This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer (raw, json) Hash identifier: oce/2iO2qcBOqV4ltoMsJV+MqO1INQKEGRrPvahnlXw= Subject key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B30F50C7056972ADB050795CAF0691F6A Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 10:15:24 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 15765 AS: 16234 IP: 37.44.160.0/19 IP: 45.15.108.0/22 IP: 83.243.128.0/17 IP: 91.199.195.0/24 IP: 213.161.224.0/19 IP: 213.184.192.0/19 IP: 2a0b:5100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:f5:0c:70:56:97:2a:db:05:07:95:ca:f0:69:1f:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 10:15:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:b1:f3:cd:71:9e:a3:46:47:b3:cc:d9:1b: e9:19:5f:af:3f:f8:f8:2d:0d:b7:ac:e3:97:cf:c2: d3:79:98:87:7b:17:fd:de:93:c1:e3:14:f4:e8:e3: 4b:45:4b:ee:0e:f3:83:96:82:9f:c2:5e:43:c6:1d: d7:5d:6a:bc:d0:8d:dd:1e:61:1c:5a:69:b3:ac:85: ba:e3:0e:a6:0c:f1:ee:8e:98:68:c9:54:a6:40:e9: 65:a0:e2:c2:37:be:ea:2c:9e:ec:74:39:4f:5c:16: cf:81:97:40:ff:9e:d7:96:7a:0e:88:41:66:89:af: cc:53:7a:7c:65:e7:04:8a:37:50:b8:d8:6e:39:28: ca:c6:10:38:ed:2e:72:d0:ef:ae:60:f2:78:02:65: e5:5b:75:5e:35:6c:ef:3a:d2:2e:d8:9d:7d:53:f8: 98:45:81:bc:3b:10:b5:b5:48:06:7d:0e:d3:10:23: 87:1a:ec:f5:da:bb:60:5c:d2:2e:c6:5a:52:1a:0e: 73:92:e6:ac:7d:94:39:7f:a2:c9:6f:3a:85:ee:07: 1f:c4:a9:f5:95:d4:11:41:1c:3e:39:bb:85:de:6c: 03:6a:24:a4:5b:be:34:d4:03:34:9a:5c:45:f5:2d: fe:ea:6f:f7:1e:4c:b9:bc:cb:c8:a0:e2:e9:14:fe: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.160.0/19 45.15.108.0/22 83.243.128.0/17 91.199.195.0/24 213.161.224.0/19 213.184.192.0/19 IPv6: 2a0b:5100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15765 16234 Signature Algorithm: sha256WithRSAEncryption a2:0d:39:9d:df:d1:5f:1d:09:d7:61:d3:b4:30:47:1e:5d:d7: 37:2c:56:e8:51:8d:fb:5e:57:08:09:8a:81:bb:63:d4:fd:9a: b5:c5:3d:0c:a3:9b:ee:ee:b9:ce:2f:bc:95:30:c5:fd:0d:fa: ff:fa:cc:e4:88:83:70:fb:57:fb:43:52:7f:14:06:3c:e3:4d: e1:db:d7:a0:81:9c:dd:e8:c0:ee:d0:10:2e:46:17:52:79:28: 2c:56:97:20:3f:3b:28:1e:b4:da:37:66:ba:ee:a7:00:c2:cd: e4:45:87:cc:d7:4a:70:00:93:4c:19:d2:6e:3e:37:fd:65:28: a0:1b:b3:9d:74:8f:1b:38:70:a8:65:f5:fb:39:7d:d0:48:41: 8c:65:8a:8d:30:72:27:86:20:7d:df:03:49:f3:3f:8d:dd:a5: 4a:4e:dc:b8:80:be:20:7d:37:b8:08:f6:11:94:e2:36:d6:67: 09:c4:0a:a1:38:00:ea:52:2b:71:9a:e5:d4:a2:fb:5b:c9:d0: a7:34:bd:e8:d5:59:05:61:57:06:93:a7:10:0d:c5:12:1f:ba: 35:53:52:e3:2d:07:97:5a:b3:79:82:5d:13:7d:c7:d6:8c:90: b6:20:69:dc:b0:84:b2:70:ff:c9:cb:a7:45:80:f4:38:61:49: 21:7d:c9:15 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZsw9QxwVpcq2wUHlcrwaR9qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTAxNTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Q5MWNkY2MwYzFiMzYzYjQ5YmZjM2MyYWM1OGU5MzAwMmRmMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg+x881xnqNGR7PM2RvpGV+vP/j4 LQ23rOOXz8LTeZiHexf93pPB4xT06ONLRUvuDvODloKfwl5Dxh3XXWq80I3dHmEc WmmzrIW64w6mDPHujphoyVSmQOlloOLCN77qLJ7sdDlPXBbPgZdA/57XlnoOiEFm ia/MU3p8ZecEijdQuNhuOSjKxhA47S5y0O+uYPJ4AmXlW3VeNWzvOtIu2J19U/iY RYG8OxC1tUgGfQ7TECOHGuz12rtgXNIuxlpSGg5zkuasfZQ5f6LJbzqF7gcfxKn1 ldQRQRw+ObuF3mwDaiSkW7401AM0mlxF9S3+6m/3Hky5vMvIoOLpFP6C2wIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFHPZHNzAwbNjtJv8PCrFjpMALfB9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzZjODI3 ZS1iMDMxLTQ2NzUtYjM0OC1iMTU1MjQwOWI2ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNmM4Mjdl LWIwMzEtNDY3NS1iMzQ4LWIxNTUyNDA5YjZkMS8xL2M5a2MzTURCczJPMG1fdzhL c1dPa3dBdDhIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF BwEHAQH/BD0wOzAqBAIAATAkAwQFJSygAwQCLQ9sAwQHU/OAAwQAW8fDAwQF1aHg AwQF1bjAMA0EAgACMAcDBQMqC1EAMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAj2V AgI/ajANBgkqhkiG9w0BAQsFAAOCAQEAog05nd/RXx0J12HTtDBHHl3XNyxW6FGN +15XCAmKgbtj1P2atcU9DKOb7u65zi+8lTDF/Q36//rM5IiDcPtX+0NSfxQGPONN 4dvXoIGc3ejA7tAQLkYXUnkoLFaXID87KB602jdmuu6nAMLN5EWHzNdKcACTTBnS bj43/WUooBuznXSPGzhwqGX1+zl90EhBjGWKjTByJ4Ygfd8DSfM/jd2lSk7cuIC+ IH03uAj2EZTiNtZnCcQKoTgA6lIrcZrl1KL7W8nQpzS96NVZBWFXBpOnEA3FEh+6 NVNS4y0Hl1qzeYJdE33H1oyQtiBp3LCEsnD/ycunRYD0OGFJIX3JFQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:31 2025 by rpki-client