This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer File: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer (raw, json) Hash identifier: eWpPtw2N75iieikDhAason9t2ixCXfOV5BdshZ8l9rA= Subject key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7FBAD01F9EADDA2A23E11A331C4E40 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:18:24 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 200350 AS: 210656 AS: 215013 IP: 31.44.8.0/21 IP: 37.230.168.0/23 IP: 37.230.172.0/22 IP: 37.230.188.0/22 IP: 45.133.96.0/22 IP: 45.159.136.0/22 IP: 46.21.244.0/22 IP: 46.243.209.0 -- 46.243.212.255 IP: 46.243.218.0/23 IP: 51.250.0.0/17 IP: 62.84.112.0/20 IP: 81.26.176.0/20 IP: 84.201.128.0/18 IP: 84.252.128.0/20 IP: 89.104.112.0/23 IP: 89.169.128.0/18 IP: 89.223.6.0/23 IP: 89.223.9.0/24 IP: 89.223.20.0/24 IP: 89.232.188.0/22 IP: 91.105.194.0/23 IP: 91.107.80.0/22 IP: 92.255.1.0/24 IP: 92.255.3.0/24 IP: 92.255.13.0/24 IP: 92.255.15.0 -- 92.255.16.255 IP: 92.255.58.0/23 IP: 93.77.160.0/19 IP: 94.126.204.0/22 IP: 94.139.248.0/22 IP: 103.76.52.0/22 IP: 111.88.144.0/20 IP: 111.88.240.0/20 IP: 130.193.32.0/19 IP: 158.160.0.0/16 IP: 178.154.192.0/18 IP: 178.170.222.0/24 IP: 185.32.84.0/22 IP: 185.135.172.0/22 IP: 185.184.128.0/22 IP: 185.206.164.0/22 IP: 185.216.194.0/23 IP: 188.72.103.0 -- 188.72.105.255 IP: 188.72.110.0 -- 188.72.113.255 IP: 193.32.216.0/22 IP: 194.156.166.0/23 IP: 194.156.184.0/23 IP: 194.247.51.0/24 IP: 213.165.192.0/19 IP: 217.28.224.0/20 IP: 217.198.168.0/21 IP: 2a0d:d6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ba:d0:1f:9e:ad:da:2a:23:e1:1a:33:1c:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:f2:1e:c8:8a:45:c0:3b:a3:66:66:56:c0: 76:fc:ea:70:1a:34:4e:44:ee:bd:90:60:93:f7:c4: 85:39:5a:84:74:21:3f:5b:a9:c0:c1:b6:04:70:80: 03:72:37:84:ba:1a:5e:66:20:c5:a2:f4:03:6b:5c: 3a:13:f7:8a:fd:67:f6:97:7b:06:ff:68:18:ce:f5: 09:d3:3f:fe:27:84:ba:21:9b:61:be:26:0f:f2:1d: 13:7b:01:cb:09:7c:1b:2e:37:c0:44:ae:0b:d5:86: e0:b0:9b:f1:44:08:0a:c8:aa:f0:14:3a:87:f6:79: a1:1e:a9:40:6c:39:fd:1f:10:71:a9:2c:a3:32:cf: 6e:9c:f5:ad:2b:f9:3a:28:3e:2e:8f:25:30:35:38: bc:89:d1:a2:31:14:7c:71:d5:d9:78:c1:ca:a8:18: 24:fc:6f:41:c0:d5:92:b4:37:7b:3c:c4:e6:45:60: 6e:0f:5b:05:47:b5:19:88:92:95:7f:20:63:bf:fb: 06:c4:71:54:07:1b:65:ee:16:98:b3:28:c5:c7:c5: d6:b5:2b:0c:d9:98:56:f3:2f:11:72:7c:bf:0e:e3: a8:7c:aa:df:8d:ac:15:c6:f3:34:ae:2a:aa:7b:4d: a3:a2:c1:22:b6:91:3f:84:e5:eb:e6:ad:c4:37:a5: f3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.8.0/21 37.230.168.0/23 37.230.172.0/22 37.230.188.0/22 45.133.96.0/22 45.159.136.0/22 46.21.244.0/22 46.243.209.0-46.243.212.255 46.243.218.0/23 51.250.0.0/17 62.84.112.0/20 81.26.176.0/20 84.201.128.0/18 84.252.128.0/20 89.104.112.0/23 89.169.128.0/18 89.223.6.0/23 89.223.9.0/24 89.223.20.0/24 89.232.188.0/22 91.105.194.0/23 91.107.80.0/22 92.255.1.0/24 92.255.3.0/24 92.255.13.0/24 92.255.15.0-92.255.16.255 92.255.58.0/23 93.77.160.0/19 94.126.204.0/22 94.139.248.0/22 103.76.52.0/22 111.88.144.0/20 111.88.240.0/20 130.193.32.0/19 158.160.0.0/16 178.154.192.0/18 178.170.222.0/24 185.32.84.0/22 185.135.172.0/22 