This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.cer (raw, json) Hash identifier: Y/SHWBWrUdT6wIEgeydwAW2EjQpsTzqjCOW6BW07/oo= Subject key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910F7B5229E396238BC79A5C38E159F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 47172 AS: 209829 IP: 37.218.240.0/21 IP: 185.88.140.0/22 IP: 185.200.104.0/22 IP: 193.29.139.0/24 IP: 195.190.28.0/24 IP: 213.108.104.0/21 IP: 2a00:c6c0::/32 IP: 2a10:1dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f7:b5:22:9e:39:62:38:bc:79:a5:c3:8e:15:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:70:e4:aa:79:6d:28:3c:71:9b:47:4e:cb: 47:08:67:93:81:66:bd:ea:7d:6e:7d:0c:e9:cd:02: 96:fa:17:71:0b:00:7e:0b:7f:88:81:74:fe:58:1c: 73:c8:1a:fb:01:50:10:76:f6:61:2e:0f:81:ff:d2: 9c:f1:9b:25:b3:af:35:f3:43:6e:42:1b:b1:6e:c3: 99:e5:d1:a5:a1:7b:c4:dc:de:f4:c3:7d:f5:f1:76: a3:a7:6d:78:fe:fa:4f:76:2f:6c:1f:37:27:70:00: b6:75:e3:f2:e5:06:63:5c:bc:08:44:4b:0a:29:0d: 40:48:2a:33:bc:1a:58:e1:f6:12:4f:9e:5d:a7:c4: 31:45:63:22:08:a6:91:e9:9c:64:ea:3e:ef:23:e3: b8:38:ec:7c:29:1b:a3:4d:17:f8:91:6f:c3:c4:db: a0:bf:2f:89:fa:55:ad:7c:79:2e:12:e6:62:aa:68: 80:7e:cf:e0:8e:c8:0d:39:f9:cb:ff:4c:02:11:b7: c9:5e:2a:eb:67:03:01:d6:8d:1d:6d:7d:00:c8:cb: f1:2a:7a:98:ff:36:96:56:c2:2f:3f:89:f6:12:82: cd:74:ce:9a:d5:50:a9:51:65:00:c6:e0:4a:d7:28: a5:91:ea:2f:9b:cc:10:15:87:13:e6:ab:7e:30:8a: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.218.240.0/21 185.88.140.0/22 185.200.104.0/22 193.29.139.0/24 195.190.28.0/24 213.108.104.0/21 IPv6: 2a00:c6c0::/32 2a10:1dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47172 209829 Signature Algorithm: sha256WithRSAEncryption 00:92:66:90:83:eb:90:f1:a8:a7:23:bb:4b:51:0d:b6:fb:4d: d7:69:ce:a3:d0:ae:68:5b:21:0d:ec:07:04:63:52:a2:bf:6b: 9f:65:37:7d:2e:9e:7f:ff:bc:fe:b2:55:28:b4:99:44:18:c6: 97:3c:c6:44:ab:01:6b:44:28:36:91:d2:4d:7e:ec:76:0a:56: bb:cf:b4:6a:05:7c:63:50:1f:b0:13:52:c4:23:11:1b:5b:4f: 4a:be:c5:2b:10:c2:65:0a:20:2d:34:30:76:41:82:12:23:3e: 90:f6:db:c7:7a:50:ce:1a:48:bb:14:6b:0c:72:af:64:1f:d4: 1d:f4:cc:cc:5a:87:95:cb:ad:ca:7e:7a:dd:44:d9:13:fc:72: ab:6e:dd:ca:7d:3f:ea:10:54:7e:49:a3:b1:2a:4f:34:2c:60: 59:19:af:45:16:49:d0:2b:09:3d:37:8b:d6:95:9b:06:d3:87: 2f:e9:00:a8:99:3e:81:b3:1a:09:3c:c2:87:42:fd:80:2a:0b: 13:12:d9:85:47:96:c6:ab:a3:34:7b:92:0d:37:d1:1b:fa:f1: af:cd:59:26:35:a0:d3:2e:dc:51:9d:49:0b:bd:ae:7a:02:35: d2:02:e2:31:18:4e:bd:cb:1e:3e:2d:77:32:94:49:e1:00:14: 49:a4:41:97 -----BEGIN CERTIFICATE----- MIIFzTCCBLWgAwIBAgISAZt5EPe1Ip45Yji8eaXDjhWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTkwZDQzMjkzY2ZlYmY4N2U3ZWFiMmIwZDU1M2ZkMjFhNmU5NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGJw5Kp5bSg8cZtHTstHCGeTgWa9 6n1ufQzpzQKW+hdxCwB+C3+IgXT+WBxzyBr7AVAQdvZhLg+B/9Kc8Zsls68180Nu QhuxbsOZ5dGloXvE3N70w3318Xajp214/vpPdi9sHzcncAC2dePy5QZjXLwIREsK KQ1ASCozvBpY4fYST55dp8QxRWMiCKaR6Zxk6j7vI+O4OOx8KRujTRf4kW/DxNug vy+J+lWtfHkuEuZiqmiAfs/gjsgNOfnL/0wCEbfJXirrZwMB1o0dbX0AyMvxKnqY /zaWVsIvP4n2EoLNdM6a1VCpUWUAxuBK1yilkeovm8wQFYcT5qt+MIp1lQIDAQAB o4IC2TCCAtUwHQYDVR0OBBYEFN6Q1DKTz+v4fn6rKw1VP9IabpZBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NiLzY0N2Vi YS1kNjY2LTQ5YzctYTA4OS01M2VkYzYyNmIyODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvNjQ3ZWJh LWQ2NjYtNDljNy1hMDg5LTUzZWRjNjI2YjI4Ny8xLzNwRFVNcFBQNl9oLWZxc3JE VlVfMGhwdWxrRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF BwEHAQH/BEQwQjAqBAIAATAkAwQDJdrwAwQCuViMAwQCuchoAwQAwR2LAwQAw74c AwQD1WxoMBQEAgACMA4DBQAqAMbAAwUDKhAdwDAfBggrBgEFBQcBCAEB/wQQMA6g DDAKAgMAuEQCAwMzpTANBgkqhkiG9w0BAQsFAAOCAQEAAJJmkIPrkPGopyO7S1EN tvtN12nOo9CuaFshDewHBGNSor9rn2U3fS6ef/+8/rJVKLSZRBjGlzzGRKsBa0Qo NpHSTX7sdgpWu8+0agV8Y1AfsBNSxCMRG1tPSr7FKxDCZQogLTQwdkGCEiM+kPbb x3pQzhpIuxRrDHKvZB/UHfTMzFqHlcutyn563UTZE/xyq27dyn0/6hBUfkmjsSpP NCxgWRmvRRZJ0CsJPTeL1pWbBtOHL+kAqJk+gbMaCTzCh0L9gCoLExLZhUeWxquj NHuSDTfRG/rxr81ZJjWg0y7cUZ1JC72uegI10gLiMRhOvcsePi13MpRJ4QAUSaRB lw== -----END CERTIFICATE-----Generated at Mon Jan 26 16:01:27 2026 by rpki-client