This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer (raw, json) Hash identifier: YAQlu/TLcY0QSfqfGU3pvfmbO9nOAoRFjZPI2yJdTm0= Subject key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDD62BE19F6A55AA772E2DCC33BDF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199963 IP: 185.142.115.0/24 IP: 2a13:a900::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:d6:2b:e1:9f:6a:55:aa:77:2e:2d:cc:33:bd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:d1:93:5e:b5:7b:6b:93:a3:b3:29:2f:79: bb:f7:2d:f4:f6:37:7a:3d:3e:f6:1a:e1:2f:90:af: 94:19:83:d7:64:09:dc:e0:9f:ca:dd:8b:6f:90:34: 68:7c:fe:66:34:1a:39:48:c3:2d:cb:0e:2e:66:79: a0:bf:1c:16:ed:db:94:ce:e3:f1:1b:96:bf:b8:d4: aa:ef:86:e7:d2:a9:f0:14:1d:52:91:00:ba:f9:93: 93:ab:79:e3:e2:8d:92:69:80:db:d4:3d:db:63:e3: 73:95:b5:8a:25:60:b4:f1:4e:01:df:9f:2e:06:48: 02:83:b1:03:98:8c:4c:9c:d6:f0:89:03:cf:e5:4d: b4:fa:7f:ce:d8:60:d9:57:dd:e2:2e:62:2e:97:8b: b7:17:2b:ff:9d:24:aa:d0:02:43:1c:8e:95:79:15: 13:f7:c0:31:7c:c5:ce:a5:67:cc:cc:c3:9a:e6:0e: 59:f6:7d:90:58:08:bf:d8:8d:62:d3:c9:34:13:8e: 35:08:fc:87:1d:5e:ef:7f:60:a1:18:44:7c:1e:70: 39:4a:f4:a2:e0:82:b8:3f:0b:e4:44:56:b2:a6:fe: 25:e3:1d:6c:09:c5:56:48:a4:bd:1f:20:88:97:5f: c1:07:89:39:0d:98:ea:8b:a6:f5:6c:e7:7b:16:86: 2d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.115.0/24 IPv6: 2a13:a900::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199963 Signature Algorithm: sha256WithRSAEncryption 94:54:ac:55:c3:0f:74:3d:00:ac:bd:bf:8d:1b:37:ac:ff:ab: dc:c0:de:73:fc:d1:71:40:5a:eb:bd:2c:f2:2d:06:fc:04:14: 18:ae:4d:a4:19:39:0a:65:2b:c7:6b:bd:72:06:5b:87:ef:0c: 18:ed:47:69:3a:d6:88:97:cf:c8:dd:1f:93:f7:d3:57:65:6e: 66:ab:60:96:a0:78:1c:d8:82:3c:66:33:23:11:03:d4:c8:8b: 5f:6b:24:92:05:a6:4a:b5:6b:ab:b8:45:bd:eb:17:c7:c7:f0: 99:48:52:0a:67:70:9d:2a:e5:57:f1:f6:3e:a7:ff:53:13:37: 37:78:42:e4:56:54:6a:e2:2c:26:06:05:77:a2:9a:c9:a7:24: 3e:f0:00:6a:11:5c:8c:77:5e:58:06:03:89:6f:00:e7:61:ae: 92:58:a9:2c:9a:6e:39:87:83:4c:de:d6:b5:f3:cc:4d:ff:52: 6a:ba:aa:61:41:b8:2e:67:8a:24:2c:68:5d:44:72:2d:46:d7: bd:c2:44:3f:87:ac:95:9c:c9:f0:08:ef:e9:d0:0f:92:f4:6d: 0d:0e:f2:b7:3a:df:ba:8e:ba:82:a5:19:43:fc:2b:05:65:29: 0d:6e:a6:ba:34:c3:1e:85:51:d7:82:72:8e:b4:28:2b:1b:1b: e4:d7:5d:4a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87dYr4Z9qVap3Li3MM732MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGYyMGEwNjg1YjZmZTk3NTRjYTIyNDg2Nzc1YjJkOGE3ZTljMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvTRk161e2uTo7MpL3m79y309jd6 PT72GuEvkK+UGYPXZAnc4J/K3YtvkDRofP5mNBo5SMMtyw4uZnmgvxwW7duUzuPx G5a/uNSq74bn0qnwFB1SkQC6+ZOTq3nj4o2SaYDb1D3bY+NzlbWKJWC08U4B358u BkgCg7EDmIxMnNbwiQPP5U20+n/O2GDZV93iLmIul4u3Fyv/nSSq0AJDHI6VeRUT 98AxfMXOpWfMzMOa5g5Z9n2QWAi/2I1i08k0E441CPyHHV7vf2ChGER8HnA5SvSi 4IK4PwvkRFaypv4l4x1sCcVWSKS9HyCIl1/BB4k5DZjqi6b1bOd7FoYtQwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN3yCgaFtv6XVMoiSGd1stin6cEeMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxLzU5NGM3 OC00YmQwLTQzZDgtODE0Zi01ODM0OWY3NDBlOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEvNTk0Yzc4 LTRiZDAtNDNkOC04MTRmLTU4MzQ5Zjc0MGU5Ni8xLzNmSUtCb1cyX3BkVXlpSkla M1d5MktmcHdSNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuY5zMA0EAgACMAcDBQMqE6kAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMNGzANBgkqhkiG9w0BAQsFAAOCAQEAlFSsVcMPdD0A rL2/jRs3rP+r3MDec/zRcUBa670s8i0G/AQUGK5NpBk5CmUrx2u9cgZbh+8MGO1H aTrWiJfPyN0fk/fTV2VuZqtglqB4HNiCPGYzIxED1MiLX2skkgWmSrVrq7hFvesX x8fwmUhSCmdwnSrlV/H2Pqf/UxM3N3hC5FZUauIsJgYFd6KayackPvAAahFcjHde WAYDiW8A52GuklipLJpuOYeDTN7WtfPMTf9SarqqYUG4LmeKJCxoXURyLUbXvcJE P4eslZzJ8Ajv6dAPkvRtDQ7ytzrfuo66gqUZQ/wrBWUpDW6mujTDHoVR14JyjrQo Kxsb5NddSg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:40 2026 by rpki-client