This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer (raw, json) Hash identifier: U05Jidr1FfQAtBf27lM9JKTMPBNBtfI7tDBrolFTaiw= Subject key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B4B4BF0C8A045FD3BB7EFACDB4AFDB92D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 23 Dec 2025 13:00:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 49432 IP: 2001:678:118c::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4b:f0:c8:a0:45:fd:3b:b7:ef:ac:db:4a:fd:b9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 23 13:00:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ca51990ce0c89f0d210609e67e9e807565c131f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:58:85:5a:85:60:a7:99:9d:49:b6:69:66: 65:1a:c7:3c:57:13:1c:cd:b9:c1:5e:65:20:1e:3d: 5d:c1:f2:9d:93:65:f9:66:51:cd:51:3a:ab:04:d6: 4f:d1:06:24:e0:85:bb:9a:20:b1:0f:31:41:1f:34: 18:fd:0b:03:38:e4:d0:15:40:2e:33:38:38:21:a6: ef:a0:c0:43:88:01:85:99:a9:a1:41:0e:bb:a1:49: 12:22:38:92:84:7b:db:ba:41:40:22:1d:2b:90:88: 82:90:e2:8d:9d:6c:08:39:f1:a3:31:d1:d4:fc:d6: d0:ea:9f:61:78:70:b4:68:6d:1a:75:6b:92:f6:97: fc:27:ad:13:89:8b:fc:77:34:de:68:05:93:ee:07: c7:a5:3b:d4:5b:90:e7:99:3d:2b:5e:7e:37:6d:fa: 6b:aa:e9:43:7d:85:f5:91:24:9b:76:5d:16:96:36: 42:b6:81:84:7a:54:95:e8:81:9d:bf:e1:5f:48:d6: f7:4c:c4:a5:90:0a:ae:54:0f:80:59:8e:e0:79:ca: 65:77:76:8b:bd:05:d1:10:1c:e9:84:13:a5:b3:56: bd:0f:90:e7:44:19:f8:cd:c1:f5:3d:ce:82:2b:51: 10:53:19:83:02:10:b3:91:ec:be:e4:e5:66:26:90: 59:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:118c::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49432 Signature Algorithm: sha256WithRSAEncryption 37:1d:2c:91:93:fd:19:b1:f9:eb:d0:93:9e:50:04:a7:24:a1: 01:12:df:e5:66:da:90:a9:b9:e7:f8:ca:7c:e1:d1:72:73:fd: dc:ad:a4:f0:58:46:69:a8:c0:f8:a5:ab:c3:01:97:f3:31:e6: 07:2d:6c:ac:33:52:96:98:a5:09:e4:ee:28:1d:95:5d:85:d5: 4d:4a:a2:7b:13:d5:0e:98:11:e0:c9:b7:17:94:47:10:19:f0: 0e:ee:06:89:48:58:f2:b5:b1:04:c0:06:87:13:9e:74:97:50: a4:86:9c:f3:88:08:4e:a1:1f:c6:13:4c:ed:54:87:c2:13:19: ed:39:09:00:2d:59:90:91:cd:c9:fe:42:89:5a:9c:4d:c9:7d: d9:36:e6:60:14:b4:dc:1f:cb:2e:f8:e5:bc:ac:52:33:2e:c1: 5a:15:ec:dd:8a:e5:f4:32:1a:f1:cf:6b:f4:4a:71:81:46:f3: cc:08:39:26:3e:ca:79:b4:ac:07:fb:c5:05:4f:11:36:7f:40: e1:b1:d0:df:01:ae:66:ad:42:7b:68:17:69:f2:e8:a1:c9:a8: b7:48:08:20:5f:55:d5:0d:c3:cb:0a:5a:ef:2a:8b:2c:c0:13: 7e:bd:ba:52:39:85:5e:bd:41:3c:c9:02:99:89:79:5d:a5:df: 52:af:e5:7e -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZtLS/DIoEX9O7fvrNtK/bktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIzMTMwMDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2E1MTk5MGNlMGM4OWYwZDIxMDYwOWU2N2U5ZTgwNzU2NWMxMzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXBYhVqFYKeZnUm2aWZlGsc8VxMc zbnBXmUgHj1dwfKdk2X5ZlHNUTqrBNZP0QYk4IW7miCxDzFBHzQY/QsDOOTQFUAu Mzg4IabvoMBDiAGFmamhQQ67oUkSIjiShHvbukFAIh0rkIiCkOKNnWwIOfGjMdHU /NbQ6p9heHC0aG0adWuS9pf8J60TiYv8dzTeaAWT7gfHpTvUW5DnmT0rXn43bfpr qulDfYX1kSSbdl0WljZCtoGEelSV6IGdv+FfSNb3TMSlkAquVA+AWY7gecpld3aL vQXREBzphBOls1a9D5DnRBn4zcH1Pc6CK1EQUxmDAhCzkey+5OVmJpBZ3QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFAylGZDODInw0hBgnmfp6AdWXBMfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2L2Y2MzBh OC03MTc5LTQwMDUtODVlZi05YjZkYjFlNzIwODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvZjYzMGE4 LTcxNzktNDAwNS04NWVmLTliNmRiMWU3MjA4OC8xL0RLVVprTTRNaWZEU0VHQ2Va LW5vQjFaY0V4OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBGMMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwDBGDANBgkqhkiG9w0BAQsFAAOCAQEANx0skZP9GbH569CTnlAEpyShARLf 5WbakKm55/jKfOHRcnP93K2k8FhGaajA+KWrwwGX8zHmBy1srDNSlpilCeTuKB2V XYXVTUqiexPVDpgR4Mm3F5RHEBnwDu4GiUhY8rWxBMAGhxOedJdQpIac84gITqEf xhNM7VSHwhMZ7TkJAC1ZkJHNyf5CiVqcTcl92TbmYBS03B/LLvjlvKxSMy7BWhXs 3Yrl9DIa8c9r9EpxgUbzzAg5Jj7KebSsB/vFBU8RNn9A4bHQ3wGuZq1Ce2gXafLo ocmot0gIIF9V1Q3Dywpa7yqLLMATfr26UjmFXr1BPMkCmYl5XaXfUq/lfg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:31 2025 by rpki-client