This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer File: 3ihtA6NzvWie8EYQocithHPr3a0.cer (raw, json) Hash identifier: sPJZnwUTJfftiOHxe9UB2wNy43lcjqmDfK0C5VIVgb0= Subject key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A29913417829C4A07B9AB03C2C9226 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201679 IP: 185.64.132.0/22 IP: 2a03:13e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:99:13:41:78:29:c4:a0:7b:9a:b0:3c:2c:92:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de286d03a373bd689ef04610a1c8ad8473ebddad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f4:df:e0:14:97:61:24:69:2b:09:ed:e9:a5: ed:38:d0:df:60:dd:08:2e:9f:83:8d:5e:22:f2:29: 59:ca:bb:b7:01:be:0e:47:44:90:31:23:11:3f:b7: ac:05:8c:09:cc:0a:05:72:d8:44:a7:f5:01:d1:7e: 59:89:41:93:4d:5b:e4:f6:64:df:96:34:2a:fa:88: 51:35:ff:c0:a0:f8:4a:fb:c7:a2:23:04:5b:b0:7f: fe:0b:94:f2:ac:62:0a:dc:bb:e5:c3:03:b1:07:54: 9a:5a:a8:74:61:86:e0:e0:e6:ee:e8:38:22:31:10: a8:e0:b0:9c:9e:65:69:3a:f1:40:f0:68:56:16:7c: 3a:09:7b:18:82:90:fc:6d:4a:da:bf:4b:0a:26:2b: 63:5e:70:c1:5e:c2:b8:7f:58:55:13:0d:df:82:c1: f4:3d:11:1e:f9:24:eb:3c:87:c9:72:2d:27:08:fe: 2a:3d:0f:42:32:de:cf:d9:58:f6:e7:49:88:d9:87: 18:1d:99:f3:bc:b6:f6:5d:16:fd:88:e1:3b:cc:20: 20:88:4f:1d:73:d6:1d:ff:f0:d7:53:f8:c5:ba:d9: 2a:f0:5a:c5:ed:81:f3:b1:cb:20:4c:3d:79:07:94: c0:81:e5:0a:9a:28:f5:26:ec:c0:82:aa:81:d2:c9: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.64.132.0/22 IPv6: 2a03:13e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201679 Signature Algorithm: sha256WithRSAEncryption 21:d0:a7:05:7f:f3:b8:cb:5a:00:74:ff:92:b3:ce:62:43:45: 0b:d7:18:40:4d:fe:1b:73:47:f0:f5:9a:6a:a2:3e:44:d7:18: 2c:a1:a0:48:90:a6:58:5f:3f:72:a1:5b:a8:58:95:70:20:cd: fe:37:45:68:7a:b6:79:ae:b9:ed:be:e3:44:c4:2c:24:fe:3a: b0:69:f7:23:d8:ff:79:ff:c4:df:61:3d:f6:c9:b9:71:80:2f: 9a:3d:0e:2d:d0:c2:15:d8:54:41:96:0d:28:07:d4:fb:2f:5c: 7e:0c:e3:9a:85:86:f5:a1:fc:5d:76:af:9d:64:86:cf:e7:98: 88:52:2e:cf:01:2f:d7:ef:3c:10:7b:41:b1:3a:2e:d1:fd:54: a6:d4:2c:4e:2d:a8:c8:a4:cb:47:8c:ce:6e:66:cd:4b:49:ad: 18:5c:a4:4f:ef:bd:76:af:f8:dc:f2:80:4d:aa:6e:19:c1:4c: 46:fb:8f:29:c2:21:5a:3e:0a:89:0e:64:6c:84:5a:18:17:67: fa:db:72:81:fc:dd:0e:4b:71:07:ce:e8:66:dd:3d:ef:26:b4: aa:85:47:77:63:33:09:4d:4e:2e:20:78:54:8c:a2:50:69:8e: 96:4f:ca:c8:9b:88:ed:48:76:38:03:9f:37:7f:60:2e:bf:8f: c9:81:91:f4 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4opkTQXgpxKB7mrA8LJImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTI4NmQwM2EzNzNiZDY4OWVmMDQ2MTBhMWM4YWQ4NDczZWJkZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/Tf4BSXYSRpKwnt6aXtONDfYN0I Lp+DjV4i8ilZyru3Ab4OR0SQMSMRP7esBYwJzAoFcthEp/UB0X5ZiUGTTVvk9mTf ljQq+ohRNf/AoPhK+8eiIwRbsH/+C5TyrGIK3LvlwwOxB1SaWqh0YYbg4Obu6Dgi MRCo4LCcnmVpOvFA8GhWFnw6CXsYgpD8bUrav0sKJitjXnDBXsK4f1hVEw3fgsH0 PREe+STrPIfJci0nCP4qPQ9CMt7P2Vj250mI2YcYHZnzvLb2XRb9iOE7zCAgiE8d c9Yd//DXU/jFutkq8FrF7YHzscsgTD15B5TAgeUKmij1JuzAgqqB0slTwwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN4obQOjc71onvBGEKHIrYRz692tMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4L2RiZWYx Ny05YmI4LTQ2YmMtOTM0My1jYWRmMGNhMWRkMGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvZGJlZjE3 LTliYjgtNDZiYy05MzQzLWNhZGYwY2ExZGQwZC8xLzNpaHRBNk56dldpZThFWVFv Y2l0aEhQcjNhMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUCEMA0EAgACMAcDBQAqAxPgMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTzzANBgkqhkiG9w0BAQsFAAOCAQEAIdCnBX/zuMta AHT/krPOYkNFC9cYQE3+G3NH8PWaaqI+RNcYLKGgSJCmWF8/cqFbqFiVcCDN/jdF aHq2ea657b7jRMQsJP46sGn3I9j/ef/E32E99sm5cYAvmj0OLdDCFdhUQZYNKAfU +y9cfgzjmoWG9aH8XXavnWSGz+eYiFIuzwEv1+88EHtBsTou0f1UptQsTi2oyKTL R4zObmbNS0mtGFykT++9dq/43PKATapuGcFMRvuPKcIhWj4KiQ5kbIRaGBdn+tty gfzdDktxB87oZt097ya0qoVHd2MzCU1OLiB4VIyiUGmOlk/KyJuI7Uh2OAOfN39g Lr+PyYGR9A== -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:01 2026 by rpki-client