This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3cf_z32PTDOExrKNBKESsh8jeRA.cer File: 3cf_z32PTDOExrKNBKESsh8jeRA.cer (raw, json) Hash identifier: jxkDYC/3c9Q6NnkKW68NppWbsQ/VHYzBNaz+i9zTV7I= Subject key identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019C063FF6D3F72A30F9C26CB2A7AEADB643 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 28 Jan 2026 20:16:21 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 203704 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:3f:f6:d3:f7:2a:30:f9:c2:6c:b2:a7:ae:ad:b6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 28 20:16:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddc7ffcf7d8f4c3384c6b28d04a112b21f237910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:82:23:1e:4b:cc:2b:90:86:54:c2:3b:b6: 49:ba:ca:03:7b:60:64:b5:79:0f:ee:12:f2:bd:de: f1:18:f6:ae:40:1e:d7:ff:7c:88:f3:a2:b2:4a:47: b8:d9:a0:e7:e0:b1:b9:fe:9e:f0:8e:ae:a5:e8:68: 61:30:6f:d8:72:5e:27:e4:b0:9a:92:4f:81:e1:61: 20:8c:e0:5c:d4:73:1b:51:a8:7b:f0:07:55:d6:1a: fe:2e:14:fd:55:dc:12:a6:bd:13:32:db:06:a0:d3: 23:04:b0:c2:ea:dc:95:d6:f1:95:d9:fd:f2:ae:32: c1:ec:25:aa:74:52:14:ed:94:41:02:8e:0a:8d:9b: d2:c0:24:92:8f:2f:d8:0a:b1:95:6d:8f:c7:89:57: 1e:e8:41:56:29:a7:4e:41:61:a6:b5:b0:cd:1c:a3: c9:d7:28:10:df:56:bb:c4:ba:2f:3e:23:87:20:9d: 64:12:b8:34:28:ca:8a:12:a7:d6:4e:fc:1b:a0:a2: e0:7c:31:43:66:87:67:bb:e1:d5:af:a8:cf:28:46: 53:71:62:e5:38:58:8c:e0:0f:54:82:71:2f:3d:ef: bf:ef:a0:ca:bd:36:fd:b9:3d:07:79:09:57:83:64: 22:42:8a:f0:3d:91:90:18:cd:0a:f5:95:66:d2:56: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C7:FF:CF:7D:8F:4C:33:84:C6:B2:8D:04:A1:12:B2:1F:23:79:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3624b-9085-4589-bf4d-fefd943f16c9/1/3cf_z32PTDOExrKNBKESsh8jeRA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203704 Signature Algorithm: sha256WithRSAEncryption 1a:0d:57:7b:91:af:76:35:98:9a:4b:72:14:8a:5c:f7:62:32: 5c:ff:c3:7d:a8:9e:b7:be:d7:09:fb:77:01:61:7e:2a:15:55: fc:be:38:89:60:bf:e3:04:82:13:d2:85:b3:c1:aa:2b:ab:1c: d5:d2:a8:a4:1f:31:a0:ba:8e:30:e2:0e:11:98:e6:63:1f:ac: 86:c4:1f:58:f5:7a:11:c5:a7:07:0d:ea:66:01:cf:94:ae:46: 0e:ef:be:a8:7e:64:2c:e0:ec:5b:1a:85:d0:32:5b:82:5b:d3: ba:92:e8:42:dc:69:95:7d:a4:08:56:63:7e:44:be:93:02:3f: ca:42:c9:05:b7:7b:97:ab:54:1f:9c:97:ff:35:b9:0a:ed:05: c6:a2:c9:2b:b0:96:7a:1a:7a:06:cf:37:30:bd:11:84:4a:4a: a3:25:6e:e4:5c:4e:a1:b3:49:cb:cb:b9:0c:aa:de:8e:92:1c: 83:e6:65:be:5c:ad:3e:a3:87:b0:a8:0c:ce:de:84:c8:5b:2f: 97:70:0d:33:ca:2a:09:0c:99:d0:c3:8c:29:83:67:a0:e9:23: 83:54:c9:04:ff:c1:db:8d:b6:97:72:5e:b1:2a:34:24:b4:9a: e0:ed:bf:d9:c8:d4:8b:8a:a0:b1:c4:3a:45:3a:2f:66:d1:42: c9:d3:5c:8d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZwGP/bT9yow+cJssqeurbZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI4MjAxNjIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGM3ZmZjZjdkOGY0YzMzODRjNmIyOGQwNGExMTJiMjFmMjM3OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE+CIx5LzCuQhlTCO7ZJusoDe2Bk tXkP7hLyvd7xGPauQB7X/3yI86KySke42aDn4LG5/p7wjq6l6GhhMG/Ycl4n5LCa kk+B4WEgjOBc1HMbUah78AdV1hr+LhT9VdwSpr0TMtsGoNMjBLDC6tyV1vGV2f3y rjLB7CWqdFIU7ZRBAo4KjZvSwCSSjy/YCrGVbY/HiVce6EFWKadOQWGmtbDNHKPJ 1ygQ31a7xLovPiOHIJ1kErg0KMqKEqfWTvwboKLgfDFDZodnu+HVr6jPKEZTcWLl OFiM4A9UgnEvPe+/76DKvTb9uT0HeQlXg2QiQorwPZGQGM0K9ZVm0la/RwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFN3H/899j0wzhMayjQShErIfI3kQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5L2MzNjI0 Yi05MDg1LTQ1ODktYmY0ZC1mZWZkOTQzZjE2YzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvYzM2MjRi LTkwODUtNDU4OS1iZjRkLWZlZmQ5NDNmMTZjOS8xLzNjZl96MzJQVERPRXhyS05C S0VTc2g4amVSQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbuDANBgkqhkiG9w0BAQsFAAOCAQEAGg1Xe5GvdjWY mktyFIpc92IyXP/Dfaiet77XCft3AWF+KhVV/L44iWC/4wSCE9KFs8GqK6sc1dKo pB8xoLqOMOIOEZjmYx+shsQfWPV6EcWnBw3qZgHPlK5GDu++qH5kLODsWxqF0DJb glvTupLoQtxplX2kCFZjfkS+kwI/ykLJBbd7l6tUH5yX/zW5Cu0FxqLJK7CWehp6 Bs83ML0RhEpKoyVu5FxOobNJy8u5DKrejpIcg+ZlvlytPqOHsKgMzt6EyFsvl3AN M8oqCQyZ0MOMKYNnoOkjg1TJBP/B2422l3JesSo0JLSa4O2/2cjUi4qgscQ6RTov ZtFCydNcjQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:56 2026 by rpki-client