This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer (raw, json) Hash identifier: y6Vr0phgmZPYyf1M+ZQJP1j5UQUSATwpAdGOV5JGhdQ= Subject key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C672D821DCDD822970E0C70C56DF14 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.39.176.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:72:d8:21:dc:dd:82:29:70:e0:c7:0c:56:df:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dce670a6ed4c78fdd77686792f7e087598906f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:7b:6b:41:89:bb:ae:3d:de:31:ed:9c:c1: 08:09:a6:78:aa:1f:92:e6:c6:1b:2c:c7:17:89:dc: ca:66:a3:53:e2:ec:bc:9e:63:97:4a:fa:ee:3d:43: 43:e1:d0:c8:0a:b5:59:09:19:60:90:eb:38:2c:09: 9f:a0:e6:30:fd:a9:9e:3e:a8:9d:7b:99:40:70:c4: 7e:0e:92:36:1e:2a:ba:fe:34:fc:a3:43:fc:4e:32: 65:4e:7b:24:a3:62:5e:6c:cd:32:d8:2d:16:58:bc: 08:00:69:20:b4:8b:19:df:ad:0a:b8:e0:f0:1d:31: e9:cd:26:26:9d:04:4d:b8:31:f1:66:da:d5:5c:f8: ac:8d:9c:8b:69:7f:d8:37:ae:5d:ec:62:c6:e4:53: c8:38:e2:80:b5:e1:ea:1b:fa:27:cb:2f:44:42:45: 31:eb:41:80:79:f3:f1:73:39:ad:87:f1:a7:1b:c6: 2f:f3:71:5e:12:d8:fb:ed:6b:62:26:0b:e6:ea:cc: e2:30:f8:51:80:a3:e9:2e:b4:ae:8e:af:04:b3:4b: 00:9d:81:a0:80:0d:34:ad:75:9c:4d:ed:9e:99:ca: c8:08:95:92:92:1a:c7:d2:c2:ff:de:00:8a:b4:67: f1:54:3d:40:70:92:da:0f:b1:4d:62:09:2d:c6:93: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.39.176.0/21 Signature Algorithm: sha256WithRSAEncryption 87:6b:12:41:c9:3c:d3:1e:b3:cd:10:e1:01:15:de:84:e6:95: 98:cf:c6:0b:36:f5:35:ac:5a:88:a5:d8:20:85:df:d3:d5:cd: 0d:58:59:05:82:ff:94:b1:f7:b5:f4:36:15:b2:f1:f7:a7:65: 7f:92:59:bf:8e:e7:b8:0b:e1:88:ec:f4:ef:9d:99:98:f2:24: 87:07:0b:8d:0e:03:7f:de:59:31:7e:bf:42:47:e8:f6:c4:e5: 41:bd:b0:75:a3:94:90:6c:f2:62:93:e0:1e:88:78:1c:74:48: d9:97:c1:17:78:a5:f8:12:0c:e8:de:a0:8e:ff:37:ae:9e:f9: 36:4b:12:01:71:13:02:a9:58:9f:63:ab:eb:c7:46:80:66:11: d7:c7:cb:54:f7:de:93:ed:89:ef:aa:dc:a5:a7:c0:10:2a:2b: a3:d1:7c:3d:83:2c:d1:db:8c:fb:04:96:15:bb:ef:5e:0d:48: 89:66:23:13:8a:3d:97:18:b0:4d:f4:5b:7d:fa:5c:1b:28:74: 0b:13:b7:e9:2d:f9:fe:b8:44:79:77:66:9c:e6:27:e9:3f:59: b8:d7:08:c5:cc:86:cd:2a:0f:ac:0d:14:61:c5:0d:0c:e8:b9: e9:5b:91:62:50:1a:8f:30:2a:b1:73:2a:a5:91:3d:23:3b:a5: 3d:a4:8e:56 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt3xnLYIdzdgilw4McMVt8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2U2NzBhNmVkNGM3OGZkZDc3Njg2NzkyZjdlMDg3NTk4OTA2ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucd7a0GJu6493jHtnMEICaZ4qh+S 5sYbLMcXidzKZqNT4uy8nmOXSvruPUND4dDICrVZCRlgkOs4LAmfoOYw/amePqid e5lAcMR+DpI2Hiq6/jT8o0P8TjJlTnsko2JebM0y2C0WWLwIAGkgtIsZ360KuODw HTHpzSYmnQRNuDHxZtrVXPisjZyLaX/YN65d7GLG5FPIOOKAteHqG/onyy9EQkUx 60GAefPxczmth/GnG8Yv83FeEtj77WtiJgvm6sziMPhRgKPpLrSujq8Es0sAnYGg gA00rXWcTe2emcrICJWSkhrH0sL/3gCKtGfxVD1AcJLaD7FNYgktxpM+BwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNzmcKbtTHj913aGeS9+CHWYkG9zMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBhL2UzMTgw NC02MjcwLTQyNDYtOTEwMC1mMDZlMjM0MzIyNzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvZTMxODA0 LTYyNzAtNDI0Ni05MTAwLWYwNmUyMzQzMjI3My8xLzNPWndwdTFNZVAzWGRvWjVM MzRJZFppUWIzTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDwSewMA0GCSqGSIb3DQEBCwUAA4IBAQCHaxJB yTzTHrPNEOEBFd6E5pWYz8YLNvU1rFqIpdgghd/T1c0NWFkFgv+Usfe19DYVsvH3 p2V/klm/jue4C+GI7PTvnZmY8iSHBwuNDgN/3lkxfr9CR+j2xOVBvbB1o5SQbPJi k+AeiHgcdEjZl8EXeKX4Egzo3qCO/zeunvk2SxIBcRMCqVifY6vrx0aAZhHXx8tU 996T7Ynvqtylp8AQKiuj0Xw9gyzR24z7BJYVu+9eDUiJZiMTij2XGLBN9Ft9+lwb KHQLE7fpLfn+uER5d2ac5ifpP1m41wjFzIbNKg+sDRRhxQ0M6LnpW5FiUBqPMCqx cyqlkT0jO6U9pI5W -----END CERTIFICATE-----Generated at Sun Jan 11 22:46:55 2026 by rpki-client