This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer File: QAfxuu0Ga9vO0c9DVRkb-KxH2zY.cer (raw, json) Hash identifier: fEqc3iSg2c7KmYId3MUmc1LU6AguDjAfiuCaXXqIT5c= Subject key identifier: 40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B11303B6E81417BCEC72E357B7C0E9B19 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 06:12:12 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 201063 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:30:3b:6e:81:41:7b:ce:c7:2e:35:7b:7c:0e:9b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 12 06:12:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4007f1baed066bdbced1cf4355191bf8ac47db36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:ca:a2:4d:17:c5:9d:e6:55:0e:53:56:e1: aa:3c:80:32:06:32:fd:a7:fd:14:75:fa:de:5b:9a: d7:45:18:e6:a8:6c:09:da:02:46:aa:c7:eb:b3:3f: 7e:b1:20:cc:d4:ff:8b:78:64:3f:dd:04:af:a4:1a: 4d:60:64:d1:e6:90:e9:e2:08:96:5e:c6:80:e3:58: fa:6b:cb:4e:bc:d0:58:43:e0:9c:a0:65:08:bd:10: e5:84:5d:6a:f9:49:95:f5:5f:e8:bc:2f:14:bc:c3: 4d:8c:ba:90:c0:6e:a1:11:df:8f:d0:56:76:09:d8: 02:56:13:84:99:d7:c8:a2:e7:4e:47:a0:c6:23:89: 23:9c:99:4d:3f:5f:59:d9:9e:3d:39:5e:a0:ea:ae: f6:3b:d1:83:5d:f2:25:89:ab:06:a1:35:e4:ff:c9: fd:cc:0d:a7:40:a2:99:1f:56:68:06:81:c2:ed:ee: c7:ba:27:0c:69:e3:59:1c:bc:43:1f:27:76:e1:18: ee:36:32:dd:2c:2d:46:bb:0b:61:84:a1:f2:95:cd: 3e:4b:17:23:08:e0:b4:0d:89:ed:fb:20:02:69:c0: 7a:0b:77:dd:3e:c8:82:58:7c:e8:4c:7d:9c:06:f5: 6c:b5:e0:6d:b9:cc:35:f6:81:b4:af:c4:1f:e4:b7: fc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:07:F1:BA:ED:06:6B:DB:CE:D1:CF:43:55:19:1B:F8:AC:47:DB:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cac426-bf9d-4e16-b439-7631cf8c4149/1/QAfxuu0Ga9vO0c9DVRkb-KxH2zY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 201063 Signature Algorithm: sha256WithRSAEncryption 62:d8:d0:a4:d2:88:e0:25:da:09:ad:7c:e4:97:0e:ca:94:08: ce:ff:87:9a:17:60:91:de:08:8b:23:1d:22:9a:d2:ff:20:67: 2e:6a:8a:a4:5c:1c:3b:93:86:28:19:70:e6:42:21:da:cf:9f: 72:16:b0:e9:85:e9:f4:6d:66:c1:40:ed:90:ca:1d:f1:57:27: ce:6b:dc:cd:a0:5f:88:24:22:bb:e8:4d:f7:b4:e7:7b:29:1b: 75:c6:55:35:1f:e3:6e:5c:24:78:1a:a6:98:1d:c7:76:2e:7b: b0:d3:40:bb:20:6f:0e:f1:91:67:5d:e2:dc:8f:55:70:fa:28: 10:15:cb:a0:7b:9b:7f:ec:04:11:c1:a8:2c:4f:2f:3e:18:a2: b2:f7:f7:7f:6c:9a:fb:3b:6e:e8:4d:42:30:aa:3a:0f:36:1e: 79:bb:8b:09:99:c4:c6:80:d0:e8:e3:7e:79:7d:d8:2e:8d:db: 0e:af:8f:ae:e5:cf:44:98:b1:33:2f:78:63:86:77:5d:16:da: 65:ca:4f:02:ba:6f:a1:3e:e7:de:85:75:b5:4e:54:1c:65:12: 50:a9:be:0b:a7:04:92:93:4c:9b:54:cd:1b:63:ec:ec:f4:4b: cc:12:a0:fe:d0:d2:74:62:e0:a6:45:b2:03:7f:c5:6f:8f:0c: e0:69:de:61 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZsRMDtugUF7zscuNXt8DpsZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEyMDYxMjEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDA3ZjFiYWVkMDY2YmRiY2VkMWNmNDM1NTE5MWJmOGFjNDdkYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIDKok0XxZ3mVQ5TVuGqPIAyBjL9 p/0UdfreW5rXRRjmqGwJ2gJGqsfrsz9+sSDM1P+LeGQ/3QSvpBpNYGTR5pDp4giW XsaA41j6a8tOvNBYQ+CcoGUIvRDlhF1q+UmV9V/ovC8UvMNNjLqQwG6hEd+P0FZ2 CdgCVhOEmdfIoudOR6DGI4kjnJlNP19Z2Z49OV6g6q72O9GDXfIliasGoTXk/8n9 zA2nQKKZH1ZoBoHC7e7HuicMaeNZHLxDHyd24RjuNjLdLC1GuwthhKHylc0+Sxcj COC0DYnt+yACacB6C3fdPsiCWHzoTH2cBvVsteBtucw19oG0r8Qf5Lf80wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFEAH8brtBmvbztHPQ1UZG/isR9s2MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE4L2NhYzQy Ni1iZjlkLTRlMTYtYjQzOS03NjMxY2Y4YzQxNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgvY2FjNDI2 LWJmOWQtNGUxNi1iNDM5LTc2MzFjZjhjNDE0OS8xL1FBZnh1dTBHYTl2TzBjOURW UmtiLUt4SDJ6WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMRZzANBgkqhkiG9w0BAQsFAAOCAQEAYtjQpNKI4CXa Ca185JcOypQIzv+Hmhdgkd4IiyMdIprS/yBnLmqKpFwcO5OGKBlw5kIh2s+fchaw 6YXp9G1mwUDtkMod8VcnzmvczaBfiCQiu+hN97TneykbdcZVNR/jblwkeBqmmB3H di57sNNAuyBvDvGRZ13i3I9VcPooEBXLoHubf+wEEcGoLE8vPhiisvf3f2ya+ztu 6E1CMKo6DzYeebuLCZnExoDQ6ON+eX3YLo3bDq+PruXPRJixMy94Y4Z3XRbaZcpP ArpvoT7n3oV1tU5UHGUSUKm+C6cEkpNMm1TNG2Ps7PRLzBKg/tDSdGLgpkWyA3/F b48M4GneYQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:21 2025 by rpki-client