This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer (raw, json) Hash identifier: VSCrv6kvgfQuFBXWJ89nyQqYhboKnEeLl+DBm5fe1+A= Subject key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9BCF6335C4EC32C329BAFBED11FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 201606 IP: 185.69.80.0/22 IP: 2a03:2fe0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9b:cf:63:35:c4:ec:32:c3:29:ba:fb:ed:11:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0f:ff:21:a0:80:9b:15:3d:bf:29:33:3b:82: d2:20:98:f3:9f:0f:9d:08:07:e5:50:f9:c8:35:4f: 87:94:3d:f8:36:94:55:9b:1e:4d:fe:3e:82:53:95: 38:70:fe:9b:97:56:b3:a1:d6:44:15:d4:0c:8e:4f: 97:ad:4b:d0:d3:92:0c:6c:af:36:58:d6:9a:cd:2a: fd:e9:e9:b2:10:69:65:e8:fd:af:48:44:52:c5:ea: 7d:12:fa:05:8e:63:33:50:b7:58:4d:e7:8e:b9:a5: 6a:f8:fa:52:32:fd:35:03:3f:4a:15:8f:1f:dd:45: 8b:65:4a:5a:18:a7:63:09:d4:1c:cc:f1:3c:40:d9: c4:ff:6b:c3:af:53:e2:de:40:25:3e:2a:05:42:24: b8:36:92:81:a9:59:1b:6e:de:e3:72:b6:cb:20:08: 0c:98:57:9c:7a:f3:be:6c:a6:73:4c:ff:76:02:5a: a8:b2:ad:b6:a3:ad:bd:a2:9e:c8:3a:36:2a:79:ed: 32:44:6b:8f:b8:0e:af:8e:4d:4e:69:35:4b:60:fb: 7d:57:5b:3f:13:fc:ac:48:d4:a6:7c:45:a4:2a:a0: 19:00:56:33:99:5f:23:d9:ce:28:c5:a0:d6:38:8d: 64:0c:5f:97:9b:95:72:2b:02:a1:d8:e6:c1:53:41: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.80.0/22 IPv6: 2a03:2fe0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201606 Signature Algorithm: sha256WithRSAEncryption 34:9a:06:50:83:ae:24:b8:71:58:61:b7:6d:a1:a8:0a:59:9e: 80:8d:20:aa:d3:cc:1a:0a:e3:60:61:af:6a:db:b7:35:17:a7: 92:0d:9d:f9:a8:a6:c4:cd:ca:54:7a:c6:b9:42:e6:92:7c:a1: e9:c9:87:4e:12:89:d0:ad:a0:ec:9d:e1:8e:4b:c0:84:ab:db: 6a:d3:19:eb:53:85:d3:f6:47:86:72:8d:d4:fc:ab:f2:b4:1a: 13:fc:54:a9:82:be:63:c4:4a:48:a3:19:63:e9:75:9b:59:45: 64:00:6f:90:6b:98:2c:e3:b4:3b:04:3c:70:1e:0b:31:e5:2a: d5:6a:4b:5e:29:95:59:65:19:24:94:54:f3:a8:e6:c7:94:43: f6:1a:79:f0:42:47:f2:ad:e7:a9:ae:1a:7c:77:6c:1f:5f:0f: a9:27:24:8b:b8:ce:30:79:89:29:7f:0b:2b:49:48:93:5b:4c: af:7a:3e:30:43:5f:ee:a8:c2:27:55:e1:bc:5e:be:6f:4d:49: 0a:c8:74:e4:39:d5:93:c7:78:9a:5f:5d:0b:d8:65:68:5e:85: db:39:49:41:fa:78:4a:a5:d1:97:e7:5b:c7:0c:14:04:96:87: e8:a9:85:a5:6a:c7:20:03:77:15:83:28:fe:4d:3b:a3:f9:dd: c7:c0:42:2a -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt6W5vPYzXE7DLDKbr77RH/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjcxNzllZmY1ZTBlNjdkMDMzN2FhODkxMmY5NWE2ODdmZDQ0MDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w//IaCAmxU9vykzO4LSIJjznw+d CAflUPnINU+HlD34NpRVmx5N/j6CU5U4cP6bl1azodZEFdQMjk+XrUvQ05IMbK82 WNaazSr96emyEGll6P2vSERSxep9EvoFjmMzULdYTeeOuaVq+PpSMv01Az9KFY8f 3UWLZUpaGKdjCdQczPE8QNnE/2vDr1Pi3kAlPioFQiS4NpKBqVkbbt7jcrbLIAgM mFecevO+bKZzTP92Alqosq22o629op7IOjYqee0yRGuPuA6vjk1OaTVLYPt9V1s/ E/ysSNSmfEWkKqAZAFYzmV8j2c4oxaDWOI1kDF+Xm5VyKwKh2ObBU0FwpwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFF9xee/14OZ9AzeqiRL5Wmh/1ECJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1L2M0NGQ5 My0xNjk1LTRhYjEtOTE0Mi00Mjk2ZDdhYmQzZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUvYzQ0ZDkz LTE2OTUtNGFiMS05MTQyLTQyOTZkN2FiZDNkMS8xL1gzRjU3X1hnNW4wRE42cUpF dmxhYUhfVVFJay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuUVQMA0EAgACMAcDBQAqAy/gMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMThjANBgkqhkiG9w0BAQsFAAOCAQEANJoGUIOuJLhx WGG3baGoClmegI0gqtPMGgrjYGGvatu3NRenkg2d+aimxM3KVHrGuULmknyh6cmH ThKJ0K2g7J3hjkvAhKvbatMZ61OF0/ZHhnKN1Pyr8rQaE/xUqYK+Y8RKSKMZY+l1 m1lFZABvkGuYLOO0OwQ8cB4LMeUq1WpLXimVWWUZJJRU86jmx5RD9hp58EJH8q3n qa4afHdsH18PqScki7jOMHmJKX8LK0lIk1tMr3o+MENf7qjCJ1XhvF6+b01JCsh0 5DnVk8d4ml9dC9hlaF6F2zlJQfp4SqXRl+dbxwwUBJaH6KmFpWrHIAN3FYMo/k07 o/ndx8BCKg== -----END CERTIFICATE-----Generated at Mon Feb 9 15:10:44 2026 by rpki-client