This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer File: 0F9s96mFiwKHHBx_E9GzOIDpii0.cer (raw, json) Hash identifier: JuscS76V4v2rxIrT/M9v/zLIqKPvUfYvcmd4HgNh8Ck= Subject key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B289A7D16FFD3BC3270DEA5AB070E5AB3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 19:19:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203903 IP: 2001:67c:22dc::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:9a:7d:16:ff:d3:bc:32:70:de:a5:ab:07:0e:5a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 19:19:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7a:ac:3d:3f:8b:fc:70:93:03:16:5e:2d:92: 9b:10:00:43:f9:39:77:52:fd:94:51:f7:0a:47:04: 50:f9:08:a8:8b:76:60:83:42:6c:dd:4f:45:5d:c5: 0b:92:69:06:fc:08:71:18:2f:32:42:fc:c1:77:28: 41:5a:63:27:7f:8e:3e:31:05:cd:de:b3:63:b7:fd: 5e:1e:ad:86:0e:ea:01:d3:d5:f5:d7:18:b1:55:68: 44:c0:a4:1c:70:68:a5:91:48:c5:dd:c8:3f:00:63: ae:84:53:39:f7:ee:ed:92:fb:5e:41:c7:b8:f5:75: 78:3f:eb:ba:22:e1:b1:ad:5a:99:1d:df:67:35:53: df:c9:a5:d9:8c:47:5b:5b:df:6c:23:7f:11:f0:b5: 5e:de:da:07:20:12:6a:02:d3:96:88:a2:f0:ba:e6: e0:25:38:f8:f9:52:24:d4:e7:83:2f:45:a0:3c:41: 0b:f9:a1:88:8b:93:59:e6:15:31:04:fc:22:da:89: a7:9d:d4:1d:08:51:eb:df:50:81:78:ce:04:e0:23: 5b:77:04:9d:80:32:c5:c5:88:79:02:8f:51:8c:cf: e9:a2:01:5d:ca:a0:61:ff:43:87:60:7d:e4:d2:c3: 5a:a5:9c:ce:e8:fe:a8:41:52:2d:43:ed:ce:89:6b: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:22dc::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203903 Signature Algorithm: sha256WithRSAEncryption 24:9c:cb:4f:3e:59:46:74:41:10:c3:75:19:73:94:b6:0c:54: 4e:4a:25:ad:7b:a5:96:af:2f:b0:25:1e:24:f2:8c:25:7e:c5: 45:a8:ac:46:a9:1a:e7:2f:bc:09:7a:ba:2c:a0:13:f2:10:31: 76:fb:a9:b4:99:00:5f:86:0a:7a:a7:35:bc:e9:21:f9:58:47: a1:b7:54:7d:4c:d6:7a:a1:1e:ce:a0:3a:4e:c8:f4:46:d5:f8: f5:e4:af:a2:76:92:94:cc:87:a3:3e:c5:7b:18:46:b7:88:1a: f6:13:b3:f0:3c:89:43:d5:bf:bd:e7:85:d1:73:5c:65:ed:f1: e8:ef:fe:81:dc:4e:9f:d1:e2:d8:82:7b:04:00:35:67:6b:4c: 17:c9:f2:ea:6e:1f:5b:b1:1a:26:2e:42:31:79:24:51:72:d2: 41:9a:48:45:49:1b:ae:f9:b4:f6:dc:bf:61:91:e5:11:82:fd: 36:f7:a9:67:17:02:94:60:e1:22:9e:46:82:f5:fb:55:28:7f: 90:6a:94:d7:3e:3c:27:c2:b3:d5:cd:a2:6c:34:de:68:ae:69: 76:6c:f3:66:79:a7:1a:de:ac:81:dd:d9:42:4d:f2:2a:36:32: 5b:a6:1d:ee:56:30:dc:cc:0d:0c:18:7d:6a:76:a3:14:ea:a9: ed:e0:d4:87 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZsomn0W/9O8MnDepasHDlqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MTkxOTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDVmNmNmN2E5ODU4YjAyODcxYzFjN2YxM2QxYjMzODgwZTk4YTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHqsPT+L/HCTAxZeLZKbEABD+Tl3 Uv2UUfcKRwRQ+Qioi3Zgg0Js3U9FXcULkmkG/AhxGC8yQvzBdyhBWmMnf44+MQXN 3rNjt/1eHq2GDuoB09X11xixVWhEwKQccGilkUjF3cg/AGOuhFM59+7tkvteQce4 9XV4P+u6IuGxrVqZHd9nNVPfyaXZjEdbW99sI38R8LVe3toHIBJqAtOWiKLwuubg JTj4+VIk1OeDL0WgPEEL+aGIi5NZ5hUxBPwi2omnndQdCFHr31CBeM4E4CNbdwSd gDLFxYh5Ao9RjM/pogFdyqBh/0OHYH3k0sNapZzO6P6oQVItQ+3OiWtoWwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFNBfbPephYsChxwcfxPRsziA6YotMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQyLzM2NGM3 OC1hOWY1LTRlODUtYmRjZi0xY2E0Y2UwMjRjZTAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIvMzY0Yzc4 LWE5ZjUtNGU4NS1iZGNmLTFjYTRjZTAyNGNlMC8xLzBGOXM5Nm1GaXdLSEhCeF9F OUd6T0lEcGlpMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCLcMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMcfzANBgkqhkiG9w0BAQsFAAOCAQEAJJzLTz5ZRnRBEMN1GXOUtgxUTkol rXullq8vsCUeJPKMJX7FRaisRqka5y+8CXq6LKAT8hAxdvuptJkAX4YKeqc1vOkh +VhHobdUfUzWeqEezqA6Tsj0RtX49eSvonaSlMyHoz7FexhGt4ga9hOz8DyJQ9W/ veeF0XNcZe3x6O/+gdxOn9Hi2IJ7BAA1Z2tMF8ny6m4fW7EaJi5CMXkkUXLSQZpI RUkbrvm09ty/YZHlEYL9NvepZxcClGDhIp5GgvX7VSh/kGqU1z48J8Kz1c2ibDTe aK5pdmzzZnmnGt6sgd3ZQk3yKjYyW6Yd7lYw3MwNDBh9anajFOqp7eDUhw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:03:33 2025 by rpki-client