This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0H3DXrzYjdDiqNs6WghlS8O-AmI.cer File: 0H3DXrzYjdDiqNs6WghlS8O-AmI.cer (raw, json) Hash identifier: Pf/pMKYYSlb2wpoyq8FrYRezOqUZxEl1J5MOSK4HoI4= Subject key identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797E226E1B0E8380F30E3E44F2490850 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:17:48 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 60358 AS: 214988 IP: 5.44.72.0/21 IP: 45.145.140.0/22 IP: 2a0e:f6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:22:6e:1b:0e:83:80:f3:0e:3e:44:f2:49:08:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d07dc35ebcd88dd0e2a8db3a5a08654bc3be0262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:df:5d:33:87:3c:32:60:37:ca:8c:36:6e: ec:32:2b:cd:d1:dd:aa:27:09:17:24:ad:e8:c1:c1: 96:8b:d1:60:63:a4:f2:62:4a:93:5d:33:d6:1a:2a: a7:43:f4:44:66:75:28:38:2c:50:39:e4:8f:8c:95: 14:23:75:6e:37:b2:cd:0a:bb:2b:a8:45:86:d6:27: 0c:a8:ca:72:a8:2d:a9:f4:bd:71:a6:ac:00:72:43: 5f:c2:e6:57:41:c2:de:5c:2d:77:6e:5e:e2:2a:06: c0:9f:01:be:71:bf:fc:59:e3:9a:fc:aa:23:41:84: 89:95:11:5b:2c:8e:83:52:18:87:7d:7e:37:f1:b9: 4e:33:dd:a9:8d:63:0a:19:6e:f2:28:89:5b:9d:15: 47:32:eb:9d:21:d9:72:a8:ba:41:8d:a5:f3:46:ae: b2:f3:9b:ef:e3:83:70:26:b8:73:84:4f:9c:f9:24: 30:84:06:ad:ea:7b:9f:ed:e1:21:87:bb:36:eb:e6: e1:b0:ad:03:13:6b:93:37:ca:17:e4:28:9b:d3:7c: 50:95:12:7e:90:4b:51:80:4e:e0:9c:31:6f:d5:14: 58:a0:78:25:5a:95:2f:9e:30:ee:56:7a:94:34:62: 1c:f5:94:69:3a:70:2f:5c:d7:52:fa:a9:32:06:4e: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7D:C3:5E:BC:D8:8D:D0:E2:A8:DB:3A:5A:08:65:4B:C3:BE:02:62 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1c718d-e7a0-40ac-a181-cbaa42a62727/1/0H3DXrzYjdDiqNs6WghlS8O-AmI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.44.72.0/21 45.145.140.0/22 IPv6: 2a0e:f6c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60358 214988 Signature Algorithm: sha256WithRSAEncryption 58:bf:63:b3:c3:e2:d0:ab:90:c4:e1:dc:ae:62:91:53:ea:22: 73:dd:5d:1d:61:59:69:fe:7c:c7:74:73:a8:e3:bf:31:ab:3e: 7a:20:d6:7c:ed:83:d5:39:b3:8d:f1:0a:d5:02:40:cf:ac:87: 63:e8:ef:74:0a:02:40:aa:b2:c6:ab:fe:04:7b:70:67:80:b9: ff:9c:c6:d8:13:53:8a:4f:02:ad:2b:35:39:20:c7:12:10:e1: fc:24:e2:c6:51:04:08:79:b0:fc:75:ab:18:ef:71:13:3a:be: c5:21:0b:22:b6:e3:3d:3c:11:68:78:ce:34:66:62:74:18:d3: e9:67:68:fa:d3:f3:df:c7:71:13:77:86:43:f0:7b:8d:1c:46: bf:c5:71:60:ce:17:10:af:d0:c3:f6:33:02:bc:e1:39:df:44: 94:ee:e3:0a:a0:be:15:fb:79:7a:b6:0b:dd:51:f7:c7:7f:b0: c9:f3:29:cb:72:fc:1d:fd:d4:20:13:44:61:d0:d9:7b:59:e2: cc:6a:59:5a:6c:21:a7:6f:73:db:f7:02:7d:25:64:1d:22:6d: da:ee:bd:f6:14:09:47:a1:3a:0d:33:40:a9:b1:39:e5:a3:83: b8:97:d3:be:85:55:9f:e6:a1:1b:f3:ba:b2:ef:30:53:5f:66: 82:3f:8c:2a -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgISAZt5fiJuGw6DgPMOPkTySQhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDdkYzM1ZWJjZDg4ZGQwZTJhOGRiM2E1YTA4NjU0YmMzYmUwMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzzfXTOHPDJgN8qMNm7sMivN0d2q JwkXJK3owcGWi9FgY6TyYkqTXTPWGiqnQ/REZnUoOCxQOeSPjJUUI3VuN7LNCrsr qEWG1icMqMpyqC2p9L1xpqwAckNfwuZXQcLeXC13bl7iKgbAnwG+cb/8WeOa/Koj QYSJlRFbLI6DUhiHfX438blOM92pjWMKGW7yKIlbnRVHMuudIdlyqLpBjaXzRq6y 85vv44NwJrhzhE+c+SQwhAat6nuf7eEhh7s26+bhsK0DE2uTN8oX5Cib03xQlRJ+ kEtRgE7gnDFv1RRYoHglWpUvnjDuVnqUNGIc9ZRpOnAvXNdS+qkyBk6NIQIDAQAB o4ICujCCArYwHQYDVR0OBBYEFNB9w1682I3Q4qjbOloIZUvDvgJiMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzFjNzE4 ZC1lN2EwLTQwYWMtYTE4MS1jYmFhNDJhNjI3MjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMWM3MThk LWU3YTAtNDBhYy1hMTgxLWNiYWE0MmE2MjcyNy8xLzBIM0RYcnpZamREaXFOczZX Z2hsUzhPLUFtSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQDBSxIAwQCLZGMMA0EAgACMAcDBQMqDvbAMB8G CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDrxgIDA0fMMA0GCSqGSIb3DQEBCwUAA4IB AQBYv2Ozw+LQq5DE4dyuYpFT6iJz3V0dYVlp/nzHdHOo478xqz56INZ87YPVObON 8QrVAkDPrIdj6O90CgJAqrLGq/4Ee3BngLn/nMbYE1OKTwKtKzU5IMcSEOH8JOLG UQQIebD8dasY73ETOr7FIQsituM9PBFoeM40ZmJ0GNPpZ2j60/Pfx3ETd4ZD8HuN HEa/xXFgzhcQr9DD9jMCvOE530SU7uMKoL4V+3l6tgvdUffHf7DJ8ynLcvwd/dQg E0Rh0Nl7WeLMallabCGnb3Pb9wJ9JWQdIm3a7r32FAlHoToNM0CpsTnlo4O4l9O+ hVWf5qEb87qy7zBTX2aCP4wq -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:38 2026 by rpki-client