This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer (raw, json) Hash identifier: RQCUjsk+L29JaI7l/UvVNXt+37aBPvCqon3GnPDmkrc= Subject key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F815BC7C1EB7DCC931F846AD7EC31DB Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:19:02 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215756 IP: 194.1.176.0/24 IP: 2001:678:8cc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:5b:c7:c1:eb:7d:cc:93:1f:84:6a:d7:ec:31:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:9f:91:e4:d3:ff:a6:1e:b7:a8:d9:f4:c2: 54:02:bd:84:3e:7d:1b:4a:3b:cd:13:81:06:47:74: 21:2a:6c:4e:be:ed:5c:bc:a5:55:e8:6f:4c:a2:56: 0e:8c:be:7c:40:1b:b8:8d:ca:e9:58:5a:a3:1e:c7: 25:06:29:0f:8a:97:a7:cf:1f:fb:9b:8e:11:fb:54: 69:01:2e:74:7e:f0:42:8e:6b:10:e3:ff:ab:24:c5: b0:58:a8:e3:e6:76:59:7c:e4:03:77:1a:d5:27:39: df:70:e9:c3:f0:df:6c:20:3b:e8:3e:2e:8a:89:8c: f7:9d:db:22:d1:fb:72:7c:85:18:52:5c:7f:db:b5: 8b:50:a7:b8:c1:e9:01:1e:1b:af:3f:48:a4:4c:a5: 7e:23:9b:fb:72:01:f1:41:f8:69:a5:fd:d9:46:fd: b5:ba:31:9e:67:17:fc:d3:8d:7a:90:ea:d6:00:63: 90:f0:58:f0:9e:6d:ca:47:b1:e9:87:90:4e:dd:8c: 92:35:53:7b:d2:f4:c9:49:dd:41:75:dd:d0:d9:9c: 07:ac:88:a3:f6:f4:14:66:a1:e8:45:ec:55:a5:4b: 95:4c:65:15:19:49:d5:aa:c7:b0:7b:4e:81:be:16: 5d:fa:79:68:0d:e0:eb:25:1b:9f:68:23:83:8b:ed: b8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.1.176.0/24 IPv6: 2001:678:8cc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215756 Signature Algorithm: sha256WithRSAEncryption 7b:e4:9c:7e:93:58:f4:dc:35:f5:4c:ed:05:f5:c4:c5:f6:1e: 2b:cb:f6:b1:f2:af:9b:0e:e1:1c:d1:bc:ea:d5:39:a1:ac:0e: d5:7a:fe:8c:5d:ac:87:33:32:76:d8:1c:a7:5a:98:0b:6f:f2: 6e:b5:32:84:e0:2c:c3:a3:de:7b:c1:87:3e:fd:f5:fb:0e:cd: ac:0c:17:0a:4d:d9:aa:81:85:b4:ff:31:67:28:a5:31:62:90: a9:b4:7c:ac:83:ff:54:a4:b0:d1:a6:d4:36:4e:03:8f:04:c5: 10:bd:9e:94:d2:6a:53:42:6a:e4:e8:bb:31:04:64:a1:79:7e: a4:38:9c:5d:6a:7f:07:6e:6f:79:a4:83:99:83:54:a0:08:6a: 57:ad:ca:8d:7d:97:49:c0:fe:5a:9e:b9:e7:bf:ad:e8:ac:7c: cf:e6:70:05:23:92:12:6a:fd:77:a4:51:7b:72:f5:ff:e4:ed: 50:46:f6:f2:73:57:1b:28:b3:6d:4f:29:eb:03:e9:6d:b9:0f: 78:01:a0:c2:fd:9a:60:a4:5c:c8:0e:c9:47:0a:87:e8:22:5b: a1:23:af:f4:da:71:62:38:d4:a1:81:64:c7:b8:5f:c6:4c:6e: 6b:a3:5d:ac:5e:06:93:aa:ac:33:0f:ec:ef:10:cf:20:de:c1: 86:5f:e3:cb -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgISAZt/gVvHwet9zJMfhGrX7DHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTVlNmMyMzMwOTExYmMxZGM4YzgzZDQxMWVmNmIxMjA4YjNiYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyafkeTT/6Yet6jZ9MJUAr2EPn0b SjvNE4EGR3QhKmxOvu1cvKVV6G9MolYOjL58QBu4jcrpWFqjHsclBikPipenzx/7 m44R+1RpAS50fvBCjmsQ4/+rJMWwWKjj5nZZfOQDdxrVJznfcOnD8N9sIDvoPi6K iYz3ndsi0ftyfIUYUlx/27WLUKe4wekBHhuvP0ikTKV+I5v7cgHxQfhppf3ZRv21 ujGeZxf80416kOrWAGOQ8Fjwnm3KR7Hph5BO3YySNVN70vTJSd1Bdd3Q2ZwHrIij 9vQUZqHoRexVpUuVTGUVGUnVqsewe06BvhZd+nloDeDrJRufaCODi+24JQIDAQAB o4ICsTCCAq0wHQYDVR0OBBYEFN5ebCMwkRvB3IyD1BHvaxIIs7vWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMxL2RlOWQ3 Mi1mY2Q0LTRjN2MtODljYS1kZTRiYTc4NmY4NzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEvZGU5ZDcy LWZjZDQtNGM3Yy04OWNhLWRlNGJhNzg2Zjg3Mi8xLzNsNXNJekNSRzhIY2pJUFVF ZTlyRWdpenU5WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwgGwMA8EAgACMAkDBwAgAQZ4CMwwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDA0rMMA0GCSqGSIb3DQEBCwUAA4IBAQB75Jx+k1j0 3DX1TO0F9cTF9h4ry/ax8q+bDuEc0bzq1TmhrA7Vev6MXayHMzJ22BynWpgLb/Ju tTKE4CzDo957wYc+/fX7Ds2sDBcKTdmqgYW0/zFnKKUxYpCptHysg/9UpLDRptQ2 TgOPBMUQvZ6U0mpTQmrk6LsxBGSheX6kOJxdan8Hbm95pIOZg1SgCGpXrcqNfZdJ wP5anrnnv63orHzP5nAFI5ISav13pFF7cvX/5O1QRvbyc1cbKLNtTynrA+ltuQ94 AaDC/ZpgpFzIDslHCofoIluhI6/02nFiONShgWTHuF/GTG5ro12sXgaTqqwzD+zv EM8g3sGGX+PL -----END CERTIFICATE-----Generated at Mon Feb 2 12:45:59 2026 by rpki-client