This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer File: cNvqB1PfCD5XgrufOAtdeZy3igY.cer (raw, json) Hash identifier: YCxixKkugDMCotSd300pLOjU5l0DohZuft3Xnqmmvd4= Subject key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B02FC0F66D2ADD92E2C1E064AEC97452E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 09 Dec 2025 12:00:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 132.252.0.0/16 IP: 134.91.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:fc:0f:66:d2:ad:d9:2e:2c:1e:06:4a:ec:97:45:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 9 12:00:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70dbea0753df083e5782bb9f380b5d799cb78a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:9c:fb:fe:78:05:ba:ee:3d:4e:77:ef:1a: c6:10:48:30:fb:f9:c3:91:0e:63:b9:99:c5:23:80: f7:ac:2f:aa:ce:b7:35:8e:7e:a1:59:2c:3d:b2:6b: 7c:6a:f5:dd:59:38:f1:a1:23:e1:5f:9a:af:a3:01: 52:ce:05:49:0e:7c:e9:71:72:58:93:d1:a8:b9:4b: bd:7b:6d:40:e2:60:3b:54:27:cd:3f:94:22:2b:52: 56:9b:4c:33:89:2b:6f:3a:cf:ac:23:23:a4:cb:be: eb:f3:c4:16:c8:f6:51:9f:60:d8:26:4e:71:5f:b0: ed:d3:2a:ee:38:58:aa:d4:c6:2f:fb:43:c4:96:12: 9d:8d:aa:0b:f2:10:1f:27:91:3f:76:95:4e:6b:dc: b0:e7:d3:b2:16:73:1d:53:34:5b:08:11:ba:b7:7a: d9:3b:d0:de:e0:b4:66:af:9f:c0:23:f3:55:44:b8: d5:ca:7c:0d:d8:89:54:f5:6b:ad:43:25:b8:47:bf: b5:1a:f4:b2:53:8e:1a:af:d3:bf:a1:94:17:d8:e0: 08:ca:05:8e:d7:45:3c:e2:54:6b:a6:ba:4b:d8:e3: f6:07:0f:52:10:07:56:ae:83:10:80:db:f7:5a:f2: 5d:85:64:5d:b4:fd:62:2e:62:27:10:94:49:8a:84: cc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.252.0.0/16 134.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption 80:66:e2:5b:37:14:c2:bf:e3:c7:22:d0:1c:19:a1:61:70:41: 73:90:d8:fe:29:7f:9d:f7:bb:d2:6d:c5:93:5f:48:6e:5f:45: 3f:5d:cb:4c:f7:aa:79:2d:03:68:8f:f9:67:b0:3e:da:9c:06: f7:16:3b:09:d2:54:90:d6:0d:22:57:a9:71:73:1f:e8:c7:75: f9:fc:95:d5:31:3e:d1:54:e4:a0:aa:dd:39:33:5f:65:f7:e6: 8e:31:87:b1:aa:1a:16:5f:f1:38:ac:5e:46:6e:f4:92:d5:bf: 35:ee:f6:e5:e7:00:e7:a9:c8:bf:95:16:96:6c:14:08:c5:77: a7:2f:e3:ba:d9:73:78:3e:81:62:00:2f:24:41:4c:20:33:f6: 2a:99:52:39:8d:e4:7d:37:d0:b4:55:35:ac:83:2d:e6:3e:af: b0:f6:72:b8:dc:22:1b:cf:ea:5f:39:6f:03:48:68:67:54:21: 80:1e:40:fb:53:1e:f3:cd:00:e8:63:c7:ae:bf:a6:3c:3f:5e: 5d:c2:6c:2d:2a:b5:5b:15:99:e3:7c:0e:d9:49:f9:8c:44:e0: 64:bd:52:f3:a3:5e:d3:b9:98:6a:80:e5:5c:38:22:58:97:3d: ce:2d:85:93:6a:94:1f:14:2e:01:9a:c6:1e:e4:12:02:b0:78: fd:af:ea:ce -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZsC/A9m0q3ZLiweBkrsl0UuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA5MTIwMDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGRiZWEwNzUzZGYwODNlNTc4MmJiOWYzODBiNWQ3OTljYjc4YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovec+/54BbruPU537xrGEEgw+/nD kQ5juZnFI4D3rC+qzrc1jn6hWSw9smt8avXdWTjxoSPhX5qvowFSzgVJDnzpcXJY k9GouUu9e21A4mA7VCfNP5QiK1JWm0wziStvOs+sIyOky77r88QWyPZRn2DYJk5x X7Dt0yruOFiq1MYv+0PElhKdjaoL8hAfJ5E/dpVOa9yw59OyFnMdUzRbCBG6t3rZ O9De4LRmr5/AI/NVRLjVynwN2IlU9WutQyW4R7+1GvSyU44ar9O/oZQX2OAIygWO 10U84lRrprpL2OP2Bw9SEAdWroMQgNv3WvJdhWRdtP1iLmInEJRJioTM6wIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFHDb6gdT3wg+V4K7nzgLXXmct4oGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5L2RlZWMy ZS0wY2Q2LTQxMTMtYjJiOS0yYTBjZjEzMTczZDgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvZGVlYzJl LTBjZDYtNDExMy1iMmI5LTJhMGNmMTMxNzNkOC8xL2NOdnFCMVBmQ0Q1WGdydWZP QXRkZVp5M2lnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF BwEHAQH/BBQwEjAQBAIAATAKAwMAhPwDAwCGWzANBgkqhkiG9w0BAQsFAAOCAQEA gGbiWzcUwr/jxyLQHBmhYXBBc5DY/il/nfe70m3Fk19Ibl9FP13LTPeqeS0DaI/5 Z7A+2pwG9xY7CdJUkNYNIlepcXMf6Md1+fyV1TE+0VTkoKrdOTNfZffmjjGHsaoa Fl/xOKxeRm70ktW/Ne725ecA56nIv5UWlmwUCMV3py/jutlzeD6BYgAvJEFMIDP2 KplSOY3kfTfQtFU1rIMt5j6vsPZyuNwiG8/qXzlvA0hoZ1QhgB5A+1Me880A6GPH rr+mPD9eXcJsLSq1WxWZ43wO2Un5jETgZL1S86Ne07mYaoDlXDgiWJc9zi2Fk2qU HxQuAZrGHuQSArB4/a/qzg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:28 2025 by rpki-client