This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer File: xm3GDRbf4WSdhsFpPheFjCMGOH8.cer (raw, json) Hash identifier: J5BU6vS/FqYnq0WvGv1U/jezwGNpc8yGbtGNh9aQMKQ= Subject key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C8023CBD6DBE0F4E33D6728634ADB98 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 39371 AS: 200569 IP: 45.129.60.0/22 IP: 185.99.204.0/22 IP: 2a06:1480::/29 IP: 2a0e:44c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:23:cb:d6:db:e0:f4:e3:3d:67:28:63:4a:db:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c66dc60d16dfe1649d86c1693e17858c2306387f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:e4:86:5b:81:fa:05:e7:ba:4f:af:6f:94: 8e:7f:0b:08:19:16:f6:63:82:2c:55:47:ef:54:5c: 4b:a1:95:21:a6:e9:46:04:c9:71:69:7e:15:f6:06: e2:70:4a:70:23:b8:fd:14:4f:3e:da:61:f5:9f:9f: 7d:26:27:e5:1a:b7:5d:7c:a2:c3:3e:56:5b:d4:d9: 0f:b3:19:79:1a:23:0b:da:bd:66:b3:d5:2c:06:4e: 48:83:e4:83:73:04:fb:e2:35:d2:ce:ee:70:89:b5: 70:b6:b6:c1:71:ef:15:ef:de:9b:df:ca:58:e7:a4: 80:8b:c0:91:f5:fd:e4:e6:f8:2a:b5:cf:55:59:95: d0:6d:62:9e:9e:c7:3e:e5:10:df:43:df:33:57:fd: ed:c3:5c:88:96:ad:68:46:ff:54:b8:81:b0:c5:ef: 2e:55:2a:92:1b:74:7b:bc:12:85:c8:4c:e8:fb:53: d9:c2:c8:ef:67:44:9a:7a:2c:04:40:2b:08:27:7f: 12:9e:84:58:f4:13:12:c5:f2:08:04:9d:98:52:08: 06:f4:b3:36:22:2a:5d:3f:84:9f:dd:81:98:67:04: 9b:e7:1e:76:8e:17:d1:86:b1:ea:60:e3:f5:82:bd: b4:65:a9:bb:11:b4:46:c0:93:f7:57:c8:83:96:30: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.60.0/22 185.99.204.0/22 IPv6: 2a06:1480::/29 2a0e:44c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39371 200569 Signature Algorithm: sha256WithRSAEncryption 29:5f:ad:e2:0f:cf:83:b8:5b:fa:a2:70:6c:7b:66:92:43:39: 42:72:64:96:de:e0:e4:2c:95:8a:08:7c:9a:6b:ca:f2:f3:87: 3c:57:2f:29:04:41:48:e4:06:b9:37:1d:b1:14:68:85:d4:40: c9:0e:5a:f0:d5:4b:73:05:f2:b1:fb:35:a1:25:38:65:bb:4c: 11:50:b7:45:a7:a5:8b:92:a0:29:0c:13:00:0c:fb:38:58:16: 07:40:12:d7:02:7b:76:5a:8a:ec:d6:e6:2d:25:57:12:0a:1e: 0b:dc:ae:a9:e4:4a:7a:84:0b:8e:94:cd:5e:f9:0c:b7:ad:ca: 2e:28:92:2f:ef:3a:2c:ab:af:0e:81:56:76:f5:e1:f6:5b:5d: 50:ef:a4:ea:6d:b0:90:5c:3d:e6:fa:07:d0:74:78:62:0c:0c: 66:1c:02:57:d6:6a:4f:3d:d7:32:67:fa:2b:f4:80:4a:9d:aa: bc:9c:b8:6f:6d:8d:bc:80:21:34:5c:90:21:fe:42:cb:c5:8d: 1d:61:f9:22:f7:bf:92:34:b8:8a:11:c3:1e:dd:0c:90:41:72: fd:cd:29:1d:3d:b6:47:f8:cb:a6:1c:f6:5c:b5:91:b1:c2:48: cb:b5:b5:1c:86:5e:db:b2:14:89:e1:59:dc:80:19:81:ba:bf: 72:7d:14:72 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZt8gCPL1tvg9OM9ZyhjStuYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjZkYzYwZDE2ZGZlMTY0OWQ4NmMxNjkzZTE3ODU4YzIzMDYzODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloDkhluB+gXnuk+vb5SOfwsIGRb2 Y4IsVUfvVFxLoZUhpulGBMlxaX4V9gbicEpwI7j9FE8+2mH1n599JiflGrddfKLD PlZb1NkPsxl5GiML2r1ms9UsBk5Ig+SDcwT74jXSzu5wibVwtrbBce8V796b38pY 56SAi8CR9f3k5vgqtc9VWZXQbWKensc+5RDfQ98zV/3tw1yIlq1oRv9UuIGwxe8u VSqSG3R7vBKFyEzo+1PZwsjvZ0SaeiwEQCsIJ38SnoRY9BMSxfIIBJ2YUggG9LM2 IipdP4Sf3YGYZwSb5x52jhfRhrHqYOP1gr20Zam7EbRGwJP3V8iDljAnKwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFMZtxg0W3+FknYbBaT4XhYwjBjh/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhL2YwZTE2 MS1hNDNjLTRkMzEtYjY1ZC1kNGZlZDUwODUzOTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjBlMTYx LWE0M2MtNGQzMS1iNjVkLWQ0ZmVkNTA4NTM5Mi8xL3htM0dEUmJmNFdTZGhzRnBQ aGVGakNNR09IOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF BwEHAQH/BCwwKjASBAIAATAMAwQCLYE8AwQCuWPMMBQEAgACMA4DBQMqBhSAAwUD Kg5EwDAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAmcsCAwMPeTANBgkqhkiG9w0B AQsFAAOCAQEAKV+t4g/Pg7hb+qJwbHtmkkM5QnJklt7g5CyVigh8mmvK8vOHPFcv KQRBSOQGuTcdsRRohdRAyQ5a8NVLcwXysfs1oSU4ZbtMEVC3Raeli5KgKQwTAAz7 OFgWB0AS1wJ7dlqK7NbmLSVXEgoeC9yuqeRKeoQLjpTNXvkMt63KLiiSL+86LKuv DoFWdvXh9ltdUO+k6m2wkFw95voH0HR4YgwMZhwCV9ZqTz3XMmf6K/SASp2qvJy4 b22NvIAhNFyQIf5Cy8WNHWH5Ive/kjS4ihHDHt0MkEFy/c0pHT22R/jLphz2XLWR scJIy7W1HIZe27IUieFZ3IAZgbq/cn0Ucg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:01 2026 by rpki-client