This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer File: 3zt5bD_FWb-vS3ZVCJTP9NMLm34.cer (raw, json) Hash identifier: ieFieDwo8qtSdpJklcvB3p/IxgW/o0c6eSgpv5n1L+c= Subject key identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B76AEEC9B31BB38D0D05709EFEC5E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24603 IP: 195.42.100.0/23 IP: 2001:67c:12e8::/47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:76:ae:ec:9b:31:bb:38:d0:d0:57:09:ef:ec:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df3b796c3fc559bfaf4b76550894cff4d30b9b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:73:1e:b2:0f:a5:e9:f9:67:0f:a4:30:d3: 46:94:26:ef:12:94:eb:98:d1:6a:7e:05:44:b8:3d: 92:2c:6e:c9:56:ed:c6:04:bd:9d:47:6d:fd:a0:9d: a8:28:79:fb:a7:fc:e8:49:29:d1:3c:f5:ef:2c:a9: d1:f7:ee:5e:e9:7f:11:1e:51:94:41:2e:73:a9:6b: 13:d2:62:92:ff:20:cc:61:71:99:f2:28:da:d8:21: 4e:a7:1e:85:1f:a0:13:bc:40:33:18:34:7f:7f:30: 5a:f8:f0:a2:1f:0b:45:54:47:37:97:70:ce:2a:64: b6:e3:6d:b3:52:90:32:7e:16:dd:3e:30:c2:f1:ed: 47:af:08:a9:0e:56:8a:76:94:cc:7c:d2:b1:d9:ee: 0a:ff:77:07:bc:db:3e:10:0d:b8:46:3c:03:bb:80: 31:60:2c:2d:5d:e3:09:f0:5a:de:b1:fe:8d:51:08: 5a:41:f0:dd:f4:c8:d7:3b:d1:9b:8f:4d:66:02:79: c1:ef:11:28:bb:45:95:0c:6e:3a:3d:42:96:89:39: 50:ae:77:9f:25:e2:45:29:d1:b3:5f:30:57:0e:a5: 94:ae:d5:fa:c1:90:bf:e0:d6:47:f4:86:17:8d:3c: a7:c9:8a:5c:e6:da:a5:f5:a1:f5:4b:bf:61:2b:4e: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3B:79:6C:3F:C5:59:BF:AF:4B:76:55:08:94:CF:F4:D3:0B:9B:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c7fdc8-caeb-4741-be4e-28e44f2ee90a/1/3zt5bD_FWb-vS3ZVCJTP9NMLm34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.100.0/23 IPv6: 2001:67c:12e8::/47 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24603 Signature Algorithm: sha256WithRSAEncryption 04:95:1d:87:e1:a1:c4:dd:78:48:59:26:b1:f1:b9:57:98:29: 04:1d:67:f9:6f:4f:b1:e3:26:f6:cb:eb:35:de:7c:63:eb:57: 4c:7b:84:13:73:4a:ac:ca:57:3a:0d:ed:53:fa:ab:73:68:c3: 09:a6:fe:e1:f7:c9:7e:60:a0:0a:6c:6b:16:3c:a9:a5:52:6b: 31:b3:4c:f9:f9:8b:26:bf:4a:bb:b7:72:4e:46:03:b0:38:79: 8f:2c:82:09:dd:e1:8e:84:8a:65:f0:0b:b1:56:b0:1e:ba:f8: 27:a4:5a:a0:72:5d:e3:5e:c7:96:5c:fe:a0:c3:45:7c:40:e1: 2c:d4:68:24:2c:9f:c8:9d:cc:cb:01:cb:37:8f:85:70:94:92: f6:1d:d7:f1:a3:73:c0:e7:c4:81:f3:c3:05:ae:eb:f2:21:6f: 00:1a:0b:36:b3:65:0b:8d:18:5b:b7:2f:54:99:0d:95:7a:03: b8:42:28:4f:31:6a:39:f9:5a:22:c6:57:9f:25:64:f9:9e:21: 93:fb:55:39:51:9d:e4:e0:cf:38:39:61:2f:82:d1:98:fc:a6: 99:8d:20:df:a7:32:ce:7a:3d:ca:eb:c1:a1:27:75:81:fb:6e: ae:4f:a6:00:d8:aa:6c:0f:ce:49:29:e1:83:20:9d:2d:70:36: c8:4d:0d:60 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt9W3au7JsxuzjQ0FcJ7+xeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjNiNzk2YzNmYzU1OWJmYWY0Yjc2NTUwODk0Y2ZmNGQzMGI5YjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5RzHrIPpen5Zw+kMNNGlCbvEpTr mNFqfgVEuD2SLG7JVu3GBL2dR239oJ2oKHn7p/zoSSnRPPXvLKnR9+5e6X8RHlGU QS5zqWsT0mKS/yDMYXGZ8ija2CFOpx6FH6ATvEAzGDR/fzBa+PCiHwtFVEc3l3DO KmS2422zUpAyfhbdPjDC8e1HrwipDlaKdpTMfNKx2e4K/3cHvNs+EA24RjwDu4Ax YCwtXeMJ8Fresf6NUQhaQfDd9MjXO9Gbj01mAnnB7xEou0WVDG46PUKWiTlQrnef JeJFKdGzXzBXDqWUrtX6wZC/4NZH9IYXjTynyYpc5tql9aH1S79hK04sqwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFN87eWw/xVm/r0t2VQiUz/TTC5t+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjL2M3ZmRj OC1jYWViLTQ3NDEtYmU0ZS0yOGU0NGYyZWU5MGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvYzdmZGM4 LWNhZWItNDc0MS1iZTRlLTI4ZTQ0ZjJlZTkwYS8xLzN6dDViRF9GV2ItdlMzWlZD SlRQOU5NTG0zNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQBwypkMA8EAgACMAkDBwEgAQZ8EugwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICYBswDQYJKoZIhvcNAQELBQADggEBAASVHYfhocTd eEhZJrHxuVeYKQQdZ/lvT7HjJvbL6zXefGPrV0x7hBNzSqzKVzoN7VP6q3Nowwmm /uH3yX5goApsaxY8qaVSazGzTPn5iya/Sru3ck5GA7A4eY8sggnd4Y6EimXwC7FW sB66+CekWqByXeNex5Zc/qDDRXxA4SzUaCQsn8idzMsByzePhXCUkvYd1/Gjc8Dn xIHzwwWu6/IhbwAaCzazZQuNGFu3L1SZDZV6A7hCKE8xajn5WiLGV58lZPmeIZP7 VTlRneTgzzg5YS+C0Zj8ppmNIN+nMs56PcrrwaEndYH7bq5PpgDYqmwPzkkp4YMg nS1wNshNDWA= -----END CERTIFICATE-----Generated at Mon Feb 9 19:41:15 2026 by rpki-client