185.184.128.0/22 185.206.164.0/22 185.216.194.0/23 188.72.103.0-188.72.105.255 188.72.110.0-188.72.113.255 193.32.216.0/22 194.156.166.0/23 194.156.184.0/23 194.247.51.0/24 213.165.192.0/19 217.28.224.0/20 217.198.168.0/21 IPv6: 2a0d:d6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 200350 210656 215013 Signature Algorithm: sha256WithRSAEncryption 5c:6c:9d:46:81:76:19:90:2e:fe:9c:8d:1f:ec:95:ec:fb:ac: 4c:a6:f9:21:42:50:0c:d0:68:9f:d6:b9:6a:09:94:59:df:e0: e8:16:4d:a0:27:16:a9:e8:44:d4:3d:22:19:d3:f9:3f:75:1d: 5a:b6:ba:5d:ce:b2:a0:6d:82:76:12:d8:53:b3:40:0f:27:e4: 2e:a5:eb:06:99:d8:86:ac:88:3a:6a:f2:86:4d:e2:f9:d4:bb: 47:fb:5e:a2:81:2c:a7:6e:59:25:8a:cc:a4:02:87:b6:ee:22: 00:87:69:c0:26:8e:da:f7:06:06:0c:fb:cd:85:1c:a4:43:05: 27:85:95:12:4f:c8:39:8b:1c:d5:9b:ca:d0:44:8d:69:0e:4a: 98:3b:a4:f0:51:6d:b3:68:2c:c0:f8:30:80:4a:18:3b:3f:a0: 07:f1:97:50:79:5c:c0:6c:10:58:bb:39:10:0b:c5:4b:0f:6e: 59:a6:98:25:d5:89:28:53:ef:3c:d7:b0:7d:9f:b5:78:17:8f: d2:66:5d:0a:00:cd:0e:9c:ff:85:66:f5:0c:64:6c:2f:fd:aa: 3f:b6:1a:ce:c8:5e:4c:d7:70:dc:b2:85:86:63:aa:29:2b:90: ed:57:f2:99:64:1f:87:e1:cc:3a:8a:1b:00:b1:02:d6:ba:c4: 3c:49:6f:67 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgISAZt8f7rQH56t2ioj4RozHE5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzg2ZTNlOTI4YzdmMGM5ZGI2OTUxNWZmM2FhMWY2NzhjZWU0M2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugPyHsiKRcA7o2ZmVsB2/OpwGjRO RO69kGCT98SFOVqEdCE/W6nAwbYEcIADcjeEuhpeZiDFovQDa1w6E/eK/Wf2l3sG /2gYzvUJ0z/+J4S6IZthviYP8h0TewHLCXwbLjfARK4L1YbgsJvxRAgKyKrwFDqH 9nmhHqlAbDn9HxBxqSyjMs9unPWtK/k6KD4ujyUwNTi8idGiMRR8cdXZeMHKqBgk /G9BwNWStDd7PMTmRWBuD1sFR7UZiJKVfyBjv/sGxHFUBxtl7haYsyjFx8XWtSsM 2ZhW8y8Rcny/DuOofKrfjawVxvM0riqqe02josEitpE/hOXr5q3EN6XzwQIDAQAB o4IEDjCCBAowHQYDVR0OBBYEFNyG4+kox/DJ22lRX/OqH2eM7kPAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U4LzQ3MWFh NS1jM2Y3LTRhZmQtYjEyMi05YzhlNTljMjc3MWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgvNDcxYWE1 LWMzZjctNGFmZC1iMTIyLTljOGU1OWMyNzcxYy8xLzNJYmo2U2pIOE1uYmFWRmY4 Nm9mWjR6dVE4QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBgQYIKwYB BQUHAQcBAf8EggFwMIIBbDCCAVkEAgABMIIBUQMEAx8sCAMEASXmqAMEAiXmrAME AiXmvAMEAi2FYAMEAi2fiAMEAi4V9DAMAwQALvPRAwQALvPUAwQBLvPaAwQHM/oA AwQEPlRwAwQEURqwAwQGVMmAAwQEVPyAAwQBWWhwAwQGWamAAwQBWd8GAwQAWd8J AwQAWd8UAwQCWei8AwQBW2nCAwQCW2tQAwQAXP8BAwQAXP8DAwQAXP8NMAwDBABc /w8DBABc/xADBAFc/zoDBAVdTaADBAJefswDBAJei/gDBAJnTDQDBARvWJADBARv WPADBAWCwSADAwCeoAMEBrKawAMEALKq3gMEArkgVAMEArmHrAMEArm4gAMEArnO pAMEAbnYwjAMAwQAvEhnAwQBvEhoMAwDBAG8SG4DBAG8SHADBALBINgDBAHCnKYD BAHCnLgDBADC9zMDBAXVpcADBATZHOADBAPZxqgwDQQCAAIwBwMFAyoN1sAwJAYI KwYBBQUHAQgBAf8EFTAToBEwDwIDAw6eAgMDNuACAwNH5TANBgkqhkiG9w0BAQsF AAOCAQEAXGydRoF2GZAu/pyNH+yV7PusTKb5IUJQDNBon9a5agmUWd/g6BZNoCcW qehE1D0iGdP5P3UdWra6Xc6yoG2CdhLYU7NADyfkLqXrBpnYhqyIOmryhk3i+dS7 R/teooEsp25ZJYrMpAKHtu4iAIdpwCaO2vcGBgz7zYUcpEMFJ4WVEk/IOYsc1ZvK 0ESNaQ5KmDuk8FFts2gswPgwgEoYOz+gB/GXUHlcwGwQWLs5EAvFSw9uWaaYJdWJ KFPvPNewfZ+1eBeP0mZdCgDNDpz/hWb1DGRsL/2qP7YazsheTNdw3LKFhmOqKSuQ 7VfymWQfh+HMOoobALEC1rrEPElvZw== -----END CERTIFICATE-----Generated at Fri Jan 9 08:00:40 2026 by rpki-client