This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ilqFDZoDAtO1zC3firM8qrfM5KY.cer File: ilqFDZoDAtO1zC3firM8qrfM5KY.cer (raw, json) Hash identifier: Mr4II0qEalA/UkY4wfWHtjI1hdM4waMg+ZAm3qnvqd8= Subject key identifier: 8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B46B7BB9184ABEC354D975C849A96B3D6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 22 Dec 2025 15:40:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 215619 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:b7:bb:91:84:ab:ec:35:4d:97:5c:84:9a:96:b3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 22 15:40:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8a5a850d9a0302d3b5cc2ddf8ab33caab7cce4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:1a:44:c7:84:d1:ac:cc:20:41:bb:4e:c2: e1:17:cb:fd:fa:c8:5f:d6:8a:09:0c:7b:02:55:46: 75:6f:83:c3:e6:99:77:c2:ff:bb:00:b4:91:a7:a9: 27:69:72:f8:f1:2e:26:f0:7e:f6:9a:ef:85:e7:42: ca:dc:22:b0:a5:7b:4a:a2:40:d1:6d:80:63:39:7c: ca:74:f8:64:e4:e3:87:f5:4b:11:61:5e:0a:66:de: c2:a0:6f:02:34:4b:3a:16:fe:a8:34:de:66:68:14: 8d:a6:7a:01:d1:b3:ca:60:cf:5b:2a:e3:46:9c:fd: 13:d2:5f:87:b8:02:66:cb:e0:0e:6f:77:02:a0:1d: 3b:a3:01:aa:a6:0e:c3:8b:fd:8e:69:8d:2b:93:0f: 4e:ac:29:4b:15:65:56:93:52:8a:24:a7:f5:4d:08: c9:55:a3:01:a0:1e:33:0e:ca:fa:e3:a3:bf:b8:ec: 87:57:08:4b:c3:cd:a1:e2:8a:c4:7f:9c:a6:7f:5c: ec:85:1b:d6:60:f5:24:47:b6:5b:df:fb:ac:f6:0e: 35:6c:e0:38:16:07:75:fa:18:71:ab:ab:cc:ea:f3: 9e:fe:50:99:bd:58:0d:cc:6b:8c:6d:d5:c6:d4:83: 3c:d7:a0:3f:46:23:70:75:ba:cf:21:8a:29:a7:86: 15:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5A:85:0D:9A:03:02:D3:B5:CC:2D:DF:8A:B3:3C:AA:B7:CC:E4:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3195dc-2da5-448c-a8f3-6f5cf79f0064/1/ilqFDZoDAtO1zC3firM8qrfM5KY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 215619 Signature Algorithm: sha256WithRSAEncryption 5b:91:24:8b:d2:c8:36:93:1e:ef:4b:40:bd:17:ea:df:d3:79: 30:fd:c0:ba:64:1c:62:0f:1c:c0:1e:d4:94:27:9a:f0:55:e7: 97:9d:f0:d6:75:c6:b1:f1:11:1d:56:8c:ae:ba:7b:3c:bd:44: 4d:e3:c3:a2:8b:0c:ab:9e:d8:ed:44:f5:37:8d:9d:1b:e7:92: 74:5c:ad:38:d8:31:74:1c:ea:9e:cf:80:9c:cc:83:cb:b4:2c: 67:dd:52:4e:d5:79:b5:8b:d8:5a:72:5f:9f:d2:8e:a5:db:eb: 57:95:7f:eb:03:9b:b5:b6:13:7a:d5:c4:86:47:2e:21:c1:04: 3e:52:9a:fb:e4:36:7b:b5:22:46:6b:1a:b8:04:a2:a6:05:b1: e8:b8:c5:0b:77:ae:d4:d8:5c:e0:99:e2:21:20:1b:d2:7c:20: c1:27:32:1e:73:2d:e4:44:87:c6:58:a9:92:e8:2a:ca:35:4e: 8c:b7:8b:3e:00:f5:29:38:a6:d9:51:a7:45:7e:96:e3:ec:b8: 15:a5:65:ff:59:1d:f9:2a:0e:8e:39:99:9a:9a:0f:de:75:bb: 0e:4c:d7:de:35:49:39:6a:8e:ed:53:10:8e:90:9f:c4:31:7a: 01:e0:0a:37:a3:71:bf:c6:c8:d7:0d:3e:32:56:e7:d9:a7:6f: 07:3e:b0:39 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZtGt7uRhKvsNU2XXISalrPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIyMTU0MDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTVhODUwZDlhMDMwMmQzYjVjYzJkZGY4YWIzM2NhYWI3Y2NlNGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAsaRMeE0azMIEG7TsLhF8v9+shf 1ooJDHsCVUZ1b4PD5pl3wv+7ALSRp6knaXL48S4m8H72mu+F50LK3CKwpXtKokDR bYBjOXzKdPhk5OOH9UsRYV4KZt7CoG8CNEs6Fv6oNN5maBSNpnoB0bPKYM9bKuNG nP0T0l+HuAJmy+AOb3cCoB07owGqpg7Di/2OaY0rkw9OrClLFWVWk1KKJKf1TQjJ VaMBoB4zDsr646O/uOyHVwhLw82h4orEf5ymf1zshRvWYPUkR7Zb3/us9g41bOA4 Fgd1+hhxq6vM6vOe/lCZvVgNzGuMbdXG1IM816A/RiNwdbrPIYopp4YVXwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFIpahQ2aAwLTtcwt34qzPKq3zOSmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI0LzMxOTVk Yy0yZGE1LTQ0OGMtYThmMy02ZjVjZjc5ZjAwNjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvMzE5NWRj LTJkYTUtNDQ4Yy1hOGYzLTZmNWNmNzlmMDA2NC8xL2lscUZEWm9EQXRPMXpDM2Zp ck04cXJmTTVLWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNKQzANBgkqhkiG9w0BAQsFAAOCAQEAW5Eki9LINpMe 70tAvRfq39N5MP3AumQcYg8cwB7UlCea8FXnl53w1nXGsfERHVaMrrp7PL1ETePD oosMq57Y7UT1N42dG+eSdFytONgxdBzqns+AnMyDy7QsZ91STtV5tYvYWnJfn9KO pdvrV5V/6wObtbYTetXEhkcuIcEEPlKa++Q2e7UiRmsauASipgWx6LjFC3eu1Nhc 4JniISAb0nwgwScyHnMt5ESHxlipkugqyjVOjLeLPgD1KTim2VGnRX6W4+y4FaVl /1kd+SoOjjmZmpoP3nW7DkzX3jVJOWqO7VMQjpCfxDF6AeAKN6Nxv8bI1w0+Mlbn 2advBz6wOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:33 2025 by rpki-client