This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer File: r3WOiP6vjWcFnch4ei5fMaBqwek.cer (raw, json) Hash identifier: qdHIuc67nmyomCc4LonKAMmSSpDkJ8h+VE+8L7sSAWc= Subject key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7BA467904A79CAA8462A8D71B523E7C0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 22:18:50 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 35413 IP: 91.195.180.0/23 IP: 193.239.252.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:67:90:4a:79:ca:a8:46:2a:8d:71:b5:23:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 22:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:74:eb:ae:2f:df:37:78:0b:9f:34:8f:03: dd:ee:50:ac:93:ec:0d:50:23:71:2d:2e:3f:6d:a7: 8f:1b:d1:ba:0a:f5:34:59:f1:1d:86:1c:9d:cf:9a: 5e:43:a4:42:4a:64:b6:6a:5c:5d:d2:f8:bd:5e:da: 1e:78:97:e7:2d:1a:30:99:de:b5:7a:7a:b5:a2:af: 80:36:eb:28:a2:80:e8:5d:d2:4d:fc:b8:44:0a:44: e1:4d:fe:16:06:2f:aa:dc:9d:44:ac:41:ae:da:18: 8e:56:3e:62:46:aa:c0:2d:85:ae:0e:5e:75:06:91: 6d:26:e8:2a:ce:95:7b:26:89:b1:e6:8f:f0:88:67: cc:d4:82:e1:25:1c:1d:10:97:cd:8e:e4:7c:8a:84: 35:0b:23:c1:2b:a1:de:2e:c8:2f:61:0c:b6:02:0b: 14:7a:95:40:9f:90:4b:3b:9a:c6:de:a6:8f:d9:2a: 87:6c:a3:fc:fa:97:e2:26:c5:52:2c:31:9f:f2:ab: 2a:d0:d9:62:ad:6f:61:7a:e7:5c:b2:00:61:0f:08: 7b:d9:e3:24:6f:89:09:0b:26:80:89:54:92:d0:6f: b3:21:f3:2d:71:72:8e:5f:d2:f1:62:8d:da:60:ec: a6:5b:11:82:7d:56:c9:18:18:ec:3e:6e:e8:85:d9: c0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.180.0/23 193.239.252.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35413 Signature Algorithm: sha256WithRSAEncryption 3b:8b:f6:25:db:3b:9b:34:0f:5b:98:cc:e0:ac:d2:b4:c1:18: cc:5f:65:02:bd:e7:5d:73:a6:2a:e2:fb:f3:0d:28:2c:1e:72: 59:d2:11:76:65:df:75:e6:e5:6a:ea:aa:2c:88:3b:a7:07:49: 28:7a:83:5a:52:bb:d9:c0:3b:af:9d:02:4d:65:e2:c0:8a:cc: 14:00:0c:db:8c:1e:3d:39:29:3e:d6:a0:8d:01:cc:d3:b1:cc: c3:5f:94:35:62:d8:c6:5b:dc:19:cf:8c:73:35:8e:32:a9:67: f4:1e:28:9a:db:0b:2e:d8:1f:1c:bd:39:92:71:c2:6d:bd:64: 56:61:b1:40:77:97:e2:37:d5:a5:da:7a:30:b7:d0:ea:81:ad: f4:de:78:e6:3d:61:08:cf:1f:8d:fd:a7:2c:bd:95:34:10:f2: c4:4e:b7:a5:5f:b7:64:8a:da:72:3a:ac:82:99:a4:46:fe:1e: 70:37:b8:53:e8:37:5a:e3:74:82:a1:20:fe:fc:db:dd:a6:3e: d4:78:41:12:96:13:28:ee:91:e8:77:c2:03:d2:df:41:5f:87: 33:de:99:0b:59:23:26:c9:42:3e:59:09:b1:6b:ef:43:c8:93: 75:ce:9d:96:1e:41:14:6c:ab:9f:b5:61:54:05:7b:a1:b5:90: 32:62:71:1e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZt7pGeQSnnKqEYqjXG1I+fAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMjIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjc1OGU4OGZlYWY4ZDY3MDU5ZGM4Nzg3YTJlNWYzMWEwNmFjMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlN0664v3zd4C580jwPd7lCsk+wN UCNxLS4/baePG9G6CvU0WfEdhhydz5peQ6RCSmS2alxd0vi9XtoeeJfnLRowmd61 enq1oq+ANusoooDoXdJN/LhECkThTf4WBi+q3J1ErEGu2hiOVj5iRqrALYWuDl51 BpFtJugqzpV7Jomx5o/wiGfM1ILhJRwdEJfNjuR8ioQ1CyPBK6HeLsgvYQy2AgsU epVAn5BLO5rG3qaP2SqHbKP8+pfiJsVSLDGf8qsq0NlirW9heudcsgBhDwh72eMk b4kJCyaAiVSS0G+zIfMtcXKOX9LxYo3aYOymWxGCfVbJGBjsPm7ohdnA2wIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFK91joj+r41nBZ3IeHouXzGgasHpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzU1OGMz OS03NTEwLTRiNjMtYWE1Ny0xZTIyMzBkZjA3NDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvNTU4YzM5 LTc1MTAtNGI2My1hYTU3LTFlMjIzMGRmMDc0Ni8xL3IzV09pUDZ2aldjRm5jaDRl aTVmTWFCcXdlay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQBW8O0AwQBwe/8MBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCKVTANBgkqhkiG9w0BAQsFAAOCAQEAO4v2Jds7mzQPW5jM4KzStMEY zF9lAr3nXXOmKuL78w0oLB5yWdIRdmXfdeblauqqLIg7pwdJKHqDWlK72cA7r50C TWXiwIrMFAAM24wePTkpPtagjQHM07HMw1+UNWLYxlvcGc+MczWOMqln9B4omtsL LtgfHL05knHCbb1kVmGxQHeX4jfVpdp6MLfQ6oGt9N545j1hCM8fjf2nLL2VNBDy xE63pV+3ZIracjqsgpmkRv4ecDe4U+g3WuN0gqEg/vzb3aY+1HhBEpYTKO6R6HfC A9LfQV+HM96ZC1kjJslCPlkJsWvvQ8iTdc6dlh5BFGyrn7VhVAV7obWQMmJxHg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:51:24 2026 by rpki-client