This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer File: 3SoSF2c-sRypijUTlSBAfJdo38M.cer (raw, json) Hash identifier: BZcj7PKUdoIuyhTWxQRX2Kqa869pQZufE4+HPbX5JRg= Subject key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DC9D79FA17744D26338D31D69A2255F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a0b:29c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:d7:9f:a1:77:44:d2:63:38:d3:1d:69:a2:25:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd2a1217673eb11ca98a35139520407c9768dfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:e3:a3:94:34:98:5c:94:70:f7:90:2d:c8: ac:87:42:6f:69:d0:60:49:21:29:ae:79:dd:2e:59: b5:be:2a:21:a6:18:a1:9e:c7:3c:06:0c:f5:17:79: 3b:6f:c2:ec:d2:72:2e:d0:74:e6:6b:13:cc:11:3c: 43:89:1b:2f:51:9d:0d:d9:52:aa:0e:a5:fc:f2:62: 7c:a1:e7:a6:cd:a1:38:12:7f:d5:96:1d:2b:00:93: 28:8c:e4:9f:80:0d:9e:98:c7:07:bf:80:6e:8e:08: dc:57:9d:70:7c:94:c5:b1:76:ce:9d:6d:14:ef:6b: 46:df:e2:27:fd:79:0e:55:d9:90:b4:53:d0:59:5e: 84:61:12:aa:4a:e6:ce:fe:6c:44:6c:47:b4:69:8b: 39:8d:56:de:49:22:d1:16:36:25:b0:d0:a6:b2:91: a4:df:3e:ed:e7:a8:05:7c:fa:6d:90:17:d4:8c:46: 5e:ce:d5:51:9f:64:a5:01:44:d6:46:c7:4d:cc:b6: c6:d3:22:4f:50:10:b5:ff:1d:f4:78:89:0f:ee:50: a3:85:29:9b:ee:89:21:28:5b:ef:d8:3b:46:d8:41: e1:b9:90:46:d5:80:c9:d6:fe:b8:d1:92:e7:8d:62: 36:68:09:16:87:b9:1f:c5:86:a5:4a:59:40:90:9b: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:29c0::/29 Signature Algorithm: sha256WithRSAEncryption 2e:b9:24:6c:2d:73:35:b4:16:31:33:fa:e5:32:14:72:e6:99: 6e:d6:10:e3:af:ce:37:04:27:c6:6a:af:c0:d2:60:57:f9:96: 4e:8a:94:2b:14:31:6e:34:fd:1a:26:c3:49:33:49:f7:72:fb: 27:05:2f:dc:8e:f7:8e:fc:2e:a8:1a:54:af:3f:83:d3:0e:7b: c6:2a:36:e8:a0:83:c8:4d:06:d8:b8:48:b1:09:01:4f:f9:89: d1:16:a6:38:3a:ee:15:95:fe:b2:78:6e:aa:72:71:55:8a:95: dd:27:fa:28:b7:21:b9:d0:de:2f:cd:9f:08:70:21:3f:40:69: 38:4d:4b:8e:f6:d3:6e:35:41:c7:49:86:96:77:95:bc:ac:e3: 33:4a:ca:cd:ea:ca:62:9c:92:72:3a:22:be:ec:0f:67:eb:0c: 04:6a:dd:b5:7b:c7:67:bf:b9:bc:ec:4b:59:79:f7:0f:b1:91: 0d:ed:30:bc:ba:74:0b:ac:0d:57:6b:44:47:0d:ae:ac:2f:8c: 03:cf:f0:49:50:8b:9e:0d:4b:a3:e7:b3:1a:33:d4:bc:3a:84: 90:3c:c9:20:54:e6:b2:8c:02:b3:e6:4d:b7:24:9c:22:4e:3c: 3f:ca:cf:48:94:c4:01:c4:9d:1f:85:e5:c2:0b:cc:21:eb:46: cc:00:76:36 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt9ydefoXdE0mM40x1poiVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDJhMTIxNzY3M2ViMTFjYTk4YTM1MTM5NTIwNDA3Yzk3NjhkZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD7jo5Q0mFyUcPeQLcish0JvadBg SSEprnndLlm1viohphihnsc8Bgz1F3k7b8Ls0nIu0HTmaxPMETxDiRsvUZ0N2VKq DqX88mJ8oeemzaE4En/Vlh0rAJMojOSfgA2emMcHv4BujgjcV51wfJTFsXbOnW0U 72tG3+In/XkOVdmQtFPQWV6EYRKqSubO/mxEbEe0aYs5jVbeSSLRFjYlsNCmspGk 3z7t56gFfPptkBfUjEZeztVRn2SlAUTWRsdNzLbG0yJPUBC1/x30eIkP7lCjhSmb 7okhKFvv2DtG2EHhuZBG1YDJ1v640ZLnjWI2aAkWh7kfxYalSllAkJv6TwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFN0qEhdnPrEcqYo1E5UgQHyXaN/DMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzRhOTNj Ni0xNzBhLTRhYTItOGRmYy02Yjk2NDE4MjNjYTQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvNGE5M2M2 LTE3MGEtNGFhMi04ZGZjLTZiOTY0MTgyM2NhNC8xLzNTb1NGMmMtc1J5cGlqVVRs U0JBZkpkbzM4TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgspwDANBgkqhkiG9w0BAQsFAAOCAQEALrkk bC1zNbQWMTP65TIUcuaZbtYQ46/ONwQnxmqvwNJgV/mWToqUKxQxbjT9GibDSTNJ 93L7JwUv3I73jvwuqBpUrz+D0w57xio26KCDyE0G2LhIsQkBT/mJ0RamODruFZX+ snhuqnJxVYqV3Sf6KLchudDeL82fCHAhP0BpOE1LjvbTbjVBx0mGlneVvKzjM0rK zerKYpyScjoivuwPZ+sMBGrdtXvHZ7+5vOxLWXn3D7GRDe0wvLp0C6wNV2tERw2u rC+MA8/wSVCLng1Lo+ezGjPUvDqEkDzJIFTmsowCs+ZNtyScIk48P8rPSJTEAcSd H4XlwgvMIetGzAB2Ng== -----END CERTIFICATE-----Generated at Mon Jan 26 01:18:11 2026 by rpki-client