This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.cer (raw, json) Hash identifier: gz6ven9F7opbq2emjvUUndMSfi6JzpXWcBrtBqlV3i4= Subject key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FF38E94311A75820C820523BD3ED6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 34605 IP: 45.142.88.0/22 IP: 178.218.64.0/20 IP: 194.126.204.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:f3:8e:94:31:1a:75:82:0c:82:05:23:bd:3e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded8582b0243863c572ce25786ccb36ff795b22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:81:0c:b5:12:23:23:bf:22:53:60:3c:8d:5b: 02:58:d2:d4:3c:d3:e1:d8:a1:7a:6b:39:6c:e2:e6: a8:56:2f:95:7c:e0:92:6f:f8:ec:b4:3a:52:04:30: ec:85:59:db:23:54:71:92:f3:2c:96:64:c1:28:f6: 6e:c4:c4:c5:7a:67:55:64:62:36:dd:f4:65:2c:50: e1:f3:24:66:1e:4f:a3:2a:e0:5d:7c:c2:7c:ca:6e: ad:ce:eb:b4:5f:f7:20:f2:49:88:82:ce:48:57:a4: ba:5d:1f:0b:e9:aa:e9:c6:0f:1c:74:f8:34:53:6e: 75:ff:e0:7c:ac:f0:f5:8a:8d:84:e5:ac:c4:7b:e0: 79:91:13:8a:f8:a4:86:e0:a0:02:45:9a:0c:39:4a: 24:31:63:79:72:0b:34:ed:6e:42:0b:ed:82:fb:f3: a9:00:b8:fe:63:87:88:c7:74:a8:7b:06:77:23:ae: 2b:28:9f:90:f8:d0:e1:29:7b:ca:de:5c:f3:3d:ba: 69:64:1d:78:03:bb:ff:84:a8:2b:96:a5:10:51:ec: 87:8c:e9:c8:c5:2d:3f:97:c0:2f:fe:39:b4:4f:3b: 90:94:0c:38:fe:ca:bc:07:7e:ba:3c:55:ff:57:8d: 2a:a8:a6:05:99:23:0c:df:61:35:87:9d:67:06:52: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.88.0/22 178.218.64.0/20 194.126.204.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34605 Signature Algorithm: sha256WithRSAEncryption 39:14:99:d3:4e:88:de:5c:5b:fc:ba:c8:4b:5b:75:17:d8:d9: 9b:10:49:8e:df:76:49:4c:72:07:06:1c:7c:52:a1:46:9b:40: c6:25:e1:d8:5f:fc:6a:f6:2f:01:b8:86:81:50:1a:39:f8:4c: 3c:59:c3:f1:9d:dd:a6:30:10:4a:99:fa:b9:3b:97:a1:9c:66: 08:65:dc:2d:69:a2:30:95:54:c8:e6:b6:16:f9:21:97:56:e3: 8b:41:bc:36:70:7e:c3:a8:50:37:f1:9d:04:27:af:53:57:d0: bb:08:a5:e3:e2:56:25:7f:93:74:1c:91:64:79:d2:ef:8a:91: 03:8c:50:34:76:22:2f:f8:6a:11:0e:0f:b2:56:27:b0:fd:b1: 29:b8:3a:be:ab:2c:61:8a:8b:2e:a7:22:4e:95:fb:d9:c6:71: a9:ff:2b:bc:81:c7:d2:b0:cf:7d:66:e7:07:d2:0a:85:97:8e: 5f:60:f4:8e:54:b2:09:54:0e:4f:4b:48:d5:1f:ec:1a:08:95: 11:68:b8:ef:07:5d:a8:d3:47:3b:8b:85:8e:cf:83:30:d1:18: 4a:92:57:ab:21:60:b9:bb:58:79:30:b7:4a:0a:5a:a8:25:e7: 4e:95:fc:89:01:f7:15:88:53:18:f9:88:80:6b:ff:91:99:aa: 76:c3:da:8c -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZt8f/OOlDEadYIMggUjvT7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQ4NTgyYjAyNDM4NjNjNTcyY2UyNTc4NmNjYjM2ZmY3OTViMjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IEMtRIjI78iU2A8jVsCWNLUPNPh 2KF6azls4uaoVi+VfOCSb/jstDpSBDDshVnbI1RxkvMslmTBKPZuxMTFemdVZGI2 3fRlLFDh8yRmHk+jKuBdfMJ8ym6tzuu0X/cg8kmIgs5IV6S6XR8L6arpxg8cdPg0 U251/+B8rPD1io2E5azEe+B5kROK+KSG4KACRZoMOUokMWN5cgs07W5CC+2C+/Op ALj+Y4eIx3SoewZ3I64rKJ+Q+NDhKXvK3lzzPbppZB14A7v/hKgrlqUQUeyHjOnI xS0/l8Av/jm0TzuQlAw4/sq8B366PFX/V40qqKYFmSMM32E1h51nBlLXnwIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFN7YWCsCQ4Y8VyziV4bMs2/3lbIuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkL2NhNTEw Yy1iNmQxLTRlYjMtOGRkMS00OThmNGMxMGI2NTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvY2E1MTBj LWI2ZDEtNGViMy04ZGQxLTQ5OGY0YzEwYjY1NS8xLzN0aFlLd0pEaGp4WExPSlho c3l6Yl9lVnNpNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF BwEHAQH/BBwwGjAYBAIAATASAwQCLY5YAwQEstpAAwQAwn7MMBoGCCsGAQUFBwEI AQH/BAswCaAHMAUCAwCHLTANBgkqhkiG9w0BAQsFAAOCAQEAORSZ006I3lxb/LrI S1t1F9jZmxBJjt92SUxyBwYcfFKhRptAxiXh2F/8avYvAbiGgVAaOfhMPFnD8Z3d pjAQSpn6uTuXoZxmCGXcLWmiMJVUyOa2Fvkhl1bji0G8NnB+w6hQN/GdBCevU1fQ uwil4+JWJX+TdByRZHnS74qRA4xQNHYiL/hqEQ4PslYnsP2xKbg6vqssYYqLLqci TpX72cZxqf8rvIHH0rDPfWbnB9IKhZeOX2D0jlSyCVQOT0tI1R/sGgiVEWi47wdd qNNHO4uFjs+DMNEYSpJXqyFgubtYeTC3SgpaqCXnTpX8iQH3FYhTGPmIgGv/kZmq dsPajA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:29 2026 by rpki-client