This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer File: 3C19D9EE5EB020A8652D685987FECF2A76BB0277.cer (raw, json) Hash identifier: t3YSY1SJYCbF/cSX7dVu0nWSohbBBH7qMkk37sibm3U= Subject key identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 Authority key identifier: 8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B Certificate issuer: /CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Certificate serial: 1ED53EEEA9EEE5405ED6EDC80F7F7D28E848BD3C Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 22 Dec 2025 17:12:58 +0000 Certificate not after: Mon 21 Dec 2026 17:17:58 +0000 Subordinate resources: IP: 2a05:dfc1:8000::/39 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 06:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d5:3e:ee:a9:ee:e5:40:5e:d6:ed:c8:0f:7f:7d:28:e8:48:bd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B Validity Not Before: Dec 22 17:12:58 2025 GMT Not After : Dec 21 17:17:58 2026 GMT Subject: CN=3C19D9EE5EB020A8652D685987FECF2A76BB0277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c8:52:f0:f5:63:ec:b7:7c:f6:a0:19:99:e3: f7:9a:0a:80:0c:64:bc:ce:e5:0b:ce:5c:a9:af:81: 23:d1:5c:1e:96:96:92:fc:00:c9:5e:57:48:be:47: d6:4d:a4:77:df:8d:56:08:71:d8:8e:b1:07:f7:8e: 6d:6e:e4:c1:5c:10:32:08:ac:ed:80:bb:7e:a6:ab: 6e:74:74:70:c3:ea:94:b0:67:c6:6d:11:4b:78:ed: 51:9d:ae:de:91:6a:ef:61:e4:26:91:08:86:ef:2b: 76:03:5e:2d:86:6f:f6:ac:3c:71:a6:cb:f4:a7:c9: bb:fd:11:6b:76:bf:4e:ac:59:74:c7:d6:9d:33:06: cd:c1:bc:e1:ad:ac:72:1d:68:b5:3b:65:92:86:26: 65:19:2d:54:c5:83:1e:34:dd:71:c4:6d:e7:3d:30: fb:1f:5f:85:30:8d:73:af:63:89:6a:89:2d:35:40: 1a:12:dc:1e:56:d7:d7:c9:8f:03:f7:b1:c1:a6:e0: 02:4a:23:b5:c4:b9:ba:e0:e6:a2:ab:0d:75:45:13: 0b:29:40:e2:da:75:05:22:33:d9:09:40:96:3f:75: 51:1d:3c:d6:66:66:0e:a7:db:2b:ce:41:f5:95:06: f7:b0:a3:65:ab:7b:62:31:5a:b0:b8:dd:76:b5:18: 73:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:19:D9:EE:5E:B0:20:A8:65:2D:68:59:87:FE:CF:2A:76:BB:02:77 X509v3 Authority Key Identifier: keyid:8F:C3:CF:B5:DF:3E:8F:72:1C:08:B8:B5:FE:7F:61:D6:7B:0B:E1:3B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/5/3C19D9EE5EB020A8652D685987FECF2A76BB0277.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:dfc1:8000::/39 Signature Algorithm: sha256WithRSAEncryption 68:18:3e:b2:ad:29:19:07:82:e5:a6:45:ac:f6:74:1d:4b:ed: c4:f0:1f:10:f9:b1:92:ad:3d:14:d4:a7:54:7d:f6:f2:4c:f7: b6:45:cc:0b:3a:a6:7f:92:e8:8c:ba:a7:97:24:69:a0:fe:65: 93:10:3b:76:57:f1:36:eb:9f:7c:41:fe:4e:f0:3f:45:0e:fc: ca:61:d7:1d:ad:a9:79:00:53:da:8b:bc:2f:17:82:d0:f4:a2: 