This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer File: 3ZwwOZ9jhVX0wC6NG1W8knIly1E.cer (raw, json) Hash identifier: OggR9wvk48VfGptOI6jJSUKaBSPpCZ3QfXeQ8yYRTvM= Subject key identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBFF86EFC58C814B29195FD666B944 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49773 IP: 91.218.80.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ff:86:ef:c5:8c:81:4b:29:19:5f:d6:66:b9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd9c30399f638555f4c02e8d1b55bc927225cb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0d:88:9a:26:d0:82:1a:77:a9:4d:4a:66:3c: 06:38:bc:14:b8:46:79:c8:28:a6:1c:a4:b5:93:b1: 17:2c:d1:6d:a9:35:83:3c:9f:fa:7a:81:ce:0d:66: a9:68:5b:66:56:9f:b8:0e:b1:91:8a:21:61:f8:36: e0:e3:a8:9a:ad:0b:94:2b:02:2b:c8:ac:b5:d4:e3: d8:01:76:9e:b8:66:bd:c4:5d:0b:71:b3:bf:f5:55: af:3c:f4:98:35:3e:98:c2:13:14:b8:f4:84:64:cc: 50:f8:a4:1b:37:ad:ae:d5:6f:2f:f7:7f:3e:9e:52: 24:10:e0:84:04:3b:cd:14:cc:0e:76:38:59:5f:63: 54:46:82:54:0f:c0:cd:ab:ac:41:6e:25:87:1f:06: 0d:52:e2:74:41:29:10:b4:82:50:92:49:b3:8f:ad: 28:f0:da:4a:f5:cd:9e:c6:2d:33:4f:66:38:05:ed: cb:6b:c7:72:46:39:96:69:d6:02:d1:68:50:07:02: 2a:0a:67:21:e3:1d:e0:c8:71:02:ee:a6:ac:6c:56: cd:53:43:fc:ac:99:a2:9a:a8:d2:5f:b0:c0:2b:78: 5d:98:58:4b:29:d7:2a:b9:48:8f:c4:41:71:3a:c1: 9a:66:ea:ef:a6:6c:3b:43:be:2e:cc:66:8f:7e:8b: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:30:39:9F:63:85:55:F4:C0:2E:8D:1B:55:BC:92:72:25:CB:51 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/beca4d-70cc-4ca4-b452-0e514062c590/1/3ZwwOZ9jhVX0wC6NG1W8knIly1E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49773 Signature Algorithm: sha256WithRSAEncryption 9a:09:2d:9b:e7:20:30:87:de:e7:20:bd:a7:b4:57:08:91:2c: 9d:0d:75:29:57:57:f9:b9:35:35:42:72:43:0d:77:f7:41:07: e6:43:8c:ba:d7:3d:c0:e5:e5:40:fe:7b:0d:35:9b:40:1e:44: 23:52:39:7d:ec:0e:1a:24:40:1d:65:d8:40:0e:51:64:dd:f4: 47:b9:fd:f1:03:fc:6f:b8:a6:7a:e1:6b:de:9b:94:91:a5:2e: a4:68:ac:42:f9:d7:36:bd:a8:a1:06:20:74:5c:75:16:34:05: f2:57:da:a6:be:31:6a:5b:65:91:85:ff:45:84:c9:a1:89:0e: 98:c3:da:22:ab:38:2d:63:dc:e1:75:bb:15:92:00:a1:cb:40: 5b:49:d8:14:ae:09:4f:bb:6f:83:06:32:34:23:71:4c:9f:11: 8b:1f:41:18:57:1f:2b:bf:87:89:af:d3:2d:4e:2c:d8:0c:db: 4f:ee:ce:fd:0b:5e:ca:50:63:27:57:46:b2:9d:ef:ed:3f:04: f4:1c:4e:ea:81:14:f7:2f:47:d8:3b:07:5f:b0:9a:ef:da:e8: d3:c0:95:8d:10:75:f5:ae:47:e0:80:4f:b0:7a:d7:27:03:74: 6b:57:61:23:9b:6c:5b:d8:08:70:2f:65:2b:4f:54:39:a4:09: a0:d6:2e:6f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt56/+G78WMgUspGV/WZrlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDljMzAzOTlmNjM4NTU1ZjRjMDJlOGQxYjU1YmM5MjcyMjVjYjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A2ImibQghp3qU1KZjwGOLwUuEZ5 yCimHKS1k7EXLNFtqTWDPJ/6eoHODWapaFtmVp+4DrGRiiFh+Dbg46iarQuUKwIr yKy11OPYAXaeuGa9xF0LcbO/9VWvPPSYNT6YwhMUuPSEZMxQ+KQbN62u1W8v938+ nlIkEOCEBDvNFMwOdjhZX2NURoJUD8DNq6xBbiWHHwYNUuJ0QSkQtIJQkkmzj60o 8NpK9c2exi0zT2Y4Be3La8dyRjmWadYC0WhQBwIqCmch4x3gyHEC7qasbFbNU0P8 rJmimqjSX7DAK3hdmFhLKdcquUiPxEFxOsGaZurvpmw7Q74uzGaPfoutIwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN2cMDmfY4VV9MAujRtVvJJyJctRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M2L2JlY2E0 ZC03MGNjLTRjYTQtYjQ1Mi0wZTUxNDA2MmM1OTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzYvYmVjYTRk LTcwY2MtNGNhNC1iNDUyLTBlNTE0MDYyYzU5MC8xLzNad3dPWjlqaFZYMHdDNk5H MVc4a25JbHkxRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCW9pQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwDCbTANBgkqhkiG9w0BAQsFAAOCAQEAmgktm+cgMIfe5yC9p7RXCJEsnQ11KVdX +bk1NUJyQw1390EH5kOMutc9wOXlQP57DTWbQB5EI1I5fewOGiRAHWXYQA5RZN30 R7n98QP8b7imeuFr3puUkaUupGisQvnXNr2ooQYgdFx1FjQF8lfapr4xaltlkYX/ RYTJoYkOmMPaIqs4LWPc4XW7FZIAoctAW0nYFK4JT7tvgwYyNCNxTJ8Rix9BGFcf K7+Hia/TLU4s2AzbT+7O/QteylBjJ1dGsp3v7T8E9BxO6oEU9y9H2DsHX7Ca79ro 08CVjRB19a5H4IBPsHrXJwN0a1dhI5tsW9gIcC9lK09UOaQJoNYubw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:59 2026 by rpki-client