This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer File: v3rjZp-Ef6J6abFLuH-Me_15nuA.cer (raw, json) Hash identifier: kNShBG6NJNSruYAgtkuG85RiXxj2jDDBnA3DbLXmZY8= Subject key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED2C30D5C35B0C55F3AC9C7D5733CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208309 IP: 91.231.34.0/24 IP: 2a12:88c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:2c:30:d5:c3:5b:0c:55:f3:ac:9c:7d:57:33:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:80:a4:ac:d9:9d:c3:26:19:57:40:87:04: 12:31:35:73:8c:ef:ab:21:a6:0c:f9:cf:e9:66:a6: a5:53:84:d8:73:c6:d6:c8:10:20:51:7e:f3:da:fb: 27:23:ac:83:71:30:1c:15:61:b7:d6:59:92:ba:34: 27:ff:00:9c:34:c3:d6:b4:5f:69:72:b7:a0:37:90: 31:e2:14:df:6d:94:0b:2c:2c:52:69:6f:9d:dd:e9: e2:b0:bc:fb:f9:3b:df:21:8a:6b:5b:8c:e9:69:1c: 27:b8:fd:75:34:7f:ca:d1:74:c0:ef:67:d7:77:38: 84:51:2f:4b:5e:67:f2:fc:85:1e:e3:64:c6:66:be: e8:bf:da:57:ed:55:01:70:9b:02:8e:db:b6:52:4c: 45:99:f8:38:ee:1a:ab:df:13:fd:fe:f9:df:d5:17: 08:3e:41:f0:fc:73:ab:be:0a:de:5a:64:5d:a0:01: 0d:8a:2f:a1:5e:f0:e3:3c:76:d3:f2:a9:88:92:8d: d7:d0:2b:e8:a3:d9:ac:4d:ba:92:6a:06:c4:43:d3: f2:4a:28:c2:fd:16:75:bd:dd:18:84:ff:2b:71:a4: 68:bf:66:1b:b8:eb:c9:6d:55:19:f2:f2:4c:57:b4: fd:86:70:25:10:2e:f3:3d:d9:2e:21:d7:93:f9:b6: 66:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.34.0/24 IPv6: 2a12:88c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208309 Signature Algorithm: sha256WithRSAEncryption 42:14:8c:dc:55:39:32:df:61:f5:43:f1:9c:e0:71:3b:9a:bd: 77:d6:a9:00:aa:f6:94:9c:36:55:d7:78:9e:83:55:8c:b3:74: 97:07:17:01:4c:32:1e:c7:0d:c9:58:fc:7c:a7:9b:18:e5:d2: 6f:27:72:6f:20:ec:ea:f2:ce:5b:12:c5:ba:88:b0:61:b6:06: 28:31:e1:16:2a:df:ef:42:28:b2:d8:8e:e4:29:33:c9:ce:15: ba:0c:dc:ec:a5:af:3c:d2:14:b7:31:93:94:74:9e:b5:96:98: c1:b9:d9:a0:52:e2:2a:f2:49:ad:78:1f:93:4c:02:4f:a5:3e: 80:2b:11:8a:eb:97:3b:45:d3:41:b5:8c:43:ab:33:22:60:61: 89:4e:37:27:c5:90:4d:a2:c6:c5:93:68:b2:7c:14:ec:52:d1: 8f:b0:60:b3:3f:59:bd:a9:25:3d:5d:dd:65:57:b9:e1:f2:0b: 95:9e:95:8f:d9:10:75:b6:a0:52:cb:53:5c:26:62:ad:5b:14: c7:7d:50:c4:33:7e:ac:1a:3d:04:ed:f6:bf:e2:ec:64:eb:c8: e1:05:1e:d8:1c:3f:1c:c4:51:fe:a8:8e:3f:7e:2c:82:1c:16: b6:f7:27:63:27:6f:d0:7b:6d:52:73:99:45:e6:a4:8a:e3:a7: 35:a1:42:df -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87Sww1cNbDFXzrJx9VzPMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjdhZTM2NjlmODQ3ZmEyN2E2OWIxNGJiODdmOGM3YmZkNzk5ZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2yApKzZncMmGVdAhwQSMTVzjO+r IaYM+c/pZqalU4TYc8bWyBAgUX7z2vsnI6yDcTAcFWG31lmSujQn/wCcNMPWtF9p cregN5Ax4hTfbZQLLCxSaW+d3enisLz7+TvfIYprW4zpaRwnuP11NH/K0XTA72fX dziEUS9LXmfy/IUe42TGZr7ov9pX7VUBcJsCjtu2UkxFmfg47hqr3xP9/vnf1RcI PkHw/HOrvgreWmRdoAENii+hXvDjPHbT8qmIko3X0Cvoo9msTbqSagbEQ9PySijC /RZ1vd0YhP8rcaRov2YbuOvJbVUZ8vJMV7T9hnAlEC7zPdkuIdeT+bZmAwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFL9642afhH+iemmxS7h/jHv9eZ7gMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzM0OTNm Ni05NjM2LTRmYTMtYmU1Ni1kYjgwMzA4NzlmNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvMzQ5M2Y2 LTk2MzYtNGZhMy1iZTU2LWRiODAzMDg3OWY1MS8xL3YzcmpacC1FZjZKNmFiRkx1 SC1NZV8xNW51QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAW+ciMA0EAgACMAcDBQMqEojAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMttTANBgkqhkiG9w0BAQsFAAOCAQEAQhSM3FU5Mt9h 9UPxnOBxO5q9d9apAKr2lJw2Vdd4noNVjLN0lwcXAUwyHscNyVj8fKebGOXSbydy byDs6vLOWxLFuoiwYbYGKDHhFirf70IostiO5Ckzyc4Vugzc7KWvPNIUtzGTlHSe tZaYwbnZoFLiKvJJrXgfk0wCT6U+gCsRiuuXO0XTQbWMQ6szImBhiU43J8WQTaLG xZNosnwU7FLRj7Bgsz9ZvaklPV3dZVe54fILlZ6Vj9kQdbagUstTXCZirVsUx31Q xDN+rBo9BO32v+LsZOvI4QUe2Bw/HMRR/qiOP34sghwWtvcnYydv0HttUnOZReak iuOnNaFC3w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:52:28 2026 by rpki-client