This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer File: 3liIYKFLOUpzUSmEKu-tGnBKMoc.cer (raw, json) Hash identifier: 7etUADTXSy3eZ8Z7VpfQas7MTQfkiysWkBDx9IgQ6co= Subject key identifier: DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA5B7C46E7096C248B8FD627AC6923 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 213436 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5b:7c:46:e7:09:6c:24:8b:8f:d6:27:ac:69:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de588860a14b394a735129842aefad1a704a3287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:ae:29:ea:87:a8:53:e4:05:d1:f8:9d:67: b3:d8:a7:5b:96:94:dd:eb:3f:95:c9:03:ec:8a:85: 56:5f:d5:b9:3c:5a:e2:36:61:b1:2e:8a:4c:bb:1d: 36:87:07:48:d8:db:d2:0f:8d:e7:bd:94:18:3a:77: 5c:5e:06:3e:94:37:40:fe:c0:99:84:49:8d:db:33: b1:46:f3:66:7b:ff:9d:6f:0d:d0:19:a9:91:3d:5f: 69:b4:d7:cf:ec:0a:ec:65:9e:9e:f9:69:7f:0a:88: 0d:52:de:59:c1:42:0d:57:23:4f:c0:8f:24:f9:e3: bd:11:ff:63:52:99:50:55:79:41:83:7a:55:3f:f7: c9:5f:e1:3e:47:24:b7:17:ee:ec:93:b6:24:90:c0: 6c:54:1e:91:45:e4:7b:3f:23:95:a1:3c:a5:9b:9c: a2:f7:c3:6e:69:56:3f:85:6d:8f:7b:25:76:52:6c: d6:33:df:fd:ea:91:69:b7:23:58:e9:b1:3c:8e:8d: 75:13:1d:f4:cb:8a:0d:47:58:1b:d3:08:61:8c:e7: 7f:20:2c:89:47:c2:07:9a:ad:74:44:e8:20:d2:24: eb:51:95:60:df:cb:62:52:a2:71:88:2f:87:71:c2: c5:b7:74:a3:1f:af:9d:48:ab:2d:73:e4:a5:df:9a: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213436 Signature Algorithm: sha256WithRSAEncryption 29:e4:18:3e:d4:ab:2a:4d:43:92:a3:75:e1:e3:44:d6:2c:72: 62:9d:7b:2d:ea:89:35:37:7b:aa:fd:43:05:a0:fe:81:56:b4: 05:59:64:73:72:1c:76:49:b7:8e:38:0f:f3:49:48:69:7e:21: d3:15:ef:b4:ae:b7:2a:aa:3c:c5:72:91:88:47:95:d4:3e:d0: 9e:b6:08:6f:69:ea:cd:4f:c0:84:ec:88:5a:95:2c:f8:32:1f: 16:0e:c5:88:bf:50:cc:15:78:2e:1d:81:c9:dc:f6:4a:4a:a1: 1f:a2:a5:8c:bf:ed:2c:ac:65:d7:5f:d3:98:38:8d:16:ec:6c: 3d:47:18:6b:dc:42:66:2e:39:4e:58:1d:32:d5:c8:73:09:3c: 0d:19:6d:f2:1e:82:52:6e:d7:40:48:c5:24:99:df:9f:f3:32: 21:c8:50:e9:00:8b:d4:c3:b6:aa:cf:3d:af:d5:65:ed:cd:41: 5a:73:e7:9e:80:bf:92:8c:5b:7b:8e:87:31:fb:fb:1b:70:20: 3a:c8:36:6c:1c:a8:4d:78:28:e9:2b:77:f6:d7:33:de:8d:d9: 9f:a5:56:46:7d:b3:d5:6d:e8:8e:35:54:2a:c9:6c:14:d4:20: 75:a6:eb:b4:8a:5f:e3:9d:82:63:40:b9:61:a2:92:ce:e8:50: d6:f5:fa:c1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt9ylt8RucJbCSLj9YnrGkjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTU4ODg2MGExNGIzOTRhNzM1MTI5ODQyYWVmYWQxYTcwNGEzMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl2uKeqHqFPkBdH4nWez2KdblpTd 6z+VyQPsioVWX9W5PFriNmGxLopMux02hwdI2NvSD43nvZQYOndcXgY+lDdA/sCZ hEmN2zOxRvNme/+dbw3QGamRPV9ptNfP7ArsZZ6e+Wl/CogNUt5ZwUINVyNPwI8k +eO9Ef9jUplQVXlBg3pVP/fJX+E+RyS3F+7sk7YkkMBsVB6RReR7PyOVoTylm5yi 98NuaVY/hW2PeyV2UmzWM9/96pFptyNY6bE8jo11Ex30y4oNR1gb0whhjOd/ICyJ R8IHmq10ROgg0iTrUZVg38tiUqJxiC+HccLFt3SjH6+dSKstc+Sl35rwkwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFN5YiGChSzlKc1EphCrvrRpwSjKHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2E1NzAz Ni1mYTRiLTQ3MTQtODM0MC02M2Y2NzlkN2VlMWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvYTU3MDM2 LWZhNGItNDcxNC04MzQwLTYzZjY3OWQ3ZWUxZC8xLzNsaUlZS0ZMT1VwelVTbUVL dS10R25CS01vYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNBvDANBgkqhkiG9w0BAQsFAAOCAQEAKeQYPtSrKk1D kqN14eNE1ixyYp17LeqJNTd7qv1DBaD+gVa0BVlkc3Icdkm3jjgP80lIaX4h0xXv tK63Kqo8xXKRiEeV1D7QnrYIb2nqzU/AhOyIWpUs+DIfFg7FiL9QzBV4Lh2Bydz2 SkqhH6KljL/tLKxl11/TmDiNFuxsPUcYa9xCZi45TlgdMtXIcwk8DRlt8h6CUm7X QEjFJJnfn/MyIchQ6QCL1MO2qs89r9Vl7c1BWnPnnoC/koxbe46HMfv7G3AgOsg2 bByoTXgo6St39tcz3o3Zn6VWRn2z1W3ojjVUKslsFNQgdabrtIpf452CY0C5YaKS zuhQ1vX6wQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:56 2026 by rpki-client