This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer (raw, json) Hash identifier: o0Q6PHDjwy7tpVmtt+gDsw305vnj1MUvG2ScJIftEiU= Subject key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B31B6F267B905E18533203DE9174BACCF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 13:47:11 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 212485 IP: 193.163.12.0/24 IP: 2a0e:2140::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:b6:f2:67:b9:05:e1:85:33:20:3d:e9:17:4b:ac:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 13:47:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:94:a7:08:f6:9d:b0:36:70:cd:eb:89:b3: 2a:0f:52:5e:93:a7:1a:65:c3:b5:60:75:12:f2:99: f1:b4:08:88:db:cb:e8:dd:58:a6:21:e4:b4:d4:c8: f1:ba:1f:9c:88:b4:a8:60:2c:9f:e6:cd:37:14:34: d1:05:6e:f7:d5:19:e7:b9:b2:24:ac:de:68:be:1c: e4:47:e7:e7:3f:96:63:fb:b2:4e:69:09:0f:37:2c: a4:2e:2d:e9:e3:f0:a2:13:bd:77:3e:92:33:a8:de: 03:8d:a9:32:1b:3b:51:e6:8a:80:05:3d:74:4f:b0: 85:fe:c0:86:d9:d5:74:4c:4c:06:51:63:be:3a:7f: fc:94:58:f5:64:db:c8:06:8f:81:60:37:cc:bd:16: e1:30:97:57:a7:16:50:0b:9c:3d:df:88:5b:73:6d: 39:f0:f6:18:b2:e0:fb:36:4d:c9:3f:e9:2b:1f:5c: 93:5a:50:a6:1b:19:2a:90:8a:3f:9c:d0:46:46:12: 38:7b:79:5d:3e:04:6d:34:3a:33:01:8b:dc:3b:8c: e6:03:83:12:42:90:d6:df:69:94:b1:34:37:b4:77: 04:85:7f:cb:17:e7:57:50:6e:04:ae:eb:3f:43:c7: 94:c8:06:98:cd:6d:56:da:38:e2:fc:a4:00:44:a1: 70:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.12.0/24 IPv6: 2a0e:2140::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212485 Signature Algorithm: sha256WithRSAEncryption 3d:b2:56:18:6f:77:67:c2:91:af:0e:08:11:2b:5c:e6:58:6a: 5b:b1:4c:5f:02:8b:57:c4:99:ba:aa:c4:01:8c:e5:af:0a:36: 98:7c:82:33:81:74:82:ff:34:f8:dc:7b:f4:b4:85:e5:6e:f4: ff:e7:f6:12:7c:be:c9:ba:6e:94:fc:cf:95:de:2c:fa:e5:3e: fa:51:c2:8d:ca:9b:41:ee:11:b6:3a:02:35:20:40:98:91:56: 10:e0:8c:ca:3f:c7:78:79:41:fe:af:6e:4d:bc:63:70:bd:2a: a2:5e:b7:1c:f3:6f:fc:e4:e0:9a:9d:87:a0:a4:10:5c:b7:04: 75:a8:58:b6:74:c0:fd:d3:18:67:e1:74:68:90:cc:1f:60:ce: f2:3d:4f:49:e5:cc:38:2f:67:4c:ad:b4:e5:86:89:1f:6d:58: 01:b6:9d:9d:e4:ea:d5:62:28:c8:ac:d9:1c:87:ee:f9:e5:14: 0e:c2:c0:e4:76:f9:c6:6c:80:b8:72:f7:e3:de:22:7a:5b:3c: 41:a1:32:39:e1:6b:3b:5a:98:b2:21:5e:2b:da:f1:3e:23:f0: fe:da:1e:f0:46:17:19:b3:e1:ab:43:47:3a:68:58:62:48:44: ad:38:fd:4f:ec:c5:ca:b7:a8:9a:0c:05:48:fd:02:ee:c7:e1: a3:9d:37:08 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZsxtvJnuQXhhTMgPekXS6zPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTM0NzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzQzYmRjMGJiNTRmYjg2OWVlODNhMmJkOGJkODc3Mzk4OTNhNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn12Upwj2nbA2cM3ribMqD1Jek6ca ZcO1YHUS8pnxtAiI28vo3VimIeS01Mjxuh+ciLSoYCyf5s03FDTRBW731RnnubIk rN5ovhzkR+fnP5Zj+7JOaQkPNyykLi3p4/CiE713PpIzqN4DjakyGztR5oqABT10 T7CF/sCG2dV0TEwGUWO+On/8lFj1ZNvIBo+BYDfMvRbhMJdXpxZQC5w934hbc205 8PYYsuD7Nk3JP+krH1yTWlCmGxkqkIo/nNBGRhI4e3ldPgRtNDozAYvcO4zmA4MS QpDW32mUsTQ3tHcEhX/LF+dXUG4Erus/Q8eUyAaYzW1W2jji/KQARKFwkwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFFxDvcC7VPuGnug6K9i9h3OYk6QsMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2FiNmI3 Zi00ZjE5LTQ3YWQtODg5NS00ODk2YjIyOGYxODcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYWI2Yjdm LTRmMTktNDdhZC04ODk1LTQ4OTZiMjI4ZjE4Ny8xL1hFTzl3THRVLTRhZTZEb3Iy TDJIYzVpVHBDdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwaMMMA0EAgACMAcDBQMqDiFAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+BTANBgkqhkiG9w0BAQsFAAOCAQEAPbJWGG93Z8KR rw4IEStc5lhqW7FMXwKLV8SZuqrEAYzlrwo2mHyCM4F0gv80+Nx79LSF5W70/+f2 Eny+ybpulPzPld4s+uU++lHCjcqbQe4RtjoCNSBAmJFWEOCMyj/HeHlB/q9uTbxj cL0qol63HPNv/OTgmp2HoKQQXLcEdahYtnTA/dMYZ+F0aJDMH2DO8j1PSeXMOC9n TK205YaJH21YAbadneTq1WIoyKzZHIfu+eUUDsLA5Hb5xmyAuHL3494iels8QaEy OeFrO1qYsiFeK9rxPiPw/toe8EYXGbPhq0NHOmhYYkhErTj9T+zFyreomgwFSP0C 7sfho503CA== -----END CERTIFICATE-----Generated at Fri Dec 19 14:37:09 2025 by rpki-client