This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer File: tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer (raw, json) Hash identifier: OeqYbakUqxT4uBcjkyUYUtCJokJ0KoBaPfZZPhgWBQY= Subject key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B21D94711BC8BB487944094C6E808308F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 11:50:46 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 2a0d:2280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:d9:47:11:bc:8b:b4:87:94:40:94:c6:e8:08:30:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 11:50:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:07:80:50:09:49:fc:1e:04:56:53:46:59: 83:8e:c2:2d:62:95:8b:81:a9:ff:c9:dc:82:ba:fb: 9e:f3:04:ef:dd:c5:4b:d9:5f:0a:da:50:45:fb:64: d7:17:f0:94:d8:23:67:da:a8:b9:a4:df:3b:2e:80: 60:2b:a3:52:cb:6b:ee:e8:40:ac:d9:10:96:5c:ab: c7:b1:07:4b:0e:34:27:a5:0f:52:03:de:25:49:3e: 37:49:cd:0c:27:92:4d:44:74:a9:55:de:0b:cf:94: fd:94:a6:92:27:6d:1a:91:bd:44:8c:bf:a8:48:ee: 64:73:32:da:0e:0b:d2:c2:7d:14:b0:de:c3:c3:a5: 3c:0c:8d:1a:32:9a:f6:fc:ff:08:3d:45:ba:8e:9c: e8:da:90:d1:c2:fb:73:1e:85:71:d1:d4:bf:cc:3a: 3e:72:d3:1c:0a:23:93:c8:27:bb:a7:ff:d8:6e:ea: 77:a7:47:69:f3:fc:2a:63:22:d9:f0:29:3e:7e:f2: ab:43:47:6b:a8:02:f8:5a:c0:06:55:53:0b:e6:21: 50:04:44:2d:dc:6e:5c:74:8f:2a:09:e8:1e:2d:f0: 0a:74:67:22:ac:db:1b:1a:50:ac:33:9b:c1:01:5e: 1e:68:f7:ad:39:d5:d2:83:08:07:21:e1:0f:6b:34: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2280::/29 Signature Algorithm: sha256WithRSAEncryption 0c:51:d3:54:e0:65:25:3c:6c:bd:33:c2:25:a2:91:e1:55:40: fc:28:30:2d:78:bf:33:b7:bd:c3:47:e9:a0:bd:27:90:fc:d6: 2c:55:80:cd:63:9e:7a:e7:46:34:ad:1d:b6:a0:9b:cd:0d:b9: 4f:bb:32:a5:7c:c5:60:f0:36:2a:30:3a:73:cd:da:45:f3:24: 50:5c:58:69:92:d4:a2:31:48:62:24:38:fd:d4:54:9e:04:b2: 92:8e:b5:00:6e:ae:3e:e4:87:f2:5a:28:59:d5:22:d2:c0:ff: 0b:19:29:5b:4c:71:e3:8d:7a:62:82:e9:00:28:b7:f3:e9:66: aa:14:ca:c4:77:28:0d:93:2d:d2:75:0d:97:83:e9:3e:eb:01: 8a:0d:77:8e:5b:8a:53:f8:42:a5:4c:97:23:29:39:57:cd:dd: 18:3e:5c:41:78:7b:7a:23:b2:34:c4:b3:08:e5:40:6d:a9:41: 46:d3:e4:21:e2:31:09:8c:1e:c6:d3:ee:b8:2a:3f:22:18:a0: 15:25:ab:c3:a2:a4:46:15:cc:5a:31:5b:b7:76:01:ca:0f:e7: ea:79:a8:aa:28:73:59:53:5d:50:f9:f2:a4:9d:0b:3e:ab:92: db:fa:e3:4a:5c:ac:e9:b5:e4:2f:ff:46:92:8a:1c:c2:83:37: fd:d3:5b:98 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZsh2UcRvIu0h5RAlMboCDCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTE1MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmJkZTg3OTRiMGEwZDg4ZjkyOTY3ZjUwODRlNGMzODE5OTYxM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA448HgFAJSfweBFZTRlmDjsItYpWL gan/ydyCuvue8wTv3cVL2V8K2lBF+2TXF/CU2CNn2qi5pN87LoBgK6NSy2vu6ECs 2RCWXKvHsQdLDjQnpQ9SA94lST43Sc0MJ5JNRHSpVd4Lz5T9lKaSJ20akb1EjL+o SO5kczLaDgvSwn0UsN7Dw6U8DI0aMpr2/P8IPUW6jpzo2pDRwvtzHoVx0dS/zDo+ ctMcCiOTyCe7p//Ybup3p0dp8/wqYyLZ8Ck+fvKrQ0drqAL4WsAGVVML5iFQBEQt 3G5cdI8qCegeLfAKdGcirNsbGlCsM5vBAV4eaPetOdXSgwgHIeEPazThwwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFLa96HlLCg2I+Sln9QhOTDgZlhOgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzk4YWEw Yi1kOGIzLTQxMDktOGY4Yi0yMGU1OWNmOTI2ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvOThhYTBi LWQ4YjMtNDEwOS04ZjhiLTIwZTU5Y2Y5MjY4Ni8xL3RyM29lVXNLRFlqNUtXZjFD RTVNT0JtV0U2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg0igDANBgkqhkiG9w0BAQsFAAOCAQEADFHT VOBlJTxsvTPCJaKR4VVA/CgwLXi/M7e9w0fpoL0nkPzWLFWAzWOeeudGNK0dtqCb zQ25T7sypXzFYPA2KjA6c83aRfMkUFxYaZLUojFIYiQ4/dRUngSyko61AG6uPuSH 8looWdUi0sD/CxkpW0xx4416YoLpACi38+lmqhTKxHcoDZMt0nUNl4PpPusBig13 jluKU/hCpUyXIyk5V83dGD5cQXh7eiOyNMSzCOVAbalBRtPkIeIxCYwextPuuCo/ IhigFSWrw6KkRhXMWjFbt3YByg/n6nmoqihzWVNdUPnypJ0LPquS2/rjSlys6bXk L/9GkoocwoM3/dNbmA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:29:08 2025 by rpki-client