This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer (raw, json) Hash identifier: +dcAW7+T38LlVp54iXmDr7x4i9FCJHcosZAt9LpM8MY= Subject key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F152FA5158AB3D2BE53AF1EFD2B9BC4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:20:53 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216210 IP: 91.216.112.0/24 IP: 185.171.88.0/24 IP: 185.171.91.0/24 IP: 2a14:f580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2f:a5:15:8a:b3:d2:be:53:af:1e:fd:2b:9b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:71:95:7e:aa:86:a0:63:ec:f5:73:f1:05: 7b:10:f4:99:74:3a:c2:c3:01:e4:09:a9:e1:53:5f: fd:7b:2e:28:82:ee:6f:4d:77:84:f6:6a:f4:dc:9c: f4:a9:ee:db:ed:0f:99:6c:7c:3b:ae:be:92:11:82: 19:e1:4d:bf:91:76:a4:c4:3f:00:4d:5c:43:5b:d8: 3f:68:3e:08:d9:31:e6:14:c6:ff:f4:c3:42:5b:57: 84:0b:74:8d:1a:a3:65:1d:79:0e:96:0a:63:35:b9: a7:78:59:18:76:d5:82:1c:de:10:33:32:08:96:93: 87:a4:18:b7:35:26:8d:d0:41:89:73:2a:94:bb:53: 72:bf:d8:b8:f1:69:84:91:52:f6:38:0f:9b:74:0a: 1e:e8:45:a9:0e:53:eb:1d:79:b0:86:db:7b:00:63: 47:2b:3a:9a:f6:c7:06:70:3c:39:b8:b2:fd:8a:c4: 0b:ea:cb:40:f8:a5:bc:6e:63:1a:a4:a6:76:84:4d: 4e:ad:19:79:ce:37:82:f6:40:02:c3:86:54:b9:52: 80:df:af:83:59:9e:47:a8:bb:40:82:59:1c:ef:7a: bc:63:d6:ab:16:76:87:a9:87:4e:e3:86:a0:21:c9: 47:c1:55:24:e5:b1:86:6a:19:ea:2f:e2:f9:6c:cd: 5c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.112.0/24 185.171.88.0/24 185.171.91.0/24 IPv6: 2a14:f580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216210 Signature Algorithm: sha256WithRSAEncryption 8f:5b:b2:4d:5b:57:cb:57:e1:c1:60:33:49:1e:db:a7:f5:61: 9b:d9:1e:af:fb:29:f6:33:80:90:43:f9:81:30:9f:79:c1:78: 6e:31:cf:25:c6:39:c7:40:71:9b:5b:88:57:43:75:ba:2b:ed: dd:c3:bf:25:e5:ae:c7:e3:07:c6:58:45:42:27:3e:c3:11:97: df:16:3f:d9:65:31:66:48:53:13:cd:b0:33:83:dd:39:ce:70: 7d:e0:56:d2:a9:e8:01:a8:60:8f:44:2a:aa:56:4d:cd:93:19: dc:f0:58:d9:88:2a:c2:36:ea:fb:86:d7:0f:82:b3:ca:af:b2: 2e:57:26:28:e9:9e:bb:91:3c:dd:38:5d:d0:f0:7c:75:33:7d: 13:cf:20:25:10:29:66:93:cc:6c:4b:bd:48:30:84:aa:66:39: 41:f6:ba:25:2d:11:bd:6c:47:1f:1b:6a:51:9f:c5:3a:6c:52: bd:1a:97:38:37:05:6a:bb:01:38:69:b6:4c:86:f2:c6:19:b3: bb:ad:79:88:c9:3b:fc:34:62:4d:b9:7d:bd:af:fb:95:3b:02: 37:b5:d6:44:6e:13:93:d8:10:c4:ff:57:2a:da:1d:7b:72:78: cd:86:6f:41:6c:a8:fd:ce:0e:94:c0:39:1a:33:ba:7f:3a:d0: 2f:db:f7:2c -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt/FS+lFYqz0r5Trx79K5vEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjE1OGRjYjI5MGVjNWFlN2Y2NmMxZmEwZjhkOTYzMjExZGVlYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16JxlX6qhqBj7PVz8QV7EPSZdDrC wwHkCanhU1/9ey4ogu5vTXeE9mr03Jz0qe7b7Q+ZbHw7rr6SEYIZ4U2/kXakxD8A TVxDW9g/aD4I2THmFMb/9MNCW1eEC3SNGqNlHXkOlgpjNbmneFkYdtWCHN4QMzII lpOHpBi3NSaN0EGJcyqUu1Nyv9i48WmEkVL2OA+bdAoe6EWpDlPrHXmwhtt7AGNH Kzqa9scGcDw5uLL9isQL6stA+KW8bmMapKZ2hE1OrRl5zjeC9kACw4ZUuVKA36+D WZ5HqLtAglkc73q8Y9arFnaHqYdO44agIclHwVUk5bGGahnqL+L5bM1cHQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFN8VjcspDsWuf2bB+g+NljIR3upUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2E1NGI4 NS1hZjNlLTQ3YzYtODBlNy1jNDE0MmRmMzVjYzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvYTU0Yjg1 LWFmM2UtNDdjNi04MGU3LWM0MTQyZGYzNWNjMy8xLzN4V055eWtPeGE1X1pzSDZE NDJXTWhIZTZsUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW9hwAwQAuatYAwQAuatbMA0EAgACMAcDBQMq FPWAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNMkjANBgkqhkiG9w0BAQsFAAOC AQEAj1uyTVtXy1fhwWAzSR7bp/Vhm9ker/sp9jOAkEP5gTCfecF4bjHPJcY5x0Bx m1uIV0N1uivt3cO/JeWux+MHxlhFQic+wxGX3xY/2WUxZkhTE82wM4PdOc5wfeBW 0qnoAahgj0QqqlZNzZMZ3PBY2Ygqwjbq+4bXD4Kzyq+yLlcmKOmeu5E83Thd0PB8 dTN9E88gJRApZpPMbEu9SDCEqmY5Qfa6JS0RvWxHHxtqUZ/FOmxSvRqXODcFarsB OGm2TIbyxhmzu615iMk7/DRiTbl9va/7lTsCN7XWRG4Tk9gQxP9XKtode3J4zYZv QWyo/c4OlMA5GjO6fzrQL9v3LA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:50:37 2026 by rpki-client