This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer File: 3sDxT6yN2zSANygAdsw2YU2jBew.cer (raw, json) Hash identifier: C/TSWJzlOJX3qj8Q3oflBWrz3R+z7Juequu+TIZUfuk= Subject key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA50F13B0240D72582094BB83357DB7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:19:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209793 IP: 185.127.200.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:0f:13:b0:24:0d:72:58:20:94:bb:83:35:7d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dec0f14fac8ddb348037280076cc36614da305ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:4a:8f:66:96:5c:1b:f9:72:25:58:80:46: d3:e9:f4:31:e0:e9:ae:92:5c:1c:25:79:06:5d:7b: c9:9d:6c:27:7d:0c:7d:1e:9d:44:cc:86:c0:ae:15: 77:a4:5a:87:10:23:ab:9b:7b:9e:78:49:05:84:6f: db:34:ab:22:a0:59:f5:ba:12:15:13:98:eb:a3:1f: a8:e9:58:5e:e6:40:10:5e:5d:e1:8a:0c:91:73:4b: e7:ce:1d:15:48:4f:05:a9:15:c2:99:22:8f:20:35: b8:4b:dc:03:56:58:b7:1e:41:7d:01:b7:15:81:95: a1:dd:1f:58:6d:94:9f:b3:04:d9:5b:a7:dd:33:64: bf:5a:29:1d:a0:8b:0f:af:75:53:94:ac:7f:9b:fb: 6b:91:ec:ce:e0:24:9a:b4:45:75:77:cf:62:38:4a: c4:ee:61:2f:df:f6:8f:7d:22:29:8c:71:ca:f4:bc: ec:42:d9:c6:7f:fb:59:c4:7f:c0:33:f1:6c:d2:4e: 16:61:ec:8c:ed:3d:de:d1:24:ae:89:fe:f7:de:fa: a1:ec:c6:c7:3e:23:71:52:13:02:6c:7c:e1:06:ae: cf:73:9d:95:30:e6:19:c3:a4:34:b2:45:50:98:32: cf:5e:46:4f:f2:80:da:e1:8d:9b:3e:8b:07:98:ab: c7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.200.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209793 Signature Algorithm: sha256WithRSAEncryption 1c:d1:25:11:55:0a:1f:dc:e1:7e:99:73:b5:ed:6b:e7:a2:48: 14:88:3f:7a:f8:e7:ac:0f:43:e5:30:bd:1c:06:22:e7:0f:9c: f2:00:73:12:5b:1e:f7:81:5b:73:be:33:fb:46:8b:15:f1:55: a2:20:87:0f:aa:90:f9:5e:8d:c8:9b:75:cd:aa:44:53:9f:30: 09:88:64:dd:a9:59:87:2b:94:0a:3e:5a:8b:43:b6:b8:8a:4a: da:5c:15:60:e2:12:77:4b:f6:9b:cd:bb:8c:f1:54:4a:0f:fc: 9f:80:96:24:bb:d5:28:83:89:bb:0d:b2:2d:2e:4b:cf:3e:9b: 28:bb:9b:d5:93:3a:79:46:f8:7e:28:15:51:11:a7:41:7a:2d: a6:ee:b4:02:14:e4:8d:39:23:03:fd:c9:db:58:f2:99:68:c6: 3e:44:96:98:76:7b:60:87:a9:40:c3:10:b9:37:1f:ef:1a:51: 1a:b0:93:cd:30:7f:03:c9:fb:dc:63:b0:d5:5d:d7:b1:45:52: c4:d0:b5:cd:06:69:60:94:0a:09:57:41:6e:5c:72:a3:de:3c: 31:d3:66:ec:32:85:06:b1:cf:56:ca:c6:b9:cb:c4:4e:1d:40: 3d:24:00:71:8e:19:48:d9:c7:92:39:12:19:ba:28:21:2d:ff: f8:a6:08:a0 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt7pQ8TsCQNclgglLuDNX23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWMwZjE0ZmFjOGRkYjM0ODAzNzI4MDA3NmNjMzY2MTRkYTMwNWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBlKj2aWXBv5ciVYgEbT6fQx4Omu klwcJXkGXXvJnWwnfQx9Hp1EzIbArhV3pFqHECOrm3ueeEkFhG/bNKsioFn1uhIV E5jrox+o6Vhe5kAQXl3higyRc0vnzh0VSE8FqRXCmSKPIDW4S9wDVli3HkF9AbcV gZWh3R9YbZSfswTZW6fdM2S/WikdoIsPr3VTlKx/m/trkezO4CSatEV1d89iOErE 7mEv3/aPfSIpjHHK9LzsQtnGf/tZxH/AM/Fs0k4WYeyM7T3e0SSuif733vqh7MbH PiNxUhMCbHzhBq7Pc52VMOYZw6Q0skVQmDLPXkZP8oDa4Y2bPosHmKvH1QIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN7A8U+sjds0gDcoAHbMNmFNowXsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVmLzAwYTlm OS0xNGExLTRjOTYtODIyMy1lZWI2ZmQzMmU5MmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYvMDBhOWY5 LTE0YTEtNGM5Ni04MjIzLWVlYjZmZDMyZTkyZi8xLzNzRHhUNnlOMnpTQU55Z0Fk c3cyWVUyakJldy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuX/IMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMzgTANBgkqhkiG9w0BAQsFAAOCAQEAHNElEVUKH9zhfplzte1r56JIFIg/evjn rA9D5TC9HAYi5w+c8gBzElse94Fbc74z+0aLFfFVoiCHD6qQ+V6NyJt1zapEU58w CYhk3alZhyuUCj5ai0O2uIpK2lwVYOISd0v2m827jPFUSg/8n4CWJLvVKIOJuw2y LS5Lzz6bKLub1ZM6eUb4figVURGnQXotpu60AhTkjTkjA/3J21jymWjGPkSWmHZ7 YIepQMMQuTcf7xpRGrCTzTB/A8n73GOw1V3XsUVSxNC1zQZpYJQKCVdBblxyo948 MdNm7DKFBrHPVsrGucvETh1APSQAcY4ZSNnHkjkSGbooIS3/+KYIoA== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:32 2026 by rpki-client