This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer File: 3dp8TGqYXEZeZr_eTD4RvQz-CP8.cer (raw, json) Hash identifier: FLjwH4U0KHtf5ff7lol6pEfJXVX8BUrfNq0DCH1P7y8= Subject key identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B76F1FAD5401304CDA9CD970889AF37FA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 00:25:28 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 205848 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:f1:fa:d5:40:13:04:cd:a9:cd:97:08:89:af:37:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 00:25:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ddda7c4c6a985c465e66bfde4c3e11bd0cfe08ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:e0:35:41:58:7b:0e:a4:92:cc:ab:11:4c: 6f:ac:94:1a:62:7e:87:86:b8:d7:3a:7c:01:30:f4: 6a:13:ea:38:80:69:94:a2:9b:60:83:5f:55:0c:21: 65:93:02:a2:ff:53:58:34:67:72:28:e1:2e:05:a9: 8b:33:23:91:bc:ca:e5:22:b1:b6:ca:4a:bc:41:18: 34:28:14:c3:97:cc:8d:08:12:af:43:66:f1:8a:5d: 89:a4:9f:03:c3:76:d8:4b:ef:63:22:74:8a:9a:ab: 5b:25:b6:47:e8:b3:40:71:ea:b3:ae:63:23:e8:47: df:63:18:df:39:73:15:93:7b:a8:18:a6:64:8e:15: e0:9e:ea:6b:4f:a5:4e:e4:ad:fe:3f:b3:b6:ec:8b: 12:96:1e:7b:84:3f:a1:a2:e4:1c:05:01:cd:e5:d7: 66:8b:bb:49:0f:e6:2a:01:21:df:fb:e5:56:f0:7e: 11:fa:4c:b2:86:68:20:35:c5:a8:0c:6f:8e:ec:c6: 95:40:60:7d:ac:e1:43:af:22:3b:35:c1:a9:73:59: 67:26:e9:f2:00:3a:da:69:3e:ed:97:f3:c9:95:c4: 04:6a:64:ed:8b:d7:e0:f7:ad:73:77:10:ba:5e:1e: 2f:5e:4e:d8:67:a9:8e:53:ac:1b:dc:68:e7:36:e8: a4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DA:7C:4C:6A:98:5C:46:5E:66:BF:DE:4C:3E:11:BD:0C:FE:08:FF X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/0/DDDA7C4C6A985C465E66BFDE4C3E11BD0CFE08FF.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 205848 Signature Algorithm: sha256WithRSAEncryption 85:9c:8f:42:77:cf:7f:e3:02:03:c2:66:d1:ab:ed:e5:ba:34: 0c:44:1e:58:0e:22:14:95:a1:50:6f:70:84:30:7a:be:a4:58: 3b:14:b4:21:50:71:0c:3c:bb:05:45:c9:fb:c0:16:7b:27:9a: ff:21:65:b9:8b:7f:1e:36:5f:9c:40:43:cb:5f:f5:de:42:4c: e8:a2:b7:d4:0f:79:0b:b0:f0:d7:82:ab:39:85:60:d0:b7:f4: ea:02:bb:1d:a3:fa:3d:cf:a6:ff:92:a8:ff:e5:51:a5:e1:94: 54:b7:65:f4:a3:f4:e4:6c:9c:0b:56:3c:c7:ff:0a:13:08:6f: 74:d7:ce:b7:b0:d4:22:17:0e:65:a6:91:cd:94:55:16:cf:ac: 06:64:8f:00:6b:6d:67:a6:ea:25:69:ae:0e:b3:28:6f:09:73: 75:d0:fb:ee:46:78:da:50:28:a9:34:54:84:03:31:c2:99:fb: 2e:6f:79:23:e1:d6:1d:55:84:0a:f9:27:10:84:52:df:93:23: bd:a5:45:4a:16:56:56:9d:65:5e:16:e1:31:91:ca:32:75:65: 48:07:f3:92:a3:07:d9:52:67:fd:8c:26:40:62:02:95:f5:c5: b2:e6:16:20:4c:81:5b:b4:dc:09:a9:f8:e1:3d:a6:9d:ed:1f: 33:7d:bb:d6 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZt28frVQBMEzanNlwiJrzf6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDAyNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZGRhN2M0YzZhOTg1YzQ2NWU2NmJmZGU0YzNlMTFiZDBjZmUwOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFjgNUFYew6kksyrEUxvrJQaYn6H hrjXOnwBMPRqE+o4gGmUoptgg19VDCFlkwKi/1NYNGdyKOEuBamLMyORvMrlIrG2 ykq8QRg0KBTDl8yNCBKvQ2bxil2JpJ8Dw3bYS+9jInSKmqtbJbZH6LNAceqzrmMj 6EffYxjfOXMVk3uoGKZkjhXgnuprT6VO5K3+P7O27IsSlh57hD+houQcBQHN5ddm i7tJD+YqASHf++VW8H4R+kyyhmggNcWoDG+O7MaVQGB9rOFDryI7NcGpc1lnJuny ADraaT7tl/PJlcQEamTti9fg961zdxC6Xh4vXk7YZ6mOU6wb3GjnNuikLwIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFN3afExqmFxGXma/3kw+Eb0M/gj/MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2E1OWU4 YzJmLWU1OTAtNGE0Zi04NDYzLTgzMTdjMmExYzA0OC8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5 ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzAvREREQTdDNEM2QTk4 NUM0NjVFNjZCRkRFNEMzRTExQkQwQ0ZFMDhGRi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDJBgw DQYJKoZIhvcNAQELBQADggEBAIWcj0J3z3/jAgPCZtGr7eW6NAxEHlgOIhSVoVBv cIQwer6kWDsUtCFQcQw8uwVFyfvAFnsnmv8hZbmLfx42X5xAQ8tf9d5CTOiit9QP eQuw8NeCqzmFYNC39OoCux2j+j3Ppv+SqP/lUaXhlFS3ZfSj9ORsnAtWPMf/ChMI b3TXzrew1CIXDmWmkc2UVRbPrAZkjwBrbWem6iVprg6zKG8Jc3XQ++5GeNpQKKk0 VIQDMcKZ+y5veSPh1h1VhAr5JxCEUt+TI72lRUoWVladZV4W4TGRyjJ1ZUgH85Kj B9lSZ/2MJkBiApX1xbLmFiBMgVu03Amp+OE9pp3tHzN9u9Y= -----END CERTIFICATE-----Generated at Mon Jan 26 03:03:28 2026 by rpki-client