This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer (raw, json) Hash identifier: H4wgwGwK0UOQTsDA7ZvUKVoa8+SoAjc8iDBbKzsfbqk= Subject key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76EAF920A3375A895CDA2E4ABAEC94EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:17:49 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 215559 IP: 45.129.166.0/24 IP: 2a13:1140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f9:20:a3:37:5a:89:5c:da:2e:4a:ba:ec:94:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:f8:ec:6a:e6:6a:3a:5d:9c:22:5d:03:62: 16:15:f1:99:73:ad:9b:72:fa:90:5c:69:5a:64:c9: 04:59:30:80:91:92:62:a9:e8:49:7a:83:07:4d:c7: 47:91:e2:ed:fa:1b:b6:2c:d5:a0:8d:2d:56:10:ce: ab:65:da:bc:81:d5:a8:6d:6a:54:2c:c5:e3:e1:95: cc:45:f5:35:37:06:af:53:45:70:ed:9a:73:7a:92: 97:4a:a6:64:2c:30:22:af:d3:88:ac:3e:11:c1:42: bd:aa:79:2a:eb:ca:1c:14:82:25:33:8d:ee:e2:e8: d3:e6:3d:43:96:ab:0c:8a:a0:b4:b6:82:ec:ee:57: 18:2c:8f:3a:47:94:ef:60:04:8d:83:db:eb:ed:ff: 83:4d:c0:8a:fe:b0:07:f1:3f:21:9d:9d:a7:cd:bf: 7c:86:1b:76:7f:b8:3c:a4:26:e5:df:72:11:b8:41: e2:0d:60:74:42:1f:68:e4:de:41:93:3b:29:9f:6e: a5:2a:0d:a3:dc:fb:1b:88:24:36:28:c2:64:89:81: 5f:69:ed:b6:8d:c3:9e:90:cc:f1:89:ff:b9:b5:1f: f8:72:66:48:8b:35:6a:d4:25:74:b7:f9:44:7b:81: 0b:e9:7b:9a:9a:6d:31:0f:f3:fd:18:05:74:4c:20: bf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.166.0/24 IPv6: 2a13:1140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215559 Signature Algorithm: sha256WithRSAEncryption 0e:24:52:ea:6a:42:6e:f2:b8:30:4b:fc:b6:61:a1:d3:02:61: e9:c1:3b:eb:c8:41:94:b8:d6:57:63:0e:c9:17:14:b0:9e:60: ce:bc:cb:c6:57:12:79:51:cb:79:a5:10:ee:dd:73:50:f0:10: e6:75:d9:e1:b5:64:2c:d1:70:e1:be:6e:34:9d:6f:d1:2d:93: 9a:03:74:23:72:d0:d7:41:9c:cf:b4:b3:23:a1:d3:64:fb:90: 87:9d:62:44:b4:83:d6:26:85:c8:1d:19:45:85:f3:0b:71:ee: 87:ce:f3:29:d3:9e:72:4c:08:f5:e7:21:9a:33:88:d7:6b:68: 42:d6:76:18:8b:f4:07:ef:f2:de:ea:83:83:fc:7c:25:56:bb: 71:36:19:ff:ac:d0:2c:b5:fd:f1:31:6e:23:d6:35:9e:1d:9d: dc:a3:50:3a:49:f9:64:10:3b:3f:7c:1f:26:8d:65:b6:3d:cf: 42:d6:cf:d9:37:bb:e6:c0:a3:17:52:da:2a:bb:09:b8:33:ae: a1:00:ca:23:0a:13:b6:76:68:95:bc:82:de:6c:87:b5:61:08: 31:53:23:69:d0:75:86:41:cc:4b:de:2a:f8:94:1f:a6:44:88: aa:51:75:94:2c:25:f3:bd:a9:d8:f4:09:9f:01:cf:f3:52:f4: f8:e0:6f:de -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt26vkgozdaiVzaLkq67JTuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmVkYzNhNjNkZjE3YmI0YmYzNDU2MDk1Nzk2N2U1OWE4YjNlM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoj47GrmajpdnCJdA2IWFfGZc62b cvqQXGlaZMkEWTCAkZJiqehJeoMHTcdHkeLt+hu2LNWgjS1WEM6rZdq8gdWobWpU LMXj4ZXMRfU1NwavU0Vw7ZpzepKXSqZkLDAir9OIrD4RwUK9qnkq68ocFIIlM43u 4ujT5j1DlqsMiqC0toLs7lcYLI86R5TvYASNg9vr7f+DTcCK/rAH8T8hnZ2nzb98 hht2f7g8pCbl33IRuEHiDWB0Qh9o5N5Bkzspn26lKg2j3PsbiCQ2KMJkiYFfae22 jcOekMzxif+5tR/4cmZIizVq1CV0t/lEe4EL6Xuamm0xD/P9GAV0TCC/WwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK/tw6Y98Xu0vzRWCVeWflmos+OhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhmLzgyNGQ4 ZC1iMDQ2LTQ2ZjYtODZiOC05YjhhY2U0MjgxZjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGYvODI0ZDhk LWIwNDYtNDZmNi04NmI4LTliOGFjZTQyODFmMy8xL3ItM0RwajN4ZTdTX05GWUpW NVotV2FpejQ2RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQALYGmMA0EAgACMAcDBQMqExFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKBzANBgkqhkiG9w0BAQsFAAOCAQEADiRS6mpCbvK4 MEv8tmGh0wJh6cE768hBlLjWV2MOyRcUsJ5gzrzLxlcSeVHLeaUQ7t1zUPAQ5nXZ 4bVkLNFw4b5uNJ1v0S2TmgN0I3LQ10Gcz7SzI6HTZPuQh51iRLSD1iaFyB0ZRYXz C3Huh87zKdOeckwI9echmjOI12toQtZ2GIv0B+/y3uqDg/x8JVa7cTYZ/6zQLLX9 8TFuI9Y1nh2d3KNQOkn5ZBA7P3wfJo1ltj3PQtbP2Te75sCjF1LaKrsJuDOuoQDK IwoTtnZolbyC3myHtWEIMVMjadB1hkHMS94q+JQfpkSIqlF1lCwl872p2PQJnwHP 81L0+OBv3g== -----END CERTIFICATE-----Generated at Mon Jan 26 08:40:54 2026 by rpki-client