This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer File: 3svvNSysca1brg6LHAIkbjtlAlA.cer (raw, json) Hash identifier: 1gQKiTHZFN32AmOQGtrSyY6RS2tY1AsNutgKOLhhwKk= Subject key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78A2F0D02A1E4DCB45BC3ED1C7DB3D20 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 08:18:23 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 2001:67c:6d0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f0:d0:2a:1e:4d:cb:45:bc:3e:d1:c7:db:3d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=decbef352cac71ad5bae0e8b1c02246e3b650250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:ff:4e:af:b2:72:78:a2:40:7a:1c:d3:be: df:e1:ef:33:d3:07:55:83:e8:9f:64:6d:2d:44:ca: 5e:1d:7c:46:92:e1:fa:b0:0c:92:9d:cf:0d:f3:25: f9:26:63:e6:0c:21:4c:1a:59:c7:04:d7:4f:92:c7: 04:a4:a0:08:9f:9e:07:80:a4:f9:f0:a2:df:ea:ea: 94:72:66:3c:d4:3b:3d:7e:84:64:2f:ce:8d:10:dd: 48:c0:b6:f5:cf:c5:e7:00:5e:7d:81:57:95:a3:73: 88:91:e5:f7:e7:f5:bf:4d:5c:6e:9d:29:61:59:81: 9d:a6:f1:40:ae:80:1a:46:3c:46:0f:96:bd:53:2a: 3f:cb:84:62:11:bc:91:78:cd:e2:15:db:3b:40:81: ed:20:af:c1:10:b0:24:ec:93:13:2c:45:c0:ff:2a: 96:dd:d6:c4:22:bf:7d:4e:cb:54:99:e7:10:0e:be: ee:aa:ca:1b:92:10:af:0c:dc:5e:00:92:d9:53:56: 06:e2:49:bd:24:a0:51:b0:f2:79:5d:ed:2d:20:ff: 24:79:82:e4:dd:70:d1:a6:5a:65:ae:a0:0e:1a:c5: 9b:18:aa:a6:19:65:0a:43:1e:cf:38:3b:a5:7c:a8: 29:a1:59:56:cf:90:9e:82:0d:62:ac:a3:75:e4:4e: c4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:6d0::/48 Signature Algorithm: sha256WithRSAEncryption 7e:97:8d:33:e3:3a:f1:31:1a:f7:48:7e:fb:c3:f7:2b:9f:11: ce:7f:d5:9e:1a:e2:45:a7:4e:e6:18:6f:cc:ca:45:92:83:83: 0d:82:83:5f:a7:8c:1a:70:90:d8:85:63:e0:e7:6a:5f:5c:c8: 81:38:e8:fc:20:7c:4b:96:91:d5:4d:c2:3e:97:eb:5e:5a:4e: 01:72:c9:63:a6:9e:25:ec:32:e4:8e:d2:d7:3a:d3:8b:87:d8: 17:a9:32:d2:94:9d:01:cb:25:cd:97:36:ef:9d:65:6d:f2:02: 3f:3b:31:f7:f8:e7:21:2f:27:86:fe:8d:5b:17:b7:09:76:2e: b5:ac:0b:0d:ad:b8:9f:1c:2e:e3:36:1f:fc:d8:56:be:1f:22: c1:c2:33:7d:88:f8:67:bd:02:d9:c1:dd:3e:30:f3:a9:02:19: c5:7e:63:98:00:c2:33:55:0f:9a:4c:34:e0:1b:7f:87:49:bc: 4a:3c:82:02:63:c5:af:35:c1:2e:64:60:13:fd:87:bd:07:95: 80:70:a9:57:32:30:6e:26:2c:db:fd:28:4c:52:06:ec:78:dd: 7b:9b:af:bc:a5:da:a7:da:58:b1:48:3b:cb:c0:16:36:13:ea: cb:1d:7a:d3:ee:93:05:91:4a:79:f8:96:81:52:7e:e6:97:6b: 7a:ba:84:a7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZt4ovDQKh5Ny0W8PtHH2z0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWNiZWYzNTJjYWM3MWFkNWJhZTBlOGIxYzAyMjQ2ZTNiNjUwMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrb/Tq+ycniiQHoc077f4e8z0wdV g+ifZG0tRMpeHXxGkuH6sAySnc8N8yX5JmPmDCFMGlnHBNdPkscEpKAIn54HgKT5 8KLf6uqUcmY81Ds9foRkL86NEN1IwLb1z8XnAF59gVeVo3OIkeX35/W/TVxunSlh WYGdpvFAroAaRjxGD5a9Uyo/y4RiEbyReM3iFds7QIHtIK/BELAk7JMTLEXA/yqW 3dbEIr99TstUmecQDr7uqsobkhCvDNxeAJLZU1YG4km9JKBRsPJ5Xe0tIP8keYLk 3XDRplplrqAOGsWbGKqmGWUKQx7PODulfKgpoVlWz5Cegg1irKN15E7EtwIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFN7L7zUsrHGtW64OixwCJG47ZQJQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y4LzZiY2Yz Zi01Y2FjLTQ0NzAtOGFhYi01NDFmOWZjYmE3NDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgvNmJjZjNm LTVjYWMtNDQ3MC04YWFiLTU0MWY5ZmNiYTc0Mi8xLzNzdnZOU3lzY2ExYnJnNkxI QUlrYmp0bEFsQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAbQMA0GCSqGSIb3DQEBCwUAA4IBAQB+ l40z4zrxMRr3SH77w/crnxHOf9WeGuJFp07mGG/MykWSg4MNgoNfp4wacJDYhWPg 52pfXMiBOOj8IHxLlpHVTcI+l+teWk4Bcsljpp4l7DLkjtLXOtOLh9gXqTLSlJ0B yyXNlzbvnWVt8gI/OzH3+OchLyeG/o1bF7cJdi61rAsNrbifHC7jNh/82Fa+HyLB wjN9iPhnvQLZwd0+MPOpAhnFfmOYAMIzVQ+aTDTgG3+HSbxKPIICY8WvNcEuZGAT /Ye9B5WAcKlXMjBuJizb/ShMUgbseN17m6+8pdqn2lixSDvLwBY2E+rLHXrT7pMF kUp5+JaBUn7ml2t6uoSn -----END CERTIFICATE-----Generated at Sun Jan 25 21:09:15 2026 by rpki-client