This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer File: f3c03-oSBldBLqhn3bx7hNEyv3g.cer (raw, json) Hash identifier: OvhU/mhj4RUzLRuLb6K8A1963t7VxPsnsXJ58GSJfbA= Subject key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCAA6381FACE3B221C2A0F2308DFD27 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:51 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 146.19.9.0/24 IP: 212.23.208.0/24 IP: 2a12:1a00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a6:38:1f:ac:e3:b2:21:c2:a0:f2:30:8d:fd:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f7734dfea120657412ea867ddbc7b84d132bf78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:3a:95:c2:f6:88:b5:02:58:90:e8:71:14: 9c:09:f4:d1:d1:32:0a:9d:eb:d2:14:0e:39:04:c4: a4:c6:89:f7:2c:5d:63:0c:b0:ab:05:35:48:db:ce: 2d:79:60:a8:ac:45:f7:d9:26:93:0b:eb:bb:91:b6: 04:aa:7d:92:cc:ad:fb:cc:f7:95:f7:09:a0:96:25: 23:ab:8c:a5:6a:49:a1:cd:c1:76:32:9a:4f:6d:90: ac:73:9c:54:b3:94:9f:44:ad:78:2f:e1:f9:4b:e4: 91:50:73:b6:3a:3e:c5:47:7f:fe:23:1c:20:94:c0: 27:c8:e5:01:a0:75:b2:60:a8:03:61:d5:a0:78:af: 96:bc:3d:c1:cc:a3:e6:be:33:b1:7b:af:7e:5d:2b: d9:64:e9:35:0d:d1:51:5a:02:fc:6c:0f:48:7c:03: e1:a1:b2:7a:02:f2:5d:6f:43:ea:02:aa:05:8a:53: 62:20:8d:17:a0:e7:de:8b:d1:19:bf:34:35:5c:3a: 4b:77:bf:cb:8e:bd:60:e3:53:ff:2e:6d:57:d8:f3: 66:06:87:57:81:c4:1a:74:40:90:1b:be:9c:7f:a7: 13:0a:67:cc:21:99:bd:8f:0b:e5:fa:76:d9:52:13: e7:ab:35:74:d4:e5:1a:97:69:3b:ca:90:75:a0:e0: f6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.9.0/24 212.23.208.0/24 IPv6: 2a12:1a00::/29 Signature Algorithm: sha256WithRSAEncryption 6c:3d:8d:6f:d4:2d:9d:9b:5e:94:c5:96:0e:c5:d0:b9:be:cb: 3e:37:bc:7e:de:83:04:d0:30:7c:b3:cd:8b:8d:83:19:9b:b1: ac:34:5e:be:db:f7:7a:c0:8e:e4:95:47:c9:32:68:d3:25:91: 8f:f3:3a:db:09:8a:d8:e2:8b:88:ee:b0:eb:bf:4f:7f:a2:93: 7c:99:37:83:18:29:ba:b8:3a:10:d2:68:30:4a:de:76:e6:9f: fb:ea:19:cd:14:19:97:c3:ab:4d:a0:29:b0:bf:89:d6:8a:36: fb:89:b9:70:7a:23:e5:e9:ce:8f:4a:7a:f0:8f:88:eb:e7:24: 2e:45:fd:86:c5:9d:d3:52:b6:7f:28:71:34:17:c7:44:f9:ab: c5:04:b4:7e:a9:af:86:5e:4d:b1:d1:c1:85:b5:9a:6d:dc:ac: a5:a1:d3:ec:e3:28:54:7a:39:dc:8a:1c:ee:fc:14:23:18:af: 76:28:95:c7:d0:61:ee:fa:af:4d:92:0e:4c:d9:bf:78:6e:e4: 32:33:9b:c7:b2:9f:84:61:fc:93:31:52:5c:31:e1:4b:14:5b: c6:07:8d:8f:a0:5f:2f:10:0d:a8:53:73:ef:68:8f:ce:14:62: 79:65:65:3c:f5:34:d1:89:07:32:06:04:8c:af:77:5e:07:7d: f3:0f:c8:2b -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt9yqY4H6zjsiHCoPIwjf0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjc3MzRkZmVhMTIwNjU3NDEyZWE4NjdkZGJjN2I4NGQxMzJiZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPM6lcL2iLUCWJDocRScCfTR0TIK nevSFA45BMSkxon3LF1jDLCrBTVI284teWCorEX32SaTC+u7kbYEqn2SzK37zPeV 9wmgliUjq4ylakmhzcF2MppPbZCsc5xUs5SfRK14L+H5S+SRUHO2Oj7FR3/+Ixwg lMAnyOUBoHWyYKgDYdWgeK+WvD3BzKPmvjOxe69+XSvZZOk1DdFRWgL8bA9IfAPh obJ6AvJdb0PqAqoFilNiII0XoOfei9EZvzQ1XDpLd7/Ljr1g41P/Lm1X2PNmBodX gcQadECQG76cf6cTCmfMIZm9jwvl+nbZUhPnqzV01OUal2k7ypB1oOD2wwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFH93NN/qEgZXQS6oZ928e4TRMr94MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdlLzY4MDMy NC1lZTFmLTQwZjItODhkZi0xOTY5MzE5NjJkM2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2UvNjgwMzI0 LWVlMWYtNDBmMi04OGRmLTE5NjkzMTk2MmQzYy8xL2YzYzAzLW9TQmxkQkxxaG4z Yng3aE5FeXYzZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAkhMJAwQA1BfQMA0EAgACMAcDBQMqEhoAMA0G CSqGSIb3DQEBCwUAA4IBAQBsPY1v1C2dm16UxZYOxdC5vss+N7x+3oME0DB8s82L jYMZm7GsNF6+2/d6wI7klUfJMmjTJZGP8zrbCYrY4ouI7rDrv09/opN8mTeDGCm6 uDoQ0mgwSt525p/76hnNFBmXw6tNoCmwv4nWijb7iblweiPl6c6PSnrwj4jr5yQu Rf2GxZ3TUrZ/KHE0F8dE+avFBLR+qa+GXk2x0cGFtZpt3KylodPs4yhUejncihzu /BQjGK92KJXH0GHu+q9Nkg5M2b94buQyM5vHsp+EYfyTMVJcMeFLFFvGB42PoF8v EA2oU3PvaI/OFGJ5ZWU89TTRiQcyBgSMr3deB33zD8gr -----END CERTIFICATE-----Generated at Thu Jan 8 23:15:09 2026 by rpki-client