This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer File: 3wg_ycNqs3FYrYDlyE52vpetwJ8.cer (raw, json) Hash identifier: 7M21rqJTe0RYj1TdNSjUSZB2uSDBRP4hrJlSHwrrkUc= Subject key identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B78355E1C9A6EEF6D2041D40AF72F51E4 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 06:18:42 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 204535 IP: 2001:678:114c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:5e:1c:9a:6e:ef:6d:20:41:d4:0a:f7:2f:51:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:ed:21:11:35:21:07:3a:69:e5:e8:33:f7: 9f:f9:e8:6b:c0:eb:d4:10:64:bc:b3:83:4c:f1:b2: 26:ab:84:1c:52:b1:d1:d0:81:f4:41:02:7e:c7:d0: 59:60:cc:22:b1:18:13:b6:c6:ff:b4:ad:4c:b5:b5: 9d:6e:83:24:54:f3:21:52:1c:df:81:7e:de:e2:b0: e7:42:5e:36:dc:ea:89:09:7b:26:21:84:47:6b:52: fa:b2:4e:79:5d:b3:39:46:ee:88:f0:55:3f:61:ed: 1a:4b:6d:c0:f9:dc:ad:fb:9e:17:2e:88:dc:50:79: 86:5f:b6:cb:b0:3b:62:ab:57:a5:74:6e:42:ab:4b: b5:e5:fa:c0:5c:a0:ba:74:aa:25:15:48:63:44:a7: df:f8:8b:40:32:05:6e:01:9b:be:04:d7:3f:2c:1e: ff:b5:b6:cf:27:30:dc:33:0a:15:52:94:92:a3:93: 14:49:63:bc:67:48:cf:f6:ec:99:d2:3b:60:ab:a1: 4e:cb:14:24:e2:af:b8:d0:45:92:69:81:82:0b:53: 7a:f2:9f:3d:8d:fe:2f:f8:f2:f4:13:92:ab:5f:b6: f9:ef:6d:40:67:50:cd:0f:b2:39:32:71:ed:c9:17: c7:c2:43:75:22:bc:27:c1:4c:dc:f8:1c:32:de:10: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:114c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204535 Signature Algorithm: sha256WithRSAEncryption 12:d4:78:01:bd:cc:21:e2:b9:e1:79:29:99:62:9e:15:e3:98: 9a:cc:83:aa:92:e0:90:2f:4a:b4:b5:1b:88:c5:7e:43:be:aa: bc:79:42:77:4f:f1:bd:6e:0e:b0:95:69:7e:c8:f6:f7:a5:01: f3:c2:01:a6:f3:57:99:fb:bb:f9:b8:65:16:e9:4b:dd:80:d5: 38:3d:d1:16:64:b6:50:83:d4:ec:fb:86:f4:84:5a:6b:ee:69: 91:a1:f2:a2:87:d2:7a:70:3b:97:b4:c4:28:e7:3d:ee:76:59: 37:d7:75:cc:10:d9:fc:2b:48:bd:f1:8b:bc:5c:22:c2:24:55: fd:ec:20:28:1f:33:5e:51:0d:9d:5e:cc:5b:86:35:78:75:8e: 56:b4:25:58:02:d7:ca:64:02:17:d7:9a:81:c8:0b:ad:55:73: 73:85:32:76:75:0a:7a:46:e6:0c:62:7e:37:4a:86:01:3c:9c: 9f:d6:cb:6c:37:d2:bf:d3:b1:fc:d6:8c:87:d2:30:e0:fb:2a: 94:f8:82:98:e4:62:1a:ee:44:df:b1:f2:8c:6a:71:f4:e8:bd: 47:41:f5:6d:52:a1:f5:f4:e9:7f:a9:0a:f4:cd:3b:f1:12:85: c8:54:bf:f1:97:98:8f:a0:b6:3d:d1:3b:cb:94:dd:75:b1:5d: cc:4e:3c:75 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt4NV4cmm7vbSBB1Ar3L1HkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA4M2ZjOWMzNmFiMzcxNThhZDgwZTVjODRlNzZiZTk3YWRjMDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dPtIRE1IQc6aeXoM/ef+ehrwOvU EGS8s4NM8bImq4QcUrHR0IH0QQJ+x9BZYMwisRgTtsb/tK1MtbWdboMkVPMhUhzf gX7e4rDnQl423OqJCXsmIYRHa1L6sk55XbM5Ru6I8FU/Ye0aS23A+dyt+54XLojc UHmGX7bLsDtiq1eldG5Cq0u15frAXKC6dKolFUhjRKff+ItAMgVuAZu+BNc/LB7/ tbbPJzDcMwoVUpSSo5MUSWO8Z0jP9uyZ0jtgq6FOyxQk4q+40EWSaYGCC1N68p89 jf4v+PL0E5KrX7b5721AZ1DND7I5MnHtyRfHwkN1IrwnwUzc+Bwy3hB/WwIDAQAB o4ICvzCCArswHQYDVR0OBBYEFN8IP8nDarNxWK2A5chOdr6XrcCfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzliYjc3 YzhhLTJkNjktNDMyNS1iNGZhLTYwMzM4OGM5NmJiMy8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOWJi NzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2YmIzLzAvREYwODNGQzlDMzZB QjM3MTU4QUQ4MEU1Qzg0RTc2QkU5N0FEQzA5Ri5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABBngRTDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDHvcwDQYJKoZIhvcNAQEL BQADggEBABLUeAG9zCHiueF5KZlinhXjmJrMg6qS4JAvSrS1G4jFfkO+qrx5QndP 8b1uDrCVaX7I9velAfPCAabzV5n7u/m4ZRbpS92A1Tg90RZktlCD1Oz7hvSEWmvu aZGh8qKH0npwO5e0xCjnPe52WTfXdcwQ2fwrSL3xi7xcIsIkVf3sICgfM15RDZ1e zFuGNXh1jla0JVgC18pkAhfXmoHIC61Vc3OFMnZ1CnpG5gxifjdKhgE8nJ/Wy2w3 0r/TsfzWjIfSMOD7KpT4gpjkYhruRN+x8oxqcfTovUdB9W1SofX06X+pCvTNO/ES hchUv/GXmI+gtj3RO8uU3XWxXcxOPHU= -----END CERTIFICATE-----Generated at Mon Jan 26 02:03:39 2026 by rpki-client