This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3hSkKeZlirtwo3ksFy1-1i64-iY.cer File: 3hSkKeZlirtwo3ksFy1-1i64-iY.cer (raw, json) Hash identifier: 80aesvAMw1n+lnY0VXYRbYyWzOEvi8up6Lzm8+rP4lg= Subject key identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B77C687CFE51D182A535902A79C6C85F8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 04:17:38 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60472 IP: 185.128.11.0/24 IP: 2a0f:5ac0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:87:cf:e5:1d:18:2a:53:59:02:a7:9c:6c:85:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de14a429e6658abb70a3792c172d7ed62eb8fa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:54:e5:6a:b3:99:5b:ae:4f:81:fe:9f:f1:fc: 92:52:03:59:db:84:8d:68:b7:02:a0:5b:4b:4b:ad: d5:3d:9a:e4:75:00:1b:84:2a:57:2f:c7:ef:cf:8f: 0a:3d:e7:1a:0c:7a:cc:2b:c0:7d:cf:80:59:13:24: 3e:b5:70:6f:84:e1:6c:ab:f9:aa:0f:d1:45:cf:ea: c8:d6:a1:f9:c3:4d:17:e0:d6:35:89:87:2d:c3:13: bd:6c:60:af:f1:4b:05:82:6d:3b:6f:05:5b:42:32: 2c:bb:f2:86:00:48:1f:09:bf:54:37:8a:60:77:eb: ff:ca:e2:17:b0:be:f3:98:15:26:eb:a4:1c:e7:0f: 61:bd:70:b1:cf:b1:c6:f4:07:63:f0:37:d6:9c:cf: 36:54:da:03:ac:15:17:9c:15:43:39:e1:cd:0a:90: ea:bb:6b:4c:9e:2b:21:a6:0d:5a:3f:44:91:29:b8: 62:52:d0:a9:a6:8c:56:a3:19:62:6d:e4:a3:89:50: 92:16:d6:6e:ff:78:09:31:52:15:e1:bf:f3:43:85: 86:84:89:1c:f7:d5:85:c6:8e:95:af:15:71:6c:1b: 21:2e:3c:f9:f3:e9:db:2a:a9:60:42:2f:22:ec:ab: 52:0a:b7:8e:8b:0a:08:8c:dd:bb:14:ca:3f:02:b7: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:14:A4:29:E6:65:8A:BB:70:A3:79:2C:17:2D:7E:D6:2E:B8:FA:26 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/73d197-33c0-42e8-a291-05d9c1cd7425/1/3hSkKeZlirtwo3ksFy1-1i64-iY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.128.11.0/24 IPv6: 2a0f:5ac0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60472 Signature Algorithm: sha256WithRSAEncryption a8:8e:1a:31:98:91:14:aa:f4:e6:7b:43:bf:61:e0:99:a1:ad: 2c:0a:cc:0a:1c:75:06:80:3f:c0:83:95:1d:0c:7a:d5:96:c9: 70:09:66:c1:a2:8b:1f:ac:83:9e:44:1a:10:37:3f:dc:56:94: f9:34:8b:e5:eb:80:3e:86:79:12:06:b3:e0:3f:24:c1:49:14: 5a:61:b1:fc:6c:62:7d:04:fe:8f:f4:f2:87:e9:17:f2:bd:7f: 39:d3:91:48:33:91:18:e2:74:b0:4b:a6:e1:7f:32:3c:49:76: b2:dd:5c:e4:0f:48:66:51:4c:68:6c:0e:82:cc:04:c3:4d:cd: be:50:d3:8e:e7:22:59:3b:37:41:6a:9e:2a:68:19:4a:6f:5e: 30:1a:44:0f:5e:5d:ae:86:b4:a9:51:1d:0c:a9:9e:b5:8f:23: c1:4e:1a:bb:bc:85:41:3c:01:95:78:e5:98:51:b2:46:38:74: 84:34:ea:ec:a1:98:1b:df:28:36:3f:f8:ce:95:70:45:b3:ac: 20:5f:5c:6e:37:41:d0:49:8f:59:c3:c0:ac:1c:d6:df:fb:11: 55:bf:39:75:be:9c:ca:ee:88:9c:9f:e5:44:a8:0c:d7:ef:9e: 42:68:54:f9:f7:a5:5b:4c:b8:ce:38:67:65:d6:51:95:29:d0: e4:81:b9:0d -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt3xofP5R0YKlNZAqecbIX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTE0YTQyOWU2NjU4YWJiNzBhMzc5MmMxNzJkN2VkNjJlYjhmYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVTlarOZW65Pgf6f8fySUgNZ24SN aLcCoFtLS63VPZrkdQAbhCpXL8fvz48KPecaDHrMK8B9z4BZEyQ+tXBvhOFsq/mq D9FFz+rI1qH5w00X4NY1iYctwxO9bGCv8UsFgm07bwVbQjIsu/KGAEgfCb9UN4pg d+v/yuIXsL7zmBUm66Qc5w9hvXCxz7HG9Adj8DfWnM82VNoDrBUXnBVDOeHNCpDq u2tMnishpg1aP0SRKbhiUtCppoxWoxlibeSjiVCSFtZu/3gJMVIV4b/zQ4WGhIkc 99WFxo6VrxVxbBshLjz58+nbKqlgQi8i7KtSCreOiwoIjN27FMo/Arcl4QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN4UpCnmZYq7cKN5LBctftYuuPomMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzczZDE5 Ny0zM2MwLTQyZTgtYTI5MS0wNWQ5YzFjZDc0MjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvNzNkMTk3 LTMzYzAtNDJlOC1hMjkxLTA1ZDljMWNkNzQyNS8xLzNoU2tLZVpsaXJ0d28za3NG eTEtMWk2NC1pWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuYALMA0EAgACMAcDBQAqD1rAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDsODANBgkqhkiG9w0BAQsFAAOCAQEAqI4aMZiRFKr0 5ntDv2HgmaGtLArMChx1BoA/wIOVHQx61ZbJcAlmwaKLH6yDnkQaEDc/3FaU+TSL 5euAPoZ5Egaz4D8kwUkUWmGx/GxifQT+j/Tyh+kX8r1/OdORSDORGOJ0sEum4X8y PEl2st1c5A9IZlFMaGwOgswEw03NvlDTjuciWTs3QWqeKmgZSm9eMBpED15droa0 qVEdDKmetY8jwU4au7yFQTwBlXjlmFGyRjh0hDTq7KGYG98oNj/4zpVwRbOsIF9c bjdB0EmPWcPArBzW3/sRVb85db6cyu6InJ/lRKgM1++eQmhU+felW0y4zjhnZdZR lSnQ5IG5DQ== -----END CERTIFICATE-----Generated at Mon Jan 12 02:17:48 2026 by rpki-client