This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer (raw, json) Hash identifier: 7U282qsts27DvLAu7YNJVqO8rRmWNUqv/+vgolui8go= Subject key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E38790FB425488E8121CDCB9F3FD33A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:19:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.44.168.0/22 IP: 2a01:69e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:79:0f:b4:25:48:8e:81:21:cd:cb:9f:3f:d3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dead4c89f7aed8681d0202d22479d86e1462f889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:33:14:79:d5:f0:4b:06:9a:30:e7:59:bb: 7f:85:1a:02:03:3d:0a:dc:f5:f4:88:d9:d4:62:a0: 0a:ad:ae:37:ce:0b:2e:1e:77:23:6a:f7:e4:ad:26: a2:31:f1:bf:6c:b1:e3:fc:9f:cb:50:08:4f:9f:6d: 63:00:d6:25:de:0f:3b:de:95:17:7a:1c:3c:a2:23: 0e:3a:da:52:38:fb:ae:96:81:5f:6e:06:92:16:13: a5:3a:9a:50:a0:37:55:6d:f4:47:82:8d:0a:35:aa: 0a:69:63:ab:4f:aa:da:31:54:d3:29:7f:70:60:37: ba:00:3d:7e:30:71:7b:5b:ca:05:bc:a7:be:62:39: e6:7a:0b:cf:da:c1:4c:d1:ab:66:6e:17:fc:e4:76: 98:a9:17:dd:7c:f2:49:6d:34:1d:1f:3f:c4:b3:6c: e4:86:09:f6:98:a5:af:21:3e:29:55:27:e6:db:c1: 9e:7f:87:fa:c6:84:86:50:0d:e8:f7:13:17:07:c5: 8c:59:3a:bf:2d:f7:1b:df:3f:15:86:2f:93:16:03: 18:05:ef:c9:31:3a:dd:90:54:7f:0b:7d:a8:65:30: 00:b6:bf:c6:46:17:5c:44:a2:e5:36:c6:90:36:31: 7d:c5:a4:8f:ea:8a:50:05:dc:b1:d6:7a:e3:bd:d7: b6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.168.0/22 IPv6: 2a01:69e0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:92:fe:4b:19:ca:87:5a:5d:a4:50:fd:49:81:09:29:67:77: 3e:a3:67:c7:29:b5:07:8b:c2:1b:2e:e3:c5:9d:7c:28:6e:ea: 7a:4f:ec:e8:dd:3f:8a:4e:b8:b2:c8:b1:2b:fe:38:c4:c2:5e: 7d:3c:1e:e5:b7:ef:2e:0e:ac:17:32:4a:9e:09:ad:d8:99:17: a0:ea:d9:c8:aa:d1:52:fa:51:76:e1:74:da:37:70:2e:e2:46: 77:ca:68:18:71:b9:fd:e0:99:3f:59:2d:3e:86:64:6b:b5:47: db:6e:1e:4b:d1:1a:66:58:a0:ed:45:aa:da:60:c4:13:66:47: f3:04:0a:20:55:cc:3a:fe:46:7e:2b:bb:b9:b6:5d:6b:39:90: e9:14:fc:3a:2c:1b:96:04:75:96:fc:03:a4:38:32:f7:ee:c7: 80:e5:64:35:22:4a:d4:b6:0e:d4:8b:67:66:c2:dc:5f:e9:4a: 1a:b7:c4:4b:a8:7b:e8:fe:3d:d1:8a:f4:60:1f:59:03:c8:43: 73:32:bc:12:61:ee:4e:d9:dd:14:d2:a3:68:0b:6f:27:79:42: b0:31:bc:92:3c:bc:47:1c:ac:30:a9:2e:37:a7:88:13:1a:96: 1c:c3:ab:2f:b7:ab:c1:9c:60:df:ea:da:f2:ed:12:f9:82:cf: 9c:89:52:be -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt+OHkPtCVIjoEhzcufP9M6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWFkNGM4OWY3YWVkODY4MWQwMjAyZDIyNDc5ZDg2ZTE0NjJmODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPszFHnV8EsGmjDnWbt/hRoCAz0K 3PX0iNnUYqAKra43zgsuHncjavfkrSaiMfG/bLHj/J/LUAhPn21jANYl3g873pUX ehw8oiMOOtpSOPuuloFfbgaSFhOlOppQoDdVbfRHgo0KNaoKaWOrT6raMVTTKX9w YDe6AD1+MHF7W8oFvKe+YjnmegvP2sFM0atmbhf85HaYqRfdfPJJbTQdHz/Es2zk hgn2mKWvIT4pVSfm28Gef4f6xoSGUA3o9xMXB8WMWTq/Lfcb3z8Vhi+TFgMYBe/J MTrdkFR/C32oZTAAtr/GRhdcRKLlNsaQNjF9xaSP6opQBdyx1nrjvde2xQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFN6tTIn3rthoHQIC0iR52G4UYviJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2NlYTY1 Zi1lY2ExLTRmODAtODc0ZS01YmNmY2U1Y2EyYzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvY2VhNjVm LWVjYTEtNGY4MC04NzRlLTViY2ZjZTVjYTJjNy8xLzNxMU1pZmV1MkdnZEFnTFNK SG5ZYmhSaS1Jay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuSyoMA0EAgACMAcDBQAqAWngMA0GCSqGSIb3 DQEBCwUAA4IBAQAOkv5LGcqHWl2kUP1JgQkpZ3c+o2fHKbUHi8IbLuPFnXwobup6 T+zo3T+KTriyyLEr/jjEwl59PB7lt+8uDqwXMkqeCa3YmReg6tnIqtFS+lF24XTa N3Au4kZ3ymgYcbn94Jk/WS0+hmRrtUfbbh5L0RpmWKDtRaraYMQTZkfzBAogVcw6 /kZ+K7u5tl1rOZDpFPw6LBuWBHWW/AOkODL37seA5WQ1IkrUtg7Ui2dmwtxf6Uoa t8RLqHvo/j3RivRgH1kDyENzMrwSYe5O2d0U0qNoC28neUKwMbySPLxHHKwwqS43 p4gTGpYcw6svt6vBnGDf6try7RL5gs+ciVK+ -----END CERTIFICATE-----Generated at Mon Jan 26 23:27:08 2026 by rpki-client