This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer File: 3BCJyUK2gDNoO03VBsDDb3S-DqM.cer (raw, json) Hash identifier: zRXQ4BoCByVVpIjln1jT+++9oDjsvSCaoX76BfN/rY8= Subject key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5B0E71551C6C8C951691A97057E1EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:17:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205479 IP: 92.118.28.0/22 IP: 2a09:a440::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0e:71:55:1c:6c:8c:95:16:91:a9:70:57:e1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:f4:5f:ab:65:8c:44:c9:5d:d9:91:cd:b3: 4f:0b:b7:4d:d5:04:f2:96:c0:42:06:74:b0:2b:39: b0:44:b1:60:25:23:46:81:c5:ba:7c:96:aa:45:3a: 95:df:05:77:06:64:08:15:84:d5:e7:c9:11:76:a3: f5:c7:bd:76:26:e6:e0:f8:06:b1:4a:91:51:a4:6b: 07:9d:08:b6:f7:bc:b4:f9:25:7a:25:29:0d:3b:0d: d5:c0:da:bd:2d:76:64:11:de:ef:cc:c9:97:03:2a: 7a:a3:68:a4:a3:97:7f:cf:86:b5:a7:45:93:34:ff: a0:0e:7d:5e:fe:9a:c1:63:e8:39:97:da:4e:f0:f7: 12:25:fd:98:60:d1:bf:44:9d:3e:ad:06:89:27:f0: 74:3d:98:e0:65:b9:44:c0:8b:74:55:48:bb:a1:6f: 8c:b0:33:44:16:72:a0:4b:a7:6a:16:cf:1e:26:95: 02:20:f0:79:cd:92:f9:50:7f:4c:db:04:26:a9:e0: 97:d9:3a:15:d9:a1:ce:f2:02:fc:0d:36:c0:5e:54: 1d:4c:57:51:0e:b0:7b:79:0e:0c:1c:80:42:5d:66: f7:cf:16:52:0b:6d:e1:13:31:2d:6d:e8:f2:a3:c9: bf:c4:43:fb:00:3c:fe:42:7e:71:12:89:1b:cc:1a: 2b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.28.0/22 IPv6: 2a09:a440::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205479 Signature Algorithm: sha256WithRSAEncryption 5c:45:81:49:1b:73:0e:ef:c7:8d:d7:eb:43:35:9f:89:91:91: 0a:36:fe:86:49:ea:2c:79:0e:5f:46:5b:55:f0:c6:ab:69:56: 81:e6:6a:f3:b4:22:b8:f5:72:25:a7:74:04:97:2a:05:44:ac: ba:33:fe:c9:35:4b:c3:ef:0e:58:63:90:45:8e:c1:ed:5b:83: 97:cd:39:dc:f7:44:26:4b:51:27:9c:1f:c7:70:53:25:39:82: 59:7d:fe:e5:ac:9b:70:05:47:fd:e2:e2:42:cc:c6:31:3d:bf: d4:ed:f3:37:bd:cb:cd:27:be:c4:1b:0b:bb:27:6d:e4:6c:e8: a4:9c:a2:b9:ba:fa:20:ac:a9:5f:d1:6e:a0:ee:42:7a:30:c9: 14:5d:c1:0d:75:91:d3:ff:e0:49:e7:3c:a8:b4:ab:bb:5a:3e: 6c:74:f6:60:64:43:8b:bf:ca:fd:4c:2a:2b:90:29:26:10:0c: 33:1e:a5:a5:f9:02:06:3e:24:64:52:d0:a9:7d:df:64:5f:ec: a9:65:54:b7:d0:d3:20:97:ec:8f:48:29:02:08:81:18:d5:ff: 5c:1e:90:79:3e:cb:ea:31:41:e5:4a:4b:1f:1b:c6:98:a6:ab: 91:8d:25:1f:b0:af:fc:63:4f:c2:f8:06:93:de:32:20:4a:2f: 60:be:2a:9f -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt9Ww5xVRxsjJUWkalwV+HuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzEwODljOTQyYjY4MDMzNjgzYjRkZDUwNmMwYzM2Zjc0YmUwZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZP0X6tljETJXdmRzbNPC7dN1QTy lsBCBnSwKzmwRLFgJSNGgcW6fJaqRTqV3wV3BmQIFYTV58kRdqP1x712Jubg+Aax SpFRpGsHnQi297y0+SV6JSkNOw3VwNq9LXZkEd7vzMmXAyp6o2iko5d/z4a1p0WT NP+gDn1e/prBY+g5l9pO8PcSJf2YYNG/RJ0+rQaJJ/B0PZjgZblEwIt0VUi7oW+M sDNEFnKgS6dqFs8eJpUCIPB5zZL5UH9M2wQmqeCX2ToV2aHO8gL8DTbAXlQdTFdR DrB7eQ4MHIBCXWb3zxZSC23hEzEtbejyo8m/xEP7ADz+Qn5xEokbzBor9wIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFNwQiclCtoAzaDtN1QbAw290vg6jMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjLzI0MTQ5 ZC1kMTE1LTQzMzAtYmQ0OS1jYjU2ZWQzZWE3ZmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMjQxNDlk LWQxMTUtNDMzMC1iZDQ5LWNiNTZlZDNlYTdmYS8xLzNCQ0p5VUsyZ0ROb08wM1ZC c0REYjNTLURxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCXHYcMA0EAgACMAcDBQMqCaRAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMipzANBgkqhkiG9w0BAQsFAAOCAQEAXEWBSRtzDu/H jdfrQzWfiZGRCjb+hknqLHkOX0ZbVfDGq2lWgeZq87QiuPVyJad0BJcqBUSsujP+ yTVLw+8OWGOQRY7B7VuDl8053PdEJktRJ5wfx3BTJTmCWX3+5aybcAVH/eLiQszG MT2/1O3zN73LzSe+xBsLuydt5GzopJyiubr6IKypX9FuoO5CejDJFF3BDXWR0//g Sec8qLSru1o+bHT2YGRDi7/K/UwqK5ApJhAMMx6lpfkCBj4kZFLQqX3fZF/sqWVU t9DTIJfsj0gpAgiBGNX/XB6QeT7L6jFB5UpLHxvGmKarkY0lH7Cv/GNPwvgGk94y IEovYL4qnw== -----END CERTIFICATE-----Generated at Wed Jan 7 22:15:22 2026 by rpki-client