This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer File: C27I7Y_JP3IzT3qXSka8J9EQKSM.cer (raw, json) Hash identifier: EnhAApzCYHnb+GJYANpaC5K/vjcjNaIQ1sVxRQfJi+I= Subject key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B045B53F5E4CFE3152DB69C7DF0C89E90 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 18:24:12 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 206345 AS: 208492 IP: 5.34.192.0/20 IP: 2a14:c480::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:5b:53:f5:e4:cf:e3:15:2d:b6:9c:7d:f0:c8:9e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 18:24:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:00:fa:69:5c:5c:ba:cc:da:8d:2a:a8:e8:dd: 52:3e:ed:26:84:e3:e4:51:85:45:6d:47:c6:8f:22: cd:2c:a7:b3:aa:47:79:36:8f:c6:2f:98:99:87:23: f0:ed:7f:c9:8a:4a:89:91:0f:f9:79:18:38:e2:23: 89:a0:74:62:a0:2d:7a:21:cb:c8:cb:4a:5e:b7:ea: 9d:e7:ab:1c:d2:10:89:d6:ad:d7:56:2b:2c:69:e0: 76:98:08:79:1d:8a:fb:2a:68:be:ce:fa:e7:b8:ac: 1e:ad:9c:64:06:32:6f:97:88:d7:2d:70:8b:45:77: 04:bd:f2:07:3e:d3:5a:b6:e6:44:e1:28:7b:9c:fc: 2d:42:cd:4d:62:80:9b:9b:3b:75:bb:24:e9:0d:33: 98:e8:ac:1f:24:73:fe:de:a2:8f:31:e9:13:b4:9d: ab:10:98:44:6a:c7:4c:14:09:b9:93:7e:dd:35:8a: 0f:40:ca:d4:30:ab:75:fa:9a:9e:c5:bf:c6:b9:95: 8f:ab:4c:f8:b1:a3:4d:47:02:90:58:62:3c:c8:62: e6:60:57:f7:1d:9d:3d:5c:bd:0a:08:db:2f:70:f2: 6d:95:04:20:15:42:e5:55:ca:fa:53:ba:79:c6:ce: d9:72:f6:45:78:d1:81:08:09:dc:8b:37:aa:6a:6f: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.192.0/20 IPv6: 2a14:c480::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206345 208492 Signature Algorithm: sha256WithRSAEncryption 60:44:43:65:f6:df:aa:81:d3:80:67:e1:d3:df:6c:b9:73:81: 43:2d:04:4e:84:89:bf:f4:ee:2b:b6:40:fb:df:e6:c5:ae:ab: 4c:46:81:18:84:d8:d7:ac:f8:3d:04:94:e6:1e:ab:b7:57:45: 6e:fa:69:3b:92:d2:7f:96:dc:d7:61:b5:43:00:db:b5:e3:f6: c0:fd:46:02:bc:47:d6:e3:91:e0:91:e5:a6:4b:cd:f4:a0:a1: 07:05:49:cd:a1:57:9d:02:52:47:13:95:4a:16:10:ac:5b:26: f8:e5:43:31:72:87:97:af:c7:29:b1:83:cf:c6:44:bd:74:5d: 90:2b:af:8d:73:5c:b2:51:78:31:82:a5:90:c7:1b:bd:ef:ed: ad:f4:4d:56:15:8c:fd:30:0e:86:2f:17:e3:65:36:26:dc:18: 94:df:f2:07:98:c3:7f:0b:7d:66:69:09:23:bc:ff:b2:76:71: 0d:1e:97:5c:7f:6e:cb:e4:c0:73:33:23:57:3b:3f:cb:75:84: 37:f1:99:be:94:fc:f7:15:d9:e4:33:3d:02:a7:58:39:f6:d4: 82:4f:b5:57:a7:4a:4c:f5:10:a3:83:9c:8a:4f:ec:4b:8b:54: af:4e:75:59:72:18:e8:e8:09:ab:a7:b8:fe:1a:2a:e9:4f:ad: d3:2c:34:08 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZsEW1P15M/jFS22nH3wyJ6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MTgyNDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjZlYzhlZDhmYzkzZjcyMzM0ZjdhOTc0YTQ2YmMyN2QxMTAyOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wD6aVxcuszajSqo6N1SPu0mhOPk UYVFbUfGjyLNLKezqkd5No/GL5iZhyPw7X/JikqJkQ/5eRg44iOJoHRioC16IcvI y0pet+qd56sc0hCJ1q3XVissaeB2mAh5HYr7Kmi+zvrnuKwerZxkBjJvl4jXLXCL RXcEvfIHPtNatuZE4Sh7nPwtQs1NYoCbmzt1uyTpDTOY6KwfJHP+3qKPMekTtJ2r EJhEasdMFAm5k37dNYoPQMrUMKt1+pqexb/GuZWPq0z4saNNRwKQWGI8yGLmYFf3 HZ09XL0KCNsvcPJtlQQgFULlVcr6U7p5xs7ZcvZFeNGBCAncizeqam949QIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFAtuyO2PyT9yM096l0pGvCfRECkjMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzMwNDc2 Mi02NzMzLTRjNzMtODUyMy0wNDc3NzUxMjkxNDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvMzA0NzYy LTY3MzMtNGM3My04NTIzLTA0Nzc3NTEyOTE0OC8xL0MyN0k3WV9KUDNJelQzcVhT a2E4SjlFUUtTTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQEBSLAMA0EAgACMAcDBQMqFMSAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMmCQIDAy5sMA0GCSqGSIb3DQEBCwUAA4IBAQBgRENl 9t+qgdOAZ+HT32y5c4FDLQROhIm/9O4rtkD73+bFrqtMRoEYhNjXrPg9BJTmHqu3 V0Vu+mk7ktJ/ltzXYbVDANu14/bA/UYCvEfW45HgkeWmS830oKEHBUnNoVedAlJH E5VKFhCsWyb45UMxcoeXr8cpsYPPxkS9dF2QK6+Nc1yyUXgxgqWQxxu97+2t9E1W FYz9MA6GLxfjZTYm3BiU3/IHmMN/C31maQkjvP+ydnENHpdcf27L5MBzMyNXOz/L dYQ38Zm+lPz3FdnkMz0Cp1g59tSCT7VXp0pM9RCjg5yKT+xLi1SvTnVZchjo6Amr p7j+GirpT63TLDQI -----END CERTIFICATE-----Generated at Sun Dec 14 23:03:52 2025 by rpki-client