This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer File: arsX3XvH8gmcVO73hn2fOaeSk4Q.cer (raw, json) Hash identifier: hY7gzGrKD5bZSRQ8KtAfDnjByEwUMx2gvkFGuJc4QwQ= Subject key identifier: 6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B273E668921A9FEB43C746AB26F4BC353 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 12:59:19 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208466 IP: 45.135.84.0/22 IP: 2a0e:89c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3e:66:89:21:a9:fe:b4:3c:74:6a:b2:6f:4b:c3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 12:59:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:ff:ba:e6:20:0b:b4:27:04:3b:60:2a:28: a9:fa:8e:52:60:1f:ca:f8:df:dd:de:14:12:0a:be: 13:fe:a5:2b:02:0e:a0:e1:64:6e:ea:23:21:8b:64: 36:a9:ee:08:d7:80:2e:ad:5f:7c:11:fd:8a:a3:f4: 79:e3:47:16:cf:91:18:e1:f8:d1:cc:0e:15:92:df: 38:fd:d9:b2:8c:7f:fe:93:3a:b4:17:c4:71:93:4c: d1:c7:31:24:00:61:5b:e4:61:12:3f:ce:ef:3a:43: 6e:de:91:b3:69:f8:cb:5c:27:48:e6:9f:b2:fb:91: cf:46:06:52:0f:43:07:9b:38:15:73:89:47:a2:07: 64:75:c4:dc:15:b6:31:00:d6:b8:64:2e:56:5f:33: 49:7d:a3:51:4b:34:af:c9:ed:9a:c3:24:a4:97:26: 71:03:2b:ab:67:ab:97:43:60:84:16:f1:26:53:10: 96:21:b1:b6:5f:3e:4b:7e:0b:16:95:6a:1f:a8:9f: 89:99:72:5e:90:97:3d:7e:b7:72:08:ae:49:0b:76: a0:27:1b:7d:41:2f:76:10:1f:ec:21:0e:83:2a:6b: f5:0d:4d:5f:5e:e3:af:a2:7c:52:27:7e:3e:06:27: 45:10:9d:de:ff:73:d8:3c:9a:26:e0:cc:15:25:da: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.84.0/22 IPv6: 2a0e:89c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208466 Signature Algorithm: sha256WithRSAEncryption 8e:be:19:9c:fd:28:92:5d:35:d1:31:7e:39:a0:c1:69:b6:3f: 05:8d:b6:b5:e3:ea:01:26:d2:a5:bc:01:5e:8f:80:96:0d:c8: 6c:9d:e9:f9:f2:5c:a7:10:cc:e1:fb:8c:fb:02:fd:79:43:30: 29:01:5a:ae:02:ee:60:99:38:4c:af:55:1c:c8:01:5f:35:be: 2a:82:1f:eb:b1:9d:7e:81:a2:e1:7a:e1:18:ef:60:45:af:58: 31:7d:c3:c4:09:57:82:cf:69:7d:06:06:c8:0e:f3:d0:bc:a5: 0d:96:d8:20:aa:75:96:a8:e8:c3:da:5f:3f:90:2b:6f:aa:1e: 61:64:a5:2a:8e:43:1e:b1:d4:0a:fa:d6:70:d5:40:ba:d6:fd: d2:18:a6:e1:83:ca:84:36:05:0e:e0:c8:ee:89:62:b0:2c:0b: 0e:ab:6a:63:09:e8:e1:4d:16:97:4f:08:de:2a:db:68:04:5e: 35:3e:e3:74:69:f8:97:1b:e0:2d:dc:6d:2d:fa:ba:a6:92:4e: f4:35:a1:dc:11:05:87:8b:03:b0:4a:18:f5:e0:aa:32:da:66: 1c:4c:b5:fb:95:03:9c:ae:02:ef:32:74:dc:ab:18:f6:06:b8: f1:aa:35:29:a5:66:ad:50:cb:2b:9a:52:9d:46:a8:19:66:d8: a8:27:bc:47 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZsnPmaJIan+tDx0arJvS8NTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MTI1OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWJiMTdkZDdiYzdmMjA5OWM1NGVlZjc4NjdkOWYzOWE3OTI5Mzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6D/uuYgC7QnBDtgKiip+o5SYB/K +N/d3hQSCr4T/qUrAg6g4WRu6iMhi2Q2qe4I14AurV98Ef2Ko/R540cWz5EY4fjR zA4Vkt84/dmyjH/+kzq0F8Rxk0zRxzEkAGFb5GESP87vOkNu3pGzafjLXCdI5p+y +5HPRgZSD0MHmzgVc4lHogdkdcTcFbYxANa4ZC5WXzNJfaNRSzSvye2awySklyZx AyurZ6uXQ2CEFvEmUxCWIbG2Xz5LfgsWlWofqJ+JmXJekJc9frdyCK5JC3agJxt9 QS92EB/sIQ6DKmv1DU1fXuOvonxSJ34+BidFEJ3e/3PYPJom4MwVJdqQ4QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFGq7F917x/IJnFTu94Z9nzmnkpOEMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzYyNjFk ZC1hNWRhLTQ1MGQtOWE3Mi03ZjE4NjE3ZWE2MzgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvNjI2MWRk LWE1ZGEtNDUwZC05YTcyLTdmMTg2MTdlYTYzOC8xL2Fyc1gzWHZIOGdtY1ZPNzNo bjJmT2FlU2s0US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLYdUMA0EAgACMAcDBQMqDonAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMuUjANBgkqhkiG9w0BAQsFAAOCAQEAjr4ZnP0okl01 0TF+OaDBabY/BY22tePqASbSpbwBXo+Alg3IbJ3p+fJcpxDM4fuM+wL9eUMwKQFa rgLuYJk4TK9VHMgBXzW+KoIf67GdfoGi4XrhGO9gRa9YMX3DxAlXgs9pfQYGyA7z 0LylDZbYIKp1lqjow9pfP5Arb6oeYWSlKo5DHrHUCvrWcNVAutb90him4YPKhDYF DuDI7olisCwLDqtqYwno4U0Wl08I3irbaAReNT7jdGn4lxvgLdxtLfq6ppJO9DWh 3BEFh4sDsEoY9eCqMtpmHEy1+5UDnK4C7zJ03KsY9ga48ao1KaVmrVDLK5pSnUao GWbYqCe8Rw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:22 2025 by rpki-client