This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.cer (raw, json) Hash identifier: p0EWXbaQnqmYL/+jq+49dsfQUJoJNu9R08Ghd9rtna0= Subject key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2BA1327383C19D87D7489E98889D4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:09 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 80.246.112.0/20 IP: 193.110.40.0/21 IP: 194.4.160.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ba:13:27:38:3c:19:d8:7d:74:89:e9:88:89:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:3f:9f:6d:33:d6:55:ed:70:d4:ba:3b:eb: ed:5a:25:a8:50:64:73:25:24:73:86:97:02:1f:16: 71:2a:6c:8d:1b:65:d5:a1:a0:21:27:ed:cb:9d:e3: 2b:84:10:20:d0:10:53:fd:cc:c5:92:7b:09:18:65: c3:12:57:03:8b:c0:46:27:39:f3:81:f9:7a:34:d4: 48:ad:7e:e5:a2:a2:6f:17:0b:11:b6:a6:44:ca:fc: 30:21:a6:cb:05:21:a4:a4:df:30:c7:bd:ab:aa:22: 9b:0b:5a:c5:cf:a7:22:b4:7a:b5:5c:c7:c0:ce:0f: ae:1c:78:6e:e3:18:21:e8:07:4d:89:9d:cd:b3:10: 81:cc:7e:bc:46:a2:5e:2f:43:dd:0a:3f:c6:f7:04: 75:56:52:5c:3b:cb:32:33:f1:de:2c:7c:15:92:51: fc:f6:71:09:80:56:77:e9:56:76:16:00:c1:3b:8c: 6b:5f:bb:f4:ba:32:4f:9e:43:b9:a9:21:3f:02:c2: 80:87:ec:98:a2:03:19:a3:ce:91:14:83:b9:64:e2: dd:1d:0a:b4:e6:a2:d5:ab:30:ae:c9:f8:db:5a:b5: 34:f8:52:35:6e:83:6a:dd:1b:cd:3a:0f:20:c7:47: 94:6d:9a:25:ee:48:63:f9:28:f9:0c:5b:1c:ab:d4: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.112.0/20 193.110.40.0/21 194.4.160.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:2a:86:37:c0:65:f1:32:76:48:3e:02:a6:b7:8d:93:f8:6d: 09:d7:0b:3b:d0:b8:68:62:79:f2:79:23:15:f8:42:1f:76:d5: 8e:f5:93:42:84:17:42:02:e6:72:ab:a9:ce:8d:50:73:23:aa: 59:19:0f:7b:28:9a:75:d4:7b:af:f8:ab:ca:ae:75:b4:b7:a3: b8:ce:27:32:33:f3:c2:c6:27:a2:fb:42:4b:72:e8:ff:a1:56: 2d:b2:97:7f:94:4d:f7:50:4d:c7:45:50:e5:af:94:db:8c:b0: 5a:a0:81:00:60:1c:7a:7e:f9:eb:ad:ad:ae:30:d5:f1:ef:17: 4e:b3:7e:38:78:c3:61:74:da:97:04:e8:75:d5:9c:2c:a2:70: ee:87:4c:67:bc:54:bd:93:82:5f:53:89:4b:5f:19:9d:24:78: bb:e1:a0:dc:6a:1b:2b:25:d3:c5:ce:c9:77:c5:9d:77:b2:3e: b4:3a:24:e2:c0:c1:c7:5c:92:4b:6e:31:46:ff:4f:ac:16:65: 20:5c:9a:94:1e:63:cb:ec:be:9f:4e:b8:87:a1:17:83:6a:f4: d3:47:db:83:d7:d7:bf:b1:74:a2:e6:7b:0c:14:5e:f7:f4:97: ba:15:25:fa:e7:22:95:ba:9c:79:3d:33:c4:63:34:25:49:23: 90:4a:00:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgISAZt4oroTJzg8Gdh9dInpiInUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWIxODBkZGM3MTQzMTAzZjAyZTY5Y2I5Y2RhMTljMjM5NWU1N2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2g/n20z1lXtcNS6O+vtWiWoUGRz JSRzhpcCHxZxKmyNG2XVoaAhJ+3LneMrhBAg0BBT/czFknsJGGXDElcDi8BGJznz gfl6NNRIrX7loqJvFwsRtqZEyvwwIabLBSGkpN8wx72rqiKbC1rFz6citHq1XMfA zg+uHHhu4xgh6AdNiZ3NsxCBzH68RqJeL0PdCj/G9wR1VlJcO8syM/HeLHwVklH8 9nEJgFZ36VZ2FgDBO4xrX7v0ujJPnkO5qSE/AsKAh+yYogMZo86RFIO5ZOLdHQq0 5qLVqzCuyfjbWrU0+FI1boNq3RvNOg8gx0eUbZol7khj+Sj5DFscq9QE5wIDAQAB o4ICkDCCAowwHQYDVR0OBBYEFN6xgN3HFDED8C5py5zaGcI5XlehMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM3L2Y5MDg4 My1lNDgwLTRjZjEtYWJkMi05MDkxY2Q3M2QzOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvZjkwODgz LWU0ODAtNGNmMS1hYmQyLTkwOTFjZDczZDM4Yy8xLzNyR0EzY2NVTVFQd0xtbkxu Tm9ad2psZVY2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQEUPZwAwQDwW4oAwQCwgSgMA0GCSqGSIb3DQEB CwUAA4IBAQAvKoY3wGXxMnZIPgKmt42T+G0J1ws70LhoYnnyeSMV+EIfdtWO9ZNC hBdCAuZyq6nOjVBzI6pZGQ97KJp11Huv+KvKrnW0t6O4zicyM/PCxiei+0JLcuj/ oVYtspd/lE33UE3HRVDlr5TbjLBaoIEAYBx6fvnrra2uMNXx7xdOs344eMNhdNqX BOh11ZwsonDuh0xnvFS9k4JfU4lLXxmdJHi74aDcahsrJdPFzsl3xZ13sj60OiTi wMHHXJJLbjFG/0+sFmUgXJqUHmPL7L6fTriHoReDavTTR9uD19e/sXSi5nsMFF73 9Je6FSX65yKVupx5PTPEYzQlSSOQSgDt -----END CERTIFICATE-----Generated at Mon Feb 9 15:07:57 2026 by rpki-client