This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer File: 3t6RoPsfTdF5ANBttuiDNveLXAU.cer (raw, json) Hash identifier: q7fE6hRyZ2HvPJISCjGI9K70LNoJ7eeJMFqHyGdNtm8= Subject key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7D5CF8A0D6DD05B0F522E993F408176B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 06:20:03 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 210544 IP: 91.212.125.0/24 IP: 192.124.252.0/24 IP: 193.28.64.0/21 IP: 2a12:6900::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f8:a0:d6:dd:05:b0:f5:22:e9:93:f4:08:17:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2d:2c:00:56:5c:3f:3e:f3:fa:f9:45:ac:9a: a0:89:a1:69:c6:d5:8b:0b:ed:2f:8a:bd:cd:9b:bc: 67:c1:ae:50:b3:19:5e:24:f4:ef:43:34:7e:34:84: bb:f1:59:9e:5b:c1:86:d6:1e:51:5f:9b:79:a9:4a: 71:9f:7a:33:e1:84:b0:76:73:76:c1:56:0e:8f:b1: db:d1:4e:93:42:1f:cb:95:38:a7:2f:3d:a4:fa:2a: 06:73:08:d3:f7:19:d4:6c:2d:2b:32:a5:a5:dc:c0: 86:34:0a:76:a0:2b:25:36:79:c0:44:79:09:ac:dd: f5:a6:05:ec:fd:08:38:ff:24:e5:1d:b8:60:7f:ff: 37:88:18:1c:c5:91:a2:bc:76:22:12:5f:28:81:45: c0:ef:1d:b4:33:ca:75:38:f9:90:5d:16:77:b6:d7: d4:bb:49:26:a9:34:0f:8a:c7:03:3a:86:d7:a1:38: 01:2f:be:0a:28:33:b9:fa:29:bc:b1:33:23:31:ec: a2:e4:ae:99:38:df:45:0a:a8:d0:11:d2:ff:51:64: 8d:f7:2c:f0:94:72:81:1d:58:9e:ea:f9:5b:8c:bb: a8:b9:d1:5d:3b:e7:49:46:77:c8:c4:cd:94:b7:34: ae:a2:57:b1:01:b3:c4:30:3f:d4:8a:43:a8:d1:2e: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.125.0/24 192.124.252.0/24 193.28.64.0/21 IPv6: 2a12:6900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210544 Signature Algorithm: sha256WithRSAEncryption 6d:d6:48:73:7f:8d:b3:2b:57:9b:38:35:7b:a1:e6:81:71:ed: cc:8f:06:f7:61:e7:4f:48:c3:de:06:2a:9c:cb:05:84:db:62: 72:64:ae:96:1c:a2:de:36:08:fb:55:c1:3e:b7:4f:24:11:8f: 8e:06:c1:23:7e:ac:ed:6b:ce:f5:50:1b:41:d5:92:51:2d:f0: fc:ef:48:87:d2:74:5d:3f:d9:0a:fd:d3:19:8f:c7:d7:c4:f2: c9:47:f9:a1:be:42:18:04:d4:c2:61:c1:23:d8:d7:e2:96:96: aa:3c:1b:6c:05:6c:39:7f:66:3c:3c:e8:0e:eb:e5:09:a9:dd: fe:21:1a:ee:8c:ca:76:02:ed:12:1a:e8:eb:90:a1:97:46:4b: 9b:df:6d:d7:b7:1f:34:a1:a2:7b:19:9c:0f:cb:58:8b:20:17: a0:db:e7:8e:e0:f5:74:36:e3:34:a3:2c:a5:1b:ca:bf:23:37: 1a:d2:57:0a:35:20:70:b4:1d:6c:9e:41:6d:0f:54:7f:a2:34: 2b:86:56:e4:e0:f4:3b:67:69:48:44:65:64:3e:62:3f:bb:d0: 77:f3:b1:b1:63:e9:8c:3e:36:57:3e:ae:25:64:ca:a6:7f:ce: 59:c3:04:7e:cf:0d:03:58:d8:01:b1:5a:fd:57:58:f1:db:60: 18:d8:4a:c0 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt9XPig1t0FsPUi6ZP0CBdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWRlOTFhMGZiMWY0ZGQxNzkwMGQwNmRiNmU4ODMzNmY3OGI1YzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny0sAFZcPz7z+vlFrJqgiaFpxtWL C+0vir3Nm7xnwa5QsxleJPTvQzR+NIS78VmeW8GG1h5RX5t5qUpxn3oz4YSwdnN2 wVYOj7Hb0U6TQh/LlTinLz2k+ioGcwjT9xnUbC0rMqWl3MCGNAp2oCslNnnARHkJ rN31pgXs/Qg4/yTlHbhgf/83iBgcxZGivHYiEl8ogUXA7x20M8p1OPmQXRZ3ttfU u0kmqTQPiscDOobXoTgBL74KKDO5+im8sTMjMeyi5K6ZON9FCqjQEdL/UWSN9yzw lHKBHVie6vlbjLuoudFdO+dJRnfIxM2UtzSuolexAbPEMD/UikOo0S6I5wIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFN7ekaD7H03ReQDQbbbogzb3i1wFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzIzMjFk Ni1iZDZjLTRiMmEtYWY4My0yMWE3MDBjNzExOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvMjMyMWQ2 LWJkNmMtNGIyYS1hZjgzLTIxYTcwMGM3MTE5Zi8xLzN0NlJvUHNmVGRGNUFOQnR0 dWlETnZlTFhBVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAW9R9AwQAwHz8AwQDwRxAMA0EAgACMAcDBQAq EmkAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwM2cDANBgkqhkiG9w0BAQsFAAOC AQEAbdZIc3+NsytXmzg1e6HmgXHtzI8G92HnT0jD3gYqnMsFhNticmSulhyi3jYI +1XBPrdPJBGPjgbBI36s7WvO9VAbQdWSUS3w/O9Ih9J0XT/ZCv3TGY/H18TyyUf5 ob5CGATUwmHBI9jX4paWqjwbbAVsOX9mPDzoDuvlCand/iEa7ozKdgLtEhro65Ch l0ZLm99t17cfNKGiexmcD8tYiyAXoNvnjuD1dDbjNKMspRvKvyM3GtJXCjUgcLQd bJ5BbQ9Uf6I0K4ZW5OD0O2dpSERlZD5iP7vQd/OxsWPpjD42Vz6uJWTKpn/OWcME fs8NA1jYAbFa/VdY8dtgGNhKwA== -----END CERTIFICATE-----Generated at Sat Jan 3 02:31:58 2026 by rpki-client