This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer File: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer (raw, json) Hash identifier: NkZHffG9EM2w3NUtWDbPNWoYMV9wE1b4W/5SxFxBHfw= Subject key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78344AF9647462092C4D8D29972D2755 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:17:31 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13011 IP: 91.209.123.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4a:f9:64:74:62:09:2c:4d:8d:29:97:2d:27:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd5b224b6593e558038a9e40e660c77142755c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:86:c9:b6:f7:a1:cf:35:6c:74:5b:97:04:cb: 59:d0:60:32:29:5a:3c:0f:0f:2e:c8:5e:ca:b5:a9: 29:e1:d7:7a:56:61:82:a4:14:98:2f:5c:a9:d0:52: 37:fb:62:64:54:a7:4f:8b:05:b8:be:2f:9e:22:ea: 8b:dd:08:c7:0c:11:58:58:ce:65:65:2d:9e:2d:b5: 82:d4:ae:ae:f8:fd:73:9d:40:6c:08:19:7e:b8:e9: 75:f2:1e:5f:2e:c8:e4:72:ca:22:b0:2d:80:cf:31: 34:90:c0:f0:a4:1e:7a:e9:5e:b6:00:94:eb:ea:b9: f0:c9:d3:b8:c9:b4:b3:03:fb:04:fb:19:41:a0:a0: 6d:d3:d0:16:f3:17:a1:ce:57:22:f3:11:db:9f:14: 13:36:0e:90:09:ce:83:c4:07:5a:dc:c2:c1:e6:27: 7a:54:02:e2:cc:68:55:b9:b1:4e:ea:9d:39:5f:1c: 50:45:05:17:ed:47:7e:27:60:76:c1:09:73:4a:aa: ff:8d:e2:e6:42:ed:1d:6c:64:58:ee:9a:f7:34:e7: 96:03:06:49:f7:f6:58:f9:97:da:0b:20:34:3b:7d: 77:35:84:17:d2:fe:1e:24:a1:99:f2:07:ed:c8:18: 7f:a9:f9:87:af:eb:de:42:ef:ad:b3:e5:91:f5:78: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.123.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13011 Signature Algorithm: sha256WithRSAEncryption 0d:d5:75:8e:f5:78:03:cb:99:0f:0b:b0:60:16:99:a1:59:46: 1a:60:c3:04:d1:8a:56:02:7b:6b:b9:43:bf:e1:79:15:95:0e: 3c:98:96:e0:29:5c:fe:70:c3:a4:d9:f4:c5:af:93:4d:90:3b: 08:37:df:01:c5:b5:a9:a8:91:2d:bf:b9:90:f2:e9:85:06:a2: 1c:dc:a0:52:f3:27:33:b8:e0:48:e0:91:02:5d:30:1d:5d:75: a7:a6:71:e7:49:96:11:40:63:2a:a6:cf:e4:66:51:8b:13:1a: b7:75:3f:5e:07:65:43:4f:f9:30:5a:13:a1:df:d2:94:b3:ff: 08:bc:9e:cd:0f:de:88:d4:1e:fc:33:06:0e:4f:e6:0d:c0:b5: 53:e0:bb:f9:66:95:bd:5d:e1:81:ea:58:5b:ef:9e:72:7a:7e: f3:9d:40:fd:31:22:16:0c:0e:8d:dc:fc:64:52:f2:4c:54:de: 97:d9:dc:74:61:0f:88:f1:c1:a9:12:28:1d:9d:09:b2:f3:ac: 5c:56:d4:40:75:76:b6:77:85:6d:ec:a3:11:c0:c3:48:e2:9d: 07:d8:de:9f:1e:e6:88:97:03:47:2e:c9:58:9d:26:fc:bc:7d: e4:4b:72:ba:31:88:e6:9c:c3:c2:78:df:60:8b:02:c8:16:b4: 32:66:b4:d2 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt4NEr5ZHRiCSxNjSmXLSdVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDViMjI0YjY1OTNlNTU4MDM4YTllNDBlNjYwYzc3MTQyNzU1YzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYbJtvehzzVsdFuXBMtZ0GAyKVo8 Dw8uyF7Ktakp4dd6VmGCpBSYL1yp0FI3+2JkVKdPiwW4vi+eIuqL3QjHDBFYWM5l ZS2eLbWC1K6u+P1znUBsCBl+uOl18h5fLsjkcsoisC2AzzE0kMDwpB566V62AJTr 6rnwydO4ybSzA/sE+xlBoKBt09AW8xehzlci8xHbnxQTNg6QCc6DxAda3MLB5id6 VALizGhVubFO6p05XxxQRQUX7Ud+J2B2wQlzSqr/jeLmQu0dbGRY7pr3NOeWAwZJ 9/ZY+ZfaCyA0O313NYQX0v4eJKGZ8gftyBh/qfmHr+veQu+ts+WR9XiEYQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFN1bIktlk+VYA4qeQOZgx3FCdVwbMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzY1MmRm ZS1hY2FlLTQyNDMtYmYzMy0zMGJiZmMwODU1ZTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvNjUyZGZl LWFjYWUtNDI0My1iZjMzLTMwYmJmYzA4NTVlNC8xLzNWc2lTMldUNVZnRGlwNUE1 bURIY1VKMVhCcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAW9F7MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjLTMA0GCSqGSIb3DQEBCwUAA4IBAQAN1XWO9XgDy5kPC7BgFpmhWUYaYMME0YpW AntruUO/4XkVlQ48mJbgKVz+cMOk2fTFr5NNkDsIN98BxbWpqJEtv7mQ8umFBqIc 3KBS8yczuOBI4JECXTAdXXWnpnHnSZYRQGMqps/kZlGLExq3dT9eB2VDT/kwWhOh 39KUs/8IvJ7ND96I1B78MwYOT+YNwLVT4Lv5ZpW9XeGB6lhb755yen7znUD9MSIW DA6N3PxkUvJMVN6X2dx0YQ+I8cGpEigdnQmy86xcVtRAdXa2d4Vt7KMRwMNI4p0H 2N6fHuaIlwNHLslYnSb8vH3kS3K6MYjmnMPCeN9giwLIFrQyZrTS -----END CERTIFICATE-----Generated at Fri Jan 9 08:01:05 2026 by rpki-client