This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer File: 3mxgNQQsxTJRbrwZaPQb__S4U34.cer (raw, json) Hash identifier: NI06li+h+jQjY3g42ZyGPzShKhIHRfJ68NyAK59aSn8= Subject key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7C7F4D34470F8CFE0D83FC3DF42A5A15 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 02:17:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 212020 IP: 185.232.96.0/24 IP: 2a10:d280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:4d:34:47:0f:8c:fe:0d:83:fc:3d:f4:2a:5a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de6c6035042cc532516ebc1968f41bfff4b8537e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b9:2f:0f:af:91:40:3f:ee:8a:33:7b:4f:c2: 59:cc:df:95:6c:c4:08:21:6d:47:a1:f8:35:b5:c9: c5:f6:71:0f:4b:61:b7:e8:cf:04:8e:fa:b4:5b:e7: de:ae:16:de:08:14:26:f0:b0:69:5e:42:81:ef:a6: 76:66:a8:e5:eb:7a:99:c0:f2:ed:02:4c:4e:94:9d: cf:eb:fd:86:95:86:2e:82:96:f2:27:7f:40:e2:41: e1:ed:02:3a:a9:20:eb:d5:89:72:ae:86:2e:2e:c7: 25:4e:e7:a4:c6:7b:a9:9c:de:d6:e9:07:25:b4:78: 91:72:04:ed:17:61:5f:8d:80:31:e7:a3:23:70:a5: a9:87:de:fe:4f:4c:fa:8e:03:c5:10:75:65:9f:6a: fa:e1:ac:27:97:fd:c8:60:68:3a:23:2f:97:4f:f1: 24:6b:2d:12:7a:49:84:01:04:0b:b3:5a:26:61:67: 33:62:61:2b:a5:9b:19:27:52:ae:f2:90:f8:db:39: ab:4d:db:00:dd:8f:a1:89:c3:8e:5b:27:b4:c1:13: 39:cd:4b:f3:4d:09:b0:c5:b0:de:f8:44:83:20:e5: 8c:97:d6:5e:02:9a:8a:30:b5:db:50:83:8b:d3:18: a8:32:18:da:f7:2c:59:c8:c1:b2:df:f8:5d:86:39: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.96.0/24 IPv6: 2a10:d280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212020 Signature Algorithm: sha256WithRSAEncryption 86:71:b2:da:df:0c:5d:43:c8:76:d5:e9:e7:90:50:71:2f:14: 5e:29:e3:99:eb:49:db:7d:e1:51:6c:44:a2:29:93:a7:54:a5: 93:36:60:0e:3e:01:ac:49:20:41:78:6c:11:a2:a8:d8:89:dd: cf:11:d2:dc:b8:8e:e7:b2:41:ae:ba:6c:74:8a:92:0a:ea:8c: 69:c6:5e:10:d4:b6:16:fd:d2:2b:f6:c9:34:dd:aa:c6:3c:ed: 02:25:ba:55:ca:d3:96:f1:62:d5:0c:a6:b2:88:86:0b:83:ae: 41:ee:99:18:6f:c3:a4:f3:2b:c7:1d:79:6f:2e:2c:be:01:7a: e8:6f:5a:66:ab:50:7a:1b:59:22:be:d1:de:e1:ed:d0:ab:aa: 11:a0:35:f1:4f:3e:31:7a:10:79:ca:6e:77:9b:9e:36:fb:45: 22:01:0f:4f:35:f2:b7:d6:ed:0d:99:8a:46:4c:bc:1d:57:00: f3:44:fc:99:f7:92:19:33:ab:f4:30:cb:91:ce:70:d9:ba:33: 4b:3b:04:58:0c:19:d5:04:67:5b:6e:98:c9:22:19:48:5b:f0: 21:4b:14:fc:d9:da:10:66:e7:20:00:6b:a8:26:40:b8:f4:1d: c3:a2:fe:92:5d:49:e3:bd:b8:ab:44:1c:95:c7:12:d9:d4:bc: 34:c7:98:c5 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt8f000Rw+M/g2D/D30KloVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTZjNjAzNTA0MmNjNTMyNTE2ZWJjMTk2OGY0MWJmZmY0Yjg1MzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rkvD6+RQD/uijN7T8JZzN+VbMQI IW1Hofg1tcnF9nEPS2G36M8Ejvq0W+ferhbeCBQm8LBpXkKB76Z2Zqjl63qZwPLt AkxOlJ3P6/2GlYYugpbyJ39A4kHh7QI6qSDr1YlyroYuLsclTuekxnupnN7W6Qcl tHiRcgTtF2FfjYAx56MjcKWph97+T0z6jgPFEHVln2r64awnl/3IYGg6Iy+XT/Ek ay0SekmEAQQLs1omYWczYmErpZsZJ1Ku8pD42zmrTdsA3Y+hicOOWye0wRM5zUvz TQmwxbDe+ESDIOWMl9ZeApqKMLXbUIOL0xioMhja9yxZyMGy3/hdhjmIfwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN5sYDUELMUyUW68GWj0G//0uFN+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY2L2MyYmI0 ZC04NDgzLTQ3Y2UtYmIwYS1mNWY0OTBkMmMxNjMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvYzJiYjRk LTg0ODMtNDdjZS1iYjBhLWY1ZjQ5MGQyYzE2My8xLzNteGdOUVFzeFRKUmJyd1ph UFFiX19TNFUzNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuehgMA0EAgACMAcDBQMqENKAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8NDANBgkqhkiG9w0BAQsFAAOCAQEAhnGy2t8MXUPI dtXp55BQcS8UXinjmetJ233hUWxEoimTp1SlkzZgDj4BrEkgQXhsEaKo2IndzxHS 3LiO57JBrrpsdIqSCuqMacZeENS2Fv3SK/bJNN2qxjztAiW6VcrTlvFi1QymsoiG C4OuQe6ZGG/DpPMrxx15by4svgF66G9aZqtQehtZIr7R3uHt0KuqEaA18U8+MXoQ ecpud5ueNvtFIgEPTzXyt9btDZmKRky8HVcA80T8mfeSGTOr9DDLkc5w2bozSzsE WAwZ1QRnW26YySIZSFvwIUsU/NnaEGbnIABrqCZAuPQdw6L+kl1J4724q0QclccS 2dS8NMeYxQ== -----END CERTIFICATE-----Generated at Thu Jan 8 13:26:58 2026 by rpki-client