This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer File: 3g2da2l8ochlcMJWhi5oWLR5nIU.cer (raw, json) Hash identifier: H7nqykAUKTIANSpNWj5W41mwupCAORmlemLK56bsWPE= Subject key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7DCA6C10190747DB7B9CF8B96A9E424F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 08:19:36 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 5.34.168.0/21 IP: 95.142.112.0/20 IP: 159.242.224.0/20 IP: 185.28.24.0/22 IP: 185.54.140.0/22 IP: 185.54.228.0/22 IP: 194.99.28.0/22 IP: 2a0d:8ec0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6c:10:19:07:47:db:7b:9c:f8:b9:6a:9e:42:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 08:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:20:82:a7:b6:ae:6a:53:f7:7a:bd:92:25: 9a:3d:03:37:10:36:27:a7:0e:a0:32:3b:b0:d6:5a: ac:10:3f:40:ff:a0:67:ac:6b:e1:03:ea:bd:4d:a0: 40:9b:7e:a1:90:a6:43:94:eb:00:3c:5b:14:0b:c5: 26:01:4a:31:05:cc:d2:56:30:3c:47:64:0d:19:66: 89:d4:17:80:4a:28:8f:2b:e9:ab:b6:85:f1:e9:11: c4:0c:6e:4f:a1:a1:8e:a9:54:79:f3:9a:8f:58:68: f3:bf:03:bc:c2:cd:22:b1:aa:2b:49:67:e0:4a:c3: 26:4a:5b:eb:3d:91:8b:35:ff:76:48:72:f5:f1:1c: 1c:c6:63:9f:bd:22:ff:f8:fa:05:94:69:b7:76:e9: e9:31:0e:a1:aa:73:1f:14:b7:45:a6:4b:12:87:4c: 61:22:bb:0f:09:41:a9:34:3f:1f:9e:56:45:48:a3: 22:1d:17:dc:90:34:59:6c:0e:24:c2:7f:ad:47:18: 95:65:dc:5e:d9:06:a2:6b:c7:15:6b:0c:52:27:cb: f6:af:a0:93:09:84:b8:5b:fc:ce:49:e2:c0:0b:c4: 4a:2b:99:27:b2:6b:84:57:09:b0:c1:c2:4f:11:4c: 64:6f:a5:f4:f9:ff:50:f4:d5:cc:ee:88:49:d8:7f: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.168.0/21 95.142.112.0/20 159.242.224.0/20 185.28.24.0/22 185.54.140.0/22 185.54.228.0/22 194.99.28.0/22 IPv6: 2a0d:8ec0::/29 Signature Algorithm: sha256WithRSAEncryption 4e:8b:f7:ba:d4:bd:3f:0a:19:57:90:08:2a:86:3c:37:f6:c0: af:d1:01:32:f3:35:1b:f0:f3:ea:0f:01:c8:d5:ea:43:ba:e8: be:11:c8:5c:b8:6d:0f:c6:a1:17:14:81:78:99:65:d8:54:1c: 53:a6:05:a0:09:5e:67:cd:df:71:53:d0:25:c5:57:71:99:a2: 48:8d:9d:08:77:2b:50:08:fd:bc:22:a5:af:4b:7a:27:d3:da: 47:2c:04:5d:b2:5e:5c:6c:ae:d5:6e:7b:70:da:de:db:85:23: 75:f9:21:49:8e:01:0f:b4:b9:ad:c0:de:05:74:0a:29:34:67: c1:63:99:e1:36:6b:93:23:67:fe:3b:28:67:7e:ec:76:52:48: df:a6:2a:b2:a7:97:f4:12:bf:a3:d7:43:cd:f0:29:d2:b2:96: 5e:58:10:64:69:30:0b:4f:3b:62:ae:ed:58:e9:75:4f:5d:d3: f4:a2:08:e2:1f:45:54:4c:df:dd:26:83:b6:7a:37:e3:96:ee: 65:d2:19:c1:1b:b4:02:89:e0:3c:83:6a:46:fa:14:12:47:e7: 93:5e:6c:ce:7b:b2:86:b3:70:32:fd:7c:e3:fc:dc:b8:d7:5b: 18:e4:65:cb:0e:2c:90:92:89:18:a9:2f:47:72:46:3b:e3:a8: 5e:f7:d9:3f -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgISAZt9ymwQGQdH23uc+LlqnkJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTBkOWQ2YjY5N2NhMWM4NjU3MGMyNTY4NjJlNjg1OGI0Nzk5Yzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJgggqe2rmpT93q9kiWaPQM3EDYn pw6gMjuw1lqsED9A/6BnrGvhA+q9TaBAm36hkKZDlOsAPFsUC8UmAUoxBczSVjA8 R2QNGWaJ1BeASiiPK+mrtoXx6RHEDG5PoaGOqVR585qPWGjzvwO8ws0isaorSWfg SsMmSlvrPZGLNf92SHL18RwcxmOfvSL/+PoFlGm3dunpMQ6hqnMfFLdFpksSh0xh IrsPCUGpND8fnlZFSKMiHRfckDRZbA4kwn+tRxiVZdxe2Qaia8cVawxSJ8v2r6CT CYS4W/zOSeLAC8RKK5knsmuEVwmwwcJPEUxkb6X0+f9Q9NXM7ohJ2H/V4wIDAQAB o4ICtzCCArMwHQYDVR0OBBYEFN4NnWtpfKHIZXDCVoYuaFi0eZyFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMzLzY4ZGMz Yy1kZjJlLTQ0NjEtYjdhNi0wMWNiZmMwZTk0ZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvNjhkYzNj LWRmMmUtNDQ2MS1iN2E2LTAxY2JmYzBlOTRlNy8xLzNnMmRhMmw4b2NobGNNSldo aTVvV0xSNW5JVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF BwEHAQH/BEMwQTAwBAIAATAqAwQDBSKoAwQEX45wAwQEn/LgAwQCuRwYAwQCuTaM AwQCuTbkAwQCwmMcMA0EAgACMAcDBQMqDY7AMA0GCSqGSIb3DQEBCwUAA4IBAQBO i/e61L0/ChlXkAgqhjw39sCv0QEy8zUb8PPqDwHI1epDuui+EchcuG0PxqEXFIF4 mWXYVBxTpgWgCV5nzd9xU9AlxVdxmaJIjZ0IdytQCP28IqWvS3on09pHLARdsl5c bK7Vbntw2t7bhSN1+SFJjgEPtLmtwN4FdAopNGfBY5nhNmuTI2f+Oyhnfux2Ukjf piqyp5f0Er+j10PN8CnSspZeWBBkaTALTztiru1Y6XVPXdP0ogjiH0VUTN/dJoO2 ejfjlu5l0hnBG7QCieA8g2pG+hQSR+eTXmzOe7KGs3Ay/Xzj/Ny411sY5GXLDiyQ kokYqS9HckY746he99k/ -----END CERTIFICATE-----Generated at Sun Jan 25 12:11:09 2026 by rpki-client