This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.cer (raw, json) Hash identifier: oFf5hWKUJtss6QDwePhzQ2awT+OEjwVTVdysi6MoWxg= Subject key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7CEE1DDA7C1608517BFD316A7065B8AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 04:18:58 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 208980 IP: 2001:678:af8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1d:da:7c:16:08:51:7b:fd:31:6a:70:65:b8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7e:07:1f:e0:1c:ec:f4:bc:29:6f:91:9e:f9: 62:7d:a8:04:7f:3e:fa:73:66:ef:c5:7a:d6:af:df: b4:8b:c1:f1:90:3b:a2:27:b7:e1:94:3d:b5:52:3a: ee:4b:24:5d:f8:e4:4b:52:25:96:04:c5:5c:fa:02: dc:0f:92:bb:ec:af:17:b9:11:52:08:15:ca:79:3b: e3:46:b6:a7:95:13:9e:01:5f:f4:d5:ac:e3:c8:6f: d1:f8:30:dd:86:ba:92:93:52:72:92:08:04:33:4d: 9a:14:1c:d0:43:20:82:98:a7:62:6b:09:26:45:f7: 21:7d:8e:15:75:fc:40:73:bf:e4:0a:c7:b9:58:f7: d8:e4:bd:d6:96:f0:57:c3:ee:51:b0:2a:df:f6:7b: a0:b5:8f:64:68:80:16:44:41:9b:93:1a:01:b2:93: 8e:f0:61:53:97:96:6e:59:78:cb:22:a5:3d:a3:c3: 55:03:3d:db:e7:fa:7c:5d:6c:de:40:f6:e8:6d:7d: 58:3a:f8:77:6b:77:89:75:b9:47:0e:f4:8b:3e:4b: 52:f3:f9:37:99:e4:95:cf:70:f4:61:e9:bc:4c:4a: df:2b:eb:93:7a:9e:0f:9b:9f:c8:a1:9a:17:71:dc: 27:5f:9c:79:1f:f8:22:e4:06:3d:44:f9:26:05:50: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:af8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208980 Signature Algorithm: sha256WithRSAEncryption 0a:92:cf:0f:64:0a:d0:80:68:4b:2e:9b:71:f7:68:22:63:13: c7:f9:3d:fc:81:cd:10:02:83:03:f2:b3:33:a1:7e:b4:7f:71: 12:98:6f:1f:f7:04:e3:4c:2b:da:fa:3e:54:5c:2e:35:7f:36: f8:f9:6a:9b:4d:3f:a7:05:65:7b:7d:11:62:f0:ca:8b:b3:89: 3a:5c:8b:57:1f:63:14:2c:63:86:23:75:04:54:34:8a:a3:95: e3:e8:03:5c:2b:86:31:6d:bd:ba:f7:2d:1e:4d:23:8a:66:03: 58:80:77:da:af:bd:1e:18:23:c7:15:76:9c:71:81:a1:56:1d: 65:15:0b:35:f1:a9:d7:9b:f9:8f:09:81:cc:c9:b1:41:55:4b: 35:0e:8e:e2:21:53:70:85:d7:3f:49:2d:17:73:97:5a:52:65: 62:44:4a:1f:9a:1a:0a:37:9d:3c:8e:ff:36:81:af:6d:cb:de: 16:27:2b:97:e7:94:c0:9b:35:fd:de:2b:be:5f:b9:a6:d5:51: d9:dd:1d:64:20:8a:f4:aa:b8:e4:0e:91:c4:20:64:65:b6:39: 7e:52:66:6f:df:d5:ad:09:cf:5b:8b:f9:16:21:c4:46:35:0b: 99:52:ed:25:7b:9b:f2:ca:15:b1:ff:89:6c:6f:7a:9a:16:fe: fe:28:44:c3 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZt87h3afBYIUXv9MWpwZbisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDZlNzBlNDM2ZTFjMDI1YWEwZTBlM2ZiYTg1MmI5OGFkM2I4NDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH4HH+Ac7PS8KW+RnvlifagEfz76 c2bvxXrWr9+0i8HxkDuiJ7fhlD21UjruSyRd+ORLUiWWBMVc+gLcD5K77K8XuRFS CBXKeTvjRranlROeAV/01azjyG/R+DDdhrqSk1JykggEM02aFBzQQyCCmKdiawkm RfchfY4VdfxAc7/kCse5WPfY5L3WlvBXw+5RsCrf9nugtY9kaIAWREGbkxoBspOO 8GFTl5ZuWXjLIqU9o8NVAz3b5/p8XWzeQPbobX1YOvh3a3eJdblHDvSLPktS8/k3 meSVz3D0Yem8TErfK+uTep4Pm5/IoZoXcdwnX5x5H/gi5AY9RPkmBVADCwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFN1ucOQ24cAlqg4OP7qFK5itO4QQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I4L2I2YWZi Yi01YTZiLTQzNDUtOTBhZS03YjYxYTY5NWQxMzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvYjZhZmJi LTVhNmItNDM0NS05MGFlLTdiNjFhNjk1ZDEzMi8xLzNXNXc1RGJod0NXcURnNF91 b1VybUswN2hCQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAr4MBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMwVDANBgkqhkiG9w0BAQsFAAOCAQEACpLPD2QK0IBoSy6bcfdoImMTx/k9 /IHNEAKDA/KzM6F+tH9xEphvH/cE40wr2vo+VFwuNX82+Plqm00/pwVle30RYvDK i7OJOlyLVx9jFCxjhiN1BFQ0iqOV4+gDXCuGMW29uvctHk0jimYDWIB32q+9Hhgj xxV2nHGBoVYdZRULNfGp15v5jwmBzMmxQVVLNQ6O4iFTcIXXP0ktF3OXWlJlYkRK H5oaCjedPI7/NoGvbcveFicrl+eUwJs1/d4rvl+5ptVR2d0dZCCK9Kq45A6RxCBk ZbY5flJmb9/VrQnPW4v5FiHERjULmVLtJXub8soVsf+JbG96mhb+/ihEww== -----END CERTIFICATE-----Generated at Mon Feb 9 15:08:15 2026 by rpki-client