This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer File: tr3oeUsKDYj5KWf1CE5MOBmWE6A.cer (raw, json) Hash identifier: iNvz6LNkSCkeKXX65RBsgLgX0bX0JEERmzMq3e3sj8Y= Subject key identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7AC869EBD9E77D810E4F7ABE9D294582 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 18:18:33 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2a0d:2280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:69:eb:d9:e7:7d:81:0e:4f:7a:be:9d:29:45:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 18:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6bde8794b0a0d88f92967f5084e4c38199613a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8f:07:80:50:09:49:fc:1e:04:56:53:46:59: 83:8e:c2:2d:62:95:8b:81:a9:ff:c9:dc:82:ba:fb: 9e:f3:04:ef:dd:c5:4b:d9:5f:0a:da:50:45:fb:64: d7:17:f0:94:d8:23:67:da:a8:b9:a4:df:3b:2e:80: 60:2b:a3:52:cb:6b:ee:e8:40:ac:d9:10:96:5c:ab: c7:b1:07:4b:0e:34:27:a5:0f:52:03:de:25:49:3e: 37:49:cd:0c:27:92:4d:44:74:a9:55:de:0b:cf:94: fd:94:a6:92:27:6d:1a:91:bd:44:8c:bf:a8:48:ee: 64:73:32:da:0e:0b:d2:c2:7d:14:b0:de:c3:c3:a5: 3c:0c:8d:1a:32:9a:f6:fc:ff:08:3d:45:ba:8e:9c: e8:da:90:d1:c2:fb:73:1e:85:71:d1:d4:bf:cc:3a: 3e:72:d3:1c:0a:23:93:c8:27:bb:a7:ff:d8:6e:ea: 77:a7:47:69:f3:fc:2a:63:22:d9:f0:29:3e:7e:f2: ab:43:47:6b:a8:02:f8:5a:c0:06:55:53:0b:e6:21: 50:04:44:2d:dc:6e:5c:74:8f:2a:09:e8:1e:2d:f0: 0a:74:67:22:ac:db:1b:1a:50:ac:33:9b:c1:01:5e: 1e:68:f7:ad:39:d5:d2:83:08:07:21:e1:0f:6b:34: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BD:E8:79:4B:0A:0D:88:F9:29:67:F5:08:4E:4C:38:19:96:13:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/tr3oeUsKDYj5KWf1CE5MOBmWE6A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:2280::/29 Signature Algorithm: sha256WithRSAEncryption 3e:56:e6:ae:a9:2d:76:2f:e7:21:4e:81:a7:97:31:da:e0:5c: 04:74:f3:47:fd:5b:a3:15:ac:92:c2:f7:d2:26:3b:80:89:4d: dd:f9:7f:d2:61:31:15:af:fd:5e:ca:c5:8f:62:f4:52:c9:af: 02:12:fb:a2:b9:eb:53:d1:2b:a2:08:34:03:73:aa:3d:6d:ba: 6e:76:4b:be:11:24:90:8a:95:13:67:73:cc:66:9f:b4:97:9a: 50:be:cc:4c:41:f0:b7:98:de:83:a4:36:6e:1d:56:ad:4e:84: e8:bd:05:2d:a0:05:d0:01:a0:d8:23:0d:2f:36:f0:ed:06:12: 6b:46:a9:cf:61:c3:6b:f6:05:d3:76:a8:14:ad:d6:f8:9c:2b: 84:fb:50:bc:a6:65:e0:43:b9:77:2f:4a:e0:5a:77:f7:e8:63: bb:54:b0:42:47:d6:42:a6:9d:9e:96:13:2d:ad:0e:fb:70:9f: 39:30:2e:fb:68:21:28:f0:d0:d7:e1:0f:8d:5d:42:96:21:16: bf:96:76:b7:83:6a:18:57:a5:42:ab:2c:fa:5d:cc:bf:a4:63: 6f:7a:1a:c6:0d:f4:de:66:a3:d9:90:ed:2d:65:9e:11:4e:96: 22:8b:a9:a8:6e:88:57:17:90:f1:43:9d:73:d0:80:28:56:a6: f5:af:d1:7d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZt6yGnr2ed9gQ5Per6dKUWCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNmJkZTg3OTRiMGEwZDg4ZjkyOTY3ZjUwODRlNGMzODE5OTYxM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA448HgFAJSfweBFZTRlmDjsItYpWL gan/ydyCuvue8wTv3cVL2V8K2lBF+2TXF/CU2CNn2qi5pN87LoBgK6NSy2vu6ECs 2RCWXKvHsQdLDjQnpQ9SA94lST43Sc0MJ5JNRHSpVd4Lz5T9lKaSJ20akb1EjL+o SO5kczLaDgvSwn0UsN7Dw6U8DI0aMpr2/P8IPUW6jpzo2pDRwvtzHoVx0dS/zDo+ ctMcCiOTyCe7p//Ybup3p0dp8/wqYyLZ8Ck+fvKrQ0drqAL4WsAGVVML5iFQBEQt 3G5cdI8qCegeLfAKdGcirNsbGlCsM5vBAV4eaPetOdXSgwgHIeEPazThwwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFLa96HlLCg2I+Sln9QhOTDgZlhOgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZlLzk4YWEw Yi1kOGIzLTQxMDktOGY4Yi0yMGU1OWNmOTI2ODYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUvOThhYTBi LWQ4YjMtNDEwOS04ZjhiLTIwZTU5Y2Y5MjY4Ni8xL3RyM29lVXNLRFlqNUtXZjFD RTVNT0JtV0U2QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKg0igDANBgkqhkiG9w0BAQsFAAOCAQEAPlbm rqktdi/nIU6Bp5cx2uBcBHTzR/1boxWsksL30iY7gIlN3fl/0mExFa/9XsrFj2L0 UsmvAhL7ornrU9Erogg0A3OqPW26bnZLvhEkkIqVE2dzzGaftJeaUL7MTEHwt5je g6Q2bh1WrU6E6L0FLaAF0AGg2CMNLzbw7QYSa0apz2HDa/YF03aoFK3W+JwrhPtQ vKZl4EO5dy9K4Fp39+hju1SwQkfWQqadnpYTLa0O+3CfOTAu+2ghKPDQ1+EPjV1C liEWv5Z2t4NqGFelQqss+l3Mv6Rjb3oaxg303maj2ZDtLWWeEU6WIoupqG6IVxeQ 8UOdc9CAKFam9a/RfQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:37 2026 by rpki-client