This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer File: 3vwmhsKavvGPQLMOfpUTJHpm7xM.cer (raw, json) Hash identifier: 2AfRx7h/7AQ1mZNJjkW2Z1yRuYeF8A4jg22b9Vbde5U= Subject key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7EA6B9F6053E5C820E1C80B7350888E7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 12:20:14 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 207534 IP: 212.6.33.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b9:f6:05:3e:5c:82:0e:1c:80:b7:35:08:88:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 12:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=defc2686c29abef18f40b30e7e9513247a66ef13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:82:df:cd:84:dd:a1:99:29:f5:cc:79:8b: 9b:4a:25:7e:2c:94:99:2b:99:e6:47:7c:9c:4c:c3: ac:24:40:e1:90:41:7f:98:a1:d9:10:a6:09:64:ee: dc:11:6c:51:a4:92:4b:8a:4b:3d:72:70:a3:48:f1: c2:52:d0:f3:f6:c3:2f:e9:62:b7:94:7d:c1:e9:76: ae:06:64:26:08:05:02:de:0e:50:b6:e8:09:e6:aa: 71:a5:7e:dd:89:9a:ae:8c:ac:1e:4d:b5:37:9d:d5: 3d:b0:c4:bf:73:9e:5a:c9:17:d7:29:95:fb:99:bc: ee:b0:dd:75:fb:97:c1:25:30:aa:d8:cd:db:5c:55: 3c:8a:eb:a8:d2:77:8a:e4:76:ac:c2:b6:67:09:39: 4d:3d:04:0e:26:a3:81:25:64:4f:48:54:42:16:e5: d5:bd:80:d9:df:36:78:34:fb:9a:41:7c:fc:b1:fe: 03:09:0d:9e:96:a2:a2:c3:76:b5:a3:3e:4d:01:e8: c1:6c:97:a4:fa:eb:8b:01:d2:e5:1e:7d:89:90:e4: 7d:15:84:22:95:46:c9:dd:7a:be:35:90:a2:00:ae: 4b:23:e7:a4:fc:d5:72:06:17:0b:7e:61:85:c1:0b: b9:fe:24:c3:80:3b:99:67:d2:b8:65:2b:e6:75:14: 08:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.6.33.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 207534 Signature Algorithm: sha256WithRSAEncryption 5f:7d:cf:f0:7f:da:f1:ef:40:0d:0f:c0:81:f5:0b:ce:0e:4a: 24:cf:3c:fc:1b:0c:ac:2d:fe:6f:bd:35:45:15:90:08:1c:17: ed:68:82:ab:4a:14:c2:1f:84:6f:04:0f:69:4c:cd:c3:64:c2: ce:0a:ac:35:7f:a3:8e:30:38:55:b0:84:6b:75:35:ea:e1:b0: d8:be:ca:e2:99:f5:fc:88:b9:16:70:7f:d2:dd:a6:05:b8:80: 60:bb:30:bc:3f:03:f6:59:d0:ef:49:cc:2d:35:81:43:d4:3c: 7b:9e:77:40:6f:b5:1c:93:18:aa:b5:72:7c:ce:47:ef:dd:08: 52:f9:44:2f:17:54:9c:86:ab:2f:e1:83:ee:ba:96:ee:8a:e6: 02:fc:e4:c8:02:ac:18:c8:97:91:e0:5a:10:79:b7:a5:72:1b: 6f:6c:4f:45:91:03:62:72:f6:54:49:3d:9a:31:fb:68:78:c7: d3:15:30:1f:c4:58:de:fe:28:e6:7f:b5:b1:b8:22:c9:ec:77: 38:57:48:da:64:39:62:bd:0b:5d:27:cf:40:54:e5:fa:52:be: 01:6f:a3:d5:c1:f2:5a:ff:75:f5:0a:2b:3c:ae:a5:8a:74:6d: 84:82:06:3a:20:f0:d0:fe:50:84:d1:2b:aa:c4:3a:15:9d:5b: dc:93:2d:75 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt+prn2BT5cgg4cgLc1CIjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWZjMjY4NmMyOWFiZWYxOGY0MGIzMGU3ZTk1MTMyNDdhNjZlZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLiC382E3aGZKfXMeYubSiV+LJSZ K5nmR3ycTMOsJEDhkEF/mKHZEKYJZO7cEWxRpJJLiks9cnCjSPHCUtDz9sMv6WK3 lH3B6XauBmQmCAUC3g5QtugJ5qpxpX7diZqujKweTbU3ndU9sMS/c55ayRfXKZX7 mbzusN11+5fBJTCq2M3bXFU8iuuo0neK5HaswrZnCTlNPQQOJqOBJWRPSFRCFuXV vYDZ3zZ4NPuaQXz8sf4DCQ2elqKiw3a1oz5NAejBbJek+uuLAdLlHn2JkOR9FYQi lUbJ3Xq+NZCiAK5LI+ek/NVyBhcLfmGFwQu5/iTDgDuZZ9K4ZSvmdRQItQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFN78JobCmr7xj0CzDn6VEyR6Zu8TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2I0NTE1 ZS04NjQxLTQ1YjAtYjc1Zi0wOTY5MjFjOTFjNDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYjQ1MTVl LTg2NDEtNDViMC1iNzVmLTA5NjkyMWM5MWM0MS8xLzN2d21oc0thdnZHUFFMTU9m cFVUSkhwbTd4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQA1AYhMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMqrjANBgkqhkiG9w0BAQsFAAOCAQEAX33P8H/a8e9ADQ/AgfULzg5KJM88/BsM rC3+b701RRWQCBwX7WiCq0oUwh+EbwQPaUzNw2TCzgqsNX+jjjA4VbCEa3U16uGw 2L7K4pn1/Ii5FnB/0t2mBbiAYLswvD8D9lnQ70nMLTWBQ9Q8e553QG+1HJMYqrVy fM5H790IUvlELxdUnIarL+GD7rqW7ormAvzkyAKsGMiXkeBaEHm3pXIbb2xPRZED YnL2VEk9mjH7aHjH0xUwH8RY3v4o5n+1sbgiyex3OFdI2mQ5Yr0LXSfPQFTl+lK+ AW+j1cHyWv919QorPK6linRthIIGOiDw0P5QhNErqsQ6FZ1b3JMtdQ== -----END CERTIFICATE-----Generated at Mon Feb 9 15:04:03 2026 by rpki-client