This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer File: 3j06mElcJ7nONQrluJ-ZFEsKTJ0.cer (raw, json) Hash identifier: VssyaFpWGCaDSh0VsxLYZ6mPUNkH12WTZ9+4Sh0mKBA= Subject key identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA3CBD7B99E76E2FF442B0DCE2293FC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 199691 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:cb:d7:b9:9e:76:e2:ff:44:2b:0d:ce:22:93:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de3d3a98495c27b9ce350ae5b89f99144b0a4c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:99:1b:f7:87:49:46:fc:c3:c6:d7:90:c2:5d: 66:23:21:82:d0:6d:57:52:b1:74:bb:be:67:14:08: 9f:a7:af:76:a5:ab:a9:4c:31:15:9f:6a:36:a8:c8: 0e:62:41:7c:f3:cf:f5:f7:b2:24:f3:06:46:cb:13: 1b:b0:8b:86:41:6a:21:e0:ac:23:98:1e:ae:7b:83: b5:44:5e:c4:75:46:d2:22:c6:dd:26:4a:39:55:47: 0c:a6:3c:74:5a:db:66:dd:c9:b1:8a:cf:0d:13:43: a8:6d:ce:38:3b:01:96:75:69:5a:f7:1d:bf:37:f4: 1f:53:ac:56:bc:1a:3d:7e:15:2e:01:89:ea:b0:26: 4e:e1:83:9c:5a:75:91:1c:cd:dd:11:8f:cf:2a:a3: 6b:81:57:dc:4c:0a:6f:8d:44:48:de:ce:46:a7:74: f4:4d:3f:00:39:a2:cd:2c:72:6a:fc:d7:1b:25:dc: fb:2c:b0:40:1f:4e:3c:3e:88:79:fc:a9:0c:6d:65: 33:d8:92:d6:cd:24:9c:ef:d0:93:29:96:f2:b6:69: 3b:76:d3:ac:3a:a5:77:25:71:e9:04:bd:3c:f0:e5: 52:1a:07:fe:b0:10:00:5e:53:b0:db:4d:c5:6f:db: 3c:6c:f8:b6:b0:f1:23:d7:cf:4f:d3:d6:0d:c7:ff: 52:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3D:3A:98:49:5C:27:B9:CE:35:0A:E5:B8:9F:99:14:4B:0A:4C:9D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cb4127-8e06-47d9-bdf1-c888b20489fc/1/3j06mElcJ7nONQrluJ-ZFEsKTJ0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 199691 Signature Algorithm: sha256WithRSAEncryption 99:cc:d2:c3:b4:01:da:c0:15:b3:63:f8:d1:a3:63:fb:62:9c: b4:8f:1c:b2:dc:d9:c1:5c:d4:4c:e4:80:18:30:e0:7a:06:4c: ba:21:53:f9:77:20:6d:db:a6:69:c3:b1:91:e7:e7:e9:1d:d4: 41:ad:bb:dc:09:25:47:0c:16:5f:ea:c5:bb:ae:bb:8f:6e:60: 73:6b:b9:f8:69:4f:97:77:96:88:fb:c0:f9:7c:71:8d:0d:72: 9f:e1:c7:fc:26:d6:ce:48:be:d2:2b:12:b8:43:6c:f5:17:f5: 78:ab:00:90:f1:e0:d5:40:61:1d:73:46:e4:7a:bb:14:79:ed: 56:7b:54:7f:21:02:2f:5d:b2:cd:ff:ed:c4:a9:59:b2:13:cb: 00:c1:db:fa:5b:9a:2e:65:06:88:99:59:26:63:b0:e4:0d:99: cc:e2:0f:ca:cf:58:22:57:b8:58:f2:49:20:40:f2:08:6b:ff: 11:5d:fa:5f:e2:92:00:0c:e7:f4:74:80:28:f3:15:58:34:81: 36:ad:40:46:09:0a:d2:a2:32:7e:43:cc:45:72:ef:67:b6:f1: fd:98:d2:56:3e:70:4c:bf:05:c5:66:33:79:61:fb:a2:27:c4: 14:ce:56:c8:a6:8a:f8:b8:01:be:69:40:81:4b:81:3b:db:c9: 69:eb:fc:77 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt7o8vXuZ524v9EKw3OIpP8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTNkM2E5ODQ5NWMyN2I5Y2UzNTBhZTViODlmOTkxNDRiMGE0YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJkb94dJRvzDxteQwl1mIyGC0G1X UrF0u75nFAifp692paupTDEVn2o2qMgOYkF888/197Ik8wZGyxMbsIuGQWoh4Kwj mB6ue4O1RF7EdUbSIsbdJko5VUcMpjx0Wttm3cmxis8NE0Oobc44OwGWdWla9x2/ N/QfU6xWvBo9fhUuAYnqsCZO4YOcWnWRHM3dEY/PKqNrgVfcTApvjURI3s5Gp3T0 TT8AOaLNLHJq/NcbJdz7LLBAH048Poh5/KkMbWUz2JLWzSSc79CTKZbytmk7dtOs OqV3JXHpBL088OVSGgf+sBAAXlOw203Fb9s8bPi2sPEj189P09YNx/9SVwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFN49OphJXCe5zjUK5bifmRRLCkydMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I3L2NiNDEy Ny04ZTA2LTQ3ZDktYmRmMS1jODg4YjIwNDg5ZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjcvY2I0MTI3 LThlMDYtNDdkOS1iZGYxLWM4ODhiMjA0ODlmYy8xLzNqMDZtRWxjSjduT05Rcmx1 Si1aRkVzS1RKMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMMCzANBgkqhkiG9w0BAQsFAAOCAQEAmczSw7QB2sAV s2P40aNj+2KctI8cstzZwVzUTOSAGDDgegZMuiFT+XcgbdumacOxkefn6R3UQa27 3AklRwwWX+rFu667j25gc2u5+GlPl3eWiPvA+XxxjQ1yn+HH/CbWzki+0isSuENs 9Rf1eKsAkPHg1UBhHXNG5Hq7FHntVntUfyECL12yzf/txKlZshPLAMHb+luaLmUG iJlZJmOw5A2ZzOIPys9YIle4WPJJIEDyCGv/EV36X+KSAAzn9HSAKPMVWDSBNq1A RgkK0qIyfkPMRXLvZ7bx/ZjSVj5wTL8FxWYzeWH7oifEFM5WyKaK+LgBvmlAgUuB O9vJaev8dw== -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:16 2026 by rpki-client