This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer File: 3ZFY4-QfYP-_fsr_cjB9PclSd_U.cer (raw, json) Hash identifier: M4Q2qJUoo9yZFpMmE8Vn3MDC27vczrbvQR4A3KvqoVk= Subject key identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797F2603EB0BF8E9D7FDB8BC2C6C1BAA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34080 IP: 45.129.24.0/22 IP: 93.95.32.0/21 IP: 217.196.208.0/20 IP: 217.197.32.0/20 IP: 2a02:1f0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:26:03:eb:0b:f8:e9:d7:fd:b8:bc:2c:6c:1b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd9158e3e41f60ffbf7ecaff72307d3dc95277f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:a9:5f:08:d6:4b:99:56:a1:15:ba:6b:a9: 5b:e2:86:de:00:d9:80:5b:6e:e2:30:b6:61:c7:06: 2a:e1:24:7e:40:75:f5:82:e2:9b:c0:c8:fa:6a:67: b1:95:61:d1:aa:5a:11:f1:8c:5c:45:06:e9:8e:d3: 45:df:31:38:d2:76:92:7a:37:94:71:a8:da:26:e4: 1c:c3:a0:7f:54:3b:1c:36:d3:74:c6:33:c0:c9:f0: 92:b7:16:70:5f:f1:c3:b6:5a:6c:ee:cc:66:a4:d8: 82:5c:5b:04:8e:8b:9b:4f:5d:e2:4e:b7:0d:9d:55: 2f:28:7d:49:fb:33:60:21:f5:0a:16:70:69:1d:3a: 9d:2b:38:84:7b:ae:af:f8:75:66:5d:e7:5b:00:b1: 56:f3:da:47:e6:fa:d2:23:8d:8f:cd:2b:2b:a6:8c: 15:ba:92:32:bf:ac:2c:5d:97:c2:14:c9:5e:bb:eb: bd:b0:bd:5e:07:06:c7:d8:5a:ae:79:b1:09:b2:f2: 6c:a6:1f:1a:7a:7e:89:44:e8:24:74:b2:e0:57:dd: b7:f0:5c:38:7b:a0:09:31:49:24:1d:d5:00:c7:5e: 39:37:b3:ad:53:a7:7f:d5:49:74:00:a2:92:de:28: 04:c6:ba:54:e4:01:09:aa:3f:96:8e:f5:4d:cb:f8: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:58:E3:E4:1F:60:FF:BF:7E:CA:FF:72:30:7D:3D:C9:52:77:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6690c1-0a64-422d-bb0e-43d7eb72551d/1/3ZFY4-QfYP-_fsr_cjB9PclSd_U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.24.0/22 93.95.32.0/21 217.196.208.0/20 217.197.32.0/20 IPv6: 2a02:1f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34080 Signature Algorithm: sha256WithRSAEncryption 67:a8:a9:e6:d8:d8:98:12:25:3c:b9:fe:12:c6:6a:0f:a6:b5: 8e:84:7f:51:c0:1a:a4:c6:8d:e5:38:0a:0c:ec:42:ee:a5:57: 8d:be:37:ed:f3:fd:cf:ef:ec:94:dc:1c:27:74:d9:c4:e7:14: c4:9a:ef:69:fc:27:3a:b8:51:d6:35:fc:c7:d2:55:5a:3a:cd: 84:b9:50:d9:ba:3f:05:c2:2c:89:72:10:f8:38:3c:a2:44:15: 27:8c:d2:b3:f2:12:46:0b:71:d8:dc:c3:36:c0:15:17:7b:52: 28:d5:63:46:a7:18:d1:ba:44:3d:35:ee:4e:d4:f0:34:39:b7: 68:4c:df:e8:e0:dc:2f:fc:d0:34:30:a7:36:0c:35:2f:fe:fc: 7c:36:ed:aa:0a:ec:ae:5e:73:12:6e:51:f4:ac:d3:2c:df:8d: cb:93:75:c2:9a:f0:d1:ae:cb:17:a5:fc:d1:8d:2a:24:61:7e: 4a:ea:8e:1f:33:c5:49:7b:f5:f2:af:86:65:2a:26:ce:33:da: f1:36:05:c3:88:0e:d3:3f:50:c2:5f:b9:c5:02:a2:24:93:25: ec:39:c6:dc:b7:af:c0:72:eb:00:84:7e:ca:74:97:45:1e:0d: 38:92:b5:77:5b:c2:02:21:9f:0f:88:9f:f8:da:c9:b6:8b:49: 72:e0:83:da -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt5fyYD6wv46df9uLwsbBuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDkxNThlM2U0MWY2MGZmYmY3ZWNhZmY3MjMwN2QzZGM5NTI3N2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4qpXwjWS5lWoRW6a6lb4obeANmA W27iMLZhxwYq4SR+QHX1guKbwMj6amexlWHRqloR8YxcRQbpjtNF3zE40naSejeU cajaJuQcw6B/VDscNtN0xjPAyfCStxZwX/HDtlps7sxmpNiCXFsEjoubT13iTrcN nVUvKH1J+zNgIfUKFnBpHTqdKziEe66v+HVmXedbALFW89pH5vrSI42PzSsrpowV upIyv6wsXZfCFMleu+u9sL1eBwbH2FquebEJsvJsph8aen6JROgkdLLgV9238Fw4 e6AJMUkkHdUAx145N7OtU6d/1Ul0AKKS3igExrpU5AEJqj+WjvVNy/hOIQIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFN2RWOPkH2D/v37K/3IwfT3JUnf1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q4LzY2OTBj MS0wYTY0LTQyMmQtYmIwZS00M2Q3ZWI3MjU1MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgvNjY5MGMx LTBhNjQtNDIyZC1iYjBlLTQzZDdlYjcyNTUxZC8xLzNaRlk0LVFmWVAtX2Zzcl9j akI5UGNsU2RfVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLYEYAwQDXV8gAwQE2cTQAwQE2cUgMA0EAgAC MAcDBQAqAgHwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCFIDANBgkqhkiG9w0B AQsFAAOCAQEAZ6ip5tjYmBIlPLn+EsZqD6a1joR/UcAapMaN5TgKDOxC7qVXjb43 7fP9z+/slNwcJ3TZxOcUxJrvafwnOrhR1jX8x9JVWjrNhLlQ2bo/BcIsiXIQ+Dg8 okQVJ4zSs/ISRgtx2NzDNsAVF3tSKNVjRqcY0bpEPTXuTtTwNDm3aEzf6ODcL/zQ NDCnNgw1L/78fDbtqgrsrl5zEm5R9KzTLN+Ny5N1wprw0a7LF6X80Y0qJGF+SuqO HzPFSXv18q+GZSomzjPa8TYFw4gO0z9Qwl+5xQKiJJMl7DnG3LevwHLrAIR+ynSX RR4NOJK1d1vCAiGfD4if+NrJtotJcuCD2g== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:07 2026 by rpki-client