This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3tKBUpyGg_aYBKQfMW1boEgpz4.cer File: a3tKBUpyGg_aYBKQfMW1boEgpz4.cer (raw, json) Hash identifier: O7WfXZVLsfpRsZMWD7t8mOKXV6kPj2Tmr2HsnfAWriA= Subject key identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CECBF5B46DE60C620FFD4CBBCB40F13 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 197418 IP: 46.151.112.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bf:5b:46:de:60:c6:20:ff:d4:cb:bc:b4:0f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b7b4a054a721a0fda6012907cc5b56e8120a73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:c2:81:10:84:62:3b:16:9b:bd:9d:e6:9e: dc:15:42:bf:f9:20:f9:c5:21:6f:d3:03:e2:48:e7: 08:1e:17:b4:6d:65:7d:1f:bd:98:ae:10:bb:22:aa: b4:b2:80:fc:29:ba:6f:c6:1f:43:a0:1c:60:33:66: b5:0f:54:3e:4e:e1:1f:7b:46:28:ad:6c:24:d4:70: 01:0f:60:98:f7:93:b2:4f:79:49:70:8b:e7:16:62: 95:e3:ec:60:a1:65:89:1f:20:56:c1:f4:ab:07:ee: b2:ff:58:11:0e:7d:17:a1:ad:b7:cb:42:f4:1e:b4: da:06:e5:41:4e:13:8b:c0:53:dd:09:c0:a6:ca:a1: 65:30:09:80:1b:7e:6a:12:9d:a1:f8:8a:4a:59:0e: e6:6c:8e:3b:64:9f:89:3a:e9:37:b1:50:a3:b1:6a: ff:de:47:28:11:0b:ea:19:fe:97:da:37:2c:97:27: 4b:e9:2a:85:c8:a1:04:83:fa:bd:71:45:cb:9e:33: f1:87:b4:5d:bb:73:f4:bc:6e:3d:8b:da:50:b0:f6: 11:1d:69:9c:2d:7e:46:d8:09:37:f8:23:6a:e2:29: 68:e7:77:dc:cd:b4:bb:f3:b1:f5:80:78:03:13:5c: 2d:13:04:41:21:0a:53:5f:c1:5d:7f:30:e1:1d:0d: 1a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:4A:05:4A:72:1A:0F:DA:60:12:90:7C:C5:B5:6E:81:20:A7:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4abe1d-3036-42b8-be36-e799ef54f0c4/1/a3tKBUpyGg_aYBKQfMW1boEgpz4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.112.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 197418 Signature Algorithm: sha256WithRSAEncryption 3a:02:0d:c9:7b:d9:42:34:a1:5d:05:0f:c0:07:5f:4e:72:5e: 2b:a2:8d:05:6a:69:9e:bc:87:f7:d6:32:6a:47:75:15:7c:ed: 56:60:20:92:f7:95:a3:f0:22:3c:d9:4a:11:66:49:a1:b7:e9: 31:1b:7f:c1:c4:8d:e2:82:fb:46:0d:37:89:52:12:fb:31:a5: 81:58:2e:77:12:e9:a7:7c:83:df:54:77:2a:d4:6e:5d:4a:85: 1e:a7:76:fd:71:33:c9:03:df:0e:66:51:09:3a:68:40:7f:ee: 8f:6b:6c:60:6a:a5:ff:94:13:86:81:a3:e4:a6:39:aa:e1:7e: 47:02:78:bc:74:22:c2:08:3c:67:d3:41:52:06:41:21:aa:47: b7:7e:6e:be:48:c3:94:a8:81:de:af:a8:ff:a5:b2:ed:93:8a: cb:de:71:21:ab:23:c7:b9:4d:f5:6b:8a:c4:ba:9a:6c:de:2d: ff:c6:ab:2e:34:57:cf:7a:27:60:fb:ef:c5:5d:1d:85:eb:2a: 43:e3:c3:a1:db:fe:b3:f4:ae:2d:31:29:54:43:59:85:74:ec: 5b:65:bd:79:6c:2e:3a:12:db:35:f6:f5:83:13:3a:ee:1b:c8: 1a:5c:2e:9a:56:cc:3c:29:d5:e2:bc:a3:44:08:c1:9b:fe:bf: 84:f2:f9:d2 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt87L9bRt5gxiD/1Mu8tA8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdiNGEwNTRhNzIxYTBmZGE2MDEyOTA3Y2M1YjU2ZTgxMjBhNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcDCgRCEYjsWm72d5p7cFUK/+SD5 xSFv0wPiSOcIHhe0bWV9H72YrhC7Iqq0soD8Kbpvxh9DoBxgM2a1D1Q+TuEfe0Yo rWwk1HABD2CY95OyT3lJcIvnFmKV4+xgoWWJHyBWwfSrB+6y/1gRDn0Xoa23y0L0 HrTaBuVBThOLwFPdCcCmyqFlMAmAG35qEp2h+IpKWQ7mbI47ZJ+JOuk3sVCjsWr/ 3kcoEQvqGf6X2jcslydL6SqFyKEEg/q9cUXLnjPxh7Rdu3P0vG49i9pQsPYRHWmc LX5G2Ak3+CNq4ilo53fczbS787H1gHgDE1wtEwRBIQpTX8FdfzDhHQ0aEwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFGt7SgVKchoP2mASkHzFtW6BIKc+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzRhYmUx ZC0zMDM2LTQyYjgtYmUzNi1lNzk5ZWY1NGYwYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNGFiZTFk LTMwMzYtNDJiOC1iZTM2LWU3OTllZjU0ZjBjNC8xL2EzdEtCVXB5R2dfYVlCS1Fm TVcxYm9FZ3B6NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDLpdwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMDKjANBgkqhkiG9w0BAQsFAAOCAQEAOgINyXvZQjShXQUPwAdfTnJeK6KNBWpp nryH99Yyakd1FXztVmAgkveVo/AiPNlKEWZJobfpMRt/wcSN4oL7Rg03iVIS+zGl gVgudxLpp3yD31R3KtRuXUqFHqd2/XEzyQPfDmZRCTpoQH/uj2tsYGql/5QThoGj 5KY5quF+RwJ4vHQiwgg8Z9NBUgZBIapHt35uvkjDlKiB3q+o/6Wy7ZOKy95xIasj x7lN9WuKxLqabN4t/8arLjRXz3onYPvvxV0dhesqQ+PDodv+s/SuLTEpVENZhXTs W2W9eWwuOhLbNfb1gxM67hvIGlwumlbMPCnV4ryjRAjBm/6/hPL50g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:21 2026 by rpki-client