This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cs3rVmQuM1iXcef9pxu3HgF_nZY.cer File: cs3rVmQuM1iXcef9pxu3HgF_nZY.cer (raw, json) Hash identifier: riV84BTEF5Ssm6uf8jHSZD/2Je4+wKMHEmYrqY2ZkKY= Subject key identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE4C0D54918149DA4393BD2C767230 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 209584 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:4c:0d:54:91:81:49:da:43:93:bd:2c:76:72:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72cdeb56642e33589771e7fda71bb71e017f9d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2c:43:21:57:b5:66:3d:f2:bc:95:e4:28:69: 94:b4:3f:2d:fd:43:cd:49:aa:9c:c8:29:c2:d8:d5: 10:29:bf:0b:9f:69:42:44:36:cc:23:0f:17:45:aa: 1a:51:b5:38:62:12:4d:24:88:e2:74:77:a2:23:62: db:9b:18:95:bc:47:3d:a3:aa:ff:9a:b4:88:28:3d: f8:5f:56:9c:cd:87:f4:90:80:0f:c2:8e:80:b9:59: f2:eb:84:c3:5d:18:8b:54:e4:44:37:98:ce:b6:31: d3:72:0a:e8:31:2e:d3:bd:13:63:34:fc:b0:db:4a: 0f:95:d0:c4:ec:7c:49:1b:30:db:be:85:bc:27:49: fc:af:e5:e5:df:50:bb:5f:1c:e3:f0:64:5e:54:e0: 3b:80:b8:f3:5e:ee:28:d4:a6:0e:b3:69:ce:fa:59: 81:12:59:29:de:57:47:85:ac:09:db:7c:69:2b:0f: 3e:fd:f9:17:ff:09:f6:a7:8f:c1:59:91:7d:c8:99: f1:ec:fe:24:89:07:ba:58:51:ee:66:90:2b:34:10: 08:1c:95:26:48:aa:4c:70:3c:c0:34:1c:1d:c8:c2: f3:6b:e7:9c:20:c3:f6:d8:62:13:80:fe:5b:8f:d3: a7:34:cc:60:ef:46:8d:4b:db:b1:66:ba:e7:32:39: b7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CD:EB:56:64:2E:33:58:97:71:E7:FD:A7:1B:B7:1E:01:7F:9D:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3c8448-af4a-4b48-a72a-e82774a16a57/1/cs3rVmQuM1iXcef9pxu3HgF_nZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 209584 Signature Algorithm: sha256WithRSAEncryption 68:50:48:de:00:f0:ba:9e:d4:c7:8c:c6:6f:ac:7d:f8:59:77: 4c:1c:e8:39:6f:a5:af:4c:fd:73:c6:bc:c4:a6:a5:b8:7f:97: 34:d5:98:16:9a:4e:25:60:2c:f6:80:5c:e2:e3:b1:38:6b:eb: 76:78:04:5a:c7:7a:c9:74:d6:07:4a:19:d4:90:b0:76:f6:c3: 27:44:d9:88:fb:0a:10:5b:35:7e:ff:f3:3e:05:4c:60:db:7a: 48:90:06:dd:ff:1f:d6:53:0b:b8:f8:52:10:cd:73:42:5b:96: cf:0b:23:77:d4:53:18:af:16:4f:73:b8:b1:60:ac:08:f8:eb: df:1f:98:ec:12:38:2c:d2:0f:2e:dc:92:12:5e:41:5c:a9:ff: 6e:d8:55:75:f7:3d:d7:13:be:4e:ee:44:3c:f1:51:ef:63:33: 8f:66:f9:d3:b6:7c:e8:ee:20:83:ff:ca:7d:76:ed:27:e4:81: f4:a0:c2:73:1b:39:37:3e:a6:ae:c1:d7:09:8a:25:b2:03:89: ce:2f:40:0b:82:7e:23:99:61:7f:2f:1d:9d:ba:9a:17:5b:d2: 55:1b:67:f5:5f:51:8c:e5:be:af:51:dc:82:1f:98:d4:b3:93: c9:1f:f0:d2:0e:86:d5:74:14:76:31:59:4b:8f:5d:a5:1a:db: aa:5f:03:03 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZt87kwNVJGBSdpDk70sdnIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmNkZWI1NjY0MmUzMzU4OTc3MWU3ZmRhNzFiYjcxZTAxN2Y5ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CxDIVe1Zj3yvJXkKGmUtD8t/UPN SaqcyCnC2NUQKb8Ln2lCRDbMIw8XRaoaUbU4YhJNJIjidHeiI2LbmxiVvEc9o6r/ mrSIKD34X1aczYf0kIAPwo6AuVny64TDXRiLVOREN5jOtjHTcgroMS7TvRNjNPyw 20oPldDE7HxJGzDbvoW8J0n8r+Xl31C7Xxzj8GReVOA7gLjzXu4o1KYOs2nO+lmB Elkp3ldHhawJ23xpKw8+/fkX/wn2p4/BWZF9yJnx7P4kiQe6WFHuZpArNBAIHJUm SKpMcDzANBwdyMLza+ecIMP22GITgP5bj9OnNMxg70aNS9uxZrrnMjm3lwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFHLN61ZkLjNYl3Hn/acbtx4Bf52WMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxLzNjODQ0 OC1hZjRhLTRiNDgtYTcyYS1lODI3NzRhMTZhNTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvM2M4NDQ4 LWFmNGEtNGI0OC1hNzJhLWU4Mjc3NGExNmE1Ny8xL2NzM3JWbVF1TTFpWGNlZjlw eHUzSGdGX25aWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMysDANBgkqhkiG9w0BAQsFAAOCAQEAaFBI3gDwup7U x4zGb6x9+Fl3TBzoOW+lr0z9c8a8xKaluH+XNNWYFppOJWAs9oBc4uOxOGvrdngE Wsd6yXTWB0oZ1JCwdvbDJ0TZiPsKEFs1fv/zPgVMYNt6SJAG3f8f1lMLuPhSEM1z QluWzwsjd9RTGK8WT3O4sWCsCPjr3x+Y7BI4LNIPLtySEl5BXKn/bthVdfc91xO+ Tu5EPPFR72Mzj2b507Z86O4gg//KfXbtJ+SB9KDCcxs5Nz6mrsHXCYolsgOJzi9A C4J+I5lhfy8dnbqaF1vSVRtn9V9RjOW+r1Hcgh+Y1LOTyR/w0g6G1XQUdjFZS49d pRrbql8DAw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:08 2026 by rpki-client