This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3OSkxIQPyaX9IUphmqiHtbdiS_U.cer File: 3OSkxIQPyaX9IUphmqiHtbdiS_U.cer (raw, json) Hash identifier: 78mGx30jzH6hVbkFfygNtm7LM3OWnWRSOs8zQr5YppM= Subject key identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEDBE4B707D755FBBB07842801906CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:34 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.3.168.0/22 IP: 2a02:5a40::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:be:4b:70:7d:75:5f:bb:b0:78:42:80:19:06:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dce4a4c4840fc9a5fd214a619aa887b5b7624bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:c3:05:f4:8b:15:de:d9:b1:6f:12:02:44: 1b:7c:ab:f9:c3:98:f4:45:f8:b2:2a:1b:45:77:66: 5c:29:25:f5:bb:1a:b1:77:30:10:30:05:d8:93:91: d2:31:bd:fc:78:8a:b8:92:e2:da:88:19:5f:90:7a: 4f:1a:97:37:27:94:5a:16:97:e5:18:fc:eb:f4:0b: ca:68:d5:a6:ab:bd:5d:ee:5d:dd:40:3d:8f:50:7e: 3b:a2:22:e9:1d:26:48:39:67:8a:39:cc:03:c2:38: 57:55:91:3a:84:1e:7c:2e:8d:24:75:1c:44:40:a8: 0a:7a:ef:3a:2d:b0:42:de:2b:85:3f:15:3a:8f:5d: 4b:4a:39:b0:2c:c3:58:4c:70:48:98:6e:84:82:17: 0d:f9:57:f6:d7:a2:b0:20:c7:9b:bd:1f:20:dd:02: ee:09:2f:48:98:a5:00:2b:53:09:fa:92:b4:9d:51: ec:50:73:b3:75:a3:04:ee:ad:cf:b1:00:74:b0:87: 30:d6:30:f7:11:ac:26:62:d6:55:b7:43:1e:f1:c6: 8b:c7:14:f8:c0:7a:b0:d1:e7:64:6c:c0:04:14:fd: e2:40:70:d7:ed:df:bc:2b:c8:8b:3f:83:08:f5:ea: a7:46:48:40:5a:63:56:b4:6d:13:5f:dd:ad:9e:e8: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E4:A4:C4:84:0F:C9:A5:FD:21:4A:61:9A:A8:87:B5:B7:62:4B:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0140a8-01c0-4e36-bd01-2b7ae722011f/1/3OSkxIQPyaX9IUphmqiHtbdiS_U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.3.168.0/22 IPv6: 2a02:5a40::/32 Signature Algorithm: sha256WithRSAEncryption 3b:b5:c6:ed:25:c8:52:2f:ca:8a:37:14:80:b7:13:50:df:60: aa:13:59:cd:13:9d:d7:e1:a6:13:62:b9:a7:cc:31:b2:09:b5: f9:3d:dc:0c:6b:41:bf:bb:35:e1:d2:7d:1b:b7:cc:12:77:75: e5:32:c6:ae:cb:12:57:03:53:4f:af:c0:e7:bf:b5:9e:a3:b3: 42:b2:96:e3:7d:eb:95:0d:bc:b1:63:67:ad:4c:ab:f3:3a:19: ec:e5:82:00:52:ac:c4:80:9e:88:6b:d3:e8:56:90:e4:21:ad: 73:89:ee:13:36:34:19:48:ba:83:23:50:29:d0:bd:61:7a:44: 03:99:f8:d7:40:97:a1:2b:b7:30:c2:5f:91:3d:95:af:25:9f: fd:a3:e5:ba:e9:83:0e:f8:e8:9f:97:54:ea:fc:7a:ad:72:39: 71:89:55:23:05:f4:af:0b:bf:a7:08:ac:85:d6:82:38:2c:01: a1:43:cc:82:b6:6c:c5:6e:d7:a8:1d:5e:37:78:73:cd:20:03: 3b:7d:33:99:64:cb:20:72:05:31:f9:3a:9b:f1:29:16:02:5b: d5:e9:86:85:41:b5:9f:e0:21:38:ef:32:84:4f:98:3c:1b:0a: e9:2f:8b:22:ab:5f:b9:22:3c:7e:4a:82:da:8b:5e:ee:c0:00: c7:8b:fb:45 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt87b5LcH11X7uweEKAGQbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2U0YTRjNDg0MGZjOWE1ZmQyMTRhNjE5YWE4ODdiNWI3NjI0YmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx3DBfSLFd7ZsW8SAkQbfKv5w5j0 RfiyKhtFd2ZcKSX1uxqxdzAQMAXYk5HSMb38eIq4kuLaiBlfkHpPGpc3J5RaFpfl GPzr9AvKaNWmq71d7l3dQD2PUH47oiLpHSZIOWeKOcwDwjhXVZE6hB58Lo0kdRxE QKgKeu86LbBC3iuFPxU6j11LSjmwLMNYTHBImG6EghcN+Vf216KwIMebvR8g3QLu CS9ImKUAK1MJ+pK0nVHsUHOzdaME7q3PsQB0sIcw1jD3EawmYtZVt0Me8caLxxT4 wHqw0edkbMAEFP3iQHDX7d+8K8iLP4MI9eqnRkhAWmNWtG0TX92tnuhfFwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNzkpMSED8ml/SFKYZqoh7W3Ykv1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzAxNDBh OC0wMWMwLTRlMzYtYmQwMS0yYjdhZTcyMjAxMWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvMDE0MGE4 LTAxYzAtNGUzNi1iZDAxLTJiN2FlNzIyMDExZi8xLzNPU2t4SVFQeWFYOUlVcGht cWlIdGJkaVNfVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCuQOoMA0EAgACMAcDBQAqAlpAMA0GCSqGSIb3 DQEBCwUAA4IBAQA7tcbtJchSL8qKNxSAtxNQ32CqE1nNE53X4aYTYrmnzDGyCbX5 PdwMa0G/uzXh0n0bt8wSd3XlMsauyxJXA1NPr8Dnv7Weo7NCspbjfeuVDbyxY2et TKvzOhns5YIAUqzEgJ6Ia9PoVpDkIa1zie4TNjQZSLqDI1Ap0L1hekQDmfjXQJeh K7cwwl+RPZWvJZ/9o+W66YMO+Oifl1Tq/HqtcjlxiVUjBfSvC7+nCKyF1oI4LAGh Q8yCtmzFbteoHV43eHPNIAM7fTOZZMsgcgUx+Tqb8SkWAlvV6YaFQbWf4CE47zKE T5g8GwrpL4siq1+5Ijx+SoLai17uwADHi/tF -----END CERTIFICATE-----Generated at Mon Jan 26 06:22:24 2026 by rpki-client