This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R3faFXdoQj_LqSFzkux_SDs7lEI.cer File: R3faFXdoQj_LqSFzkux_SDs7lEI.cer (raw, json) Hash identifier: WADePhUaGBrMZHlz2Dw9G71+lnqRHAibrc8i3vNgxdY= Subject key identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F8326E866EDF6ED32B9CCDF147B5478 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:00 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 8832 IP: 2a00:1498::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:26:e8:66:ed:f6:ed:32:b9:cc:df:14:7b:54:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4777da157768423fcba9217392ec7f483b3b9442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e3:9f:88:7b:07:6e:71:03:3d:fd:91:ad:0f: a2:72:42:a6:9f:52:f4:f6:01:32:ee:fa:d9:d4:fe: 19:84:e4:22:d4:74:18:76:47:ef:f5:5b:3f:03:4d: 4e:72:0c:8a:6f:c3:3d:ab:59:40:2d:4f:b2:41:1e: 7d:8d:7c:b3:b1:17:3d:8d:79:50:84:8c:af:60:92: 7d:a0:a0:83:ca:1a:87:2d:61:1e:17:6b:17:3e:7a: 67:b5:ca:9c:89:5e:be:80:5b:82:38:56:12:86:2a: 7f:4e:6f:de:00:c0:03:0b:87:f0:0c:d2:e4:1a:e0: 44:cb:65:11:d6:fa:03:f0:95:11:7b:4f:a6:8c:e1: 7e:04:03:4b:c1:9c:78:2b:ec:0b:43:47:7d:f1:5d: ec:d3:8a:52:bd:e6:14:8e:15:05:a6:be:c6:8f:06: 9c:da:7d:9e:f8:c3:48:8b:51:07:88:f2:80:e4:22: 24:ec:2c:90:aa:51:df:4e:5d:1a:23:64:28:65:3b: a9:ba:27:95:92:ea:ee:a3:96:a7:40:af:ef:ba:91: c0:58:f2:1d:a1:7e:a0:21:15:80:b6:65:70:b6:01: 44:f8:0d:bd:08:11:d7:10:28:24:0e:e0:11:19:21: 34:25:5a:31:e7:be:fd:a9:9d:fe:de:ec:a0:55:b2: 59:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:77:DA:15:77:68:42:3F:CB:A9:21:73:92:EC:7F:48:3B:3B:94:42 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b21a38-db62-4438-ba9c-f57f86df4f16/1/R3faFXdoQj_LqSFzkux_SDs7lEI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1498::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8832 Signature Algorithm: sha256WithRSAEncryption 8f:1c:96:ba:46:e4:e0:91:64:37:fa:04:3d:b9:87:5d:aa:13: e4:d6:07:bf:ed:47:d5:ab:2b:f2:4f:43:6a:de:90:19:b4:39: 7a:63:23:ea:46:b0:53:9b:fa:06:02:f9:9f:8c:52:5f:ed:7e: 3a:1f:9e:63:91:84:5f:ee:3c:99:e0:5b:06:3e:8f:42:43:b3: f6:a4:23:86:52:13:e4:d7:aa:0b:7c:99:06:ec:1e:13:bb:29: 80:55:e8:3f:f6:d3:07:ac:9f:a1:13:99:e8:13:1e:10:58:7b: fd:bf:3e:5e:38:b5:f9:22:d4:88:2b:d8:44:22:9b:c8:1d:5f: ff:d6:7c:c6:b4:61:09:3d:3b:e2:19:14:75:94:1f:0c:0c:92: 36:50:f5:e5:67:32:78:69:a6:44:21:07:b7:fc:1b:92:2d:a0: 37:ea:14:3f:7e:76:c0:5b:0d:74:86:9c:29:14:0d:a4:21:41: b2:98:3b:44:56:f6:6e:f3:ff:a7:02:e4:b9:58:e5:48:86:83: 8b:8c:be:5c:86:57:80:c4:46:b9:f4:b1:1f:73:b1:0f:af:b4: 30:a6:42:8f:bc:65:a5:5b:44:33:85:d1:17:2d:3f:ee:36:b9: da:98:96:7d:d2:51:3e:42:02:f4:d1:8d:88:89:76:b7:96:97: 23:c3:03:bd -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZt/gyboZu327TK5zN8Ue1R4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Nzc3ZGExNTc3Njg0MjNmY2JhOTIxNzM5MmVjN2Y0ODNiM2I5NDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuOfiHsHbnEDPf2RrQ+ickKmn1L0 9gEy7vrZ1P4ZhOQi1HQYdkfv9Vs/A01OcgyKb8M9q1lALU+yQR59jXyzsRc9jXlQ hIyvYJJ9oKCDyhqHLWEeF2sXPnpntcqciV6+gFuCOFYShip/Tm/eAMADC4fwDNLk GuBEy2UR1voD8JURe0+mjOF+BANLwZx4K+wLQ0d98V3s04pSveYUjhUFpr7Gjwac 2n2e+MNIi1EHiPKA5CIk7CyQqlHfTl0aI2QoZTupuieVkuruo5anQK/vupHAWPId oX6gIRWAtmVwtgFE+A29CBHXECgkDuARGSE0JVox5779qZ3+3uygVbJZIwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFEd32hV3aEI/y6khc5Lsf0g7O5RCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzL2IyMWEz OC1kYjYyLTQ0MzgtYmE5Yy1mNTdmODZkZjRmMTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvYjIxYTM4 LWRiNjItNDQzOC1iYTljLWY1N2Y4NmRmNGYxNi8xL1IzZmFGWGRvUWpfTHFTRnpr dXhfU0RzN2xFSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgAUmDAZBggrBgEFBQcBCAEB/wQKMAigBjAE AgIigDANBgkqhkiG9w0BAQsFAAOCAQEAjxyWukbk4JFkN/oEPbmHXaoT5NYHv+1H 1asr8k9Dat6QGbQ5emMj6kawU5v6BgL5n4xSX+1+Oh+eY5GEX+48meBbBj6PQkOz 9qQjhlIT5NeqC3yZBuweE7spgFXoP/bTB6yfoROZ6BMeEFh7/b8+Xji1+SLUiCvY RCKbyB1f/9Z8xrRhCT074hkUdZQfDAySNlD15WcyeGmmRCEHt/wbki2gN+oUP352 wFsNdIacKRQNpCFBspg7RFb2bvP/pwLkuVjlSIaDi4y+XIZXgMRGufSxH3OxD6+0 MKZCj7xlpVtEM4XRFy0/7ja52piWfdJRPkIC9NGNiIl2t5aXI8MDvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:11 2026 by rpki-client