This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer (raw, json) Hash identifier: akxIWQyHH5Y+EsRhcEHk9VF/aFXRF0uI8jYaYw6Lqfs= Subject key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5BE2D052AD397E1232EC60159DFD91 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:52 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21334 IP: 5.63.192.0/18 IP: 5.148.192.0/18 IP: 5.206.128.0/18 IP: 37.188.80.0/21 IP: 37.191.0.0/18 IP: 37.220.192.0/18 IP: 78.139.0.0/18 IP: 80.98.0.0/15 IP: 80.244.96.0/20 IP: 86.101.0.0/16 IP: 88.87.240.0/21 IP: 89.132.0.0/14 IP: 89.223.128.0/17 IP: 94.44.0.0/16 IP: 130.43.192.0/18 IP: 151.0.64.0/18 IP: 176.63.0.0/16 IP: 178.48.0.0/16 IP: 185.10.124.0/22 IP: 185.33.80.0/23 IP: 185.123.28.0/22 IP: 188.142.160.0 -- 188.142.255.255 IP: 195.184.160.0/19 IP: 212.48.240.0/20 IP: 212.96.32.0/19 IP: 213.222.128.0/18 IP: 2a02:ab80::/28 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e2:d0:52:ad:39:7e:12:32:ec:60:15:9d:fd:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df0198a7b3afdcdd7003562a0871878e238760ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:7a:aa:26:fc:52:09:79:c2:99:38:41:80: da:d5:51:e5:71:05:46:2d:59:21:65:31:9e:97:89: 2f:5c:78:3d:c5:cb:5a:72:de:de:c1:37:b0:d0:08: dd:44:9f:6d:40:df:79:82:f6:49:4e:53:2f:20:07: d5:0c:43:c8:aa:2e:f5:d7:fb:3b:88:32:9e:e7:5c: 7e:75:bf:da:1d:e1:78:8e:e0:ff:98:28:3e:90:e3: c8:39:16:ca:f4:14:62:84:ef:ce:83:40:90:16:fc: a2:a8:ed:b8:b0:ef:8e:03:25:3f:0f:95:c8:ff:ec: 37:d4:54:45:96:04:6d:59:8f:b6:4b:a2:fb:fe:cb: 16:2f:89:2e:dd:d5:45:9e:87:12:c1:48:93:f4:08: e8:c9:95:9f:6c:0f:27:92:aa:a6:f9:c9:88:d2:d5: 23:f3:99:3e:52:ee:ca:a8:f4:6b:65:e1:4a:14:0a: 80:03:1a:88:41:e6:81:9e:5b:9f:c7:22:af:4e:b8: 2f:03:ba:91:de:d7:b8:cd:49:0e:7d:19:9c:a4:ab: 33:90:6b:e6:da:83:48:50:27:22:bc:1b:d9:54:ab: 5e:ed:bf:f3:18:37:5a:8c:95:69:b6:bc:a6:52:2a: b5:dd:79:d7:0b:3e:0a:28:81:21:d4:5d:7b:6d:43: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.63.192.0/18 5.148.192.0/18 5.206.128.0/18 37.188.80.0/21 37.191.0.0/18 37.220.192.0/18 78.139.0.0/18 80.98.0.0/15 80.244.96.0/20 86.101.0.0/16 88.87.240.0/21 89.132.0.0/14 89.223.128.0/17 94.44.0.0/16 130.43.192.0/18 151.0.64.0/18 176.63.0.0/16 178.48.0.0/16 185.10.124.0/22 185.33.80.0/23 185.123.28.0/22 188.142.160.0-188.142.255.255 195.184.160.0/19 212.48.240.0/20 212.96.32.0/19 213.222.128.0/18 IPv6: 2a02:ab80::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21334 Signature Algorithm: sha256WithRSAEncryption 