This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer File: 3ikhmJ19kMZOuzVliDH-ao9JyTg.cer (raw, json) Hash identifier: cSFWjYB3lm6prg0UN9l9FqrWQbxU1C++gbFfbelfn9E= Subject key identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B775956FF9D47A553AD6367D38D68CF38 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 02:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 12293 AS: 64451 IP: 45.132.64.0/22 IP: 2a0c:1180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:56:ff:9d:47:a5:53:ad:63:67:d3:8d:68:cf:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de2921989d7d90c64ebb35658831fe6a8f49c938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:35:82:08:0c:0c:fa:b6:d0:fd:82:fc:23: 19:ec:b2:71:65:9a:8d:86:b5:89:8a:08:71:59:b7: a0:2e:2f:dd:6f:43:47:01:d5:6b:84:e0:ca:f7:f4: c8:00:75:02:b5:75:f0:78:1c:5d:f8:7d:e6:f4:70: 62:36:bd:f3:f4:21:af:24:d7:36:33:53:b6:2c:93: 0d:ad:7a:b9:d4:14:e0:d2:1b:6d:a3:f1:21:bc:67: 5f:50:39:f4:9f:2f:f4:f8:9b:0d:94:27:84:0b:cd: 93:2f:bc:b3:21:25:b1:91:3d:76:72:63:60:14:35: 55:40:40:8c:5a:01:09:dc:01:d8:83:af:31:2d:60: cb:c6:b9:6f:6f:91:c2:4b:e1:ec:d9:82:ef:e1:2d: 46:76:83:f2:df:a5:a2:10:09:b1:53:8a:e0:4e:9a: bb:78:7f:6a:63:fb:59:ac:23:b8:5b:a1:b5:b5:67: 68:d0:83:d1:90:8b:2b:19:7b:7e:44:24:16:a7:b2: 55:b9:1d:5e:25:34:d9:af:2d:1c:7a:7e:71:c6:19: 6e:e3:97:47:9b:97:e8:ad:52:30:f4:9d:91:e2:25: 96:6c:54:23:79:43:7e:f8:c6:c9:c7:70:7d:ed:d6: eb:ff:e3:36:85:87:27:d4:08:dd:b4:6c:99:c7:56: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.64.0/22 IPv6: 2a0c:1180::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12293 64451 Signature Algorithm: sha256WithRSAEncryption 8b:02:9d:b7:dd:c3:9c:e0:cb:27:d9:ea:fa:b4:6f:01:22:d5: 3f:05:48:34:2f:ec:bc:ab:11:3d:bc:d1:92:a9:6e:4f:bd:eb: 69:ef:a4:c3:35:fc:78:fd:dc:be:99:8e:4a:31:28:0d:c0:2a: b5:36:7b:e6:10:8f:7b:b8:f6:01:1a:cd:be:6a:cc:c7:18:9f: cd:9c:d3:9b:48:69:32:8e:be:62:73:7d:36:53:7c:be:72:2c: 4a:40:d5:03:4f:ec:57:69:1e:6c:96:94:78:67:a3:6a:99:67: d5:72:b8:cd:a5:aa:65:63:a7:ba:66:3b:d8:08:00:1a:fd:10: c8:65:21:42:f6:18:dc:59:73:2d:a0:db:0e:44:7d:ef:1e:85: 60:45:40:4c:f7:67:61:98:cb:5b:ca:3d:01:96:52:94:c0:a8: 0b:63:45:8e:e0:44:1a:31:52:7b:6d:00:7f:59:d7:eb:ef:67: d9:d9:d9:bc:b7:a8:45:9f:55:d6:4b:fa:f6:01:f7:bb:ca:92: 4a:f4:3d:86:18:61:b5:8e:59:e7:65:4b:ac:14:60:d2:2e:e9: b9:ab:c7:a9:ae:8b:de:7a:6e:ea:0b:10:25:24:d1:a7:45:9c: e9:fe:61:e7:1a:b8:c7:74:84:2d:a1:29:b9:2e:f5:06:14:16: ac:a0:29:dc -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgISAZt3WVb/nUelU61jZ9ONaM84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTI5MjE5ODlkN2Q5MGM2NGViYjM1NjU4ODMxZmU2YThmNDljOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3U1gggMDPq20P2C/CMZ7LJxZZqN hrWJighxWbegLi/db0NHAdVrhODK9/TIAHUCtXXweBxd+H3m9HBiNr3z9CGvJNc2 M1O2LJMNrXq51BTg0htto/EhvGdfUDn0ny/0+JsNlCeEC82TL7yzISWxkT12cmNg FDVVQECMWgEJ3AHYg68xLWDLxrlvb5HCS+Hs2YLv4S1GdoPy36WiEAmxU4rgTpq7 eH9qY/tZrCO4W6G1tWdo0IPRkIsrGXt+RCQWp7JVuR1eJTTZry0cen5xxhlu45dH m5forVIw9J2R4iWWbFQjeUN++MbJx3B97dbr/+M2hYcn1AjdtGyZx1bINwIDAQAB o4ICszCCAq8wHQYDVR0OBBYEFN4pIZidfZDGTrs1ZYgx/mqPSck4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE1LzRiOWNj Zi03NTM1LTQ1ZGQtYmQ5Ny0wYjVlY2I0NzRmMTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUvNGI5Y2Nm LTc1MzUtNDVkZC1iZDk3LTBiNWVjYjQ3NGYxNS8xLzNpa2htSjE5a01aT3V6Vmxp REgtYW85SnlUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYRAMA0EAgACMAcDBQMqDBGAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAjAFAgMA+8MwDQYJKoZIhvcNAQELBQADggEBAIsCnbfd w5zgyyfZ6vq0bwEi1T8FSDQv7LyrET280ZKpbk+962nvpMM1/Hj93L6ZjkoxKA3A KrU2e+YQj3u49gEazb5qzMcYn82c05tIaTKOvmJzfTZTfL5yLEpA1QNP7FdpHmyW lHhno2qZZ9VyuM2lqmVjp7pmO9gIABr9EMhlIUL2GNxZcy2g2w5Efe8ehWBFQEz3 Z2GYy1vKPQGWUpTAqAtjRY7gRBoxUnttAH9Z1+vvZ9nZ2by3qEWfVdZL+vYB97vK kkr0PYYYYbWOWedlS6wUYNIu6bmrx6mui956buoLECUk0adFnOn+YecauMd0hC2h Kbku9QYUFqygKdw= -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:43 2026 by rpki-client