This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer File: 9RDHudzJJZg-WbWGzVmrVUviWYI.cer (raw, json) Hash identifier: dAaAvWQJJbl841v0DHYuWawJ1u1/byU3RrQ+djNJnSA= Subject key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B01B521DBC7780B9503240935FFE43470 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 06:03:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213675 IP: 2001:3c80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:01:b5:21:db:c7:78:0b:95:03:24:09:35:ff:e4:34:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 06:03:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f510c7b9dcc925983e59b586cd59ab554be25982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:d4:ce:cc:ca:d7:6b:fa:9d:0c:11:db:07: 04:ea:eb:bb:9d:a7:a3:ba:6e:36:b6:7b:23:80:ad: 0c:14:ee:c9:03:c0:dc:27:87:43:92:fc:a1:41:b6: 60:64:40:f8:9f:97:ac:47:64:58:d7:b5:ad:1b:60: 76:c4:97:53:87:ec:46:d3:52:3e:1a:b8:59:3e:72: 26:81:f2:e3:af:82:3b:e2:ce:90:f3:2d:6a:20:c4: 5c:1b:23:a1:e4:f6:e7:39:b1:c1:ff:c1:9f:24:00: 58:41:6b:b3:fb:4f:ea:13:53:90:da:e4:1c:ce:20: e9:6e:7f:15:5f:2e:4b:15:d6:1b:2d:67:80:d7:d8: d6:ab:dc:df:5a:4b:59:f9:40:c4:59:4b:78:b5:74: 95:15:58:3b:85:dc:50:ee:c3:ca:37:10:86:b1:9e: 31:f5:78:43:70:b0:0c:d1:f2:53:55:78:af:14:70: 44:01:f4:e1:dd:ef:dc:7f:5c:77:0e:2b:68:0d:4a: 38:84:91:8c:bd:64:d8:cb:af:5c:90:88:7a:b0:8c: ab:56:97:16:52:d7:c8:8e:e9:9b:9a:cc:83:03:8d: 4a:61:af:26:f1:d0:f6:bd:dc:1a:46:22:2e:26:68: e4:cb:e0:08:13:bb:c3:87:9c:f0:3c:63:4c:68:d7: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:3c80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 213675 Signature Algorithm: sha256WithRSAEncryption 0a:37:56:20:cd:bb:9c:71:a3:7c:b9:93:a9:7d:e8:1f:9b:a2: d7:b5:bd:47:ac:e5:22:54:c1:c9:64:59:3a:54:81:d4:46:b6: f0:e1:eb:fa:4c:cd:7a:cb:05:d8:7a:13:27:1c:84:3b:d1:d5: 2d:bd:aa:bc:4d:4b:f5:c5:95:c5:f3:39:7c:91:42:5a:bd:bd: 34:fa:28:ac:2f:ce:51:e2:cf:80:29:9b:72:11:a8:66:40:9a: ab:ce:21:40:09:3e:93:3e:5a:7d:0e:26:ff:95:f1:01:eb:b0: bc:e2:0f:9d:6a:cc:0f:74:ea:ca:6f:47:d7:d0:c0:cb:cc:2a: ae:8d:61:df:d4:4c:74:42:ff:2d:6d:db:59:bf:9b:21:7a:79: 0b:b5:f1:e0:26:fe:32:83:b7:2d:10:73:52:0b:52:03:cb:d9: 15:4b:2b:5d:6a:07:a1:78:3d:28:7c:87:24:4b:c4:16:62:84: 3e:c9:1d:b3:5c:ea:87:8c:a4:50:58:2b:15:df:3e:b7:6b:c5: 76:6f:b0:49:1d:a6:a0:4b:c8:89:fe:e6:16:d0:0c:e9:72:64: 07:8e:9f:bc:01:f5:72:c6:cb:d3:e7:fc:66:d2:c1:7e:fc:5c: 42:47:68:62:51:50:88:b2:2d:42:7e:c5:91:b7:f9:a5:21:f6: 07:27:5d:c4 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZsBtSHbx3gLlQMkCTX/5DRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MDYwMzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTEwYzdiOWRjYzkyNTk4M2U1OWI1ODZjZDU5YWI1NTRiZTI1OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo03UzszK12v6nQwR2wcE6uu7naej um42tnsjgK0MFO7JA8DcJ4dDkvyhQbZgZED4n5esR2RY17WtG2B2xJdTh+xG01I+ GrhZPnImgfLjr4I74s6Q8y1qIMRcGyOh5PbnObHB/8GfJABYQWuz+0/qE1OQ2uQc ziDpbn8VXy5LFdYbLWeA19jWq9zfWktZ+UDEWUt4tXSVFVg7hdxQ7sPKNxCGsZ4x 9XhDcLAM0fJTVXivFHBEAfTh3e/cf1x3DitoDUo4hJGMvWTYy69ckIh6sIyrVpcW UtfIjumbmsyDA41KYa8m8dD2vdwaRiIuJmjky+AIE7vDh5zwPGNMaNdsewIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPUQx7ncySWYPlm1hs1Zq1VL4lmCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y0L2EwYjU4 Yy0zNzE5LTQ3NzMtOTIwNi1hMWIyYjZhNzAyNzIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjQvYTBiNThj LTM3MTktNDc3My05MjA2LWExYjJiNmE3MDI3Mi8xLzlSREh1ZHpKSlpnLVdiV0d6 Vm1yVlV2aVdZSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDIAE8gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDQqswDQYJKoZIhvcNAQELBQADggEBAAo3ViDNu5xxo3y5k6l96B+bote1vUes 5SJUwclkWTpUgdRGtvDh6/pMzXrLBdh6EycchDvR1S29qrxNS/XFlcXzOXyRQlq9 vTT6KKwvzlHiz4Apm3IRqGZAmqvOIUAJPpM+Wn0OJv+V8QHrsLziD51qzA906spv R9fQwMvMKq6NYd/UTHRC/y1t21m/myF6eQu18eAm/jKDty0Qc1ILUgPL2RVLK11q B6F4PSh8hyRLxBZihD7JHbNc6oeMpFBYKxXfPrdrxXZvsEkdpqBLyIn+5hbQDOly ZAeOn7wB9XLGy9Pn/GbSwX78XEJHaGJRUIiyLUJ+xZG3+aUh9gcnXcQ= -----END CERTIFICATE-----Generated at Sun Dec 14 18:52:20 2025 by rpki-client