23:68:39:a2:ef:42:d7:8d:d0:c1:4e:b9:3b:bc:8b:6f:40:2c: ba:25:de:3b:e0:46:11:76:a7:ef:be:a1:d7:86:f3:cd:ae:42: 7e:41:13:da:ce:e7:65:e6:33:2f:c5:1a:0e:90:22:a8:f8:d4: 64:21:62:c4:07:cf:24:7a:49:5a:0e:7a:5d:9f:16:b5:ff:93: 02:4c:79:b0:28:9e:a7:de:45:71:bd:4e:2c:9b:cc:f4:3b:83: 27:72:b2:f2:2c:a3:8a:02:79:8b:23:e7:44:1e:22:d1:e5:ec: 73:d2:7e:7e:f5:c5:95:da:0c:fd:ec:16:f0:b9:91:51:5d:29: f4:84:51:b6:32:66:b5:4c:04:57:62:dd:a6:ab:12:b6:82:ac: 80:1b:5b:80:05:ce:f2:29:c0:4d:ad:7c:e4:7d:ad:d7:c4:18: b2:4c:c4:57:83:3a:22:77:50:74:7e:ac:11:72:23:48:37:d3: 14:e2:9d:22:3b:1a:f6:27:a2:d5:6d:fd:5b:15:df:53:45:8f: 56:04:5f:55:d3:1f:15:4b:46:60:bb:d0:98:8f:ef:18:0c:2a: 2b:d6:bd:f5:c4:fb:bc:c3:55:d8:60:9b:c1:7c:d4:05:cf:d4: da:64:46:b6:de:ed:ad:5e:fa:6a:f3:50:43:03:6c:4d:17:2d: d4:07:ea:76 -----BEGIN CERTIFICATE----- MIIGPjCCBSagAwIBAgISAZt9W+LQUq05fhIy7GAVnf2RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjAxOThhN2IzYWZkY2RkNzAwMzU2MmEwODcxODc4ZTIzODc2MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/V6qib8Ugl5wpk4QYDa1VHlcQVG LVkhZTGel4kvXHg9xctact7ewTew0AjdRJ9tQN95gvZJTlMvIAfVDEPIqi711/s7 iDKe51x+db/aHeF4juD/mCg+kOPIORbK9BRihO/Og0CQFvyiqO24sO+OAyU/D5XI /+w31FRFlgRtWY+2S6L7/ssWL4ku3dVFnocSwUiT9AjoyZWfbA8nkqqm+cmI0tUj 85k+Uu7KqPRrZeFKFAqAAxqIQeaBnlufxyKvTrgvA7qR3te4zUkOfRmcpKszkGvm 2oNIUCcivBvZVKte7b/zGDdajJVptrymUiq13XnXCz4KKIEh1F17bUMsjQIDAQAB o4IDSjCCA0YwHQYDVR0OBBYEFN8BmKezr9zdcANWKghxh44jh2CtMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FmL2QzZmNh Ni1lY2I1LTQzYWEtOGM5ZC0wZmNjNmMzMDExZmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWYvZDNmY2E2 LWVjYjUtNDNhYS04YzlkLTBmY2M2YzMwMTFmYy8xLzN3R1lwN092M04xd0ExWXFD SEdIamlPSFlLMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHJBggrBgEF BQcBBwEB/wSBuTCBtjCBpAQCAAEwgZ0DBAYFP8ADBAYFlMADBAYFzoADBAMlvFAD BAYlvwADBAYl3MADBAZOiwADAwFQYgMEBFD0YAMDAFZlAwQDWFfwAwMCWYQDBAdZ 34ADAwBeLAMEBoIrwAMEBpcAQAMDALA/AwMAsjADBAK5CnwDBAG5IVADBAK5exww CwMEBbyOoAMDALyOAwQFw7igAwQE1DDwAwQF1GAgAwQG1d6AMA0EAgACMAcDBQQq AquAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlNWMA0GCSqGSIb3DQEBCwUAA4IB AQAjaDmi70LXjdDBTrk7vItvQCy6Jd474EYRdqfvvqHXhvPNrkJ+QRPazudl5jMv xRoOkCKo+NRkIWLEB88keklaDnpdnxa1/5MCTHmwKJ6n3kVxvU4sm8z0O4MncrLy LKOKAnmLI+dEHiLR5exz0n5+9cWV2gz97BbwuZFRXSn0hFG2Mma1TARXYt2mqxK2 gqyAG1uABc7yKcBNrXzkfa3XxBiyTMRXgzoid1B0fqwRciNIN9MU4p0iOxr2J6LV bf1bFd9TRY9WBF9V0x8VS0Zgu9CYj+8YDCor1r31xPu8w1XYYJvBfNQFz9TaZEa2 3u2tXvpq81BDA2xNFy3UB+p2 -----END CERTIFICATE-----Generated at Wed Jan 21 08:58:00 2026 by rpki-client