3a:89:d9:4a:9f:ee:3d:d7:99:8b:5f:5b:02:3a:80:9b:df:bb: ee:d4:a6:0d:f9:df:e1:ab:5a:c5:62:42:16:35:c9:1d:1d:0e: 5c:89:c8:e9:b3:dc:74:3e:ba:1e:d2:a6:98:99:ee:08:48:72: 14:cc:24:c2:7e:ab:9c:8b:ba:32:ea:77:7d:88:bc:2a:54:2c: ca:d9:65:64:5a:a4:bb:ef:3a:ca:fd:5d:8c:22:a9:de:9b:d2: 0d:24:08:30:e7:8f:76:67:ea:cd:60:a9:9c:64:83:90:cd:0f: 91:be:66:39:51:c5:ab:1d:12:d0:47:9a:8e:72:3f:c7:90:46: c9:3a:4c:2c:5e:00:c6:48:b2:3a:81:ac:b6:11:eb:d8:31:aa: 5c:f4:22:90:ee:07:ee:58:95:bb:f0:38:94:15:78:ab:aa:a3: 02:3f:06:b2 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUHtU+7qnu5UBe1u3ID399KOhIvTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZDM0NGQjVERjNFOEY3MjFDMDhCOEI1RkU3RjYxRDY3 QjBCRTEzQjAeFw0yNTEyMjIxNzEyNThaFw0yNjEyMjExNzE3NThaMDMxMTAvBgNV BAMTKDNDMTlEOUVFNUVCMDIwQTg2NTJENjg1OTg3RkVDRjJBNzZCQjAyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfyFLw9WPst3z2oBmZ4/eaCoAM ZLzO5QvOXKmvgSPRXB6WlpL8AMleV0i+R9ZNpHffjVYIcdiOsQf3jm1u5MFcEDII rO2Au36mq250dHDD6pSwZ8ZtEUt47VGdrt6Rau9h5CaRCIbvK3YDXi2Gb/asPHGm y/Snybv9EWt2v06sWXTH1p0zBs3BvOGtrHIdaLU7ZZKGJmUZLVTFgx403XHEbec9 MPsfX4UwjXOvY4lqiS01QBoS3B5W19fJjwP3scGm4AJKI7XEubrg5qKrDXVFEwsp QOLadQUiM9kJQJY/dVEdPNZmZg6n2yvOQfWVBvewo2Wre2IxWrC43Xa1GHNHAgMB AAGjggLsMIIC6DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ8GdnuXrAgqGUt aFmH/s8qdrsCdzAfBgNVHSMEGDAWgBSPw8+13z6PchwIuLX+f2HWewvhOzAOBgNV HQ8BAf8EBAMCAQYwbwYDVR0fBGgwZjBkoGKgYIZecnN5bmM6Ly9jbG91ZGllLXJl cG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvNC84RkMzQ0ZCNURGM0U4Rjcy MUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMw gYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy84RkMzQ0ZCNURG M0U4RjcyMUMwOEI4QjVGRTdGNjFENjdCMEJFMTNCLmNlcjCCAT8GCCsGAQUFBwEL BIIBMTCCAS0wXwYIKwYBBQUHMAWGU3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5 ZmVlYjdkLzUvMIGLBggrBgEFBQcwCoZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9jOTkyNjVlZi0yMmE5LTQxMDAtYTIzZC01MWE5 ZDlmZWViN2QvNS8zQzE5RDlFRTVFQjAyMEE4NjUyRDY4NTk4N0ZFQ0YyQTc2QkIw Mjc3Lm1mdDA8BggrBgEFBQcwDYYwaHR0cHM6Ly9ycmRwLnBhYXMucnBraS5yaXBl Lm5ldC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgEqBd/BgDANBgkqhkiG9w0BAQsF AAOCAQEAaBg+sq0pGQeC5aZFrPZ0HUvtxPAfEPmxkq09FNSnVH328kz3tkXMCzqm f5LojLqnlyRpoP5lkxA7dlfxNuuffEH+TvA/RQ78ymHXHa2peQBT2ou8LxeC0PSi OonZSp/uPdeZi19bAjqAm9+77tSmDfnf4ataxWJCFjXJHR0OXInI6bPcdD66HtKm mJnuCEhyFMwkwn6rnIu6Mup3fYi8KlQsytllZFqku+86yv1djCKp3pvSDSQIMOeP dmfqzWCpnGSDkM0Pkb5mOVHFqx0S0EeajnI/x5BGyTpMLF4AxkiyOoGsthHr2DGq XPQikO4H7liVu/A4lBV4q6qjAj8Gsg== -----END CERTIFICATE-----Generated at Sat Dec 27 10:44:12 2025 by rpki-client