This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer File: t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer (raw, json) Hash identifier: b8zTXD/vY8se2b4Si2Ulon7aJ6Hx4vEN6XmH0w4zjp8= Subject key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78352B3A56709C4B3186883311FEF120 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:29 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205033 IP: 185.219.244.0/22 IP: 2a0b:f040::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2b:3a:56:70:9c:4b:31:86:88:33:11:fe:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:61:dd:ae:00:5b:45:2f:9f:92:79:76:52: e4:f3:6e:6a:3a:f7:79:de:26:c4:a3:c0:05:68:e2: 90:ee:b0:2b:95:ee:3e:48:b9:41:21:a9:7d:49:57: da:85:b5:eb:47:89:00:6e:b5:f0:b4:0f:bb:65:32: d4:3d:ce:ad:c0:3e:fa:34:02:a3:9a:59:cf:96:f7: d9:5c:9a:dd:6b:18:e3:3e:f7:15:fc:42:e4:64:a4: 3c:01:8c:52:af:30:ad:2f:ae:37:43:b6:a6:a5:40: 9f:68:52:f8:19:6b:1d:5d:78:1c:b7:a2:89:c9:32: 96:e8:16:e3:84:87:29:52:75:92:63:37:91:7c:4c: c2:72:8c:98:da:d8:b3:c5:fe:78:e0:82:93:7a:7f: ce:1a:71:d5:d4:53:1e:1a:f4:7b:f3:01:68:a9:84: 4a:07:f2:f1:fa:3a:c2:4e:4b:e2:f8:e6:ba:83:84: 73:b3:fe:df:6d:34:93:1a:40:cc:c5:1f:9e:e6:8d: 45:08:a7:d8:45:f3:45:50:5b:f2:a4:82:06:2b:31: f3:4c:2e:99:28:90:c1:a7:c4:aa:93:4a:20:18:8a: 18:27:d4:a6:fa:4d:33:c2:42:b0:63:7b:11:d8:3f: 73:37:9f:d9:ff:96:f7:e0:65:2c:b9:d8:c4:bd:79: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.244.0/22 IPv6: 2a0b:f040::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205033 Signature Algorithm: sha256WithRSAEncryption 19:2b:e8:30:7f:4e:38:1e:a6:1c:ab:3e:bb:71:12:82:73:ca: 90:ac:47:40:d7:34:84:72:30:a8:80:2b:c4:9d:ba:2a:d4:ea: 0b:f4:f0:5b:b9:92:c7:c2:b2:82:95:a2:54:f5:23:77:bb:ca: a2:51:dd:e7:d9:3d:ca:61:19:05:a2:8d:e8:75:e7:78:5f:3e: 6e:24:ba:23:af:24:e8:ce:b8:e9:74:c1:c7:b5:ca:3d:8b:6e: ab:14:61:53:ed:55:be:c1:fb:04:2b:d1:aa:0d:bf:b0:db:9c: 11:6a:f3:a2:e4:08:6f:f8:87:fe:0e:48:ca:c3:15:4f:0b:fb: 5c:c4:71:6b:46:56:f9:a7:ac:27:9f:dc:e1:d4:0d:23:e2:16: 62:a1:ec:0b:f5:1c:ce:46:9e:c5:22:00:80:72:12:5e:54:2c: 03:b4:61:a9:08:86:aa:90:2f:66:e7:5a:79:eb:c9:db:77:d7: 70:98:c0:dd:08:3f:56:31:f9:c2:e6:75:22:d7:e1:1f:bb:b5: 38:d6:22:f0:ff:50:88:38:82:31:71:c3:12:ab:7b:7d:a9:00: 80:88:de:a9:c9:2b:d7:27:58:95:c1:38:ac:d9:56:70:42:08: 53:e4:59:be:24:30:b9:ed:eb:03:49:2e:ce:d6:1b:4a:bc:79: 17:f6:cf:93 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt4NSs6VnCcSzGGiDMR/vEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzczMGM4MzIyMTE4YzgxY2E4NGJhYjFiN2UwODkwYTljODVlOWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZlh3a4AW0Uvn5J5dlLk825qOvd5 3ibEo8AFaOKQ7rArle4+SLlBIal9SVfahbXrR4kAbrXwtA+7ZTLUPc6twD76NAKj mlnPlvfZXJrdaxjjPvcV/ELkZKQ8AYxSrzCtL643Q7ampUCfaFL4GWsdXXgct6KJ yTKW6BbjhIcpUnWSYzeRfEzCcoyY2tizxf544IKTen/OGnHV1FMeGvR78wFoqYRK B/Lx+jrCTkvi+Oa6g4Rzs/7fbTSTGkDMxR+e5o1FCKfYRfNFUFvypIIGKzHzTC6Z KJDBp8Sqk0ogGIoYJ9Sm+k0zwkKwY3sR2D9zN5/Z/5b34GUsudjEvXkVTQIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFLdzDIMiEYyByoS6sbfgiQqchen3MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2IzOGZk Ny05ZTY4LTQyNmItYTEwMC0xYzBmZDg5ZGJjYjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYjM4ZmQ3 LTllNjgtNDI2Yi1hMTAwLTFjMGZkODlkYmNiNC8xL3QzTU1neUlSaklIS2hMcXh0 LUNKQ3B5RjZmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCudv0MA0EAgACMAcDBQAqC/BAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMg6TANBgkqhkiG9w0BAQsFAAOCAQEAGSvoMH9OOB6m HKs+u3ESgnPKkKxHQNc0hHIwqIArxJ26KtTqC/TwW7mSx8KygpWiVPUjd7vKolHd 59k9ymEZBaKN6HXneF8+biS6I68k6M646XTBx7XKPYtuqxRhU+1VvsH7BCvRqg2/ sNucEWrzouQIb/iH/g5IysMVTwv7XMRxa0ZW+aesJ5/c4dQNI+IWYqHsC/Uczkae xSIAgHISXlQsA7RhqQiGqpAvZudaeevJ23fXcJjA3Qg/VjH5wuZ1ItfhH7u1ONYi 8P9QiDiCMXHDEqt7fakAgIjeqckr1ydYlcE4rNlWcEIIU+RZviQwue3rA0kuztYb Srx5F/bPkw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:25:06 2026 by rpki-client