This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer File: 3dBY7vGdEboOq68EbnKibl5XJkM.cer (raw, json) Hash identifier: ImklNIS9LHuSHFirZFQciagRUwrpe+v9yYqsNYbvE1c= Subject key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BF9ED8E7AFB609539463FCEF9ED0240AE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 26 Jan 2026 10:50:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214997 IP: 193.34.207.0/24 IP: 195.200.70.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:ed:8e:7a:fb:60:95:39:46:3f:ce:f9:ed:02:40:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 26 10:50:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:5c:6f:de:61:75:3e:a7:de:57:51:dd:6b: 46:d0:05:21:2a:b6:f1:aa:10:88:5d:e4:52:e6:d6: ce:8f:28:14:77:80:d3:81:cf:98:00:14:0d:cd:df: 8e:99:89:5e:85:9b:05:2f:47:94:3d:2a:a2:79:64: 00:17:ab:47:96:2c:e9:53:7b:f6:dc:1b:28:5c:8a: 52:63:12:da:e2:b9:fd:32:40:c5:a2:95:5b:69:1f: 4a:a3:d8:02:2b:03:e6:05:48:6f:8c:5c:6c:bf:48: ca:63:4f:65:60:af:1c:7d:b0:75:26:97:76:cd:06: a5:d9:2a:97:07:84:e4:d5:9b:7d:62:f2:f1:5b:52: 6c:11:70:b7:04:f9:39:4c:d8:1e:06:2a:c3:08:84: 28:e3:b7:4c:d1:d6:0f:c2:a9:61:95:7d:f7:da:25: 39:1f:df:df:c4:8b:04:cb:a3:eb:26:34:33:d9:81: 5a:ef:77:64:3e:1c:79:e3:f2:1e:b7:54:0a:77:fe: fb:89:ec:2f:58:f3:e0:42:1a:bb:3f:c3:3b:c0:de: b2:b7:aa:0c:3c:b5:a6:e4:73:80:8a:63:1e:59:3d: 85:96:6c:2d:df:09:1d:15:3f:0c:8a:f9:5a:f9:36: 99:ac:58:8f:55:be:42:e7:83:3c:5b:37:ed:dc:72: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.207.0/24 195.200.70.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214997 Signature Algorithm: sha256WithRSAEncryption 94:72:3b:4e:ac:95:16:0d:ec:6e:34:e7:93:b2:9a:b5:62:b1: 0c:23:41:f3:73:9c:d1:d6:24:b5:f5:7a:cc:d5:db:85:4c:52: cf:df:4a:af:43:e9:66:b5:5b:6e:13:4d:3e:fb:ef:c2:77:24: c6:28:11:74:4b:42:cb:5e:8d:9e:10:ba:0d:2c:ea:c7:44:53: 38:28:6f:9e:75:f0:41:8d:5e:ac:b1:cc:1a:cb:ee:5c:5c:69: 76:49:20:8a:cc:9c:c2:6b:62:25:7d:34:9b:2b:d9:ec:b9:27: 01:e4:c1:e1:70:98:e8:d1:eb:b4:1b:9e:7a:63:d0:04:7d:12: a3:82:42:62:76:65:ed:f0:2d:58:69:b3:bf:1d:8e:e6:cb:4a: ff:80:26:46:5a:3c:00:cd:20:cc:29:b8:31:9f:9c:f0:80:33: e4:16:45:04:d2:0c:8b:c2:da:0e:d4:d6:dd:51:ad:aa:d7:c7: bf:e1:66:06:ff:a7:bf:59:42:ae:a1:2b:f5:a1:aa:94:48:ef: 19:47:fc:ee:01:ad:92:d1:b4:bd:8d:06:0a:1f:cd:36:46:96: fc:3a:13:33:2b:e9:7c:30:44:9a:04:ac:7f:61:3e:07:34:24: c2:45:7e:90:e9:6f:e5:c7:42:de:13:98:b7:e3:09:fc:b5:ee: 1a:7f:a0:53 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZv57Y56+2CVOUY/zvntAkCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTI2MTA1MDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGQwNThlZWYxOWQxMWJhMGVhYmFmMDQ2ZTcyYTI2ZTVlNTcyNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL5cb95hdT6n3ldR3WtG0AUhKrbx qhCIXeRS5tbOjygUd4DTgc+YABQNzd+OmYlehZsFL0eUPSqieWQAF6tHlizpU3v2 3BsoXIpSYxLa4rn9MkDFopVbaR9Ko9gCKwPmBUhvjFxsv0jKY09lYK8cfbB1Jpd2 zQal2SqXB4Tk1Zt9YvLxW1JsEXC3BPk5TNgeBirDCIQo47dM0dYPwqlhlX332iU5 H9/fxIsEy6PrJjQz2YFa73dkPhx54/Iet1QKd/77iewvWPPgQhq7P8M7wN6yt6oM PLWm5HOAimMeWT2Flmwt3wkdFT8Mivla+TaZrFiPVb5C54M8Wzft3HJSlwIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFN3QWO7xnRG6DquvBG5yom5eVyZDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzL2U0ODM0 Zi1lNWQwLTRiNjQtOTJjZS1mNTQ5OTMzNmMyYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvZTQ4MzRm LWU1ZDAtNGI2NC05MmNlLWY1NDk5MzM2YzJiNC8xLzNkQlk3dkdkRWJvT3E2OEVi bktpYmw1WEprTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwSLPAwQBw8hGMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwNH1TANBgkqhkiG9w0BAQsFAAOCAQEAlHI7TqyVFg3sbjTnk7KatWKx DCNB83Oc0dYktfV6zNXbhUxSz99Kr0PpZrVbbhNNPvvvwnckxigRdEtCy16NnhC6 DSzqx0RTOChvnnXwQY1erLHMGsvuXFxpdkkgisycwmtiJX00myvZ7LknAeTB4XCY 6NHrtBueemPQBH0So4JCYnZl7fAtWGmzvx2O5stK/4AmRlo8AM0gzCm4MZ+c8IAz 5BZFBNIMi8LaDtTW3VGtqtfHv+FmBv+nv1lCrqEr9aGqlEjvGUf87gGtktG0vY0G Ch/NNkaW/DoTMyvpfDBEmgSsf2E+BzQkwkV+kOlv5cdC3hOYt+MJ/LXuGn+gUw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:14 2026 by rpki-client