This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NYzSZ8VKP8IovKHe43LZbGA3PCc.cer File: NYzSZ8VKP8IovKHe43LZbGA3PCc.cer (raw, json) Hash identifier: c8RFL68zC0s6UOBGdcKsmw7YH8oUVielimhR1mhP1rw= Subject key identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A78327B1E6034EAF1F76E0F2CD063AA5C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 13:12:45 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 2a0c:3b40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:32:7b:1e:60:34:ea:f1:f7:6e:0f:2c:d0:63:aa:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 13:12:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=358cd267c54a3fc228bca1dee372d96c60373c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:8a:f6:23:ad:13:c8:bb:2b:e0:b1:21:de: 25:6f:d1:e6:d0:a9:f5:2c:38:ff:3e:51:9d:78:53: 3a:8c:a9:d3:9a:51:db:4f:a5:b9:2f:df:55:29:bb: 8b:25:fe:0d:5d:a6:c1:42:8e:dc:0c:4b:b4:5b:95: 05:34:de:6c:3d:f6:30:82:ea:db:75:32:bd:11:c6: 31:94:1a:54:8f:72:5b:09:c9:15:98:3e:23:59:c2: 6b:34:86:fc:f6:5f:86:2f:29:aa:c8:c4:b0:9a:d0: b8:85:0c:11:f0:49:83:2b:d3:36:15:bd:65:bf:28: 34:92:c3:79:40:5e:66:66:ad:d9:cc:20:a9:4e:eb: 52:0a:6f:f3:78:7d:9b:16:82:0e:58:6f:7e:02:50: 05:9e:74:5b:df:52:4d:69:0a:85:b2:7c:ac:50:95: e3:93:c7:77:0c:ec:77:24:ea:7b:f2:64:0b:64:36: 73:0e:59:1b:02:c8:2b:c2:2b:77:61:e1:da:29:69: 54:3c:ae:e7:75:d6:a3:0b:de:ff:b0:60:d2:46:67: eb:68:eb:a0:92:fe:39:8f:7e:e3:03:29:f4:4a:e0: b2:c9:7e:7e:e8:ed:df:c5:50:55:f0:8d:7d:df:21: 52:ff:a0:86:d2:55:a0:26:a1:6a:10:55:41:75:81: ee:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8C:D2:67:C5:4A:3F:C2:28:BC:A1:DE:E3:72:D9:6C:60:37:3C:27 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/84a1b5-1aad-4edf-ab9b-8a2e9a46819b/1/NYzSZ8VKP8IovKHe43LZbGA3PCc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:3b40::/29 Signature Algorithm: sha256WithRSAEncryption 1c:ba:99:d6:cd:ca:a4:b9:3a:02:ab:c1:b9:6c:39:bc:95:36: 27:d6:7b:9e:f7:63:e4:c8:19:f8:6f:0f:f4:e9:4f:18:0e:4a: 78:d2:84:6e:e4:ba:58:7a:1e:ea:a5:b2:8e:7f:60:08:62:46: 1f:40:c0:5a:0d:56:95:ff:e0:fb:5c:68:19:d3:ec:da:08:89: 04:d3:93:3c:f7:76:dc:31:03:c5:b7:9e:bd:92:9e:f7:3f:da: 43:f2:c1:96:d7:90:8c:33:17:25:41:5f:87:d6:60:3e:6d:61: ee:48:1e:1c:af:d8:f5:49:66:c3:67:ee:4d:5a:91:2c:97:56: eb:4d:a4:b3:07:0f:0a:7d:05:bc:c8:d3:18:7c:57:f4:b6:ac: 52:57:7c:bc:1a:48:a8:e8:3c:0d:5b:3a:ff:a3:f9:eb:2d:17: 0a:69:c5:b6:d7:1d:27:f8:dd:0e:ec:76:0b:5b:84:62:47:24: 5d:6a:7e:dc:fb:88:9d:81:31:0f:5b:9e:98:f3:6e:5c:d1:9e: 5f:46:89:8f:f2:48:7e:6a:67:f6:26:89:42:19:d5:a4:ed:29: 2b:e4:94:e8:09:90:30:b5:e0:b7:e3:39:cc:20:11:18:23:b4: a0:2d:68:ce:db:0a:c6:d0:ba:64:04:8b:0a:a6:ac:8d:44:54: 0e:52:5f:53 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZp4MnseYDTq8fduDyzQY6pcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMTMxMjQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNThjZDI2N2M1NGEzZmMyMjhiY2ExZGVlMzcyZDk2YzYwMzczYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0GK9iOtE8i7K+CxId4lb9Hm0Kn1 LDj/PlGdeFM6jKnTmlHbT6W5L99VKbuLJf4NXabBQo7cDEu0W5UFNN5sPfYwgurb dTK9EcYxlBpUj3JbCckVmD4jWcJrNIb89l+GLymqyMSwmtC4hQwR8EmDK9M2Fb1l vyg0ksN5QF5mZq3ZzCCpTutSCm/zeH2bFoIOWG9+AlAFnnRb31JNaQqFsnysUJXj k8d3DOx3JOp78mQLZDZzDlkbAsgrwit3YeHaKWlUPK7nddajC97/sGDSRmfraOug kv45j37jAyn0SuCyyX5+6O3fxVBV8I193yFS/6CG0lWgJqFqEFVBdYHuIwIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFDWM0mfFSj/CKLyh3uNy2WxgNzwnMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IyLzg0YTFi NS0xYWFkLTRlZGYtYWI5Yi04YTJlOWE0NjgxOWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvODRhMWI1 LTFhYWQtNGVkZi1hYjliLThhMmU5YTQ2ODE5Yi8xL05ZelNaOFZLUDhJb3ZLSGU0 M0xaYkdBM1BDYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKgw7QDANBgkqhkiG9w0BAQsFAAOCAQEAHLqZ 1s3KpLk6AqvBuWw5vJU2J9Z7nvdj5MgZ+G8P9OlPGA5KeNKEbuS6WHoe6qWyjn9g CGJGH0DAWg1Wlf/g+1xoGdPs2giJBNOTPPd23DEDxbeevZKe9z/aQ/LBlteQjDMX JUFfh9ZgPm1h7kgeHK/Y9Ulmw2fuTVqRLJdW602kswcPCn0FvMjTGHxX9LasUld8 vBpIqOg8DVs6/6P56y0XCmnFttcdJ/jdDux2C1uEYkckXWp+3PuInYExD1uemPNu XNGeX0aJj/JIfmpn9iaJQhnVpO0pK+SU6AmQMLXgt+M5zCARGCO0oC1oztsKxtC6 ZASLCqasjURUDlJfUw== -----END CERTIFICATE-----Generated at Sun Nov 30 05:16:17 2025 by rpki-client