This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer File: 3kVs200UA0XD3K6_x2NNTnzcuRM.cer (raw, json) Hash identifier: Zw7a3UV9M4pyS/mTkstV5W9mDGUgZpZgNLjHGN/VR+Q= Subject key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EBBD4B5A69E85E90DC5A23B17FDC67 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47555 AS: 56501 AS: 204561 IP: 45.148.49.0/24 IP: 109.69.218.0/24 IP: 128.127.180.0/22 IP: 178.211.131.0/24 IP: 185.99.48.0/22 IP: 185.192.44.0/22 IP: 193.105.133.0/24 IP: 193.138.101.0/24 IP: 2a00:8da0::/32 IP: 2a05:8a40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bd:4b:5a:69:e8:5e:90:dc:5a:23:b1:7f:dc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d2:6a:2a:08:73:bc:3d:d0:3e:b5:3d:92:80: 91:9d:44:3b:1c:92:e3:f0:67:6e:ea:43:db:5a:89: 22:95:e0:10:74:34:35:8c:bc:dd:6a:25:d3:eb:18: fa:01:b3:67:f7:de:bd:0b:8d:ff:71:93:29:4e:e9: a9:31:c0:68:cd:bf:d1:c3:cc:aa:68:17:5c:ce:70: d0:b3:ee:2f:e0:b1:5f:c4:15:84:47:ff:9e:6f:93: c3:26:44:17:47:cf:4b:ae:84:8c:77:40:e1:36:c4: a9:9c:aa:6c:af:4f:67:dd:48:3f:29:07:a0:8b:73: f2:32:a3:c0:6c:6e:e3:87:dd:ad:70:06:82:a4:76: 1f:68:c1:6e:d2:90:a0:fa:6a:93:fd:8b:34:ba:4d: 18:89:fc:5d:49:24:73:ea:58:d5:0e:93:2e:1f:05: ae:2e:e0:f9:b6:be:4e:55:c9:1f:59:ba:05:c3:38: 1b:44:61:d7:a3:36:8d:7e:4c:aa:2b:54:ee:5d:b5: f1:c4:86:32:ba:9c:7e:8f:04:94:7a:8a:bd:c9:49: b1:46:6b:2a:9f:fe:5a:51:5e:38:e4:cb:80:64:52: 30:d7:43:34:e3:9c:1d:5b:d0:05:3b:cf:7d:3e:51: ac:24:2f:93:0f:ab:3c:71:75:d2:7f:c0:29:a2:15: f8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.49.0/24 109.69.218.0/24 128.127.180.0/22 178.211.131.0/24 185.99.48.0/22 185.192.44.0/22 193.105.133.0/24 193.138.101.0/24 IPv6: 2a00:8da0::/32 2a05:8a40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47555 56501 204561 Signature Algorithm: sha256WithRSAEncryption 58:68:8a:ec:0f:70:5f:08:30:ad:09:a1:d2:bc:98:75:4c:1e: 41:6c:a4:af:04:f4:96:45:bf:b2:ad:d1:c2:81:a9:40:59:8f: 98:c0:23:26:eb:a9:8f:2c:5b:18:b1:c0:e9:75:74:9c:b7:3b: 68:b5:20:07:e7:2d:14:4c:06:18:0d:6d:91:0f:3c:7b:35:31: 81:29:6d:a3:3f:7e:a8:59:f4:25:17:7a:f1:1f:e1:07:b5:ad: 2d:26:67:63:68:00:c8:cc:49:ac:1c:16:aa:86:c4:67:cb:5f: 25:d2:99:19:b5:30:6b:5a:7f:47:10:8c:67:66:92:33:07:d4: da:5f:38:02:d0:34:20:1d:ec:be:cd:1f:02:97:01:5b:57:80: 39:ea:72:17:39:5d:e4:55:3a:de:0e:ef:9f:03:d3:61:19:cc: e5:81:c9:bd:db:d3:5e:21:54:47:4d:db:8e:c7:ff:08:b9:ea: 4e:07:2f:c4:bc:ae:aa:28:e9:6f:59:46:c7:93:4f:24:f5:67: b9:e4:44:8d:9f:21:38:93:60:2f:da:3b:23:52:29:b2:53:b9: 42:67:ef:74:22:6d:b7:34:b6:5f:90:19:03:bc:59:5b:4c:70: b7:e8:d2:a7:07:e8:48:14:b2:1a:63:44:1d:93:12:b5:d2:bb: a8:f1:6a:73 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZt5671LWmnoXpDcWiOxf9xnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTQ1NmNkYjRkMTQwMzQ1YzNkY2FlYmZjNzYzNGQ0ZTdjZGNiOTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttJqKghzvD3QPrU9koCRnUQ7HJLj 8Gdu6kPbWokileAQdDQ1jLzdaiXT6xj6AbNn9969C43/cZMpTumpMcBozb/Rw8yq aBdcznDQs+4v4LFfxBWER/+eb5PDJkQXR89LroSMd0DhNsSpnKpsr09n3Ug/KQeg i3PyMqPAbG7jh92tcAaCpHYfaMFu0pCg+mqT/Ys0uk0YifxdSSRz6ljVDpMuHwWu LuD5tr5OVckfWboFwzgbRGHXozaNfkyqK1TuXbXxxIYyupx+jwSUeoq9yUmxRmsq n/5aUV445MuAZFIw10M045wdW9AFO899PlGsJC+TD6s8cXXSf8ApohX4uQIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFN5FbNtNFANFw9yuv8djTU583LkTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzIwY2Iz My1lMmJmLTQ2YWEtYWJmYS05MjhlN2JjNjk1NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMjBjYjMz LWUyYmYtNDZhYS1hYmZhLTkyOGU3YmM2OTU3MC8xLzNrVnMyMDBVQTBYRDNLNl94 Mk5OVG56Y3VSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GCCsGAQUF BwEHAQH/BFAwTjA2BAIAATAwAwQALZQxAwQAbUXaAwQCgH+0AwQAstODAwQCuWMw AwQCucAsAwQAwWmFAwQAwYplMBQEAgACMA4DBQAqAI2gAwUDKgWKQDAkBggrBgEF BQcBCAEB/wQVMBOgETAPAgMAucMCAwDctQIDAx8RMA0GCSqGSIb3DQEBCwUAA4IB AQBYaIrsD3BfCDCtCaHSvJh1TB5BbKSvBPSWRb+yrdHCgalAWY+YwCMm66mPLFsY scDpdXSctztotSAH5y0UTAYYDW2RDzx7NTGBKW2jP36oWfQlF3rxH+EHta0tJmdj aADIzEmsHBaqhsRny18l0pkZtTBrWn9HEIxnZpIzB9TaXzgC0DQgHey+zR8ClwFb V4A56nIXOV3kVTreDu+fA9NhGczlgcm929NeIVRHTduOx/8IuepOBy/EvK6qKOlv WUbHk08k9We55ESNnyE4k2Av2jsjUimyU7lCZ+90Im23NLZfkBkDvFlbTHC36NKn B+hIFLIaY0QdkxK10ruo8Wpz -----END CERTIFICATE-----Generated at Tue Feb 10 02:49:36 2026 by rpki-client