This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C3mtIbjK26ehiknyi7tSt3JAQDQ.cer File: C3mtIbjK26ehiknyi7tSt3JAQDQ.cer (raw, json) Hash identifier: dhMPt74rJNLzlDyNmR+MttapJBJM/stY/op92l2Z0Rc= Subject key identifier: 0B:79:AD:21:B8:CA:DB:A7:A1:8A:49:F2:8B:BB:52:B7:72:40:40:34 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BA80BB70967AE05FC652327BC8B5F93EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/1138842c-2919-4ca2-9501-e9aaeb6a29f5/0/0B79AD21B8CADBA7A18A49F28BBB52B772404034.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/1138842c-2919-4ca2-9501-e9aaeb6a29f5/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Sat 10 Jan 2026 13:14:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212245 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a8:0b:b7:09:67:ae:05:fc:65:23:27:bc:8b:5f:93:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 10 13:14:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b79ad21b8cadba7a18a49f28bbb52b772404034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:a4:be:97:76:71:05:72:0a:18:35:b8:15: 76:c9:ab:ee:14:ce:e3:84:75:f8:af:1e:9a:ed:45: 6e:54:ee:4d:b7:8d:32:42:c5:5f:bb:d7:a8:46:75: 0a:55:23:3a:95:2a:bd:99:15:7b:98:43:96:20:b5: bb:e8:06:11:1a:60:1a:27:5a:bd:cb:57:8f:db:d7: dd:ff:28:3b:ff:39:88:6b:58:70:20:d4:20:c7:ea: 3e:d5:ac:86:6d:9d:77:4c:ce:41:ba:a8:11:c4:1e: 9e:36:e7:95:44:04:93:f8:ea:95:6d:81:e2:7f:70: 9c:e3:fc:e0:b6:de:72:76:5a:40:8b:02:38:67:b8: 1c:89:36:e3:44:06:4a:68:74:bd:65:17:00:d7:d0: 72:da:fc:e7:84:97:11:cd:53:3d:d2:66:b2:08:8a: c3:0f:14:02:9a:a9:78:4b:aa:62:de:4b:5b:bb:24: 1d:a3:37:2d:43:9c:27:4a:83:9c:82:11:51:04:98: da:53:93:09:69:ec:2b:79:a4:ce:df:61:06:39:ff: ff:6c:8c:2e:70:1c:d2:14:f2:ef:87:d2:38:87:a8: dd:5c:cd:db:07:f4:d7:7d:57:31:27:d5:3b:cc:65: be:73:5b:b6:9e:c3:12:c3:0f:84:89:29:d7:6b:92: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:79:AD:21:B8:CA:DB:A7:A1:8A:49:F2:8B:BB:52:B7:72:40:40:34 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/1138842c-2919-4ca2-9501-e9aaeb6a29f5/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/1138842c-2919-4ca2-9501-e9aaeb6a29f5/0/0B79AD21B8CADBA7A18A49F28BBB52B772404034.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212245 Signature Algorithm: sha256WithRSAEncryption 91:71:3a:db:92:6b:07:3f:32:58:18:d5:e8:2d:9d:3d:de:90: d7:3c:71:5d:10:f1:e9:1d:33:3a:e3:5f:43:04:98:c6:74:c9: 8c:08:be:f4:6c:a0:ba:e2:a3:90:9c:42:08:f2:e0:c2:af:f9: 97:2a:13:2a:0f:e3:0f:93:c5:f0:e9:63:39:8d:54:a0:58:e5: 13:6d:9e:d3:f1:7f:0a:4f:eb:df:e8:0a:85:d1:f5:91:91:f0: 54:91:b8:80:4c:a8:58:f4:cb:fc:ab:be:b9:fd:c6:ee:f1:8d: 7d:8c:a8:0c:7b:82:c6:03:5d:d4:43:0c:f6:f3:42:10:4a:38: 05:9c:60:58:48:16:d8:75:d1:0b:73:85:44:96:7b:01:62:75: 28:74:c6:51:44:ad:07:26:b6:0f:80:9c:50:4e:b9:3a:bf:75: 42:88:36:72:fd:3b:ff:82:59:e2:2a:e1:a2:ea:4b:cf:69:ff: 03:b9:5a:55:56:68:a3:6a:17:94:62:28:f7:80:24:c1:fe:23: 96:c1:a6:8f:6a:83:8a:88:e0:56:af:be:75:71:e2:00:eb:08: 42:30:12:31:74:b9:48:47:97:ab:9d:0f:0e:f9:41:0f:73:eb: 4b:e3:70:b0:a2:1e:3c:e4:46:cb:b7:a1:fc:63:b1:13:7c:c8: 5c:19:7c:10 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZuoC7cJZ64F/GUjJ7yLX5PuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTEwMTMxNDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjc5YWQyMWI4Y2FkYmE3YTE4YTQ5ZjI4YmJiNTJiNzcyNDA0MDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G2kvpd2cQVyChg1uBV2yavuFM7j hHX4rx6a7UVuVO5Nt40yQsVfu9eoRnUKVSM6lSq9mRV7mEOWILW76AYRGmAaJ1q9 y1eP29fd/yg7/zmIa1hwINQgx+o+1ayGbZ13TM5BuqgRxB6eNueVRAST+OqVbYHi f3Cc4/zgtt5ydlpAiwI4Z7gciTbjRAZKaHS9ZRcA19By2vznhJcRzVM90mayCIrD DxQCmql4S6pi3ktbuyQdozctQ5wnSoOcghFRBJjaU5MJaewreaTO32EGOf//bIwu cBzSFPLvh9I4h6jdXM3bB/TXfVcxJ9U7zGW+c1u2nsMSww+EiSnXa5K9AQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFAt5rSG4ytunoYpJ8ou7UrdyQEA0MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzExMzg4 NDJjLTI5MTktNGNhMi05NTAxLWU5YWFlYjZhMjlmNS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTEz ODg0MmMtMjkxOS00Y2EyLTk1MDEtZTlhYWViNmEyOWY1LzAvMEI3OUFEMjFCOENB REJBN0ExOEE0OUYyOEJCQjUyQjc3MjQwNDAzNC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDPRUw DQYJKoZIhvcNAQELBQADggEBAJFxOtuSawc/MlgY1egtnT3ekNc8cV0Q8ekdMzrj X0MEmMZ0yYwIvvRsoLrio5CcQgjy4MKv+ZcqEyoP4w+TxfDpYzmNVKBY5RNtntPx fwpP69/oCoXR9ZGR8FSRuIBMqFj0y/yrvrn9xu7xjX2MqAx7gsYDXdRDDPbzQhBK OAWcYFhIFth10QtzhUSWewFidSh0xlFErQcmtg+AnFBOuTq/dUKINnL9O/+CWeIq 4aLqS89p/wO5WlVWaKNqF5RiKPeAJMH+I5bBpo9qg4qI4FavvnVx4gDrCEIwEjF0 uUhHl6udDw75QQ9z60vjcLCiHjzkRsu3ofxjsRN8yFwZfBA= -----END CERTIFICATE-----Generated at Mon Feb 9 15:02:39 2026 by rpki-client