53:09:27:b9:a7:a9:f4:a3:65:c9: dc:02:cd:e8:34:a3:19:ad:fe:78:4a:cd:b1:ca:6d:8a:04:d0: 5f:94:19:eb:de:2b:a9:94:16:46:60:9b:fa:a5:6c:28:b2:46: 27:a6:61:9f:51:bf:3a:7e:cf:25:5a:fc:9a:d2:0c:15:6f:70: a0:20:af:2f:44:65:a3:60:66:70:2a:e1:33:37:18:3e:c9:97: f3:d0:f5:df:ef:6d:a6:ad:c0:2a:3e:92:9e:e7:2d:46:59:f3: f1:c9:6f:83:48:af:2c:9b:f0:1a:0f:fe:d1:18:33:18:a2:6b: ef:c0:dd:19:62:ae:d4:f3:d3:48:9d:47:7c:7e:67:c0:be:49: 8b:b3:2f:b0:28:e3:fd:4f:2b:45:f2:af:97:27:f9:9c:3a:e0: 00:91:68:a4:d1:52:f7:94:af:6b:a0:45:99:fb:05:75:12:5d: 3c:0e:1b:dc:59:28:61:de:2f:52:bc:ac:34:30:9c:8f:f7:57: 43:8e:bd:e1 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EpG5UID9Vl1W/Dt6A9VJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDdjZWY4YjNhZDkyMDMxNjMwYWFjYTIyNmE5ZWQ3OWJhNjA1NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+nMdDEXDQj+RnDkq0k2Gm9nST9 zDT3bB9nbrN2YxW3mKrk4mwgrPExFgXI1WFiZ9q2N001K/ZfS8QC7xeL0HrLNY3E hq0rOvskre17k5yeR/ccjiOxhkyXf80peuOjBMIKVCJZkEVmWHvre65g1zOkAt7p s4HhOxC7icV92Kgylt2TpPy7nbpMrDB9Y1rnVTxKueSFMABbHv+ZWArSuyu2L4LK NJHLcMjfCItKagR9L20cnp8LMDJXaNW1HQbiqsSlV0I1A5AYCHzJ0b39DCwgeZ5y d464pxyKqJu6Y9xm8MN3Wp02tkPfC8AmtHU/C+6IhU2la5GykNUqtxbKaQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN1874s62SAxYwqsoiap7Xm6YFWGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5LzFkOThi MC00YTRkLTQxOTAtYmQ4NS0zNzJmNjVkOTlhOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvMWQ5OGIw LTRhNGQtNDE5MC1iZDg1LTM3MmY2NWQ5OWE5Zi8xLzNYenZpenJaSURGakNxeWlK cW50ZWJwZ1ZZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBw6IAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC9NzANBgkqhkiG9w0BAQsFAAOCAQEAKrT65RmbDmNlr63pELzxKetKjGcMjhVO L+fKYzNwjVcxQCKpEVa/0ffGRrKD9owZYoHjcS/deTZSzOywkoNTCSe5p6n0o2XJ 3ALN6DSjGa3+eErNscptigTQX5QZ694rqZQWRmCb+qVsKLJGJ6Zhn1G/On7PJVr8 mtIMFW9woCCvL0Rlo2BmcCrhMzcYPsmX89D13+9tpq3AKj6SnuctRlnz8clvg0iv LJvwGg/+0RgzGKJr78DdGWKu1PPTSJ1HfH5nwL5Ji7MvsCjj/U8rRfKvlyf5nDrg AJFopNFS95Sva6BFmfsFdRJdPA4b3FkoYd4vUrysNDCcj/dXQ4694Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:50:34 2026 by rpki-client