This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer File: 3ImcKGZO6BlKZASORsYMbl8ZDFM.cer (raw, json) Hash identifier: 0ivFePT7zq8wQNm+svtQ6seAoJ+i8Pk2csPKBRueqk8= Subject key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B783510C2353F465928001568046209E8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 13173 IP: 185.70.156.0/22 IP: 213.167.64.0/19 IP: 2a00:f180::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:10:c2:35:3f:46:59:28:00:15:68:04:62:09:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc899c28664ee8194a64048e46c60c6e5f190c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:9e:00:98:c2:b5:60:f9:69:45:10:e9:6c: e7:84:05:cf:67:a5:42:3b:53:29:d5:39:3e:bb:09: 3d:30:4e:e2:a4:d9:8c:02:86:a1:9a:87:1b:b4:ae: 43:6f:58:96:d3:da:b3:37:d1:8a:3c:1b:98:22:66: ea:7d:d7:d0:7a:a1:fe:4c:ce:fd:a7:d1:fc:f4:a3: 2c:03:00:49:dd:1e:63:ab:8c:03:5b:64:2a:7d:ef: 25:55:f5:af:ec:a3:34:e9:25:a6:45:c5:71:ac:c2: 3b:a2:96:86:b2:ce:0d:25:8e:56:7a:24:8a:bd:18: 96:dd:2a:5c:4e:69:78:ac:bd:fa:a6:3f:f2:8a:d9: 37:79:ac:ac:07:b0:21:3d:b9:72:8a:f8:cb:90:1a: c4:cf:50:1c:3b:5e:59:d2:5d:19:ea:be:ac:b2:a3: 19:bd:d2:70:d4:d3:e5:c4:e5:c3:7f:78:19:c8:ef: e0:08:9a:9f:d0:59:5e:29:55:f6:6e:1d:b5:83:c2: 12:38:86:d7:59:ed:6d:29:3a:2d:dd:f1:ed:1d:4e: 62:c3:dd:4b:1f:02:6c:5a:3e:b1:07:92:ac:d8:53: 33:f6:e1:52:d2:83:06:24:70:c9:d9:32:57:83:62: 23:ae:18:f8:5c:d6:ba:bd:39:c2:62:09:32:34:68: bb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.156.0/22 213.167.64.0/19 IPv6: 2a00:f180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13173 Signature Algorithm: sha256WithRSAEncryption ab:27:63:8b:31:1c:3a:b9:c0:fe:01:e5:90:9d:91:bf:74:b3: 45:9b:6d:14:14:25:3f:04:1f:b7:88:57:df:04:6c:49:e2:1a: ba:95:4d:b5:6c:16:34:2d:28:ca:9f:78:b2:cf:11:7f:51:82: a9:31:54:15:72:77:ec:e1:83:72:8b:a9:4f:28:b7:00:a9:e6: 2e:83:0a:0c:1c:72:8b:92:8c:86:fd:eb:4c:8f:61:e0:22:ec: 84:bc:0a:a3:de:8b:db:95:29:69:69:db:31:8a:ab:8e:0f:8d: c1:9e:03:7d:df:25:82:62:9e:e1:23:01:82:90:38:a0:bb:bd: 4a:12:df:1f:bb:67:b8:92:a4:07:c1:52:5e:b7:92:91:fb:47: df:7e:88:4a:c9:ca:b5:40:8a:fb:d2:45:46:9e:d4:5d:61:04: 6c:b6:06:e6:93:99:75:e2:86:65:69:24:9d:b4:1a:82:3a:c6: e2:54:83:3f:59:e2:b0:f8:dc:b7:16:d0:60:b8:68:25:ff:75: 1c:0c:3f:0a:3f:c1:86:62:99:0c:fe:9b:3e:15:61:94:e3:58: 0a:2b:04:49:23:56:90:48:51:3d:39:2b:f1:72:96:98:60:94: 24:30:08:f0:b4:b7:3f:59:34:25:73:d2:93:4e:0c:70:5b:e7: 19:b4:67:af -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZt4NRDCNT9GWSgAFWgEYgnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzg5OWMyODY2NGVlODE5NGE2NDA0OGU0NmM2MGM2ZTVmMTkwYzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshqeAJjCtWD5aUUQ6WznhAXPZ6VC O1Mp1Tk+uwk9ME7ipNmMAoahmocbtK5Db1iW09qzN9GKPBuYImbqfdfQeqH+TM79 p9H89KMsAwBJ3R5jq4wDW2Qqfe8lVfWv7KM06SWmRcVxrMI7opaGss4NJY5WeiSK vRiW3SpcTml4rL36pj/yitk3eaysB7AhPblyivjLkBrEz1AcO15Z0l0Z6r6ssqMZ vdJw1NPlxOXDf3gZyO/gCJqf0FleKVX2bh21g8ISOIbXWe1tKTot3fHtHU5iw91L HwJsWj6xB5Ks2FMz9uFS0oMGJHDJ2TJXg2Ijrhj4XNa6vTnCYgkyNGi7OwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFNyJnChmTugZSmQEjkbGDG5fGQxTMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzU2ZDZh OC0wNzUyLTRjYmQtODg0NS01MmZlMTA1MTMxMjkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNTZkNmE4 LTA3NTItNGNiZC04ODQ1LTUyZmUxMDUxMzEyOS8xLzNJbWNLR1pPNkJsS1pBU09S c1lNYmw4WkRGTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuUacAwQF1adAMA0EAgACMAcDBQAqAPGAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjN1MA0GCSqGSIb3DQEBCwUAA4IBAQCrJ2OL MRw6ucD+AeWQnZG/dLNFm20UFCU/BB+3iFffBGxJ4hq6lU21bBY0LSjKn3iyzxF/ UYKpMVQVcnfs4YNyi6lPKLcAqeYugwoMHHKLkoyG/etMj2HgIuyEvAqj3ovblSlp adsxiquOD43BngN93yWCYp7hIwGCkDigu71KEt8fu2e4kqQHwVJet5KR+0fffohK ycq1QIr70kVGntRdYQRstgbmk5l14oZlaSSdtBqCOsbiVIM/WeKw+Ny3FtBguGgl /3UcDD8KP8GGYpkM/ps+FWGU41gKKwRJI1aQSFE9OSvxcpaYYJQkMAjwtLc/WTQl c9KTTgxwW+cZtGev -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:48 2026 by rpki-client