This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer File: 3r5RfnR14XwGlkORD9b3ezF7hTg.cer (raw, json) Hash identifier: +yKpF7aS/5xQvr0mLNtqwwjp6BqX4MYuXLBCcLLXFKY= Subject key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F83190C57DED9500B79F2B5888AD8C9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:20:56 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208023 IP: 193.194.130.0/23 IP: 193.194.142.0/23 IP: 2a0f:9d40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:19:0c:57:de:d9:50:0b:79:f2:b5:88:8a:d8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=debe517e7475e17c069643910fd6f77b317b8538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5d:5b:9e:db:a5:35:23:da:b0:d9:58:43:bc: 0d:57:69:52:c9:90:62:5c:20:5e:0e:22:d4:79:85: 27:a9:b6:47:56:bf:26:23:f1:29:53:ba:f4:be:e3: ec:c4:60:c1:63:c7:0f:0a:97:69:fc:d2:bf:a8:f5: 30:ce:a3:51:db:21:d8:40:78:32:ae:ce:76:83:78: 44:a3:dc:ce:72:a9:54:ee:f9:6a:e6:e5:a5:f4:49: 8e:f8:86:bb:f8:00:65:8e:05:0d:c6:51:6f:62:d4: 27:34:98:47:09:43:36:85:65:e0:0b:a1:58:a0:da: 6b:63:1a:db:5d:71:06:ba:54:d5:88:c5:a5:b3:30: 8a:06:e3:c6:56:24:51:8b:43:a8:dc:d4:d8:d3:3c: f3:c2:e3:39:f9:f9:5b:e1:f0:3d:bb:28:db:0c:5d: 7c:09:da:b4:2d:bb:73:55:21:c1:75:11:1b:a1:3e: e2:b9:60:7a:c0:86:c2:84:5c:47:f8:08:29:e4:47: b2:53:ed:8c:c3:55:a7:0c:68:b8:43:8a:0b:97:ca: 0e:d5:4f:09:4a:aa:4c:2f:bd:18:4d:13:d3:81:fe: 60:4b:d1:6f:e6:78:d3:f5:d5:e4:e4:6d:b2:18:ba: 4a:86:10:77:ba:4a:ab:70:fd:d5:d8:85:7a:77:ec: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.130.0/23 193.194.142.0/23 IPv6: 2a0f:9d40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208023 Signature Algorithm: sha256WithRSAEncryption 74:bd:c6:f7:0e:bc:55:5f:21:b5:8d:0d:08:a6:a4:84:f5:00: c5:d7:d5:87:ec:f4:63:13:93:3b:1d:a0:74:ef:ae:f2:91:7a: 86:b2:99:39:ae:3c:d1:d0:52:8d:d4:be:ef:f5:b3:39:23:36: 96:5c:f4:2f:46:d7:70:6d:ee:8c:38:3b:0b:31:35:d6:aa:62: 40:13:8e:88:00:16:9b:69:8b:a5:9b:4e:cb:6c:f9:3e:11:11: e7:72:76:c1:ad:e4:45:5e:1c:7d:b2:5a:3b:39:60:15:8f:1c: 4c:4e:31:aa:b5:69:ae:3e:34:89:0f:e1:9d:99:6e:ad:70:98: 88:47:81:67:49:ad:17:51:d0:05:be:56:33:a3:6a:38:3d:39: 5d:fd:f8:61:46:ac:82:ce:8b:46:e7:2c:34:df:88:e6:6d:b3: 73:a4:cd:8a:4b:e6:62:ba:45:a4:fc:0c:b0:c5:6c:66:1a:12: 2f:f0:f5:73:49:37:de:65:8f:e7:54:5d:ed:70:35:90:e1:30: b7:8b:23:16:f2:f0:ae:0e:36:47:53:db:5a:99:a7:79:58:99: 34:2e:39:c7:ca:a7:88:9a:7a:28:37:f2:79:b5:7e:80:be:83: 7a:ad:6f:20:68:7f:ad:3c:1f:ba:94:05:d0:0b:96:27:d0:28: 93:38:04:ba -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt/gxkMV97ZUAt58rWIitjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWJlNTE3ZTc0NzVlMTdjMDY5NjQzOTEwZmQ2Zjc3YjMxN2I4NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA211bntulNSPasNlYQ7wNV2lSyZBi XCBeDiLUeYUnqbZHVr8mI/EpU7r0vuPsxGDBY8cPCpdp/NK/qPUwzqNR2yHYQHgy rs52g3hEo9zOcqlU7vlq5uWl9EmO+Ia7+ABljgUNxlFvYtQnNJhHCUM2hWXgC6FY oNprYxrbXXEGulTViMWlszCKBuPGViRRi0Oo3NTY0zzzwuM5+flb4fA9uyjbDF18 Cdq0LbtzVSHBdREboT7iuWB6wIbChFxH+Agp5EeyU+2Mw1WnDGi4Q4oLl8oO1U8J SqpML70YTRPTgf5gS9Fv5njT9dXk5G2yGLpKhhB3ukqrcP3V2IV6d+wbqQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFN6+UX50deF8BpZDkQ/W93sxe4U4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzM4NTBj OS05YzY4LTQ2MTMtYTg3MC04OWY1YzRmMzI5NzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvMzg1MGM5 LTljNjgtNDYxMy1hODcwLTg5ZjVjNGYzMjk3MC8xLzNyNVJmblIxNFh3R2xrT1JE OWIzZXpGN2hUZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwcKCAwQBwcKOMA0EAgACMAcDBQMqD51AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMslzANBgkqhkiG9w0BAQsFAAOCAQEAdL3G 9w68VV8htY0NCKakhPUAxdfVh+z0YxOTOx2gdO+u8pF6hrKZOa480dBSjdS+7/Wz OSM2llz0L0bXcG3ujDg7CzE11qpiQBOOiAAWm2mLpZtOy2z5PhER53J2wa3kRV4c fbJaOzlgFY8cTE4xqrVprj40iQ/hnZlurXCYiEeBZ0mtF1HQBb5WM6NqOD05Xf34 YUasgs6LRucsNN+I5m2zc6TNikvmYrpFpPwMsMVsZhoSL/D1c0k33mWP51Rd7XA1 kOEwt4sjFvLwrg42R1PbWpmneViZNC45x8qniJp6KDfyebV+gL6Deq1vIGh/rTwf upQF0AuWJ9AokzgEug== -----END CERTIFICATE-----Generated at Mon Jan 12 08:08:13 2026 by rpki-client