This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RVi0oN_C_zLas5KAy_DBip9RoBk.cer File: RVi0oN_C_zLas5KAy_DBip9RoBk.cer (raw, json) Hash identifier: W7ZWkvT2czll4F83RyDYu7NpxhK7khBZgJSfbexd7z4= Subject key identifier: 45:58:B4:A0:DF:C2:FF:32:DA:B3:92:80:CB:F0:C1:8A:9F:51:A0:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B24282438E041E626967756DD16FAB6CC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 22:36:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214976 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:28:24:38:e0:41:e6:26:96:77:56:dd:16:fa:b6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 22:36:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4558b4a0dfc2ff32dab39280cbf0c18a9f51a019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:03:aa:6d:1e:6c:03:fe:64:c9:8c:5d:c8: 50:09:e0:e9:7a:1c:12:1a:23:ee:59:c8:97:83:48: 1e:57:d0:1c:fb:e9:bd:a8:4e:db:80:ab:93:8f:35: 33:66:23:95:19:8b:d2:d2:dd:2b:0a:10:32:9e:bd: 42:3a:6b:75:da:49:ad:29:72:e4:08:dd:dd:b9:81: f5:f6:95:46:23:9a:d7:99:9d:b6:5d:9a:2c:da:7e: 77:3a:dd:b7:66:52:2e:ea:ee:ef:05:ed:e1:5a:5c: 33:7f:1f:0b:9a:e6:e9:f8:e1:c5:25:c3:4a:68:27: a1:83:f9:3f:76:25:4f:68:44:7e:93:3d:aa:f5:36: 50:60:eb:34:4f:50:d2:d9:1e:04:65:08:6e:18:b1: eb:63:93:e8:b1:cb:6f:7b:6a:36:93:9e:d0:ca:a0: b9:ad:3f:02:d2:97:55:84:4d:2f:76:bb:d1:fe:d1: 33:09:48:71:d1:33:f4:4d:4a:58:da:7d:3c:e8:9d: 97:d7:30:7c:84:dc:68:80:fa:87:d1:4d:d0:eb:cf: 25:df:ad:44:21:6c:fc:69:fc:90:3d:c6:f6:66:38: 95:04:b3:2b:85:ce:80:4d:84:57:66:8d:85:4a:eb: d2:9e:c0:5b:5e:a5:61:8e:4f:2c:61:82:0c:23:bf: b4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:58:B4:A0:DF:C2:FF:32:DA:B3:92:80:CB:F0:C1:8A:9F:51:A0:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214976 Signature Algorithm: sha256WithRSAEncryption 85:4a:1d:64:46:17:03:52:f8:48:64:fc:d3:f1:ac:de:db:f5: b5:0c:b8:f1:1e:00:49:03:35:9f:b7:15:4e:5f:d3:0f:0a:8f: 00:ed:64:18:15:8e:4d:3f:d7:8d:b2:87:49:db:bd:0b:8e:5a: 2a:b7:33:7d:10:4b:ba:94:ec:9a:fe:53:84:71:66:e8:14:77: 27:e7:29:3b:8e:18:fd:7d:f0:7d:85:82:0a:9c:d1:33:11:62: 63:2b:b4:aa:07:d3:cd:a6:29:a7:38:38:3f:64:c9:2e:38:00: 0b:39:1c:8f:a2:95:c2:dc:ce:19:e7:44:fb:28:fd:3c:89:20: f5:69:f4:1e:58:17:ec:67:43:2b:49:b4:39:be:a3:8a:bd:9d: 67:18:8d:de:b6:95:c8:f6:24:30:21:f5:08:d3:26:77:7b:45: 10:d5:5b:b4:e3:24:c5:28:68:88:83:c3:7a:d4:83:e3:3d:96: f9:c6:6b:1c:9a:7e:b0:06:13:05:91:3e:17:12:90:65:dd:66: bc:80:98:99:c6:0d:f2:3a:43:52:4f:e5:6a:72:38:55:e3:5b: 58:33:8a:90:31:a3:c1:b0:ad:66:c5:6e:e0:bd:4d:ab:a3:88: ce:2b:66:a8:f3:9a:20:fd:30:c8:28:c9:63:c2:a1:3b:a8:99: b9:34:f4:26 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZskKCQ44EHmJpZ3Vt0W+rbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MjIzNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTU4YjRhMGRmYzJmZjMyZGFiMzkyODBjYmYwYzE4YTlmNTFhMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6YDqm0ebAP+ZMmMXchQCeDpehwS GiPuWciXg0geV9Ac++m9qE7bgKuTjzUzZiOVGYvS0t0rChAynr1COmt12kmtKXLk CN3duYH19pVGI5rXmZ22XZos2n53Ot23ZlIu6u7vBe3hWlwzfx8Lmubp+OHFJcNK aCehg/k/diVPaER+kz2q9TZQYOs0T1DS2R4EZQhuGLHrY5Posctve2o2k57QyqC5 rT8C0pdVhE0vdrvR/tEzCUhx0TP0TUpY2n086J2X1zB8hNxogPqH0U3Q688l361E IWz8afyQPcb2ZjiVBLMrhc6ATYRXZo2FSuvSnsBbXqVhjk8sYYIMI7+0swIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFEVYtKDfwv8y2rOSgMvwwYqfUaAZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzk4NDE4 NWI3LTAzNDMtNGE2NC1hYTM0LTgyZjYxZWMwZGZkYy8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTg0 MTg1YjctMDM0My00YTY0LWFhMzQtODJmNjFlYzBkZmRjLzEvNDU1OEI0QTBERkMy RkYzMkRBQjM5MjgwQ0JGMEMxOEE5RjUxQTAxOS5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDR8Aw DQYJKoZIhvcNAQELBQADggEBAIVKHWRGFwNS+Ehk/NPxrN7b9bUMuPEeAEkDNZ+3 FU5f0w8KjwDtZBgVjk0/142yh0nbvQuOWiq3M30QS7qU7Jr+U4RxZugUdyfnKTuO GP198H2Fggqc0TMRYmMrtKoH082mKac4OD9kyS44AAs5HI+ilcLczhnnRPso/TyJ IPVp9B5YF+xnQytJtDm+o4q9nWcYjd62lcj2JDAh9QjTJnd7RRDVW7TjJMUoaIiD w3rUg+M9lvnGaxyafrAGEwWRPhcSkGXdZryAmJnGDfI6Q1JP5WpyOFXjW1gzipAx o8GwrWbFbuC9TaujiM4rZqjzmiD9MMgoyWPCoTuombk09CY= -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:31 2025 by rpki-client