This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer File: x3FxpeRVBshskBa75bFLPbi8bMM.cer (raw, json) Hash identifier: ZJTSbrkjVCc57FnWjmXVzFO26OPmHaBeyhCxDk82MCI= Subject key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED4C11346BD1A16813DD09614DA960 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:04 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49250 IP: 37.1.104.0/21 IP: 91.212.183.0/24 IP: 91.223.233.0/24 IP: 185.191.12.0/22 IP: 2a00:d540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4c:11:34:6b:d1:a1:68:13:dd:09:61:4d:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:28:c1:f3:4e:39:74:36:53:b8:ef:e9:8b: fd:8d:ad:d4:50:7f:d8:c6:8f:2d:34:2f:fe:a0:3e: 6b:f5:50:51:b9:d9:42:d1:25:0d:f9:c6:0a:53:ce: d0:b3:99:a5:4f:ce:44:83:be:8f:69:11:28:51:b8: 04:58:eb:9d:ac:77:75:21:be:f2:76:0a:2b:79:72: 65:3a:4a:0e:ca:b8:cf:41:4c:bf:31:24:fa:8f:4f: cb:88:a5:42:74:7d:33:1c:85:27:fb:9a:1b:44:fc: 07:cd:22:72:d3:6b:4c:1f:36:0a:20:6d:fe:24:d3: 59:93:94:41:a9:cd:82:17:d1:35:a7:c3:9d:b6:46: 83:67:14:6c:80:98:39:ca:5b:f5:56:20:02:22:24: 8b:dc:ae:b8:20:49:fe:1a:a8:b5:f5:3b:88:85:13: 6d:03:2b:5d:07:b7:ea:bf:da:d3:05:3b:b2:fc:84: 79:09:60:5d:34:c6:aa:47:0e:12:aa:a4:53:f8:8a: 06:71:26:67:05:10:b3:cc:1c:8e:7e:17:46:e5:4a: 0e:f5:92:b2:ee:33:67:23:0a:05:f1:95:ce:bc:c6: 8f:ee:47:2c:30:1a:07:ef:7d:ec:e3:8e:9b:67:16: 44:46:a1:2b:cc:a8:ed:87:f6:02:f4:bb:55:73:4e: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.1.104.0/21 91.212.183.0/24 91.223.233.0/24 185.191.12.0/22 IPv6: 2a00:d540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49250 Signature Algorithm: sha256WithRSAEncryption 9f:21:47:ad:5c:32:dc:92:38:2a:5c:87:84:ac:15:e5:9a:0a: a8:29:93:ef:3f:a0:64:d5:20:9e:1f:0f:fc:fe:8c:5c:df:69: 19:e4:2a:ce:6e:63:43:73:09:96:e9:46:4c:3f:57:31:9a:df: 39:b0:64:f2:9b:80:6f:31:61:01:9a:9e:30:ba:1b:aa:71:bc: 3e:85:9f:95:39:f6:33:f3:4f:1d:e2:0a:5d:05:50:53:12:94: fa:d8:0d:25:80:fb:24:a6:4e:93:36:28:b1:3d:d2:50:d9:2f: 48:c7:8f:cf:2f:cd:b6:48:c2:48:22:e3:09:8f:d4:73:87:00: 7e:a1:78:66:d0:21:be:72:38:6d:a6:62:83:86:b7:e1:c6:43: 09:b5:e8:7a:ea:7c:3a:1e:37:56:22:32:90:4f:89:3f:a1:f0: 82:ec:f7:e8:91:f2:bb:33:3a:b3:fa:63:b9:50:49:0c:f4:7b: 04:13:64:fa:cb:64:61:87:76:6d:7b:16:02:85:88:8d:de:be: 68:c5:2e:94:90:6c:b7:7a:64:4c:40:47:14:36:a5:18:4f:23: 7f:7c:5a:ca:26:5e:fa:cf:61:c7:f3:bd:aa:1e:42:26:7f:43: cb:41:c7:71:4b:5b:ed:0f:94:28:09:2f:36:3a:59:7e:cc:ff: c7:f4:95:79 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt87UwRNGvRoWgT3QlhTalgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzcxNzFhNWU0NTUwNmM4NmM5MDE2YmJlNWIxNGIzZGI4YmM2Y2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WQowfNOOXQ2U7jv6Yv9ja3UUH/Y xo8tNC/+oD5r9VBRudlC0SUN+cYKU87Qs5mlT85Eg76PaREoUbgEWOudrHd1Ib7y dgoreXJlOkoOyrjPQUy/MST6j0/LiKVCdH0zHIUn+5obRPwHzSJy02tMHzYKIG3+ JNNZk5RBqc2CF9E1p8OdtkaDZxRsgJg5ylv1ViACIiSL3K64IEn+Gqi19TuIhRNt AytdB7fqv9rTBTuy/IR5CWBdNMaqRw4SqqRT+IoGcSZnBRCzzByOfhdG5UoO9ZKy 7jNnIwoF8ZXOvMaP7kcsMBoH733s446bZxZERqErzKjth/YC9LtVc07A4wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFMdxcaXkVQbIbJAWu+WxSz24vGzDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MzLzdmOGY1 OC1kODNjLTQ0MGUtOTkwYi1iNDM4YjViODhjZjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMvN2Y4ZjU4 LWQ4M2MtNDQwZS05OTBiLWI0MzhiNWI4OGNmMi8xL3gzRnhwZVJWQnNoc2tCYTc1 YkZMUGJpOGJNTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDJQFoAwQAW9S3AwQAW9/pAwQCub8MMA0EAgAC MAcDBQMqANVAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDAYjANBgkqhkiG9w0B AQsFAAOCAQEAnyFHrVwy3JI4KlyHhKwV5ZoKqCmT7z+gZNUgnh8P/P6MXN9pGeQq zm5jQ3MJlulGTD9XMZrfObBk8puAbzFhAZqeMLobqnG8PoWflTn2M/NPHeIKXQVQ UxKU+tgNJYD7JKZOkzYosT3SUNkvSMePzy/NtkjCSCLjCY/Uc4cAfqF4ZtAhvnI4 baZig4a34cZDCbXoeup8Oh43ViIykE+JP6Hwguz36JHyuzM6s/pjuVBJDPR7BBNk +stkYYd2bXsWAoWIjd6+aMUulJBst3pkTEBHFDalGE8jf3xayiZe+s9hx/O9qh5C Jn9Dy0HHcUtb7Q+UKAkvNjpZfsz/x/SVeQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:17 2026 by rpki-client