This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.cer (raw, json) Hash identifier: vq2PKpXpauzPUBace2uSIjyE6X7UWnKy4O+XxPOeRvU= Subject key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7834884D083568FFB5CC6BE4FD385654 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:47 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 37.209.248.0/21 IP: 82.112.160.0/21 IP: 185.124.212.0/22 IP: 193.227.160.0/19 IP: 213.175.160.0/19 IP: 2a06:b540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:88:4d:08:35:68:ff:b5:cc:6b:e4:fd:38:56:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd0b663c45d7bc2724d168485087581e14448fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:7e:3a:4c:91:86:0d:c1:ba:d1:ce:0f:8f: 57:ab:df:ea:ba:37:63:4b:ba:81:b4:21:97:19:c9: 31:fd:17:2e:c1:94:36:86:c0:b3:7a:87:d8:53:95: 22:23:db:85:9a:06:c3:1d:d3:de:f4:62:c9:8b:f6: 79:91:99:be:a8:a5:10:8d:d8:97:f6:f9:fd:79:d7: 66:35:d6:eb:be:4d:44:db:6e:99:5b:a6:44:12:1d: 0e:56:ac:40:1f:fe:79:43:77:8c:87:0e:e9:15:35: e9:8d:db:c0:a6:db:4f:19:dd:ee:19:0c:a0:7c:c9: 9d:42:e2:76:28:58:54:61:6e:96:e7:68:00:cb:37: d9:30:31:a1:d0:fa:15:7d:7b:fd:81:20:cb:08:55: 6b:90:30:2d:61:ba:f9:ab:94:6d:82:d7:6c:cb:fb: e9:ba:a0:35:1e:dc:2e:95:7d:0d:e5:aa:1f:18:1f: 12:12:aa:e1:8a:51:30:34:6a:c7:47:6a:91:7c:0f: c0:9e:bb:04:6f:03:81:e0:6a:18:30:20:a2:dd:40: 3f:d3:e2:41:83:4b:aa:9c:96:ad:d2:2e:77:17:44: c4:3e:b6:cf:f6:f4:7a:4b:79:34:31:67:01:b7:5b: 5d:11:74:76:79:78:aa:af:5d:6f:12:f8:f0:01:5d: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.248.0/21 82.112.160.0/21 185.124.212.0/22 193.227.160.0/19 213.175.160.0/19 IPv6: 2a06:b540::/29 Signature Algorithm: sha256WithRSAEncryption 0d:f3:54:c9:98:1e:28:f6:e3:97:ae:ff:39:c5:86:f8:c3:ed: ce:f8:4e:bd:98:1e:08:d6:2b:f8:2b:17:ee:b8:cc:c4:cb:35: a0:3b:3b:56:8a:ba:0c:13:2c:c2:04:31:d2:a6:ee:4c:77:f6: c4:31:0e:b2:31:dc:df:c5:dc:93:4b:ad:55:d0:d7:9f:54:66: aa:c0:9b:65:04:53:67:b7:a4:08:6d:48:82:4b:d6:0a:2a:6e: 1b:4e:ae:8e:94:17:5b:78:d7:03:19:3d:8a:e7:b9:50:92:6c: f8:ee:6e:76:14:43:59:3e:46:4d:f7:a9:b6:21:56:59:c7:b7: 0c:00:fb:48:cc:84:62:ab:40:b2:3d:99:6e:e1:38:75:32:ac: f9:7c:7c:c2:52:a6:3c:54:4e:e3:54:83:9d:47:a4:ed:d7:2c: d3:75:8f:ca:52:c3:c5:00:d1:52:6c:d9:b8:ee:b8:62:40:e1: 11:87:8b:44:4e:22:8a:3e:55:2a:96:98:0f:56:16:1f:8e:97: b5:85:16:79:f7:ca:f6:02:a5:c3:5a:84:d8:e9:ab:8f:b0:b7: 71:50:22:3b:4b:51:22:b6:7a:87:47:9f:73:c3:a3:41:28:b0: 8c:a0:e0:28:8a:43:a4:80:cf:e6:84:0e:d8:8d:ae:7b:a9:86: 0f:d9:4a:b8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt4NIhNCDVo/7XMa+T9OFZUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDBiNjYzYzQ1ZDdiYzI3MjRkMTY4NDg1MDg3NTgxZTE0NDQ4ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhF+OkyRhg3ButHOD49Xq9/qujdj S7qBtCGXGckx/RcuwZQ2hsCzeofYU5UiI9uFmgbDHdPe9GLJi/Z5kZm+qKUQjdiX 9vn9eddmNdbrvk1E226ZW6ZEEh0OVqxAH/55Q3eMhw7pFTXpjdvApttPGd3uGQyg fMmdQuJ2KFhUYW6W52gAyzfZMDGh0PoVfXv9gSDLCFVrkDAtYbr5q5Rtgtdsy/vp uqA1HtwulX0N5aofGB8SEqrhilEwNGrHR2qRfA/AnrsEbwOB4GoYMCCi3UA/0+JB g0uqnJat0i53F0TEPrbP9vR6S3k0MWcBt1tdEXR2eXiqr11vEvjwAV1YXQIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFN0LZjxF17wnJNFoSFCHWB4URI+2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4L2VkYzIz OC00YzBhLTQ2ZWQtYmMyNC0zYjllM2M4YTJmY2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZWRjMjM4 LTRjMGEtNDZlZC1iYzI0LTNiOWUzYzhhMmZjYS8xLzNRdG1QRVhYdkNjazBXaElV SWRZSGhSRWo3WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQDJdH4AwQDUnCgAwQCuXzUAwQFweOgAwQF1a+g MA0EAgACMAcDBQMqBrVAMA0GCSqGSIb3DQEBCwUAA4IBAQAN81TJmB4o9uOXrv85 xYb4w+3O+E69mB4I1iv4KxfuuMzEyzWgOztWiroMEyzCBDHSpu5Md/bEMQ6yMdzf xdyTS61V0NefVGaqwJtlBFNnt6QIbUiCS9YKKm4bTq6OlBdbeNcDGT2K57lQkmz4 7m52FENZPkZN96m2IVZZx7cMAPtIzIRiq0CyPZlu4Th1Mqz5fHzCUqY8VE7jVIOd R6Tt1yzTdY/KUsPFANFSbNm47rhiQOERh4tETiKKPlUqlpgPVhYfjpe1hRZ598r2 AqXDWoTY6auPsLdxUCI7S1EitnqHR59zw6NBKLCMoOAoikOkgM/mhA7Yja57qYYP 2Uq4 -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:47 2026 by rpki-client