This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer File: 3ohLjkYvPsE6QCTWaamdlK8FzbI.cer (raw, json) Hash identifier: hC3xNpOVl9NYOC/LWE6Dgch0CPh+cASqNqW+HDXZYaA= Subject key identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CED6695847885C9944E4D38A9A3366D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:11 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 216384 IP: 185.55.82.0/24 IP: 2a13:c1c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:66:95:84:78:85:c9:94:4e:4d:38:a9:a3:36:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de884b8e462f3ec13a4024d669a99d94af05cdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:31:3e:d5:4f:2e:d9:cb:74:94:5d:f3:ff: e0:60:1c:12:b2:54:e8:47:10:7e:95:a0:7d:bc:c1: de:40:92:b0:6b:5b:ec:0a:94:63:be:cb:49:3d:85: 36:64:36:34:ef:53:46:c8:d1:62:65:08:77:5c:e8: 90:c1:e5:c0:15:e0:c3:76:61:a1:13:20:72:1c:d3: 2f:60:e9:7d:ee:47:d8:1d:ff:c4:41:30:79:cc:8d: 9b:64:d1:44:e4:f8:b9:b9:ec:b1:69:0c:bc:74:9e: a7:d7:8a:4f:bc:fc:74:fe:de:99:55:99:ab:a4:c8: bb:46:e5:32:bf:cb:bb:5a:14:0d:b6:8f:3b:ad:a1: 73:14:47:05:22:b8:78:47:3b:ec:89:ed:45:0e:e3: 3e:08:c1:24:26:d3:d1:e8:39:ed:af:1f:12:ca:cf: 46:3f:87:77:8b:ff:d4:6b:d0:eb:32:8b:01:41:d7: b2:34:45:d5:06:59:87:ef:48:d5:8a:3b:70:c9:44: 53:64:bf:b7:45:01:0b:38:73:2f:ea:e6:c8:ff:f7: db:dc:b0:82:49:b7:99:aa:5b:53:84:c5:dd:67:83: 78:14:f8:16:1b:3d:4a:77:5d:87:f7:a9:6a:e8:92: d5:2d:6a:2d:c3:31:e7:9f:f0:d6:22:90:66:c7:09: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.82.0/24 IPv6: 2a13:c1c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216384 Signature Algorithm: sha256WithRSAEncryption 47:f6:1f:7f:e3:b6:78:98:32:25:15:8b:8e:7f:cc:6a:3a:29: 9a:60:dd:17:1d:0c:2a:d1:fb:3d:34:7e:b0:7a:d7:5d:c2:9c: fd:2c:be:7c:3a:0c:b9:2e:54:a6:ee:51:af:37:ed:fe:96:dd: ad:65:d5:e1:ce:d9:01:b3:88:2d:c3:1b:fa:ab:9e:ad:76:0a: 50:ec:c2:6c:d9:e7:9a:08:47:ab:ea:23:17:f9:3b:ad:b6:70: 79:72:e5:ad:bd:fb:75:f4:c0:b1:f0:82:5b:40:77:76:c9:c6: 12:34:3b:0a:c4:4b:6e:c4:2d:0b:0b:b1:82:da:89:eb:c7:fa: bb:b9:19:32:df:3d:4f:8e:da:41:aa:70:f3:b7:f6:de:2a:1b: 93:78:3d:b8:9b:2d:bb:27:80:68:0a:eb:f9:42:ad:5d:85:eb: 22:88:ff:9b:81:64:7a:90:a0:5d:73:51:9a:d7:92:28:ad:df: b3:5b:80:1a:70:7f:2b:c6:98:06:4c:4d:e0:1f:6c:71:7e:ff: bd:0b:37:fb:a5:e1:92:27:fb:5d:10:bb:f6:2e:95:8f:ac:01: 8b:85:76:46:5c:bd:99:c9:1b:70:ed:25:ed:b0:3c:66:ff:90: 0b:2e:fb:5c:5f:54:97:b1:41:19:7d:c0:77:6f:18:a1:8b:1e: ea:79:38:86 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZt87WaVhHiFyZROTTipozZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTg4NGI4ZTQ2MmYzZWMxM2E0MDI0ZDY2OWE5OWQ5NGFmMDVjZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlQxPtVPLtnLdJRd8//gYBwSslTo RxB+laB9vMHeQJKwa1vsCpRjvstJPYU2ZDY071NGyNFiZQh3XOiQweXAFeDDdmGh EyByHNMvYOl97kfYHf/EQTB5zI2bZNFE5Pi5ueyxaQy8dJ6n14pPvPx0/t6ZVZmr pMi7RuUyv8u7WhQNto87raFzFEcFIrh4Rzvsie1FDuM+CMEkJtPR6Dntrx8Sys9G P4d3i//Ua9DrMosBQdeyNEXVBlmH70jVijtwyURTZL+3RQELOHMv6ubI//fb3LCC SbeZqltThMXdZ4N4FPgWGz1Kd12H96lq6JLVLWotwzHnn/DWIpBmxwlFWwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFN6IS45GLz7BOkAk1mmpnZSvBc2yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzQ1ZGY1 Ni1kZDMyLTQzM2MtYjQ0ZS00YWY3MDQwMmIyNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNDVkZjU2 LWRkMzItNDMzYy1iNDRlLTRhZjcwNDAyYjI3MC8xLzNvaExqa1l2UHNFNlFDVFdh YW1kbEs4RnpiSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAuTdSMA0EAgACMAcDBQMqE8HAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNNQDANBgkqhkiG9w0BAQsFAAOCAQEAR/Yff+O2eJgy JRWLjn/MajopmmDdFx0MKtH7PTR+sHrXXcKc/Sy+fDoMuS5Upu5Rrzft/pbdrWXV 4c7ZAbOILcMb+querXYKUOzCbNnnmghHq+ojF/k7rbZweXLlrb37dfTAsfCCW0B3 dsnGEjQ7CsRLbsQtCwuxgtqJ68f6u7kZMt89T47aQapw87f23iobk3g9uJstuyeA aArr+UKtXYXrIoj/m4FkepCgXXNRmteSKK3fs1uAGnB/K8aYBkxN4B9scX7/vQs3 +6Xhkif7XRC79i6Vj6wBi4V2Rly9mckbcO0l7bA8Zv+QCy77XF9Ul7FBGX3Ad28Y oYse6nk4hg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:10:18 2026 by rpki-client