This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.cer (raw, json) Hash identifier: dAgQPXZEbvF08+QQ1eQUSIeHXHcgmZtkEtiI/HZ4Qrg= Subject key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7A5B9D0E3DA417277A9CEDDC059E8BA6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 16:19:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.49.56.0/22 IP: 185.203.124.0/22 IP: 2a0a:e6c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9d:0e:3d:a4:17:27:7a:9c:ed:dc:05:9e:8b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 16:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:b9:a7:32:48:d8:b4:3e:52:2a:c9:d6:51: 9d:a9:99:6f:c7:6f:83:a0:db:be:f6:18:c6:88:1c: e8:3d:1f:02:ba:b5:db:cf:3d:eb:32:87:eb:4c:3f: 91:d0:38:a2:af:22:ea:c5:2a:3f:2f:7f:c4:28:f2: 36:5a:10:b5:b2:44:89:58:51:4d:bb:9a:9b:b1:a1: b2:2a:5f:e4:0a:7e:e2:cb:5f:22:c4:19:51:c1:11: 95:ea:3b:15:1c:64:90:33:47:63:b5:e9:47:b3:5c: ce:00:85:51:39:af:6b:f7:d1:95:c9:f4:e0:20:17: 32:d6:fa:8d:10:f1:1d:75:d7:30:4e:2b:0a:61:91: 5a:2c:04:23:d1:de:23:e3:60:c7:e9:d4:6c:38:99: bb:72:d4:eb:df:34:2c:4d:30:29:7e:36:70:91:bf: b6:71:b5:fc:68:91:7c:b6:16:08:43:56:dc:24:e0: 2e:b8:86:dc:b1:55:2b:14:3b:1d:91:6a:b3:6c:4c: 1f:ea:53:52:ff:35:a5:7b:d7:b1:ae:e0:fc:49:42: c1:a6:02:d7:87:07:0d:5c:1c:d4:92:b1:9f:2f:d8: 5d:e3:87:22:86:67:11:79:27:57:48:01:10:8a:f7: 29:55:0b:40:62:51:4b:b4:44:47:0d:5e:55:a8:d2: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.56.0/22 185.203.124.0/22 IPv6: 2a0a:e6c0::/29 Signature Algorithm: sha256WithRSAEncryption 38:55:20:88:35:2e:48:08:5c:c1:04:5e:3e:67:f1:94:31:cd: b1:2b:fd:99:55:d4:57:ad:33:58:f1:1e:4b:05:42:4c:0c:a4: ad:18:ea:76:5e:30:32:78:0d:29:d2:d6:a8:aa:b8:0a:c9:75: 91:f1:c1:28:40:ef:54:0e:ed:f3:16:85:f5:b6:f9:b4:4a:53: 7d:8b:be:8c:9d:6b:ca:7d:34:2c:4e:0e:8f:59:99:3d:f4:73: 3a:74:da:3f:33:62:6c:d8:7a:f4:2e:48:6c:7b:23:77:ef:33: 53:dc:3f:a5:f7:b2:62:53:b8:06:8c:1b:e9:91:82:c0:c4:5d: 28:3c:2b:a6:89:9a:0b:be:e7:bc:c8:78:e9:ba:cc:39:2d:d9: 27:ce:e5:be:21:4d:36:88:cc:be:5b:65:9b:e7:56:d7:8c:cf: 48:c9:fd:f4:66:4e:1e:5f:e8:22:12:10:5b:68:47:35:2a:c9: 45:4e:cc:2c:7a:c2:9a:de:70:28:2e:a4:52:df:34:21:c7:49: a0:bf:86:00:91:dd:50:47:83:73:66:85:9e:6b:f7:08:69:c7: 6e:03:13:dd:eb:e2:3d:15:3f:aa:cb:43:e5:32:58:7a:b6:1c: 08:f5:ea:47:1c:9a:d9:5f:18:dd:de:fa:af:88:72:22:f8:3d: 97:2f:90:a3 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgISAZt6W50OPaQXJ3qc7dwFnoumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZThlNjBiYjExMTA4N2QwODAzZmMzZmNjNGFmMzI3YWE4NWMwYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdm5pzJI2LQ+UirJ1lGdqZlvx2+D oNu+9hjGiBzoPR8CurXbzz3rMofrTD+R0DiiryLqxSo/L3/EKPI2WhC1skSJWFFN u5qbsaGyKl/kCn7iy18ixBlRwRGV6jsVHGSQM0djtelHs1zOAIVROa9r99GVyfTg IBcy1vqNEPEdddcwTisKYZFaLAQj0d4j42DH6dRsOJm7ctTr3zQsTTApfjZwkb+2 cbX8aJF8thYIQ1bcJOAuuIbcsVUrFDsdkWqzbEwf6lNS/zWle9exruD8SULBpgLX hwcNXBzUkrGfL9hd44cihmcReSdXSAEQivcpVQtAYlFLtERHDV5VqNIqXwIDAQAB o4ICmTCCApUwHQYDVR0OBBYEFN6OYLsREIfQgD/D/MSvMnqoXAuBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzJjOTg4 My1mMTA4LTRmZWQtYjQxNi1hNmY1MzRjMzA3ZjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvMmM5ODgz LWYxMDgtNGZlZC1iNDE2LWE2ZjUzNGMzMDdmMS8xLzNvNWd1eEVRaDlDQVA4UDh4 Szh5ZXFoY0M0RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuTE4AwQCuct8MA0EAgACMAcDBQMqCubAMA0G CSqGSIb3DQEBCwUAA4IBAQA4VSCINS5ICFzBBF4+Z/GUMc2xK/2ZVdRXrTNY8R5L BUJMDKStGOp2XjAyeA0p0taoqrgKyXWR8cEoQO9UDu3zFoX1tvm0SlN9i76MnWvK fTQsTg6PWZk99HM6dNo/M2Js2Hr0LkhseyN37zNT3D+l97JiU7gGjBvpkYLAxF0o PCumiZoLvue8yHjpusw5LdknzuW+IU02iMy+W2Wb51bXjM9Iyf30Zk4eX+giEhBb aEc1KslFTswsesKa3nAoLqRS3zQhx0mgv4YAkd1QR4NzZoWea/cIacduAxPd6+I9 FT+qy0PlMlh6thwI9epHHJrZXxjd3vqviHIi+D2XL5Cj -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:24 2026 by rpki-client