This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer File: 3wg_ycNqs3FYrYDlyE52vpetwJ8.cer (raw, json) Hash identifier: s6qfIkVm9rsQpchKaNfUe4PUDZgqKrpfzVT20kBgvK8= Subject key identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC86C6B35F68F05540F4242D7022CEA0D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 03:05:39 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 204535 IP: 2001:678:114c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c8:6c:6b:35:f6:8f:05:54:0f:42:42:d7:02:2c:ea:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 03:05:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:ed:21:11:35:21:07:3a:69:e5:e8:33:f7: 9f:f9:e8:6b:c0:eb:d4:10:64:bc:b3:83:4c:f1:b2: 26:ab:84:1c:52:b1:d1:d0:81:f4:41:02:7e:c7:d0: 59:60:cc:22:b1:18:13:b6:c6:ff:b4:ad:4c:b5:b5: 9d:6e:83:24:54:f3:21:52:1c:df:81:7e:de:e2:b0: e7:42:5e:36:dc:ea:89:09:7b:26:21:84:47:6b:52: fa:b2:4e:79:5d:b3:39:46:ee:88:f0:55:3f:61:ed: 1a:4b:6d:c0:f9:dc:ad:fb:9e:17:2e:88:dc:50:79: 86:5f:b6:cb:b0:3b:62:ab:57:a5:74:6e:42:ab:4b: b5:e5:fa:c0:5c:a0:ba:74:aa:25:15:48:63:44:a7: df:f8:8b:40:32:05:6e:01:9b:be:04:d7:3f:2c:1e: ff:b5:b6:cf:27:30:dc:33:0a:15:52:94:92:a3:93: 14:49:63:bc:67:48:cf:f6:ec:99:d2:3b:60:ab:a1: 4e:cb:14:24:e2:af:b8:d0:45:92:69:81:82:0b:53: 7a:f2:9f:3d:8d:fe:2f:f8:f2:f4:13:92:ab:5f:b6: f9:ef:6d:40:67:50:cd:0f:b2:39:32:71:ed:c9:17: c7:c2:43:75:22:bc:27:c1:4c:dc:f8:1c:32:de:10: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:114c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204535 Signature Algorithm: sha256WithRSAEncryption 39:a2:d4:ba:5c:44:5e:31:ec:81:a6:f9:39:da:f2:67:c8:e4: 30:b9:f9:e7:f2:64:7b:5e:13:79:d4:56:58:a1:73:9a:16:d2: 9e:e0:aa:d0:e0:78:2f:f2:b5:08:e7:03:66:9a:d6:4f:7b:12: 07:ae:43:17:f7:e0:19:a1:fa:2c:cf:ee:5f:45:d3:fa:21:c2: 60:7e:0a:e5:12:2c:91:0e:23:6a:9c:e2:76:9f:23:cc:5f:90: dd:c3:38:f4:27:57:47:c8:db:4a:21:b6:e9:6c:3d:a4:32:6e: b2:20:01:98:9f:28:89:b4:50:94:46:74:43:2b:3e:d9:b5:db: 61:0a:db:f4:ea:27:b9:0c:2e:ee:37:27:66:76:fd:47:16:03: 3e:46:e3:08:9a:f4:95:30:5c:49:94:63:60:5a:61:8c:e6:f9: 35:0d:64:d0:35:80:6c:56:cc:9e:ec:d8:e5:b6:46:54:59:ee: 6f:cb:3e:d2:91:59:4a:4b:88:ea:ff:c7:8b:98:4b:62:34:d1: 5d:6a:29:c5:5c:2d:be:2d:c3:3b:0b:00:99:10:de:72:f7:ae: fe:a1:9d:24:bc:f1:1e:99:03:43:8b:df:91:cc:ab:70:98:e6: 8b:e8:fc:1d:56:92:b9:0f:fb:7d:18:98:fa:ac:42:bd:db:c5: 96:79:53:0f -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZrIbGs19o8FVA9CQtcCLOoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MDMwNTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA4M2ZjOWMzNmFiMzcxNThhZDgwZTVjODRlNzZiZTk3YWRjMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dPtIRE1IQc6aeXoM/ef+ehrwOvU EGS8s4NM8bImq4QcUrHR0IH0QQJ+x9BZYMwisRgTtsb/tK1MtbWdboMkVPMhUhzf gX7e4rDnQl423OqJCXsmIYRHa1L6sk55XbM5Ru6I8FU/Ye0aS23A+dyt+54XLojc UHmGX7bLsDtiq1eldG5Cq0u15frAXKC6dKolFUhjRKff+ItAMgVuAZu+BNc/LB7/ tbbPJzDcMwoVUpSSo5MUSWO8Z0jP9uyZ0jtgq6FOyxQk4q+40EWSaYGCC1N68p89 jf4v+PL0E5KrX7b5721AZ1DND7I5MnHtyRfHwkN1IrwnwUzc+Bwy3hB/WwIDAQAB o4ICvzCCArswHQYDVR0OBBYEFN8IP8nDarNxWK2A5chOdr6XrcCfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzliYjc3 YzhhLTJkNjktNDMyNS1iNGZhLTYwMzM4OGM5NmJiMy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWJi NzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2YmIzLzAvREYwODNGQzlDMzZB QjM3MTU4QUQ4MEU1Qzg0RTc2QkU5N0FEQzA5Ri5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABBngRTDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDHvcwDQYJKoZIhvcNAQEL BQADggEBADmi1LpcRF4x7IGm+Tna8mfI5DC5+efyZHteE3nUVlihc5oW0p7gqtDg eC/ytQjnA2aa1k97EgeuQxf34Bmh+izP7l9F0/ohwmB+CuUSLJEOI2qc4nafI8xf kN3DOPQnV0fI20ohtulsPaQybrIgAZifKIm0UJRGdEMrPtm122EK2/TqJ7kMLu43 J2Z2/UcWAz5G4wia9JUwXEmUY2BaYYzm+TUNZNA1gGxWzJ7s2OW2RlRZ7m/LPtKR WUpLiOr/x4uYS2I00V1qKcVcLb4twzsLAJkQ3nL3rv6hnSS88R6ZA0OL35HMq3CY 5ovo/B1WkrkP+30YmPqsQr3bxZZ5Uw8= -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:02 2025 by rpki-client