This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer File: WyxHDbJENILhlSOVOnjB7woWlHk.cer (raw, json) Hash identifier: R1f+uhhctuXrMi3dc4q/89D7BeZhagMeWMsO+Ahi4d4= Subject key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B11F32BBDEEC735CA1D522A9D5C7953FF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 09:45:07 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202906 AS: 209719 IP: 193.107.67.0/24 IP: 2001:67c:940::/48 IP: 2a04:e1c0::/31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:f3:2b:bd:ee:c7:35:ca:1d:52:2a:9d:5c:79:53:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 12 09:45:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5b2c470db2443482e19523953a78c1ef0a169479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:ce:f4:69:5d:88:26:a7:96:8a:03:42:79: 56:0f:8b:1f:b6:72:7f:b0:7e:fc:ee:6c:d2:6d:91: 9f:ab:50:a8:06:4d:6a:9a:39:ed:98:8f:e2:fe:dd: 8f:5a:f6:f0:da:33:42:64:12:55:b1:14:f5:a6:b9: 81:d0:c2:67:3b:2f:2c:21:04:f5:ae:7d:63:1e:80: 30:b9:25:15:e3:ff:92:33:d6:2e:c8:dc:1a:03:36: eb:4a:78:4a:92:d9:38:f9:0f:8f:40:23:06:32:61: e3:71:76:78:b8:7e:ee:a5:3c:10:ba:9c:bb:33:ad: 76:fe:6b:97:84:49:c6:2d:2d:ae:16:52:0f:8c:08: 12:03:17:b3:c6:62:01:c5:6e:f9:3f:44:89:01:78: b7:61:13:79:e4:db:e4:bd:1d:ac:74:84:4d:7e:99: 38:39:83:54:85:18:2f:6e:1c:b5:24:a4:aa:9a:a1: 62:1b:60:79:03:d4:b2:c6:fc:06:7b:1e:bf:67:3a: 7f:47:ea:83:a2:d4:bf:b5:4b:9d:2e:21:9c:ed:c2: c5:bf:88:79:cd:16:b0:a8:49:6b:8e:bd:ee:7e:26: 4e:c8:d6:c7:41:47:83:c7:72:82:a7:81:67:14:d4: 7b:18:d1:23:91:b9:26:c2:1d:95:de:92:00:64:86: e7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.67.0/24 IPv6: 2001:67c:940::/48 2a04:e1c0::/31 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202906 209719 Signature Algorithm: sha256WithRSAEncryption 7b:30:92:01:e7:4e:60:62:cc:35:b1:15:1b:78:a1:49:91:07: c9:ab:b8:ce:0b:5c:a7:4b:c4:d3:4f:a2:e8:8e:5e:59:ee:21: 2d:43:15:b5:fa:88:16:9c:56:b2:fa:01:97:0e:55:64:bd:0b: 4b:88:27:9f:53:41:2c:7c:4e:80:d5:33:e7:2b:81:1a:03:85: b4:d3:1f:71:6c:74:dc:91:7b:ca:b2:10:56:3b:c7:59:97:5d: b7:e2:e6:22:4f:e8:ba:b9:34:cb:83:b1:e7:1f:92:78:6a:7e: 25:d9:bc:06:c6:53:98:bf:97:57:2b:26:39:ec:41:ad:7b:2d: ca:d0:11:5b:f4:0d:f4:b7:e6:ef:1a:83:06:21:05:c9:50:6a: f0:24:6f:45:25:96:cc:42:86:44:02:96:d5:3a:8c:9c:8b:c0: 5d:87:e4:32:8a:58:7f:49:92:75:8a:00:e7:ec:84:b2:8d:1d: 74:9c:a5:7d:17:e8:51:8c:9b:97:24:c9:d9:68:a1:a3:a8:c4: 8c:0a:ad:31:91:bf:d4:c2:77:65:37:0c:a5:d0:52:ec:8f:af: 59:d5:62:78:f5:0c:cf:dd:e7:74:0e:9d:bd:df:86:c0:2d:35: bd:ee:9d:7c:2b:f8:95:7d:f4:47:5a:67:9a:96:e1:ab:0d:36: 2d:dc:85:21 -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZsR8yu97sc1yh1SKp1ceVP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEyMDk0NTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjJjNDcwZGIyNDQzNDgyZTE5NTIzOTUzYTc4YzFlZjBhMTY5NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14LO9GldiCanlooDQnlWD4sftnJ/ sH787mzSbZGfq1CoBk1qmjntmI/i/t2PWvbw2jNCZBJVsRT1prmB0MJnOy8sIQT1 rn1jHoAwuSUV4/+SM9YuyNwaAzbrSnhKktk4+Q+PQCMGMmHjcXZ4uH7upTwQupy7 M612/muXhEnGLS2uFlIPjAgSAxezxmIBxW75P0SJAXi3YRN55NvkvR2sdIRNfpk4 OYNUhRgvbhy1JKSqmqFiG2B5A9SyxvwGex6/Zzp/R+qDotS/tUudLiGc7cLFv4h5 zRawqElrjr3ufiZOyNbHQUeDx3KCp4FnFNR7GNEjkbkmwh2V3pIAZIbnHQIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFFssRw2yRDSC4ZUjlTp4we8KFpR5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzE0N2Fl NC03NzViLTRjNDgtYjBkYS1jMzc5ZjhjMjNmYzEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMTQ3YWU0 LTc3NWItNGM0OC1iMGRhLWMzNzlmOGMyM2ZjMS8xL1d5eEhEYkpFTklMaGxTT1ZP bmpCN3dvV2xIay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcGCCsGAQUF BwEHAQH/BCgwJjAMBAIAATAGAwQAwWtDMBYEAgACMBADBwAgAQZ8CUADBQEqBOHA MB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMYmgIDAzM3MA0GCSqGSIb3DQEBCwUA A4IBAQB7MJIB505gYsw1sRUbeKFJkQfJq7jOC1ynS8TTT6Lojl5Z7iEtQxW1+ogW nFay+gGXDlVkvQtLiCefU0EsfE6A1TPnK4EaA4W00x9xbHTckXvKshBWO8dZl123 4uYiT+i6uTTLg7HnH5J4an4l2bwGxlOYv5dXKyY57EGtey3K0BFb9A30t+bvGoMG IQXJUGrwJG9FJZbMQoZEApbVOoyci8Bdh+Qyilh/SZJ1igDn7ISyjR10nKV9F+hR jJuXJMnZaKGjqMSMCq0xkb/UwndlNwyl0FLsj69Z1WJ49QzP3ed0Dp2934bALTW9 7p18K/iVffRHWmealuGrDTYt3IUh -----END CERTIFICATE-----Generated at Fri Dec 19 08:12:57 2025 by rpki-client