This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mJtzAF6_GeDG34diTlXwcnr0P_U.cer File: mJtzAF6_GeDG34diTlXwcnr0P_U.cer (raw, json) Hash identifier: b77rllEFq66X/dDHEI0ZN93sqrmbP44QY/FxhCLJ3lc= Subject key identifier: 98:9B:73:00:5E:BF:19:E0:C6:DF:87:62:4E:55:F0:72:7A:F4:3F:F5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B50A7DF1E8D5420FC6282517E0C2446AC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 24 Dec 2025 13:58:57 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 212529 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:a7:df:1e:8d:54:20:fc:62:82:51:7e:0c:24:46:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 24 13:58:57 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=989b73005ebf19e0c6df87624e55f0727af43ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:59:6b:df:d2:fa:e8:3b:98:d6:73:a7:69: 3d:94:d3:a3:81:d5:eb:84:a5:22:0f:9c:ce:9e:ce: c0:ca:cd:08:f7:f5:8c:36:74:eb:ea:6b:28:79:0f: 60:75:fa:30:69:42:33:42:88:21:b3:54:70:32:be: b7:34:2e:63:7b:5b:de:21:5b:ca:7e:64:27:cf:3a: 5a:2a:13:38:9d:f7:c7:f6:85:59:e3:4e:84:3b:ae: 6b:b6:67:7b:4d:b2:69:e3:e4:1a:7e:48:fa:23:03: af:b2:48:af:f3:b4:38:16:34:e1:38:c8:98:85:a5: d3:cd:f3:24:4a:24:f0:3c:96:ab:72:02:d6:58:e0: d6:d1:b4:b1:bd:2b:23:f3:5c:fe:7b:a2:0a:ee:5f: 4f:73:aa:f7:c0:dd:17:6e:da:d0:b0:a8:11:3b:b2: b3:1e:d5:16:61:8a:31:3f:83:89:89:09:1e:39:44: 03:e6:77:28:30:39:84:c4:d4:33:d7:a4:0c:a7:73: 99:0b:30:11:37:dd:49:bb:1c:cb:4b:8c:1c:2f:75: 16:db:4d:95:55:be:69:07:7a:a3:77:48:17:ff:29: 4e:fa:e7:fc:d6:b6:1b:1b:54:37:54:a9:83:bb:e5: a9:af:dd:ce:47:35:c5:4e:37:dd:c5:5f:38:66:b8: 9c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9B:73:00:5E:BF:19:E0:C6:DF:87:62:4E:55:F0:72:7A:F4:3F:F5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/62d7a8-9e0b-4ed5-b599-7643f4bddb3f/1/mJtzAF6_GeDG34diTlXwcnr0P_U.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212529 Signature Algorithm: sha256WithRSAEncryption 59:6a:f4:30:93:69:a0:4c:7d:b3:02:79:7c:fd:06:d6:26:fd: 1c:03:1c:52:75:62:de:e1:38:de:80:95:92:e2:2c:f2:59:5b: 5e:96:e9:4a:38:a0:1e:96:7f:f6:06:ad:4f:de:4a:59:a5:0a: 80:fa:61:13:7a:28:c2:7e:23:fa:5c:6f:a1:09:f0:f3:23:6c: c2:0f:7d:57:dc:f7:1f:30:54:c3:1a:de:b9:4b:ac:95:02:27: d6:6c:6c:e7:d0:d5:d9:6e:c8:77:a7:8f:43:b7:39:78:be:68: f6:5e:b5:ab:d0:cb:5b:55:af:10:4a:ea:c0:ac:c8:1c:9c:bb: c1:f4:fa:46:05:f9:4c:e3:89:2e:19:64:9d:79:3e:75:45:84: ba:32:61:a9:33:61:c7:f2:23:5a:c3:32:42:4c:ae:14:cf:11: 14:43:e0:b5:dc:30:60:8a:bf:10:57:8e:b4:4d:44:33:92:4e: ae:c1:6c:53:90:2c:49:7d:39:73:d4:bd:6f:a5:85:6d:98:f7: f4:a1:f7:aa:8e:35:3a:78:26:40:65:47:62:d6:2f:4b:4b:d0: 49:13:ad:f2:4c:86:0c:e1:a8:8b:8b:c8:6f:e4:d0:f2:82:8f: bc:7f:15:d8:68:8f:f2:b8:73:3a:6c:32:20:75:5b:a5:97:94: 1e:cc:79:62 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZtQp98ejVQg/GKCUX4MJEasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjI0MTM1ODU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODliNzMwMDVlYmYxOWUwYzZkZjg3NjI0ZTU1ZjA3MjdhZjQzZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno9Za9/S+ug7mNZzp2k9lNOjgdXr hKUiD5zOns7Ays0I9/WMNnTr6msoeQ9gdfowaUIzQoghs1RwMr63NC5je1veIVvK fmQnzzpaKhM4nffH9oVZ406EO65rtmd7TbJp4+Qafkj6IwOvskiv87Q4FjThOMiY haXTzfMkSiTwPJarcgLWWODW0bSxvSsj81z+e6IK7l9Pc6r3wN0XbtrQsKgRO7Kz HtUWYYoxP4OJiQkeOUQD5ncoMDmExNQz16QMp3OZCzARN91JuxzLS4wcL3UW202V Vb5pB3qjd0gX/ylO+uf81rYbG1Q3VKmDu+Wpr93ORzXFTjfdxV84Zric5QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJibcwBevxngxt+HYk5V8HJ69D/1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzYyZDdh OC05ZTBiLTRlZDUtYjU5OS03NjQzZjRiZGRiM2YvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvNjJkN2E4 LTllMGItNGVkNS1iNTk5LTc2NDNmNGJkZGIzZi8xL21KdHpBRjZfR2VERzM0ZGlU bFh3Y25yMFBfVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM+MTANBgkqhkiG9w0BAQsFAAOCAQEAWWr0MJNpoEx9 swJ5fP0G1ib9HAMcUnVi3uE43oCVkuIs8llbXpbpSjigHpZ/9gatT95KWaUKgPph E3oown4j+lxvoQnw8yNswg99V9z3HzBUwxreuUuslQIn1mxs59DV2W7Id6ePQ7c5 eL5o9l61q9DLW1WvEErqwKzIHJy7wfT6RgX5TOOJLhlknXk+dUWEujJhqTNhx/Ij WsMyQkyuFM8RFEPgtdwwYIq/EFeOtE1EM5JOrsFsU5AsSX05c9S9b6WFbZj39KH3 qo41OngmQGVHYtYvS0vQSROt8kyGDOGoi4vIb+TQ8oKPvH8V2GiP8rhzOmwyIHVb pZeUHsx5Yg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:28 2025 by rpki-client