This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3tRskpaCjJwCVTCqaEFgmt8FaaA.cer File: 3tRskpaCjJwCVTCqaEFgmt8FaaA.cer (raw, json) Hash identifier: qawtkCtR4H9OjuPgKMv5N1DyrxM8CLWlH6F4MQjJBOM= Subject key identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B797ED9C07B921183D7D6363BE3664436 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 12:18:35 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.3.39.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d9:c0:7b:92:11:83:d7:d6:36:3b:e3:66:44:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ded46c9296828c9c025530aa6841609adf0569a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:54:27:f1:11:ab:4b:02:b0:33:e8:96:08:ad: e7:55:75:3b:27:bb:9e:ed:5e:28:79:a0:eb:31:41: 2a:10:b8:f1:29:fa:03:99:11:99:a5:75:bd:09:60: 34:be:2f:31:69:a9:5a:9d:ca:13:38:60:77:56:61: b6:79:f3:d9:64:eb:b9:b1:76:bf:b2:98:7e:8a:a1: 60:c3:9e:3e:12:fa:ec:42:2f:d5:df:e2:68:55:95: dc:7f:1f:cc:13:9f:0d:5b:3f:44:a5:ec:87:2d:9b: e6:35:c5:0a:6c:df:6c:c3:5d:92:88:2c:37:37:87: ba:01:5b:99:41:4a:77:d4:45:81:73:54:3b:74:42: 99:ff:2c:c1:9c:f6:2e:30:46:d3:15:52:71:64:c3: c7:56:e9:36:ab:ea:f8:10:ec:be:e7:cc:dd:94:6e: 5f:57:6e:ce:c2:aa:68:7d:fc:3f:6d:0c:13:39:32: c7:e9:6a:28:e8:dc:a9:a0:e2:59:27:ac:84:fc:f8: 68:86:d0:0c:21:40:40:16:46:ec:8e:d2:cb:f2:38: 73:b2:d9:7b:d9:25:b5:83:7a:fd:43:17:db:e6:1d: e9:40:49:40:aa:3d:2a:7a:95:8e:cf:bd:8a:69:3c: 10:a5:26:9c:91:06:8c:4c:e3:6c:df:44:14:00:9b: 8a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D4:6C:92:96:82:8C:9C:02:55:30:AA:68:41:60:9A:DF:05:69:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/936f93-0922-4f5d-8e3a-a0007bd5ace7/1/3tRskpaCjJwCVTCqaEFgmt8FaaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.39.0/24 Signature Algorithm: sha256WithRSAEncryption 55:42:66:d3:55:e2:5d:de:03:3c:a3:83:d4:03:17:44:14:29: 59:1b:d4:2f:17:dc:1c:7c:d2:63:29:99:57:7a:8c:72:34:6d: 69:ed:8d:11:62:01:34:65:78:6e:29:46:b0:ce:0f:c9:42:8d: 52:9a:99:8e:c5:5c:93:87:88:eb:f4:e1:2c:dc:91:fd:83:c9: 49:70:03:ba:d8:ca:f2:7d:6d:77:92:d2:18:c7:60:f7:c4:02: 8e:fa:62:81:dd:74:24:2f:17:22:e8:9a:56:0b:9b:9b:6b:0a: eb:e6:e3:b9:27:95:0d:1e:23:8e:49:81:33:cb:63:db:1d:9b: 39:ee:4f:a8:d0:01:e8:f5:73:e4:bb:18:71:9a:ea:69:9a:91: 53:89:26:f4:74:1f:4e:1a:b8:bc:01:53:95:31:20:98:0e:b6: ba:52:dc:d2:e0:58:4d:a1:09:47:3f:0d:74:d3:75:2a:e3:49: 55:41:8f:0a:69:ac:9e:a8:42:fc:25:54:79:0f:5a:e9:47:56: d5:07:6a:e0:c7:86:f9:a4:be:47:96:07:a3:92:bb:d7:9d:42: db:5b:d2:09:e2:98:a4:29:90:e4:b7:37:b1:ae:2a:dc:63:11: c6:f9:cc:89:2a:86:cb:55:35:fa:47:50:10:f6:e4:17:af:a5: c0:0b:aa:8f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ftnAe5IRg9fWNjvjZkQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWQ0NmM5Mjk2ODI4YzljMDI1NTMwYWE2ODQxNjA5YWRmMDU2OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFQn8RGrSwKwM+iWCK3nVXU7J7ue 7V4oeaDrMUEqELjxKfoDmRGZpXW9CWA0vi8xaalancoTOGB3VmG2efPZZOu5sXa/ sph+iqFgw54+EvrsQi/V3+JoVZXcfx/ME58NWz9EpeyHLZvmNcUKbN9sw12SiCw3 N4e6AVuZQUp31EWBc1Q7dEKZ/yzBnPYuMEbTFVJxZMPHVuk2q+r4EOy+58zdlG5f V27Owqpoffw/bQwTOTLH6Woo6NypoOJZJ6yE/PhohtAMIUBAFkbsjtLL8jhzstl7 2SW1g3r9Qxfb5h3pQElAqj0qepWOz72KaTwQpSackQaMTONs30QUAJuKEwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFN7UbJKWgoycAlUwqmhBYJrfBWmgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBkLzkzNmY5 My0wOTIyLTRmNWQtOGUzYS1hMDAwN2JkNWFjZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGQvOTM2Zjkz LTA5MjItNGY1ZC04ZTNhLWEwMDA3YmQ1YWNlNy8xLzN0UnNrcGFDakp3Q1ZUQ3Fh RUZnbXQ4RmFhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwQMnMA0GCSqGSIb3DQEBCwUAA4IBAQBVQmbT VeJd3gM8o4PUAxdEFClZG9QvF9wcfNJjKZlXeoxyNG1p7Y0RYgE0ZXhuKUawzg/J Qo1SmpmOxVyTh4jr9OEs3JH9g8lJcAO62MryfW13ktIYx2D3xAKO+mKB3XQkLxci 6JpWC5ubawrr5uO5J5UNHiOOSYEzy2PbHZs57k+o0AHo9XPkuxhxmuppmpFTiSb0 dB9OGri8AVOVMSCYDra6UtzS4FhNoQlHPw1003Uq40lVQY8KaayeqEL8JVR5D1rp R1bVB2rgx4b5pL5HlgejkrvXnULbW9IJ4pikKZDktzexrircYxHG+cyJKobLVTX6 R1AQ9uQXr6XAC6qP -----END CERTIFICATE-----Generated at Mon Feb 9 16:49:38 2026 by rpki-client