This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer File: si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer (raw, json) Hash identifier: NqbnmAaqt4j3Pd71d9GcZN5Kxy2OkDkYglTww4SyHPg= Subject key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B0FE93ED4E86551921C112DA367EA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 31734 IP: 91.208.223.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0f:e9:3e:d4:e8:65:51:92:1c:11:2d:a3:67:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:29:17:b4:f3:af:0e:58:bc:f1:cc:ca:cd: 97:65:45:b1:00:7f:7b:8c:8e:36:ee:25:f3:b5:cc: 12:bb:3a:5b:31:3d:34:32:9a:1e:73:82:14:74:ba: a5:d3:7d:14:2d:33:07:b8:dc:39:d0:4c:02:f3:dd: 48:68:5d:a8:e6:cf:21:d6:d0:4f:67:48:8b:96:00: 07:e9:ab:6d:28:cf:c1:66:b0:80:e8:5d:91:5f:e2: ba:fc:8e:ee:f9:2b:07:a0:90:20:a5:c8:f9:74:56: 06:de:95:01:74:64:2e:2e:c1:97:b0:7f:45:9f:ec: 5f:9c:25:94:57:ba:f5:4c:ea:b1:96:6d:86:34:0c: 6f:c4:1a:8e:2a:0a:40:85:94:c9:1b:4a:42:dc:8a: 69:27:62:1b:80:3e:16:2c:15:41:d2:c8:d6:9a:39: ed:db:ff:66:9c:3d:e6:4d:44:10:d7:60:2e:92:1a: 44:a4:a8:60:58:72:87:47:59:fa:b3:88:72:ff:9c: 7b:9a:73:bb:30:8c:a1:a4:4d:83:3e:15:6e:6d:b8: 99:68:c3:8c:24:c7:70:76:5c:25:97:b9:69:8d:4e: e6:1e:82:42:96:f0:05:a6:1d:b5:f5:b3:a7:1d:55: b3:7a:82:47:e0:98:1c:3d:54:5d:cd:d4:df:b8:39: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.223.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31734 Signature Algorithm: sha256WithRSAEncryption 3a:2f:04:ae:11:02:3a:d9:8a:76:03:dc:cc:f5:4e:97:32:a0: 3d:ab:7c:38:c6:c5:cc:38:ab:e3:14:d7:9c:b6:e2:22:9a:43: 2c:12:94:13:a1:9b:68:bc:e6:9f:36:fa:65:e3:19:44:1f:74: 38:b8:80:b9:d8:da:87:a4:26:d3:b5:7e:c5:ee:2f:f9:48:78: c6:8a:cb:d2:b5:2c:a8:db:dd:30:1d:0e:c4:48:c9:ac:6f:61: 09:e4:b0:98:ec:47:fb:d1:be:1c:0b:b1:9d:82:7a:ed:f2:ae: 36:64:6f:b1:f5:23:db:c2:fe:a8:7b:1e:c0:ba:aa:bd:14:ce: 79:88:b3:8c:29:79:62:72:45:05:42:cd:3a:7c:f4:18:67:6f: bb:b1:90:f8:cd:2f:78:72:c4:26:8a:bf:eb:f6:ac:e2:e5:30: c4:be:10:ae:80:bf:ab:ac:ae:b7:5a:bb:49:23:2d:aa:67:12: 6d:84:3d:72:2b:45:d7:3b:6b:94:fb:13:ee:05:4d:fc:44:48: 5e:da:ab:62:84:ce:a9:45:40:a6:8e:20:27:62:7b:72:d6:fc: 13:61:fe:5f:1a:7f:d3:1c:11:de:5e:b6:b7:df:43:14:0c:33: 04:77:f9:b7:d0:ac:a8:70:b6:52:b1:f2:08:61:ae:10:9e:09: e8:5d:5c:4f -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt6Ww/pPtToZVGSHBEto2fqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjJkZDA2NTAxZjk5ZDQ3MDIyZDNhNDAzOWVmY2Y0MzlkMGJjN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UcpF7Tzrw5YvPHMys2XZUWxAH97 jI427iXztcwSuzpbMT00Mpoec4IUdLql030ULTMHuNw50EwC891IaF2o5s8h1tBP Z0iLlgAH6attKM/BZrCA6F2RX+K6/I7u+SsHoJAgpcj5dFYG3pUBdGQuLsGXsH9F n+xfnCWUV7r1TOqxlm2GNAxvxBqOKgpAhZTJG0pC3IppJ2IbgD4WLBVB0sjWmjnt 2/9mnD3mTUQQ12AukhpEpKhgWHKHR1n6s4hy/5x7mnO7MIyhpE2DPhVubbiZaMOM JMdwdlwll7lpjU7mHoJClvAFph219bOnHVWzeoJH4JgcPVRdzdTfuDlaQwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLIt0GUB+Z1HAi06QDnvz0OdC8fmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzIwMjYz My1jNjkwLTQ4ZTUtOTYxMy03MTFmZmRmOTE2OTgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMjAyNjMz LWM2OTAtNDhlNS05NjEzLTcxMWZmZGY5MTY5OC8xL3NpM1FaUUg1blVjQ0xUcEFP ZV9QUTUwTHgtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9DfMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC Anv2MA0GCSqGSIb3DQEBCwUAA4IBAQA6LwSuEQI62Yp2A9zM9U6XMqA9q3w4xsXM OKvjFNectuIimkMsEpQToZtovOafNvpl4xlEH3Q4uIC52NqHpCbTtX7F7i/5SHjG isvStSyo290wHQ7ESMmsb2EJ5LCY7Ef70b4cC7Gdgnrt8q42ZG+x9SPbwv6oex7A uqq9FM55iLOMKXlickUFQs06fPQYZ2+7sZD4zS94csQmir/r9qzi5TDEvhCugL+r rK63WrtJIy2qZxJthD1yK0XXO2uU+xPuBU38REhe2qtihM6pRUCmjiAnYnty1vwT Yf5fGn/THBHeXra330MUDDMEd/m30KyocLZSsfIIYa4QngnoXVxP -----END CERTIFICATE-----Generated at Mon Feb 9 15:11:34 2026 by rpki-client