This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer (raw, json) Hash identifier: /GHYo40TJH1oOKXq5un4ZcgszNCiv3zx5Cg6/vn9Oho= Subject key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7E37512A732612EA4991575465CDBF94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 10:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.22.130.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:51:2a:73:26:12:ea:49:91:57:54:65:cd:bf:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd399e494189f691a5ed64f3be3a6a3b50225091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4e:25:a1:f4:1a:4a:33:6f:61:c5:6d:27:38: be:b2:8f:21:86:5d:ee:90:ee:00:58:fe:3d:8a:6a: 40:56:f1:fa:e9:85:e8:c6:12:32:8d:8e:3d:a2:9f: 67:42:57:82:24:b3:4f:87:26:6f:18:02:68:d7:93: e2:57:dc:cc:b0:9c:62:14:05:7a:11:2c:62:8d:f4: 20:c7:b2:99:7f:d0:eb:1e:b6:0d:91:07:06:9d:77: 3d:53:cf:59:61:c9:ba:f5:83:b0:e3:3c:06:03:0d: 2c:5a:49:e4:cd:c5:3f:2f:5f:e0:30:1e:25:dd:3c: 9f:2d:04:78:1e:eb:4d:26:51:e4:70:b6:49:b3:04: 5d:80:f5:b4:77:1f:a4:f1:ea:81:9a:e7:59:98:47: 98:82:b4:1f:61:5a:fc:29:39:2e:17:bc:5b:9f:41: 5c:92:20:da:ab:51:41:f8:50:ae:38:c1:2e:26:e7: d2:e3:09:df:01:78:ff:5a:e8:1c:08:ad:a7:df:69: 17:c5:32:61:53:bc:98:1e:91:f5:44:fd:de:cd:d9: d3:9c:e0:d7:e6:1c:49:d7:06:2a:f9:ba:01:ca:59: b6:ea:12:e8:96:93:07:65:45:c0:fd:42:8f:cf:cc: 7d:da:e9:fb:5a:cd:45:41:68:57:b1:c2:95:30:ee: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.130.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:ea:e2:90:0c:10:9d:4d:8e:e1:45:91:50:b1:cd:35:77:6e: 0c:44:52:a1:36:5c:a3:3d:18:11:bf:04:c2:52:8c:80:43:75: 5f:68:39:a7:14:9c:ec:2c:26:03:ad:78:ee:48:a6:d1:23:cd: 40:a8:7d:ec:6b:c0:05:76:30:6a:d3:ed:55:87:e3:01:c9:73: 8b:a7:aa:57:07:54:3f:d6:d1:76:06:4a:75:f9:43:2b:94:23: d9:fd:dc:13:c2:f1:8f:c6:5b:db:0c:b8:f4:e8:a4:26:eb:35: ae:4d:2b:a7:0e:54:68:bd:b6:35:34:78:87:6b:be:0e:d6:08: e0:c9:a6:2f:c2:d6:01:7c:99:3f:f0:59:25:d4:c9:8e:53:bd: d8:da:07:8d:20:e0:21:2f:5e:5e:ab:f8:82:70:4b:85:8d:c7: 7f:4b:e8:6c:b8:e4:96:fa:53:d3:8e:bd:be:88:a4:8e:29:bc: 23:4a:d7:31:2a:7a:3a:04:13:b6:72:07:0a:f7:97:f3:af:58: 4e:78:ab:33:82:b7:6d:a7:fa:0f:35:fc:ea:1e:95:ea:af:4f: 19:5e:aa:46:29:39:8d:13:56:af:fe:91:2e:49:cf:55:9e:35: f0:05:25:53:cf:b3:a7:f0:f3:05:eb:2b:73:34:b2:aa:0d:98: 48:c9:e1:d3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt+N1EqcyYS6kmRV1Rlzb+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDM5OWU0OTQxODlmNjkxYTVlZDY0ZjNiZTNhNmEzYjUwMjI1MDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo04lofQaSjNvYcVtJzi+so8hhl3u kO4AWP49impAVvH66YXoxhIyjY49op9nQleCJLNPhyZvGAJo15PiV9zMsJxiFAV6 ESxijfQgx7KZf9DrHrYNkQcGnXc9U89ZYcm69YOw4zwGAw0sWknkzcU/L1/gMB4l 3TyfLQR4HutNJlHkcLZJswRdgPW0dx+k8eqBmudZmEeYgrQfYVr8KTkuF7xbn0Fc kiDaq1FB+FCuOMEuJufS4wnfAXj/WugcCK2n32kXxTJhU7yYHpH1RP3ezdnTnODX 5hxJ1wYq+boBylm26hLolpMHZUXA/UKPz8x92un7Ws1FQWhXscKVMO7CJQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFN05nklBifaRpe1k8746ajtQIlCRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzI3YmE2 OC1mMTc4LTQ5OTEtOTZhNy00NDJhMDNiN2YwODQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMjdiYTY4 LWYxNzgtNDk5MS05NmE3LTQ0MmEwM2I3ZjA4NC8xLzNUbWVTVUdKOXBHbDdXVHp2 anBxTzFBaVVKRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwRaCMA0GCSqGSIb3DQEBCwUAA4IBAQAb6uKQ DBCdTY7hRZFQsc01d24MRFKhNlyjPRgRvwTCUoyAQ3VfaDmnFJzsLCYDrXjuSKbR I81AqH3sa8AFdjBq0+1Vh+MByXOLp6pXB1Q/1tF2Bkp1+UMrlCPZ/dwTwvGPxlvb DLj06KQm6zWuTSunDlRovbY1NHiHa74O1gjgyaYvwtYBfJk/8Fkl1MmOU73Y2geN IOAhL15eq/iCcEuFjcd/S+hsuOSW+lPTjr2+iKSOKbwjStcxKno6BBO2cgcK95fz r1hOeKszgrdtp/oPNfzqHpXqr08ZXqpGKTmNE1av/pEuSc9VnjXwBSVTz7On8PMF 6ytzNLKqDZhIyeHT -----END CERTIFICATE-----Generated at Mon Jan 12 09:40:56 2026 by rpki-client