This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer File: m3RNp58FMac61vS68IN-k-toAbE.cer (raw, json) Hash identifier: 0hvEoApbIeae6IlY+lBJQFi4zyp6ah16SHTW9OE5ln4= Subject key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A9AB37E7B43309F43C4CD71BCB8571270 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 19 Nov 2025 06:00:45 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 2a0a:d680::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:b3:7e:7b:43:30:9f:43:c4:cd:71:bc:b8:57:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 19 06:00:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:26:04:0e:d9:03:cd:20:82:94:b1:c6:68:c2: 47:c2:d2:b7:a8:e4:7b:83:96:37:5e:2a:b9:fd:96: ea:51:4f:a9:cb:3b:d5:50:51:37:18:02:98:6b:4f: 3d:fb:93:b1:7f:3d:ac:a1:0b:fe:91:67:ae:31:8a: d5:67:5c:1f:87:a4:2d:c0:d2:45:70:c8:76:72:e9: 2a:02:5c:c3:0b:f2:bf:a9:8a:6e:7a:13:37:53:6f: b4:68:db:6f:84:01:47:81:d2:27:2d:bf:df:34:9e: 49:62:2d:74:87:58:fc:48:b5:9d:e6:5a:fd:8b:1e: 99:2a:25:33:22:52:c7:00:8d:2d:ba:74:93:55:5a: 48:b9:da:a0:01:65:9e:27:28:74:1f:7a:57:a3:df: 8a:a3:eb:f4:f5:57:63:b4:5e:9d:18:a4:3a:df:a6: 39:8a:98:ed:b4:63:f3:3a:10:5e:8a:cd:6f:a3:23: 18:5b:88:1e:14:26:83:01:93:e5:31:b8:9e:6f:da: 6c:e9:fe:65:64:54:7f:fd:98:c9:23:90:a6:bb:26: 65:e5:97:85:ff:9e:83:43:1d:cf:6a:fe:c1:f5:1b: 3f:58:52:2d:18:ae:63:5a:37:6d:61:5b:0d:74:03: 03:29:ab:7f:ac:1f:5b:58:56:52:86:bf:2a:95:e2: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d680::/29 Signature Algorithm: sha256WithRSAEncryption 96:b7:f5:98:b3:29:58:e4:66:be:e1:30:b4:65:a1:ec:73:60: aa:f6:1c:0d:9a:a2:a7:99:b9:74:09:aa:ed:35:5c:8d:85:80: 07:99:91:16:69:a6:a9:fa:74:0a:0d:bf:d8:17:f9:9a:bd:6b: f3:e4:fe:cc:fe:0e:52:fb:7d:db:59:d3:e9:8f:6c:74:d2:aa: 1e:0d:e5:4b:f1:ee:e5:30:c6:4e:ae:ba:1a:10:46:de:c3:ae: 32:19:38:d3:85:d3:e5:1b:eb:21:14:8b:48:43:0e:48:25:bb: c9:b4:7c:a4:0e:70:e2:a7:9b:14:05:21:8d:ba:ee:8f:69:83: 45:8c:d7:71:e0:10:3a:5a:55:4d:0b:e0:f1:72:a6:9e:c2:f9: 39:9e:f4:d6:3c:b9:9b:05:f3:c3:3d:f4:d5:a3:cb:4e:06:d5: e5:78:6c:4a:9e:b5:e2:43:01:61:45:2d:39:8b:27:a6:84:f0: 96:98:5a:5d:b4:38:0b:6a:2c:5c:44:41:cd:f2:a6:a8:6a:8e: 15:e2:77:5c:3e:50:22:78:c3:7d:5f:50:3f:e1:27:7b:d5:34: 95:45:be:d5:ff:df:9f:57:bb:40:d4:a8:1c:ed:ea:41:82:c2: d5:5d:fd:07:3d:c7:0d:ef:7f:ea:02:89:85:e7:23:3f:4d:cc: c2:7f:a7:9d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZqas357QzCfQ8TNcby4VxJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE5MDYwMDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc0NGRhNzlmMDUzMWE3M2FkNmY0YmFmMDgzN2U5M2ViNjgwMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CYEDtkDzSCClLHGaMJHwtK3qOR7 g5Y3Xiq5/ZbqUU+pyzvVUFE3GAKYa089+5Oxfz2soQv+kWeuMYrVZ1wfh6QtwNJF cMh2cukqAlzDC/K/qYpuehM3U2+0aNtvhAFHgdInLb/fNJ5JYi10h1j8SLWd5lr9 ix6ZKiUzIlLHAI0tunSTVVpIudqgAWWeJyh0H3pXo9+Ko+v09VdjtF6dGKQ636Y5 ipjttGPzOhBeis1voyMYW4geFCaDAZPlMbieb9ps6f5lZFR//ZjJI5CmuyZl5ZeF /56DQx3Pav7B9Rs/WFItGK5jWjdtYVsNdAMDKat/rB9bWFZShr8qleJH5wIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFJt0TaefBTGnOtb0uvCDfpPraAGxMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzNiMTc0 Mi0zMDc1LTRjYzktOGU4ZS05MmFiODBlMmVmZDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvM2IxNzQy LTMwNzUtNGNjOS04ZThlLTkyYWI4MGUyZWZkNS8xL20zUk5wNThGTWFjNjF2UzY4 SU4tay10b0FiRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgrWgDANBgkqhkiG9w0BAQsFAAOCAQEAlrf1 mLMpWORmvuEwtGWh7HNgqvYcDZqip5m5dAmq7TVcjYWAB5mRFmmmqfp0Cg2/2Bf5 mr1r8+T+zP4OUvt921nT6Y9sdNKqHg3lS/Hu5TDGTq66GhBG3sOuMhk404XT5Rvr IRSLSEMOSCW7ybR8pA5w4qebFAUhjbruj2mDRYzXceAQOlpVTQvg8XKmnsL5OZ70 1jy5mwXzwz301aPLTgbV5XhsSp614kMBYUUtOYsnpoTwlphaXbQ4C2osXERBzfKm qGqOFeJ3XD5QInjDfV9QP+Ene9U0lUW+1f/fn1e7QNSoHO3qQYLC1V39Bz3HDe9/ 6gKJhecjP03Mwn+nnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:19 2025 by rpki-client