This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer File: 3i6RcxXwqHiyH8E51JqCGq3cPJc.cer (raw, json) Hash identifier: 0SMoBe6rydmgKdVeDbH8S/6lK8ZD0zNMS90BzhpO7S4= Subject key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5AB1D5FB31218EBCA00652F9252FF9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39351 AS: 214813 IP: 45.83.220.0/22 IP: 45.129.56.0/22 IP: 141.98.252.0/22 IP: 185.65.132.0/22 IP: 185.195.232.0/22 IP: 185.209.196.0/22 IP: 185.213.152.0/22 IP: 193.32.126.0/23 IP: 193.32.248.0/23 IP: 193.138.216.0/22 IP: 195.54.182.0/23 IP: 2a03:1b20::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b1:d5:fb:31:21:8e:bc:a0:06:52:f9:25:2f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de2e917315f0a878b21fc139d49a821aaddc3c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:79:7e:69:55:89:80:cd:6a:1b:ff:c5:5f:ed: 42:28:44:ed:1b:11:c8:9e:fd:ae:80:ec:90:03:71: 36:30:53:15:1e:b8:8b:7e:20:cb:4d:06:c8:80:07: d2:5d:45:5c:fb:43:70:a4:46:43:24:c5:70:2c:3c: a1:4e:fa:9a:ef:f9:89:52:99:7b:6b:ab:ad:54:05: 9b:66:de:d6:ce:44:65:4d:12:11:13:50:13:81:9c: 06:0f:99:b8:fb:6e:0b:35:69:77:8f:8e:19:b0:ac: a8:30:3f:cc:e6:93:38:c3:00:5a:1f:61:ac:cd:77: f9:7b:fc:24:e1:d2:0c:79:86:41:17:95:c4:e1:cd: 36:46:7f:9e:17:76:a4:fe:d8:7f:7a:5a:f2:cc:c9: 21:5a:78:0b:45:2e:4d:69:16:1b:57:19:26:ff:05: 61:ab:88:ba:84:a3:90:b2:7e:8d:f1:0f:b3:04:cd: fa:b3:0c:5c:50:db:32:0e:01:ae:44:2e:56:05:69: 1c:0f:8d:f4:9f:1a:37:ef:d7:76:b4:ec:0c:97:9e: cb:4b:22:47:4a:28:ef:ce:0f:ab:a6:78:77:03:7d: 7c:e7:d9:8f:63:9f:49:5a:ac:f6:ac:b5:c4:a5:d5: 4f:04:05:d2:df:9d:68:48:78:81:d6:5e:04:40:66: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.220.0/22 45.129.56.0/22 141.98.252.0/22 185.65.132.0/22 185.195.232.0/22 185.209.196.0/22 185.213.152.0/22 193.32.126.0/23 193.32.248.0/23 193.138.216.0/22 195.54.182.0/23 IPv6: 2a03:1b20::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39351 214813 Signature Algorithm: sha256WithRSAEncryption 9b:31:06:a6:79:ce:e5:1d:b4:dd:ac:84:3e:87:d3:31:28:bf: 79:35:a2:9d:53:f1:30:fc:53:50:03:46:06:f2:ed:79:03:65: de:c6:82:d1:b3:08:d3:d9:31:01:ff:7b:2e:7b:d0:b1:af:0b: e0:22:7c:83:da:ff:0d:29:e7:a3:85:ef:05:68:90:49:6b:8a: 0d:c4:ab:0f:a5:b9:64:a0:dd:de:34:1c:73:15:00:1c:5d:2b: da:14:c8:fb:24:b9:86:9a:22:34:bf:99:10:50:3c:7f:80:9f: 20:7c:12:ef:d6:f3:f3:b2:2f:34:dc:ac:b7:2c:82:f9:83:6a: 03:c1:52:1b:b7:b5:d7:65:75:03:0d:ea:a7:3a:99:8f:36:3f: d7:af:f4:2e:d6:0f:7b:17:af:d6:63:c0:52:88:42:cd:0a:8b: b9:b4:88:eb:b6:04:da:46:ef:ff:f1:26:d1:bb:68:1b:ea:6b: 05:eb:47:ed:a4:1b:0f:a4:f9:a2:b8:f0:76:c1:5e:99:ec:23: 34:ac:5f:08:05:6d:81:d3:ab:79:87:ab:ae:5a:b0:12:0a:51: 3b:9f:d2:aa:b9:ca:78:42:32:16:91:44:cf:cd:3c:03:a5:f0: df:32:50:5c:8b:72:b5:23:e5:5d:d3:fd:8f:58:03:21:73:ca: 63:aa:f7:df -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgISAZt6WrHV+zEhjrygBlL5JS/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTJlOTE3MzE1ZjBhODc4YjIxZmMxMzlkNDlhODIxYWFkZGMzYzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXl+aVWJgM1qG//FX+1CKETtGxHI nv2ugOyQA3E2MFMVHriLfiDLTQbIgAfSXUVc+0NwpEZDJMVwLDyhTvqa7/mJUpl7 a6utVAWbZt7WzkRlTRIRE1ATgZwGD5m4+24LNWl3j44ZsKyoMD/M5pM4wwBaH2Gs zXf5e/wk4dIMeYZBF5XE4c02Rn+eF3ak/th/elryzMkhWngLRS5NaRYbVxkm/wVh q4i6hKOQsn6N8Q+zBM36swxcUNsyDgGuRC5WBWkcD430nxo379d2tOwMl57LSyJH Sijvzg+rpnh3A31859mPY59JWqz2rLXEpdVPBAXS351oSHiB1l4EQGaYAQIDAQAB o4IC8DCCAuwwHQYDVR0OBBYEFN4ukXMV8Kh4sh/BOdSaghqt3DyXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzJkNWJj OC01ZDkzLTRiMGEtYThiNi1mOGQ2NWM5ODM3NDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMmQ1YmM4 LTVkOTMtNGIwYS1hOGI2LWY4ZDY1Yzk4Mzc0NC8xLzNpNlJjeFh3cUhpeUg4RTUx SnFDR3EzY1BKYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGoGCCsGAQUF BwEHAQH/BFswWTBIBAIAATBCAwQCLVPcAwQCLYE4AwQCjWL8AwQCuUGEAwQCucPo AwQCudHEAwQCudWYAwQBwSB+AwQBwSD4AwQCwYrYAwQBwza2MA0EAgACMAcDBQMq AxsgMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCZtwIDA0cdMA0GCSqGSIb3DQEB CwUAA4IBAQCbMQamec7lHbTdrIQ+h9MxKL95NaKdU/Ew/FNQA0YG8u15A2XexoLR swjT2TEB/3sue9CxrwvgInyD2v8NKeejhe8FaJBJa4oNxKsPpblkoN3eNBxzFQAc XSvaFMj7JLmGmiI0v5kQUDx/gJ8gfBLv1vPzsi803Ky3LIL5g2oDwVIbt7XXZXUD DeqnOpmPNj/Xr/Qu1g97F6/WY8BSiELNCou5tIjrtgTaRu//8SbRu2gb6msF60ft pBsPpPmiuPB2wV6Z7CM0rF8IBW2B06t5h6uuWrASClE7n9Kqucp4QjIWkUTPzTwD pfDfMlBci3K1I+Vd0/2PWAMhc8pjqvff -----END CERTIFICATE-----Generated at Mon Feb 9 15:09:38 2026 by rpki-client