This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer File: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer (raw, json) Hash identifier: 7ALm9fgmYaR22DK84RhmxbdtWMeF+g+aOkpqSfAIIoU= Subject key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910FD5B033B4DD7BC4AA1DBE3800B56 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 211727 IP: 185.243.130.0/24 IP: 2a10:9d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fd:5b:03:3b:4d:d7:bc:4a:a1:db:e3:80:0b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b6:0c:f3:05:da:b4:0c:14:8b:7b:86:8d:49: e7:7a:65:23:6b:ea:d2:13:0b:05:d3:36:14:c3:aa: b6:d7:ec:f5:75:ad:81:56:fa:c9:13:29:3b:7e:5b: 19:e8:4d:5e:50:0d:7a:84:91:0b:32:4f:90:e1:c2: cd:50:c2:47:af:d3:16:cf:0b:d1:0d:45:27:67:1f: eb:4a:3a:21:ae:47:02:9d:cb:83:d2:d2:7e:ab:29: fe:33:0c:2f:6b:0a:bf:49:56:33:86:1e:44:67:17: 99:7e:c4:f1:dd:cb:8a:01:2f:3c:24:f0:eb:f7:df: 53:f0:e8:9b:2e:e3:57:a7:6b:84:89:1d:e8:f6:82: 98:10:63:4a:1b:5e:09:b2:a7:5a:da:80:20:28:9d: e3:96:e1:1c:c5:6b:24:f0:9d:d0:c9:c7:23:0b:a7: 2c:79:c3:0c:2e:df:6a:3c:87:75:45:74:87:84:7c: 0a:60:8e:75:cb:e1:28:1b:6a:39:0d:17:1a:44:d3: f3:3c:ed:53:15:6d:6d:09:b5:cc:a8:35:70:97:44: 7c:71:c2:1b:62:9e:11:17:b7:f5:30:8a:8c:8b:42: e4:16:ed:77:f6:6e:dd:49:88:b5:c3:2e:60:8a:92: ad:e3:a1:2e:f0:ba:c2:a5:c2:db:e4:98:c1:6f:a3: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.130.0/24 IPv6: 2a10:9d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211727 Signature Algorithm: sha256WithRSAEncryption 86:83:0a:3f:e0:6c:6d:c6:6f:9e:ab:85:28:66:7f:dc:c6:18: d0:f5:ec:33:c6:48:26:04:61:30:5c:d2:a9:00:76:15:60:25: 47:2d:0e:06:f5:0e:c9:6c:91:c3:14:e6:c6:0a:53:a3:32:9d: 14:71:61:39:5e:9c:fb:a8:fe:c0:4f:84:ba:63:25:c3:16:3f: 94:eb:6f:ce:9c:f6:9f:12:6c:c2:4a:d3:93:ed:ad:2a:59:96: 5c:db:99:a5:f2:2e:cb:d8:d6:e4:3b:ad:da:f5:ea:47:18:0b: 6b:af:52:38:32:c7:91:b2:80:a4:77:81:fe:4a:2b:61:e8:98: 66:fe:8c:48:25:f8:b6:76:0a:7f:c4:49:a9:bd:36:dd:fe:82: 48:36:e9:f3:24:59:93:5a:70:97:6b:aa:e5:59:bf:04:fe:2f: 64:79:75:99:a0:03:e1:81:89:c5:0d:82:09:d3:d4:f9:1a:36: 66:e2:5e:59:5a:33:0a:3c:c5:55:b6:ee:71:77:86:46:6f:83: f9:2f:3d:fc:43:4c:23:e8:8e:e2:f3:62:aa:5b:0e:99:c3:8e: 34:ab:d3:a3:79:4a:4d:a3:f6:4a:d8:a5:dc:b5:36:56:9b:a8: fb:b3:a8:12:65:8f:b1:5f:af:d8:51:42:80:98:5c:f3:cd:dc: 97:2b:46:e7 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt5EP1bAztN17xKodvjgAtWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDNkZDhkMzJjZmM3MTdhNmU2OTBlYmUzZTFkYjQzODZkOGY2YzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7YM8wXatAwUi3uGjUnnemUja+rS EwsF0zYUw6q21+z1da2BVvrJEyk7flsZ6E1eUA16hJELMk+Q4cLNUMJHr9MWzwvR DUUnZx/rSjohrkcCncuD0tJ+qyn+Mwwvawq/SVYzhh5EZxeZfsTx3cuKAS88JPDr 999T8OibLuNXp2uEiR3o9oKYEGNKG14Jsqda2oAgKJ3jluEcxWsk8J3QyccjC6cs ecMMLt9qPId1RXSHhHwKYI51y+EoG2o5DRcaRNPzPO1TFW1tCbXMqDVwl0R8ccIb Yp4RF7f1MIqMi0LkFu139m7dSYi1wy5gipKt46Eu8LrCpcLb5JjBb6OfKwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFK092NMs/HF6bmkOvj4dtDhtj2xkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiLzgxMjgw MC05ZTcwLTRjZDItOTBmZC0zYmNkMjM5OWVlNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvODEyODAw LTllNzAtNGNkMi05MGZkLTNiY2QyMzk5ZWU2NC8xL3JUM1kweXo4Y1hwdWFRNi1Q aDIwT0cyUGJHUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAufOCMA0EAgACMAcDBQMqEJ1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM7DzANBgkqhkiG9w0BAQsFAAOCAQEAhoMKP+BsbcZv nquFKGZ/3MYY0PXsM8ZIJgRhMFzSqQB2FWAlRy0OBvUOyWyRwxTmxgpTozKdFHFh OV6c+6j+wE+EumMlwxY/lOtvzpz2nxJswkrTk+2tKlmWXNuZpfIuy9jW5Dut2vXq RxgLa69SODLHkbKApHeB/korYeiYZv6MSCX4tnYKf8RJqb023f6CSDbp8yRZk1pw l2uq5Vm/BP4vZHl1maAD4YGJxQ2CCdPU+Ro2ZuJeWVozCjzFVbbucXeGRm+D+S89 /ENMI+iO4vNiqlsOmcOONKvTo3lKTaP2Stil3LU2Vpuo+7OoEmWPsV+v2FFCgJhc 883clytG5w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:33 2026 by rpki-client