This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer (raw, json) Hash identifier: K79Ml5HDwrGRJhkMYFPIRZodFD5RSbeb6aXRCkWciO8= Subject key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A21878103AF8ABB67767B392003BB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:17:27 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 24713 IP: 80.248.160.0/20 IP: 81.22.160.0/20 IP: 185.134.88.0/22 IP: 2a03:d640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:18:78:10:3a:f8:ab:b6:77:67:b3:92:00:3b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:ea:d5:20:02:ad:73:20:81:a8:cb:0c:b4: f5:0c:a2:9b:b2:4a:a5:91:b6:ec:5e:26:5d:9d:92: 73:bc:f3:13:d0:75:56:f4:1f:64:9d:f7:66:af:f0: 41:0f:67:be:a6:b4:14:06:45:96:de:60:4e:ac:ac: 6e:96:cb:43:61:a4:5e:0a:df:53:f6:a1:6f:de:9c: 02:cd:0d:17:47:d5:38:67:81:da:9c:aa:67:87:cd: 35:76:26:f1:e8:3a:55:c1:c4:7d:75:2e:df:35:55: 5c:2f:9e:cf:c0:f7:ab:80:c1:7f:1a:74:8c:7e:c8: 52:21:17:77:65:5b:29:fc:e0:44:2e:be:60:34:6d: 08:0a:7d:37:6e:ca:6c:d6:dd:3c:ae:20:ac:8f:c0: 8f:de:9c:0f:1f:08:05:54:49:12:6c:17:03:de:30: 78:73:af:90:e3:a4:da:3b:1e:2c:1a:c2:9c:fb:78: 44:84:48:6c:10:5f:fe:dd:59:97:8a:19:09:67:be: 10:34:75:8c:8f:c4:93:d9:f6:4c:34:e3:65:96:13: de:fd:1f:08:6e:23:72:8a:a0:f5:f6:f3:d9:6d:0d: c8:d8:c9:57:cb:01:b2:c4:79:b5:88:06:01:0f:e3: 88:d9:ef:95:83:2a:6e:ff:81:a0:0f:36:d2:00:41: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.248.160.0/20 81.22.160.0/20 185.134.88.0/22 IPv6: 2a03:d640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24713 Signature Algorithm: sha256WithRSAEncryption a1:69:3e:99:ef:24:0c:77:3f:5b:89:db:cc:22:3c:8c:94:93: 1e:31:98:48:63:8f:af:5c:5c:d3:61:af:21:3d:a7:60:8f:71: 8f:6f:80:39:ff:c6:9f:da:25:6e:d5:0f:62:4a:26:8d:f0:06: b9:5d:d2:d8:16:a7:bd:16:c4:5e:d9:b6:db:06:81:50:91:83: 48:54:88:b5:0d:b5:6f:1c:02:7d:5f:15:4d:9e:b3:91:0a:ec: 5f:a4:8b:8e:d0:81:51:fb:f9:e8:f7:90:d2:66:1e:13:c8:35: 58:9a:6c:3d:bf:38:02:27:7f:62:88:21:d3:1a:cd:20:c4:57: 87:f6:68:86:12:86:ae:fc:9d:16:de:b3:e2:43:11:76:80:6f: 88:12:31:18:ba:a8:b8:78:d7:df:e8:8c:f8:c3:d8:00:28:8c: 52:66:72:5e:00:44:82:a0:69:e4:16:3e:14:bd:6d:4f:c6:6b: cc:c0:3d:b9:e9:78:34:72:c6:48:52:02:57:f7:fe:80:5a:54: e6:86:f1:36:6f:d3:35:59:ba:22:d5:4b:68:14:28:d7:df:7c: 7e:d5:74:c5:c9:cc:be:4f:55:aa:a4:be:d0:73:8e:9b:f8:ac: d7:71:98:c0:ce:0d:ef:60:1f:c6:b7:df:31:6d:57:ee:c3:50: 0b:65:8d:ad -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt4ohh4EDr4q7Z3Z7OSADuzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWIwNDZiNmUzMDllOWE4NjY1MjJjMmE0MGM2NmZmYzQyZmJiODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2/q1SACrXMggajLDLT1DKKbskql kbbsXiZdnZJzvPMT0HVW9B9knfdmr/BBD2e+prQUBkWW3mBOrKxulstDYaReCt9T 9qFv3pwCzQ0XR9U4Z4HanKpnh801dibx6DpVwcR9dS7fNVVcL57PwPergMF/GnSM fshSIRd3ZVsp/OBELr5gNG0ICn03bsps1t08riCsj8CP3pwPHwgFVEkSbBcD3jB4 c6+Q46TaOx4sGsKc+3hEhEhsEF/+3VmXihkJZ74QNHWMj8ST2fZMNONllhPe/R8I biNyiqD19vPZbQ3I2MlXywGyxHm1iAYBD+OI2e+Vgypu/4GgDzbSAEHtlQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFN6wRrbjCemoZlIsKkDGb/xC+7hDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzL2QyNGJj Mi00MmYzLTQ2ZDktYmRkOS0xYzk0OTIyNDVjYWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvZDI0YmMy LTQyZjMtNDZkOS1iZGQ5LTFjOTQ5MjI0NWNhYi8xLzNyQkd0dU1KNmFobVVpd3FR TVp2X0VMN3VFTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEUPigAwQEURagAwQCuYZYMA0EAgACMAcDBQAq A9ZAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmCJMA0GCSqGSIb3DQEBCwUAA4IB AQChaT6Z7yQMdz9bidvMIjyMlJMeMZhIY4+vXFzTYa8hPadgj3GPb4A5/8af2iVu 1Q9iSiaN8Aa5XdLYFqe9FsRe2bbbBoFQkYNIVIi1DbVvHAJ9XxVNnrORCuxfpIuO 0IFR+/no95DSZh4TyDVYmmw9vzgCJ39iiCHTGs0gxFeH9miGEoau/J0W3rPiQxF2 gG+IEjEYuqi4eNff6Iz4w9gAKIxSZnJeAESCoGnkFj4UvW1PxmvMwD256Xg0csZI UgJX9/6AWlTmhvE2b9M1Wboi1UtoFCjX33x+1XTFycy+T1WqpL7Qc46b+KzXcZjA zg3vYB/Gt98xbVfuw1ALZY2t -----END CERTIFICATE-----Generated at Fri Jan 2 23:24:40 2026 by rpki-client