This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.cer (raw, json) Hash identifier: JKVjyd/qq8s7UdgntriOIRbscnu9SX+JGSFIMkUhv2o= Subject key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED21ED8D7F6BA36EBBD81B9F81CD2B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:54 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8540 AS: 205629 IP: 185.211.216.0/22 IP: 185.228.32.0/22 IP: 2a0b:6c40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:21:ed:8d:7f:6b:a3:6e:bb:d8:1b:9f:81:cd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de63eb6319ba454d397645945ce5439576fac741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:96:5f:b9:14:f9:bb:00:49:82:bb:0a:03: f6:f5:4f:7f:c5:63:4b:29:2c:e4:de:78:8d:18:65: 97:2e:1d:bd:b9:2d:71:a2:c8:a2:05:91:e3:bf:8e: a6:dd:e0:83:cb:77:da:65:9c:96:e2:82:e9:35:54: 5f:ef:24:6e:50:55:f9:db:5e:51:dc:bf:cd:18:ac: 7b:48:60:09:6f:fb:9a:c9:ad:b7:86:53:4e:d6:56: 07:f9:74:ba:e7:43:14:f0:22:2d:15:1b:f8:6b:52: 8e:8a:a7:3d:a5:42:68:4f:ff:82:c7:3e:81:c1:e8: 4d:6c:93:91:fd:99:2d:2f:14:4e:c0:2e:db:7a:1f: af:08:89:7b:13:8d:ba:57:19:cc:c3:37:94:bf:6f: c8:65:2e:ab:73:81:50:f3:1d:dd:f1:d2:7b:7a:4b: e4:8f:b2:04:30:8a:83:76:d3:ef:c3:c2:23:df:ba: 27:6f:8d:a5:46:af:fa:ec:c9:97:56:a2:d5:b9:6c: 0e:c0:f8:8b:e3:a7:11:f2:9c:25:c5:75:92:39:0c: a7:cc:64:3f:35:a1:e6:c9:c2:29:23:ef:b9:64:d0: 23:a4:ef:0d:66:ec:4d:b4:7e:93:57:44:de:2a:f9: 52:d5:e6:b1:d6:58:cc:34:28:ae:df:2d:a5:bd:bc: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.216.0/22 185.228.32.0/22 IPv6: 2a0b:6c40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8540 205629 Signature Algorithm: sha256WithRSAEncryption 34:1e:8d:43:17:60:1c:df:ce:3f:8d:6b:df:a3:8e:e3:cc:4c: bf:14:19:a9:e9:6b:72:25:ec:1c:45:37:fa:38:7d:5c:02:6c: 35:a1:bf:70:46:d2:c6:0e:22:be:1a:9a:74:ba:f3:8a:5b:b6: 37:60:02:c5:65:c9:9b:49:5f:f9:6c:e1:20:6b:ec:93:19:92: d1:a0:47:3c:91:55:b3:28:c1:b5:86:e6:c5:2b:0f:37:6f:ca: 14:b7:c9:9f:e7:3a:ef:d1:a6:95:56:bd:88:23:91:b8:51:1f: 0a:87:5c:ce:f9:c1:41:00:55:e0:62:77:d3:c9:56:47:ae:70: 85:17:11:ed:c7:69:ca:ef:a9:fd:29:56:f3:d5:df:a3:f9:8f: 5a:e7:07:3d:0d:9b:e0:0b:99:4c:b4:a1:f7:dd:a6:84:45:54: 06:14:c8:2d:45:6f:90:60:62:c5:0e:e9:e8:ea:f0:68:af:5b: 50:27:2c:c4:72:cd:66:ff:e7:63:d5:85:c4:fe:e6:29:6a:e0: b5:2e:32:a5:96:39:73:fe:a0:a4:b9:e2:34:04:bf:b6:84:67: f3:20:12:aa:b8:29:59:a7:7e:67:d0:70:d1:b3:67:e1:9c:68: a7:c0:98:a0:30:bf:c4:12:29:d6:be:d8:2b:d4:b9:e0:01:d1: be:be:1d:4f -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgISAZt87SHtjX9ro2672Bufgc0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTYzZWI2MzE5YmE0NTRkMzk3NjQ1OTQ1Y2U1NDM5NTc2ZmFjNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX2WX7kU+bsASYK7CgP29U9/xWNL KSzk3niNGGWXLh29uS1xosiiBZHjv46m3eCDy3faZZyW4oLpNVRf7yRuUFX5215R 3L/NGKx7SGAJb/uaya23hlNO1lYH+XS650MU8CItFRv4a1KOiqc9pUJoT/+Cxz6B wehNbJOR/ZktLxROwC7beh+vCIl7E426VxnMwzeUv2/IZS6rc4FQ8x3d8dJ7ekvk j7IEMIqDdtPvw8Ij37onb42lRq/67MmXVqLVuWwOwPiL46cR8pwlxXWSOQynzGQ/ NaHmycIpI++5ZNAjpO8NZuxNtH6TV0TeKvlS1eax1ljMNCiu3y2lvby+XwIDAQAB o4ICuTCCArUwHQYDVR0OBBYEFN5j62MZukVNOXZFlFzlQ5V2+sdBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzkzMjdh Ny04MWJmLTRmN2QtOWY1Yy0xZTE4ZjViNDkwNWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvOTMyN2E3 LTgxYmYtNGY3ZC05ZjVjLTFlMThmNWI0OTA1ZC8xLzNtUHJZeG02UlUwNWRrV1VY T1ZEbFhiNngwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCudPYAwQCueQgMA0EAgACMAcDBQMqC2xAMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAiFcAgMDIz0wDQYJKoZIhvcNAQELBQADggEB ADQejUMXYBzfzj+Na9+jjuPMTL8UGanpa3Il7BxFN/o4fVwCbDWhv3BG0sYOIr4a mnS684pbtjdgAsVlyZtJX/ls4SBr7JMZktGgRzyRVbMowbWG5sUrDzdvyhS3yZ/n Ou/RppVWvYgjkbhRHwqHXM75wUEAVeBid9PJVkeucIUXEe3Hacrvqf0pVvPV36P5 j1rnBz0Nm+ALmUy0offdpoRFVAYUyC1Fb5BgYsUO6ejq8GivW1AnLMRyzWb/52PV hcT+5ilq4LUuMqWWOXP+oKS54jQEv7aEZ/MgEqq4KVmnfmfQcNGzZ+GcaKfAmKAw v8QSKda+2CvUueAB0b6+HU8= -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:16 2026 by rpki-client