This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer File: 3fz_0QDcAH8alqRDDqhyOJxX1s8.cer (raw, json) Hash identifier: 5E+zq+IF9VepU/SpFQLHxL46LrAayH9YjgeJ917G+lc= Subject key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F845C0FF5B77F6379C73ABB28C746D5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:22:19 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 42267 IP: 185.121.152.0/22 IP: 2a0a:efc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5c:0f:f5:b7:7f:63:79:c7:3a:bb:28:c7:46:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:92:c4:b2:7e:29:d2:5d:2d:ca:65:1d:95: 4a:85:3f:ae:d4:cb:0d:15:47:e6:f2:e6:b4:bb:5b: 2a:63:4a:2c:49:fa:fa:d8:fd:81:1b:10:55:fb:ca: f3:3e:ea:10:e8:8b:53:2b:92:48:69:70:9c:de:0b: aa:5c:1b:cc:29:a2:ab:fd:19:d2:86:ca:25:a3:56: 41:f2:17:91:1c:5f:19:dd:3e:5d:c5:76:f4:4c:0f: e5:ca:25:34:c4:cf:59:f0:7f:53:dc:7e:f5:b4:30: e0:5b:28:96:55:ec:d6:9c:e4:ab:cd:c5:d9:23:c2: cc:4e:48:b0:1b:ac:38:39:cc:9c:eb:94:e5:e6:d0: 1f:7e:50:6a:b8:61:33:84:97:5a:21:e5:f7:c4:84: a6:81:ea:46:96:1e:e0:f8:2a:14:17:a8:39:54:cd: 13:7c:b1:aa:5b:68:96:00:49:e1:6c:1e:4b:51:32: 48:5c:4f:94:bf:3b:ad:bf:a6:44:ce:31:99:ac:28: 2c:a0:03:5e:7a:a5:c9:5a:69:87:4d:93:ed:98:e9: 12:ca:e7:90:f8:20:40:43:58:49:d6:c7:2e:cb:e7: 97:bb:58:7e:10:46:5a:59:d6:67:b3:1b:f0:9c:7b: 38:21:f8:67:9a:3b:f3:5a:6c:05:c3:a6:b5:11:8a: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.152.0/22 IPv6: 2a0a:efc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 42267 Signature Algorithm: sha256WithRSAEncryption 41:7f:13:23:07:d1:71:06:2a:ae:70:f4:5d:4e:37:2a:c6:a1: db:62:27:25:fa:8f:38:57:9f:57:2b:28:50:64:cc:29:e6:fa: 98:32:04:c3:4a:b1:80:59:8b:4d:d9:a1:92:bc:90:9e:36:0b: 4a:14:91:6b:17:67:1d:71:58:ca:e0:d4:1c:d1:6d:df:f9:98: 77:e3:06:3b:a2:2e:93:a0:8b:ad:cb:0c:2c:fc:43:c1:58:8c: 38:58:b9:0d:ce:1a:ab:b8:ee:6d:73:e7:a1:5c:7f:47:43:d1: c8:b7:49:57:1d:88:1c:58:08:e7:60:6a:07:c6:d4:a1:5a:32: 50:90:c4:7c:99:6b:cc:81:e9:a7:96:55:20:44:b4:6e:a0:23: 69:00:73:54:e9:53:f4:b7:ec:a5:41:8a:88:fc:91:ee:27:d1: 6e:3b:fe:1d:53:b9:93:9e:7c:4c:1c:be:11:55:1e:0f:b5:cf: 00:9f:7b:a6:f3:fe:03:19:ac:07:ac:b4:11:91:a6:6f:ef:6a: a4:1a:5b:e0:e3:5e:8c:9c:18:96:3e:06:d9:e1:ff:a9:e5:1f: 19:a5:4d:1f:3d:96:21:93:06:07:25:5a:d5:7b:d1:ac:97:c0: cd:95:cb:66:e8:39:46:17:98:83:4e:90:e2:e3:28:50:d4:21: 1e:1c:83:58 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt/hFwP9bd/Y3nHOrsox0bVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGZjZmZkMTAwZGMwMDdmMWE5NmE0NDMwZWE4NzIzODljNTdkNmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXSSxLJ+KdJdLcplHZVKhT+u1MsN FUfm8ua0u1sqY0osSfr62P2BGxBV+8rzPuoQ6ItTK5JIaXCc3guqXBvMKaKr/RnS hsolo1ZB8heRHF8Z3T5dxXb0TA/lyiU0xM9Z8H9T3H71tDDgWyiWVezWnOSrzcXZ I8LMTkiwG6w4Ocyc65Tl5tAfflBquGEzhJdaIeX3xISmgepGlh7g+CoUF6g5VM0T fLGqW2iWAEnhbB5LUTJIXE+Uvzutv6ZEzjGZrCgsoANeeqXJWmmHTZPtmOkSyueQ +CBAQ1hJ1scuy+eXu1h+EEZaWdZnsxvwnHs4IfhnmjvzWmwFw6a1EYoGmQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN38/9EA3AB/GpakQw6ocjicV9bPMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzJmYzM3 NS1kYTE0LTRmN2YtOGZhZS0xNWE2ZTdkZjQ1YzkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvMmZjMzc1 LWRhMTQtNGY3Zi04ZmFlLTE1YTZlN2RmNDVjOS8xLzNmel8wUURjQUg4YWxxUkRE cWh5T0p4WDFzOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuXmYMA0EAgACMAcDBQMqCu/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwClGzANBgkqhkiG9w0BAQsFAAOCAQEAQX8TIwfRcQYq rnD0XU43Ksah22InJfqPOFefVysoUGTMKeb6mDIEw0qxgFmLTdmhkryQnjYLShSR axdnHXFYyuDUHNFt3/mYd+MGO6Iuk6CLrcsMLPxDwViMOFi5Dc4aq7jubXPnoVx/ R0PRyLdJVx2IHFgI52BqB8bUoVoyUJDEfJlrzIHpp5ZVIES0bqAjaQBzVOlT9Lfs pUGKiPyR7ifRbjv+HVO5k558TBy+EVUeD7XPAJ97pvP+AxmsB6y0EZGmb+9qpBpb 4ONejJwYlj4G2eH/qeUfGaVNHz2WIZMGByVa1XvRrJfAzZXLZug5RheYg06Q4uMo UNQhHhyDWA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:57 2026 by rpki-client