This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer File: 3mZANXrkrhD8Cz6dmPKgywEYkDw.cer (raw, json) Hash identifier: cSSZ1KMvsTKGqhjFM7EZ7HQyZJEVgGZTU4+cKjdoZF0= Subject key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA50B3B425D68F92E9E952950EABC4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 15917 IP: 194.32.221.0/24 IP: 194.169.16.0/20 IP: 217.31.0.0/20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0b:3b:42:5d:68:f9:2e:9e:95:29:50:ea:bc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:66:5c:28:c3:f9:5b:f8:0e:07:f2:c9:0a:14: 1f:d2:b1:b9:cc:5d:f2:05:75:a9:d4:b9:4c:94:c8: fc:e0:e3:d2:ba:b3:16:c0:6d:ec:bb:97:9c:d9:61: ef:af:43:8f:8b:3d:2b:89:c5:55:d0:b4:f7:98:8d: 59:8e:84:10:54:83:81:ed:77:49:81:d3:cc:4f:25: 4e:a0:96:71:8d:09:83:53:dd:dd:f2:66:f6:19:69: 96:d6:01:38:d9:ff:3a:2e:fa:48:27:7d:21:d9:97: 05:68:a7:9b:2d:33:33:24:42:5f:bf:58:d9:56:b9: 27:69:5a:6e:e8:56:1e:4d:b3:33:51:43:67:bf:02: dd:2a:88:58:35:17:68:24:42:e8:68:b8:f0:3f:f2: b8:c3:5a:8d:a0:25:32:95:12:a7:46:c8:e5:50:c7: 8f:b3:66:06:a5:85:b4:b1:cb:59:db:be:e8:ab:1b: 3c:62:22:62:56:75:ab:6c:02:a3:09:c6:a7:06:48: db:f0:b2:79:6b:fa:fb:8e:4a:2e:3b:8f:8e:9c:5c: 56:e2:18:89:03:6d:e6:4e:19:e6:c2:b3:a4:ae:aa: ad:ff:ef:43:96:1a:d1:6c:e1:72:e2:8f:75:cb:43: 3d:9a:b2:71:fc:42:24:8c:cb:55:70:74:91:76:b6: 48:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.221.0/24 194.169.16.0/20 217.31.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15917 Signature Algorithm: sha256WithRSAEncryption 97:4b:00:4d:a7:0f:d2:b2:ec:ca:11:e0:27:f4:82:87:fe:86: ea:58:88:81:b3:c5:c1:03:93:1a:d2:3c:e7:ec:37:a4:a7:ef: be:da:b3:dc:df:36:6f:6a:5b:02:f0:b5:a2:4b:a4:a8:ae:a0: ef:64:6e:c1:07:84:d7:81:9a:d2:85:a9:b5:52:c1:cf:64:88: ac:d0:4f:ec:a0:a2:90:22:5c:6e:30:68:9a:10:2b:33:5b:5e: ee:4a:f3:42:87:c4:15:93:46:ab:b1:f4:c7:f3:8f:90:3c:41: ff:74:e4:11:0a:0d:e0:e1:28:f7:5e:c1:92:2d:50:c3:c9:48: 78:ef:90:13:90:b4:d5:5f:91:40:4a:00:cf:78:3b:e5:bc:f3: 37:50:fb:60:d5:c3:aa:be:bf:c9:65:e3:24:5b:f5:9c:dd:7a: d2:8a:7e:ed:69:5f:79:45:1a:f6:fd:a2:d4:11:82:13:7f:fa: 8c:a9:77:8b:2f:56:b8:d3:d8:9d:08:a2:72:ce:06:cb:84:3b: 95:bf:3d:a2:78:cd:70:89:de:10:3e:98:9f:e7:76:9b:43:9d: 84:56:b5:c0:34:e2:c9:e6:cc:f9:fc:9f:3f:c3:65:86:a3:c0: 2d:a7:9c:2b:0f:3d:81:19:40:41:5a:2a:50:b4:81:73:f8:5b: 3f:3b:61:20 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt7pQs7Ql1o+S6elSlQ6rxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTY2NDAzNTdhZTRhZTEwZmMwYjNlOWQ5OGYyYTBjYjAxMTg5MDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mZcKMP5W/gOB/LJChQf0rG5zF3y BXWp1LlMlMj84OPSurMWwG3su5ec2WHvr0OPiz0ricVV0LT3mI1ZjoQQVIOB7XdJ gdPMTyVOoJZxjQmDU93d8mb2GWmW1gE42f86LvpIJ30h2ZcFaKebLTMzJEJfv1jZ VrknaVpu6FYeTbMzUUNnvwLdKohYNRdoJELoaLjwP/K4w1qNoCUylRKnRsjlUMeP s2YGpYW0sctZ277oqxs8YiJiVnWrbAKjCcanBkjb8LJ5a/r7jkouO4+OnFxW4hiJ A23mThnmwrOkrqqt/+9DlhrRbOFy4o91y0M9mrJx/EIkjMtVcHSRdrZIEQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFN5mQDV65K4Q/As+nZjyoMsBGJA8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RlL2FkMTlj MC0wMDI1LTRjNDktODQ4MC1mZjk3ZjYyYTA5NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYWQxOWMw LTAwMjUtNGM0OS04NDgwLWZmOTdmNjJhMDk0NS8xLzNtWkFOWHJrcmhEOEN6NmRt UEtneXdFWWtEdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQAwiDdAwQEwqkQAwQE2R8AMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAj4tMA0GCSqGSIb3DQEBCwUAA4IBAQCXSwBNpw/SsuzKEeAn 9IKH/obqWIiBs8XBA5Ma0jzn7Dekp+++2rPc3zZvalsC8LWiS6SorqDvZG7BB4TX gZrSham1UsHPZIis0E/soKKQIlxuMGiaECszW17uSvNCh8QVk0arsfTH84+QPEH/ dOQRCg3g4Sj3XsGSLVDDyUh475ATkLTVX5FASgDPeDvlvPM3UPtg1cOqvr/JZeMk W/Wc3XrSin7taV95RRr2/aLUEYITf/qMqXeLL1a409idCKJyzgbLhDuVvz2ieM1w id4QPpif53abQ52EVrXANOLJ5sz5/J8/w2WGo8Atp5wrDz2BGUBBWipQtIFz+Fs/ O2Eg -----END CERTIFICATE-----Generated at Mon Feb 9 15:14:43 2026 by rpki-client