This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer File: B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer (raw, json) Hash identifier: yylnCzwj6cN9qRQl3mVwWGYstYg2+x/0RBgfSFCvgZ0= Subject key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F154E78C90F1F673185E088A933BC86 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:01 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13236 IP: 195.234.236.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4e:78:c9:0f:1f:67:31:85:e0:88:a9:33:bc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:bf:ff:f0:2e:1b:4f:47:85:37:a0:a1:c2: 52:28:7b:84:9d:9f:db:e8:5e:5e:f2:07:71:00:d2: 47:6c:8f:fe:d7:fc:3b:03:60:60:cd:75:5d:b5:23: bd:bb:6e:3d:97:81:07:c6:ba:f5:2b:3c:c6:63:22: 9d:2e:b7:be:62:7f:86:06:c4:95:b9:be:f7:f2:3a: 0a:b8:e4:a7:45:b4:3d:77:ed:95:f0:5e:5e:73:d2: 08:8f:da:b8:e2:ba:6f:68:55:4a:02:91:24:d9:90: 73:86:46:74:0c:63:ff:33:51:8d:ef:b8:43:1e:d5: f8:ec:78:e7:75:d4:86:55:35:8d:45:76:54:b2:33: fd:1c:72:85:8b:d3:da:20:6b:b1:d2:11:0b:d9:30: fe:95:2b:4c:6e:cd:10:09:03:d4:98:07:67:73:58: ee:da:80:84:be:97:ac:58:46:5a:02:9c:09:22:e6: 96:cc:a3:fd:c6:c2:30:d7:b5:f4:da:9f:2c:e0:ba: 9f:7e:a8:8a:2e:3d:05:97:37:9b:c7:51:e4:2f:78: d0:ab:13:7b:66:21:26:cb:63:55:fa:ea:61:89:16: 28:0c:63:21:a1:b0:76:2c:e6:24:71:31:50:1c:cc: 4d:7a:60:4e:ee:a6:a7:f2:c3:0d:ba:d8:3a:5a:46: b0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.236.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13236 Signature Algorithm: sha256WithRSAEncryption 22:16:8f:d0:80:0b:2a:a2:4f:34:9c:bb:4c:b7:59:f0:1a:dc: c8:49:58:5d:2a:6a:dc:35:40:00:97:95:34:9f:cf:1a:9c:c5: c6:a9:cf:fb:b4:05:72:06:43:b0:65:cc:4f:4c:bf:46:48:7e: ea:42:f9:76:c6:8c:48:26:f5:27:cd:da:8c:97:23:58:97:fd: 5c:3b:bb:98:1f:b3:c3:cd:43:27:64:df:ce:29:d0:1d:05:f2: 57:d4:58:db:68:58:20:10:02:1c:30:d1:ea:78:66:76:f9:ff: 37:17:7c:b5:5d:94:d0:e5:74:da:1f:42:14:3d:1e:bf:fd:c7: b7:5f:b9:60:fa:83:89:17:52:3d:a9:8d:82:e8:5c:82:f7:b6: df:0d:61:0a:c6:cc:c2:e7:31:b4:8e:5b:8b:19:89:b8:20:a7: 9f:3f:83:11:17:6f:55:fe:02:6d:93:4a:09:e6:1f:b1:c1:d9: dc:e5:0c:04:be:31:10:07:b1:8f:a3:47:9d:ec:84:a4:1b:24: bb:98:1c:43:1d:58:27:d6:5e:ea:75:8b:98:61:c2:20:e9:36: d1:61:11:47:12:06:df:2c:7b:3b:5a:9b:e0:82:45:dd:48:e0: f8:a4:de:e2:9a:3d:63:cb:98:80:c2:f2:c3:5b:dc:f2:8e:84: 68:fc:7d:c4 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/FU54yQ8fZzGF4IipM7yGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzc0MzAwNmE4ZTlkMGUxYmYyMDU1N2FkNTk2NDA3OGZlODEyNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsua///AuG09HhTegocJSKHuEnZ/b 6F5e8gdxANJHbI/+1/w7A2BgzXVdtSO9u249l4EHxrr1KzzGYyKdLre+Yn+GBsSV ub738joKuOSnRbQ9d+2V8F5ec9IIj9q44rpvaFVKApEk2ZBzhkZ0DGP/M1GN77hD HtX47HjnddSGVTWNRXZUsjP9HHKFi9PaIGux0hEL2TD+lStMbs0QCQPUmAdnc1ju 2oCEvpesWEZaApwJIuaWzKP9xsIw17X02p8s4LqffqiKLj0Flzebx1HkL3jQqxN7 ZiEmy2NV+uphiRYoDGMhobB2LOYkcTFQHMxNemBO7qan8sMNutg6WkawYQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFAd0MAao6dDhvyBVetWWQHj+gSbvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzY3OWNh Yi0yY2Y0LTQwYTUtYjVlZS0yNDY2NDZlOWRiMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNjc5Y2Fi LTJjZjQtNDBhNS1iNWVlLTI0NjY0NmU5ZGIxZS8xL0IzUXdCcWpwME9HX0lGVjYx WlpBZVA2Qkp1OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCw+rsMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjO0MA0GCSqGSIb3DQEBCwUAA4IBAQAiFo/QgAsqok80nLtMt1nwGtzISVhdKmrc NUAAl5U0n88anMXGqc/7tAVyBkOwZcxPTL9GSH7qQvl2xoxIJvUnzdqMlyNYl/1c O7uYH7PDzUMnZN/OKdAdBfJX1FjbaFggEAIcMNHqeGZ2+f83F3y1XZTQ5XTaH0IU PR6//ce3X7lg+oOJF1I9qY2C6FyC97bfDWEKxszC5zG0jluLGYm4IKefP4MRF29V /gJtk0oJ5h+xwdnc5QwEvjEQB7GPo0ed7ISkGyS7mBxDHVgn1l7qdYuYYcIg6TbR YRFHEgbfLHs7WpvggkXdSOD4pN7imj1jy5iAwvLDW9zyjoRo/H3E -----END CERTIFICATE-----Generated at Mon Feb 9 19:46:59 2026 by rpki-client