This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer File: b3c-s9MHlNItdc2HK5GjuoSIQtc.cer (raw, json) Hash identifier: UrmVRpCbdFbM2igGQ6ECys84W1/RmeMWxtlefuDc3z4= Subject key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C119BF70C19AF895A3DE77A185F201A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 00:18:07 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210287 IP: 185.160.48.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:9b:f7:0c:19:af:89:5a:3d:e7:7a:18:5f:20:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 00:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:3c:51:be:76:c1:0c:ce:09:71:6b:33:1d: 12:22:c0:d5:21:ed:10:1b:d2:b7:7e:52:b8:55:48: d2:df:ea:ff:c7:f7:ba:a0:1c:7f:e2:8a:db:f7:21: f5:1e:30:3e:01:b3:59:59:c8:8b:07:b1:a0:46:40: 7a:d8:68:ad:45:bb:e8:2c:8c:06:6a:a2:66:53:3a: 2f:be:75:93:96:4d:a6:0f:09:ea:43:d7:47:b1:ba: fa:63:96:7c:81:c2:b7:03:29:2b:05:bf:3d:3f:27: 1b:42:fa:2b:5b:c8:c3:7b:b7:48:6a:4f:16:da:fc: 9d:78:ae:4c:19:fe:c1:23:fc:91:57:14:ab:9c:51: dc:c1:66:e7:ee:bc:b1:a2:90:77:65:68:6f:58:33: 6d:58:c7:08:55:80:6b:a6:68:50:45:36:3a:27:3d: 2a:92:07:19:8c:2a:a1:bb:ba:ed:3d:c6:dd:ae:a9: 0f:5e:d5:7c:e2:42:d0:4f:10:2c:f2:85:1d:dc:3f: e5:9e:dc:64:5b:d6:0f:72:40:a5:d2:73:67:ec:e7: 10:84:85:c5:f8:3a:3f:e0:77:eb:34:7d:c2:91:be: f3:34:23:1e:42:62:86:e8:92:f6:0b:ad:e4:48:49: c1:01:3b:4f:ee:c5:8f:b9:df:5f:70:f6:54:2d:4e: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.48.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210287 Signature Algorithm: sha256WithRSAEncryption 7a:cd:e6:e1:bd:9d:52:60:c5:55:c2:5e:75:49:4a:7a:4f:34: 6e:3d:9b:18:7e:80:3b:a1:a6:60:57:14:fb:5e:d6:c7:91:f6: b6:14:6d:82:da:53:59:69:3e:4c:88:03:20:ea:0e:56:0e:44: 09:78:8e:6e:d6:a9:0f:87:dc:cc:a4:89:2f:32:08:49:9e:57: c5:0e:47:c2:83:4d:e7:e4:ba:81:c1:40:22:36:9f:70:68:e8: c3:3d:83:f3:64:57:e5:2a:d7:40:58:c2:0b:bd:02:80:53:b2: 0a:03:73:2a:a4:a4:a7:8c:50:d1:2b:76:69:10:e1:6b:2e:63: 8a:c2:3a:da:6b:cd:6b:cb:89:41:58:f5:ca:b6:2e:f1:98:86: da:96:78:e2:42:bc:80:6f:d2:0c:c4:7c:a4:82:bb:23:5e:ac: f6:77:bf:66:66:c9:ee:52:76:30:10:be:43:e6:74:9d:13:d0: d7:bd:4f:24:32:65:fe:e1:0e:3f:28:b7:f5:1f:bf:aa:14:f1: 2b:ba:cd:cb:cc:72:37:90:ff:87:49:9c:df:82:18:4f:c2:b5: 8a:f4:97:90:40:60:18:0c:f8:cc:6d:23:ff:49:9d:6f:1d:f7: 82:58:68:4c:25:c2:a3:fd:05:91:aa:3c:ca:98:fa:2a:0e:51: fe:bd:cf:90 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt8EZv3DBmviVo953oYXyAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Zjc3M2ViM2QzMDc5NGQyMmQ3NWNkODcyYjkxYTNiYTg0ODg0MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI88Ub52wQzOCXFrMx0SIsDVIe0Q G9K3flK4VUjS3+r/x/e6oBx/4orb9yH1HjA+AbNZWciLB7GgRkB62GitRbvoLIwG aqJmUzovvnWTlk2mDwnqQ9dHsbr6Y5Z8gcK3AykrBb89PycbQvorW8jDe7dIak8W 2vydeK5MGf7BI/yRVxSrnFHcwWbn7ryxopB3ZWhvWDNtWMcIVYBrpmhQRTY6Jz0q kgcZjCqhu7rtPcbdrqkPXtV84kLQTxAs8oUd3D/lntxkW9YPckCl0nNn7OcQhIXF +Do/4HfrNH3Ckb7zNCMeQmKG6JL2C63kSEnBATtP7sWPud9fcPZULU5S7wIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFG93PrPTB5TSLXXNhyuRo7qEiELXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RjLzI0ZDc5 ZC0xNzY2LTQwNDUtOWQyNC02YTBiYWViMjMzNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGMvMjRkNzlk LTE3NjYtNDA0NS05ZDI0LTZhMGJhZWIyMzM2ZS8xL2IzYy1zOU1IbE5JdGRjMkhL NUdqdW9TSVF0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuaAwMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwM1bzANBgkqhkiG9w0BAQsFAAOCAQEAes3m4b2dUmDFVcJedUlKek80bj2bGH6A O6GmYFcU+17Wx5H2thRtgtpTWWk+TIgDIOoOVg5ECXiObtapD4fczKSJLzIISZ5X xQ5HwoNN5+S6gcFAIjafcGjowz2D82RX5SrXQFjCC70CgFOyCgNzKqSkp4xQ0St2 aRDhay5jisI62mvNa8uJQVj1yrYu8ZiG2pZ44kK8gG/SDMR8pIK7I16s9ne/ZmbJ 7lJ2MBC+Q+Z0nRPQ171PJDJl/uEOPyi39R+/qhTxK7rNy8xyN5D/h0mc34IYT8K1 ivSXkEBgGAz4zG0j/0mdbx33glhoTCXCo/0Fkao8ypj6Kg5R/r3PkA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:47 2026 by rpki-client