This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer File: 3Os5Sq4INtNDQfetMZSUdlq1awc.cer (raw, json) Hash identifier: CCujp1RiZmYNwp7fMfCZU7O2EFhtleZFLh0XheVDt40= Subject key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B4E1C805519D32FBEA856A11A9118 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:22 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 51105 IP: 79.171.222.0/23 IP: 152.89.164.0/22 IP: 2a0c:ab40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4e:1c:80:55:19:d3:2f:be:a8:56:a1:1a:91:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dceb394aae0836d34341f7ad319494765ab56b07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:e5:d4:8a:d0:43:be:9f:1b:d0:b6:37:fa: 61:8c:c3:bc:04:35:e7:5b:ac:6a:7f:82:4c:9c:16: 14:3c:8f:f9:f4:5d:9e:f4:e9:54:7f:b4:8f:14:64: 8b:f8:20:b9:e8:40:1c:65:56:ec:c5:21:2b:60:29: 0e:70:47:1a:f3:ae:9f:35:32:5e:9c:ce:a2:29:81: 94:27:b5:c5:3c:3c:b8:ff:c1:92:18:58:32:9f:d9: f2:95:47:c5:2b:a0:0a:b2:93:49:b7:27:f6:fa:01: f9:9c:26:37:41:70:bd:2d:aa:a8:63:b4:6c:ee:58: a8:68:12:ab:1d:05:4c:a2:29:e9:26:a5:52:bc:ea: 8d:84:ec:ce:cb:45:54:f8:2a:75:2b:07:10:fb:25: 7b:42:81:be:83:13:ac:c8:48:ba:f4:b9:b8:86:3e: 2f:ab:fe:6b:be:2b:64:01:9d:3f:f9:f5:0d:28:f2: 1d:d2:a8:86:9d:36:3d:af:04:79:6c:6e:e4:df:12: 05:92:60:c9:38:d7:92:37:bc:01:93:aa:00:1c:7e: ff:a5:4b:d0:92:85:3c:85:cd:b8:0c:9c:bf:f5:04: 1d:60:c7:fb:fd:4b:30:b5:a1:43:fb:3c:e6:6a:b6: bd:7f:29:ba:29:82:8a:d8:42:2f:60:4d:02:0c:4f: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.222.0/23 152.89.164.0/22 IPv6: 2a0c:ab40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 51105 Signature Algorithm: sha256WithRSAEncryption b0:8e:ea:ac:fd:b3:8c:c0:62:c3:b3:7f:15:36:41:bc:c8:ea: b7:67:6d:76:01:c4:cb:16:02:e4:93:77:1d:fe:5c:2a:7f:25: 36:25:71:33:11:09:b7:94:25:8d:fd:2e:db:2f:ed:ca:b2:82: 10:df:9c:c0:3c:06:09:ba:6a:a4:42:de:f4:d3:5b:a8:b6:3d: 9e:28:4c:0e:96:2d:52:79:d0:88:91:e8:ec:87:11:60:63:42: 69:bb:99:b9:6e:46:66:02:b1:a9:32:9d:93:b5:e4:fb:b5:60: cd:3b:69:cf:57:a4:8d:f6:ae:7d:b4:2d:b8:8b:53:2a:85:58: e3:d7:b0:22:06:07:bf:d1:48:5a:d1:74:83:80:8d:29:d1:90: 91:e0:5b:5e:72:83:10:fd:d0:af:ff:6d:24:d5:d4:fb:d2:cc: e0:2b:b0:b8:73:a4:07:a6:e2:ea:0c:67:6f:25:22:64:12:6c: ad:7e:bd:19:76:97:2d:15:ee:a8:c5:23:36:3b:16:82:6c:a3: 06:bc:cf:67:4f:0f:37:97:9c:72:82:3a:cf:c7:91:2d:2a:c6: 16:f0:85:8f:b8:0f:4f:0c:ee:92:31:f4:e4:b8:31:6c:d4:42: 83:3f:21:75:88:bb:3b:47:31:04:08:bf:ed:56:4f:3a:44:64: 9b:52:b1:f1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZt6W04cgFUZ0y++qFahGpEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkY2ViMzk0YWFlMDgzNmQzNDM0MWY3YWQzMTk0OTQ3NjVhYjU2YjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXbl1IrQQ76fG9C2N/phjMO8BDXn W6xqf4JMnBYUPI/59F2e9OlUf7SPFGSL+CC56EAcZVbsxSErYCkOcEca866fNTJe nM6iKYGUJ7XFPDy4/8GSGFgyn9nylUfFK6AKspNJtyf2+gH5nCY3QXC9LaqoY7Rs 7lioaBKrHQVMoinpJqVSvOqNhOzOy0VU+Cp1KwcQ+yV7QoG+gxOsyEi69Lm4hj4v q/5rvitkAZ0/+fUNKPId0qiGnTY9rwR5bG7k3xIFkmDJONeSN7wBk6oAHH7/pUvQ koU8hc24DJy/9QQdYMf7/UswtaFD+zzmara9fym6KYKK2EIvYE0CDE8TdQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNzrOUquCDbTQ0H3rTGUlHZatWsHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzBiMDY0 Zi1iMDFhLTQzNzEtYTQ0YS00MGM4NmIzMmViMjIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMGIwNjRm LWIwMWEtNDM3MS1hNDRhLTQwYzg2YjMyZWIyMi8xLzNPczVTcTRJTnRORFFmZXRN WlNVZGxxMWF3Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBT6veAwQCmFmkMA0EAgACMAcDBQMqDKtAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDHoTANBgkqhkiG9w0BAQsFAAOCAQEAsI7q rP2zjMBiw7N/FTZBvMjqt2dtdgHEyxYC5JN3Hf5cKn8lNiVxMxEJt5Qljf0u2y/t yrKCEN+cwDwGCbpqpELe9NNbqLY9nihMDpYtUnnQiJHo7IcRYGNCabuZuW5GZgKx qTKdk7Xk+7VgzTtpz1ekjfaufbQtuItTKoVY49ewIgYHv9FIWtF0g4CNKdGQkeBb XnKDEP3Qr/9tJNXU+9LM4CuwuHOkB6bi6gxnbyUiZBJsrX69GXaXLRXuqMUjNjsW gmyjBrzPZ08PN5eccoI6z8eRLSrGFvCFj7gPTwzukjH05LgxbNRCgz8hdYi7O0cx BAi/7VZPOkRkm1Kx8Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:08:32 2026 by rpki-client