This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer (raw, json) Hash identifier: py7nQLhbu/ToEG8g87zcsgGjND7e/qLY9B6ZyOUC/R8= Subject key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834659834B139DA48E317398357EF6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212417 IP: 37.77.136.0/21 IP: 2a09:9a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:65:98:34:b1:39:da:48:e3:17:39:83:57:ef:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded55569177a889d337f03f2e698acabcccbb589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:16:a9:0a:f8:f6:d4:e1:7b:9a:28:ad:40: c1:77:85:7f:0f:71:8e:80:cb:7a:59:b9:23:3a:dc: bd:5d:e0:dc:f3:e0:c7:0e:10:77:f8:d2:fd:0d:b9: 8f:85:1b:c4:39:a7:01:61:80:9e:44:66:ee:74:d2: 3b:c0:6a:1d:50:28:2c:9c:d2:86:b2:6a:32:f6:e9: 21:bb:fc:63:aa:d6:38:2b:84:af:59:d7:03:11:e0: f7:b6:61:51:bd:42:ff:cd:4c:a2:e9:18:b4:91:a3: f9:ba:6f:de:56:af:e6:2f:f3:9e:4a:2c:47:dd:4a: a9:68:dd:eb:2a:54:c5:af:19:06:46:6f:a2:9a:45: 27:f3:93:8a:28:c2:96:cf:a5:93:86:1a:52:25:8e: ab:90:1d:f4:33:43:07:08:5a:fe:04:8d:74:fb:a4: 97:b9:64:9b:89:9d:a4:9d:57:7a:11:b1:1c:8a:41: 74:87:fb:08:5f:8e:35:c8:56:20:09:8f:f1:17:db: fe:5e:a1:c2:48:fb:30:98:21:d4:3c:af:eb:0e:75: ab:07:dc:ce:8a:20:a2:d6:7d:94:6b:f8:be:74:0a: d5:b6:99:6c:8a:78:2f:7c:b6:eb:33:cc:6b:0d:b2: 47:1b:f6:df:28:49:7d:57:ad:dc:03:b0:ef:19:e1: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.77.136.0/21 IPv6: 2a09:9a00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212417 Signature Algorithm: sha256WithRSAEncryption 56:36:76:41:e1:14:f3:0e:cd:43:88:3a:b2:40:a2:f2:ef:99: 7d:55:7f:38:c4:83:f1:24:c4:d7:d7:7a:0c:d3:b9:96:d0:c1: 1e:4c:32:de:1b:30:57:e6:f2:ee:c0:4b:04:c8:b2:ae:6f:2f: d8:c6:24:45:e2:32:99:c6:6c:0b:88:48:ee:e5:71:91:08:72: a2:49:59:bc:f0:a1:72:d7:8e:fc:92:4f:92:79:25:f0:61:cf: bf:99:cb:b1:27:fe:4a:6a:e0:3c:ca:33:06:59:f1:0b:10:f3: 19:4f:66:fc:37:b3:2a:be:18:fd:b4:20:65:34:20:0a:74:ff: c4:31:cd:28:d4:e0:97:b3:5f:62:01:d4:d4:3e:c3:b8:f2:4e: a8:8a:77:d4:35:42:cf:79:12:9d:c1:ba:21:74:fa:74:a9:5b: b3:b2:1b:55:02:db:3b:7d:e5:13:38:1b:81:77:47:6d:fd:2c: a0:f9:de:f0:0d:cb:43:0a:8a:19:9b:6f:01:ad:8d:46:07:97: 37:3d:32:d6:71:00:ec:9a:0c:94:18:fc:48:69:2a:3c:dd:6e: 69:f2:fa:40:63:e2:d3:22:53:2a:a9:48:35:f9:30:46:8a:eb: f8:c2:c0:63:4c:7f:89:9f:fc:13:e1:9e:9f:ef:39:ce:9c:69: 0d:31:a1:cb -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NGWYNLE52kjjFzmDV+9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQ1NTU2OTE3N2E4ODlkMzM3ZjAzZjJlNjk4YWNhYmNjY2JiNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA0WqQr49tThe5oorUDBd4V/D3GO gMt6WbkjOty9XeDc8+DHDhB3+NL9DbmPhRvEOacBYYCeRGbudNI7wGodUCgsnNKG smoy9ukhu/xjqtY4K4SvWdcDEeD3tmFRvUL/zUyi6Ri0kaP5um/eVq/mL/OeSixH 3UqpaN3rKlTFrxkGRm+imkUn85OKKMKWz6WThhpSJY6rkB30M0MHCFr+BI10+6SX uWSbiZ2knVd6EbEcikF0h/sIX441yFYgCY/xF9v+XqHCSPswmCHUPK/rDnWrB9zO iiCi1n2Ua/i+dArVtplsingvfLbrM8xrDbJHG/bfKEl9V63cA7DvGeER6wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN7VVWkXeoidM38D8uaYrKvMy7WJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2I2YWMy Yy1iYTZjLTRlNTUtYjE3Yy04NGExZmU5ZDRiNzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjZhYzJj LWJhNmMtNGU1NS1iMTdjLTg0YTFmZTlkNGI3OC8xLzN0VlZhUmQ2aUowemZ3UHk1 cGlzcTh6THRZay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQDJU2IMA0EAgACMAcDBQMqCZoAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM9wTANBgkqhkiG9w0BAQsFAAOCAQEAVjZ2QeEU8w7N Q4g6skCi8u+ZfVV/OMSD8STE19d6DNO5ltDBHkwy3hswV+by7sBLBMiyrm8v2MYk ReIymcZsC4hI7uVxkQhyoklZvPChcteO/JJPknkl8GHPv5nLsSf+SmrgPMozBlnx CxDzGU9m/DezKr4Y/bQgZTQgCnT/xDHNKNTgl7NfYgHU1D7DuPJOqIp31DVCz3kS ncG6IXT6dKlbs7IbVQLbO33lEzgbgXdHbf0soPne8A3LQwqKGZtvAa2NRgeXNz0y 1nEA7JoMlBj8SGkqPN1uafL6QGPi0yJTKqlINfkwRorr+MLAY0x/iZ/8E+Gen+85 zpxpDTGhyw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:09 2026 by rpki-client