This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer File: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer (raw, json) Hash identifier: imADmHd3qW6tZydwc0DMrX4I/QWcI4JDLJwsDNJwQ/U= Subject key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B1F92C0AC033D25E92666D5FD5269 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:10 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 21113 IP: 193.202.240.0/20 IP: 2001:67c:2dc0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1f:92:c0:ac:03:3d:25:e9:26:66:d5:fd:52:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:a4:77:59:33:ce:d0:9c:23:9f:bf:e5:2c: f4:21:92:10:04:28:2d:83:02:de:2a:25:53:e9:a5: 7e:79:d3:b2:37:d6:45:9d:0f:fa:43:a0:84:f8:6a: e7:8f:44:15:67:8f:9a:75:0d:8e:c8:b0:55:48:36: 30:ec:d6:67:98:f3:b3:27:30:47:0e:96:0c:62:23: ff:11:0c:c7:b4:37:3f:aa:5f:88:65:c4:f2:b2:0b: ce:b6:6e:db:b5:1e:07:87:5b:4f:bb:29:48:a4:a1: 6a:f6:ad:65:85:c9:63:b1:fa:b0:ff:e6:f2:f1:9a: a2:87:76:35:24:7d:dc:e6:f9:ea:29:2d:61:d5:2f: 78:90:4c:35:15:c4:41:c6:2d:66:c1:fb:ee:13:9c: 44:22:7b:af:6d:fa:19:f4:13:d1:0f:17:2e:98:0a: cc:44:ae:c7:93:47:13:bc:fa:84:f0:14:8c:c3:f6: 9c:5c:d3:9d:e5:e9:ff:a7:ea:4b:42:21:d3:62:9a: f4:95:8b:04:0f:04:2b:9e:62:07:62:d1:9b:5e:d3: 84:67:2c:b5:d7:18:ec:e0:37:7b:fd:8c:d1:93:2f: 76:f1:f3:b8:70:29:a2:38:47:f8:f4:69:e0:d1:ea: 1c:1a:99:9e:ba:b4:5b:89:25:d1:46:a0:03:f5:21: 7f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.202.240.0/20 IPv6: 2001:67c:2dc0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21113 Signature Algorithm: sha256WithRSAEncryption 54:29:2d:7a:60:db:0a:48:d0:dc:a9:c2:db:68:bf:03:e1:47: f8:28:8d:04:c5:83:0d:3f:73:2d:0d:d2:b3:e1:6c:17:cd:61: bb:f7:c2:3f:d8:b6:ee:f2:a3:62:f7:1c:77:7a:6e:0f:f7:d3: f2:d8:07:e1:b9:84:d6:55:21:b5:08:dd:c8:34:ac:f0:c9:9c: 60:ba:cc:91:0a:cf:9d:8d:a1:6d:a7:69:44:68:8c:20:ff:0d: 83:ae:b7:05:d8:3d:10:5c:26:a3:9f:4b:cd:ee:83:00:a5:4d: d1:34:30:1c:16:3b:b5:60:4f:f1:62:3e:4f:86:b3:50:c9:7e: 8d:3a:74:51:f4:30:57:9c:97:bd:58:c0:e3:f0:e3:4e:92:44: 22:bb:50:1b:5f:c3:fe:14:40:91:e9:2e:44:a9:08:34:23:84: 98:5b:58:5f:e0:01:51:99:35:81:a9:3d:67:3a:db:b9:da:08: c2:fb:ca:8c:dc:fe:17:91:6c:4f:94:8e:d3:5c:a4:4e:d7:9b: cf:ff:ee:e7:7e:e4:5f:a6:68:0c:d6:0c:00:75:86:66:60:e2: 48:b6:ea:67:3a:9c:b6:8a:91:8d:fe:70:52:73:8b:68:07:9c: ee:57:5d:6b:4c:d8:d2:f8:0b:83:d9:60:6a:bf:90:88:7f:45: a9:15:5d:fa -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt6Wx+SwKwDPSXpJmbV/VJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWRkZDZlN2ExZmViNmZiNDdjOWEyZjg5OTE4ODI3MDk0ZGJmYzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlGkd1kzztCcI5+/5Sz0IZIQBCgt gwLeKiVT6aV+edOyN9ZFnQ/6Q6CE+Grnj0QVZ4+adQ2OyLBVSDYw7NZnmPOzJzBH DpYMYiP/EQzHtDc/ql+IZcTysgvOtm7btR4Hh1tPuylIpKFq9q1lhcljsfqw/+by 8Zqih3Y1JH3c5vnqKS1h1S94kEw1FcRBxi1mwfvuE5xEInuvbfoZ9BPRDxcumArM RK7Hk0cTvPqE8BSMw/acXNOd5en/p+pLQiHTYpr0lYsEDwQrnmIHYtGbXtOEZyy1 1xjs4Dd7/YzRky928fO4cCmiOEf49Gng0eocGpmeurRbiSXRRqAD9SF/ewIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFN7d1ueh/rb7R8mi+JkYgnCU2/wXMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzBhZDk5 YS0xYTBmLTQyZTAtYWU3ZC1mMDcxODM3NzNiMjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMGFkOTlh LTFhMGYtNDJlMC1hZTdkLWYwNzE4Mzc3M2IyNi8xLzN0M1c1NkgtdHZ0SHlhTDRt UmlDY0pUYl9CYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQEwcrwMA8EAgACMAkDBwAgAQZ8LcAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICUnkwDQYJKoZIhvcNAQELBQADggEBAFQpLXpg2wpI 0NypwttovwPhR/gojQTFgw0/cy0N0rPhbBfNYbv3wj/Ytu7yo2L3HHd6bg/30/LY B+G5hNZVIbUI3cg0rPDJnGC6zJEKz52NoW2naURojCD/DYOutwXYPRBcJqOfS83u gwClTdE0MBwWO7VgT/FiPk+Gs1DJfo06dFH0MFecl71YwOPw406SRCK7UBtfw/4U QJHpLkSpCDQjhJhbWF/gAVGZNYGpPWc627naCML7yozc/heRbE+UjtNcpE7Xm8// 7ud+5F+maAzWDAB1hmZg4ki26mc6nLaKkY3+cFJzi2gHnO5XXWtM2NL4C4PZYGq/ kIh/RakVXfo= -----END CERTIFICATE-----Generated at Thu Jan 8 23:59:39 2026 by rpki-client