This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.cer (raw, json) Hash identifier: i1ZQot9aeFnhdbkbuofF4ndabszISHw0g94mpuAPEdw= Subject key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79ECFC4C8060B2A53617B038D9671A3A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212730 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:fc:4c:80:60:b2:a5:36:17:b0:38:d9:67:1a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:1d:d2:59:0d:88:6a:dd:74:9f:bf:e7:13:7e: c5:e5:64:a1:b8:2c:3b:61:a4:24:7b:3e:ed:54:d9: 0c:9e:1f:71:cd:a9:6e:0f:fb:62:62:cf:2d:74:ba: 5e:65:84:7b:d5:45:0a:2a:55:63:f6:94:c9:84:9b: 69:88:90:fa:d4:47:39:57:e4:a7:20:46:d0:0e:42: 9e:e9:2c:a9:40:62:20:21:65:19:42:4d:4e:f9:00: 46:51:b8:72:65:cc:86:d0:c2:e9:e7:f3:b6:54:4c: 46:76:e1:e0:90:3a:75:6e:f0:a0:cf:51:6e:86:d4: 9b:b4:e3:c0:09:5c:e3:37:d1:70:1c:ea:eb:e8:8b: a5:dd:0d:26:39:bf:c4:b4:bd:9e:0c:a3:1c:47:7a: fd:05:00:a5:50:7d:ee:1b:bc:01:53:23:80:8f:8e: 50:e9:3f:50:d6:bf:2b:c3:78:cb:97:88:a7:17:3c: c5:8b:1f:e4:df:77:89:bb:8a:43:3c:83:cd:2e:4e: f7:29:30:a0:d8:10:48:ea:e5:06:2b:f9:6b:93:a5: 7b:bc:4d:c3:ab:b8:ad:05:71:0c:4f:2b:1c:ec:4f: 48:72:6d:2f:33:ea:00:34:8b:0e:e0:be:80:ce:83: 49:8e:5b:b8:03:5d:c0:32:e8:87:9b:c7:49:27:5a: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212730 Signature Algorithm: sha256WithRSAEncryption 76:50:a6:5a:3e:3e:47:8f:65:89:f1:11:f8:db:d4:83:7b:87: df:fc:b6:ac:dd:f5:2b:d6:72:64:f8:fb:fd:95:fa:1d:7b:15: 06:38:e3:fc:08:f2:b2:b3:1c:6f:de:55:54:0b:e7:10:60:26: f4:d2:6a:43:d9:31:c4:e4:55:7e:ca:e3:ba:fa:ce:ac:35:85: 3a:f2:69:75:d4:7d:73:b3:3f:21:8f:a0:e6:28:d1:02:35:bf: 29:f2:f9:f8:a7:2b:ca:66:c0:a8:e3:59:64:0e:72:a8:3a:ef: 17:e6:d6:e8:35:b8:84:00:5d:23:4f:28:23:02:4e:fb:dd:7b: e5:83:be:e6:e9:a6:5d:fb:0e:c9:5d:92:a0:44:a6:cc:be:82: ac:92:31:3f:13:fd:bb:c0:c5:f3:41:fa:97:cd:e6:38:64:b9: 7f:f3:85:50:0f:e0:6f:65:72:99:f7:10:76:19:46:c2:a4:22: bd:8e:d0:8d:e2:a3:b5:2d:5e:26:cf:74:ed:be:87:74:88:19: b3:1d:3f:16:03:e3:ce:19:e7:30:1d:82:cb:c1:2e:d4:29:5e: 3e:74:b3:3e:7f:f7:fd:f5:0a:38:51:b2:70:6a:3f:47:29:96: 53:cd:ba:13:f1:f5:4d:00:58:35:4c:a1:56:56:29:88:ad:81: aa:4b:cc:fa -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt57PxMgGCypTYXsDjZZxo6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTk5NzExNjdmOTNmYzM0YjNiYzQ3OWJiMjFmZjYyZDNiZjNjOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1x3SWQ2Iat10n7/nE37F5WShuCw7 YaQkez7tVNkMnh9xzaluD/tiYs8tdLpeZYR71UUKKlVj9pTJhJtpiJD61Ec5V+Sn IEbQDkKe6SypQGIgIWUZQk1O+QBGUbhyZcyG0MLp5/O2VExGduHgkDp1bvCgz1Fu htSbtOPACVzjN9FwHOrr6Iul3Q0mOb/EtL2eDKMcR3r9BQClUH3uG7wBUyOAj45Q 6T9Q1r8rw3jLl4inFzzFix/k33eJu4pDPIPNLk73KTCg2BBI6uUGK/lrk6V7vE3D q7itBXEMTysc7E9Icm0vM+oANIsO4L6AzoNJjlu4A13AMuiHm8dJJ1q48QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFN6ZcRZ/k/w0s7xHm7If9i0788mEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIxL2Q5YmU0 MC1jZDQyLTRhNmMtOWQ0ZS0xZGZiZDFlZmQ1ZDQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjEvZDliZTQw LWNkNDItNGE2Yy05ZDRlLTFkZmJkMWVmZDVkNC8xLzNwbHhGbi1UX0RTenZFZWJz aF8yTFR2enlZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM++jANBgkqhkiG9w0BAQsFAAOCAQEAdlCmWj4+R49l ifER+NvUg3uH3/y2rN31K9ZyZPj7/ZX6HXsVBjjj/AjysrMcb95VVAvnEGAm9NJq Q9kxxORVfsrjuvrOrDWFOvJpddR9c7M/IY+g5ijRAjW/KfL5+KcrymbAqONZZA5y qDrvF+bW6DW4hABdI08oIwJO+9175YO+5ummXfsOyV2SoESmzL6CrJIxPxP9u8DF 80H6l83mOGS5f/OFUA/gb2VymfcQdhlGwqQivY7QjeKjtS1eJs907b6HdIgZsx0/ FgPjzhnnMB2Cy8Eu1ClePnSzPn/3/fUKOFGycGo/RymWU826E/H1TQBYNUyhVlYp iK2BqkvM+g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:01 2026 by rpki-client