This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer (raw, json) Hash identifier: 3eVH42U22wVWOXWP/AURUnJ254x/TJzYOWSOyY8HF4g= Subject key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF9DC1C43F9D61B83357FF9EE959D3351 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 10:31:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.202.24.0 -- 193.202.30.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:dc:1c:43:f9:d6:1b:83:35:7f:f9:ee:95:9d:33:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 10:31:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:0e:50:32:bb:44:bb:8c:f0:04:dc:e8:9b: 4c:21:ff:7b:01:81:03:78:86:b0:a9:a3:4d:d0:ae: ca:a2:42:a8:e3:8a:60:e0:da:98:34:0b:ef:ec:d2: 99:b1:5c:12:ae:d2:22:3a:de:46:ea:e6:79:2e:3e: 24:8d:ff:28:87:c0:59:78:b9:40:fb:b2:15:70:a1: a1:30:1e:dc:5d:39:22:c3:63:7c:ce:2f:15:87:8d: ff:a9:0a:aa:b0:0d:3d:5b:64:c7:0e:6e:57:34:01: 31:61:ec:73:a3:28:f3:b8:c5:c4:e1:ff:a1:bd:06: 48:f7:b6:58:97:88:d9:f4:2e:c2:2a:75:be:ea:12: 07:6b:8d:66:95:f9:63:2b:2a:ec:9b:7d:40:ae:4d: b2:ea:5f:26:9d:56:e7:bf:82:5c:5d:cc:76:e2:41: f0:d7:11:99:cd:1f:e7:b7:e9:1d:4c:27:a0:a0:c2: 94:c6:e6:50:a3:48:7d:50:64:fd:73:fa:74:d7:51: bd:48:11:25:a9:8b:21:f1:1f:2d:4d:f8:f1:a2:4d: ed:2c:88:9a:9c:c4:8d:5f:78:82:56:57:fc:58:7f: ff:5c:94:e2:45:b7:ab:d6:52:0c:94:f7:3f:da:48: 13:1f:2c:b0:f3:ec:99:5c:59:36:e4:79:13:5e:a0: 3b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.24.0-193.202.30.255 Signature Algorithm: sha256WithRSAEncryption 58:09:71:62:20:81:e0:1c:cb:61:8b:63:77:c4:a6:bf:2e:0e: d4:8c:91:4c:84:85:fb:58:c9:10:25:fe:fb:64:71:36:e2:93: 77:25:68:94:b6:f8:4d:fe:86:67:e2:c8:85:ec:30:f3:22:82: 42:56:de:f8:78:3b:2c:3b:41:66:3f:22:c7:d3:d9:43:8e:41: 7b:35:e9:4c:ed:54:88:b1:86:bf:00:d9:89:ae:dc:07:8d:2e: c3:aa:88:63:21:cb:bc:1b:70:a1:ab:d3:1c:10:32:00:49:66: 0c:86:ea:0e:2a:d9:3a:f4:59:35:19:6d:bb:d2:84:77:c0:d8: 2e:61:d0:5b:91:e5:f8:79:22:03:43:20:62:29:d0:41:a9:a2: 95:b3:c0:6f:98:2a:c4:73:d4:41:0c:a5:a8:77:04:6b:da:12: d0:ea:1c:2a:0e:37:77:57:29:fb:8d:f5:dd:77:95:dc:a6:1a: b0:7a:59:e7:0e:cc:05:cd:47:1d:05:e0:c2:2f:b9:23:c8:69: ff:ec:40:a6:4e:c7:18:74:80:2a:c3:d3:82:6a:dc:3f:d2:d0: 92:5d:97:f4:b7:52:a9:d9:3b:47:20:56:45:f2:27:59:85:9f: 67:0d:47:4e:19:b1:5d:78:37:7d:d1:20:76:a5:d5:03:26:b6: a6:fa:b7:50 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZv53BxD+dYbgzV/+e6VnTNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTAzMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGNiZWZlNmM2NGQyOWEzNDZiMmI0MDEwOWY4ZDg2YmYxODM4MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq8OUDK7RLuM8ATc6JtMIf97AYED eIawqaNN0K7KokKo44pg4NqYNAvv7NKZsVwSrtIiOt5G6uZ5Lj4kjf8oh8BZeLlA +7IVcKGhMB7cXTkiw2N8zi8Vh43/qQqqsA09W2THDm5XNAExYexzoyjzuMXE4f+h vQZI97ZYl4jZ9C7CKnW+6hIHa41mlfljKyrsm31Ark2y6l8mnVbnv4JcXcx24kHw 1xGZzR/nt+kdTCegoMKUxuZQo0h9UGT9c/p011G9SBElqYsh8R8tTfjxok3tLIia nMSNX3iCVlf8WH//XJTiRber1lIMlPc/2kgTHyyw8+yZXFk25HkTXqA70wIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFN3L7+bGTSmjRrK0AQn42Gvxg4HMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzFiOTk2 NC02ODdiLTQ3NGUtYjkzZi00NTUwNmM3YmUwNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMWI5OTY0 LTY4N2ItNDc0ZS1iOTNmLTQ1NTA2YzdiZTA1ZC8xLzNjdnY1c1pOS2FOR3NyUUJD ZmpZYV9HRGdjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAPByhgDBADByh4wDQYJKoZIhvcNAQELBQAD ggEBAFgJcWIggeAcy2GLY3fEpr8uDtSMkUyEhftYyRAl/vtkcTbik3claJS2+E3+ hmfiyIXsMPMigkJW3vh4Oyw7QWY/IsfT2UOOQXs16UztVIixhr8A2Ymu3AeNLsOq iGMhy7wbcKGr0xwQMgBJZgyG6g4q2Tr0WTUZbbvShHfA2C5h0FuR5fh5IgNDIGIp 0EGpopWzwG+YKsRz1EEMpah3BGvaEtDqHCoON3dXKfuN9d13ldymGrB6WecOzAXN Rx0F4MIvuSPIaf/sQKZOxxh0gCrD04Jq3D/S0JJdl/S3UqnZO0cgVkXyJ1mFn2cN R04ZsV14N33RIHal1QMmtqb6t1A= -----END CERTIFICATE-----Generated at Tue Jan 27 03:05:32 2026 by rpki-client