This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qS3HvbydCXM23mJDtVCrFzN16jk.cer File: qS3HvbydCXM23mJDtVCrFzN16jk.cer (raw, json) Hash identifier: B49OIXWqnhEZEbRNBOIHYaqdEHQ+iNQGBcIOL1y5mo0= Subject key identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B126F10084FE52FABE8F79BF0B717F1C3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 12:00:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 212632 IP: 193.194.192.0/18 IP: 212.39.32.0/19 IP: 2a12:1580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:6f:10:08:4f:e5:2f:ab:e8:f7:9b:f0:b7:17:f1:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 12 12:00:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a92dc7bdbc9d097336de6243b550ab173375ea39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:e1:05:e0:c8:68:6b:0b:bb:71:33:04:2d: 66:75:61:2e:ae:42:02:f0:24:b5:bb:e4:31:3f:65: a9:9c:e3:d3:ec:fb:73:03:f1:c6:da:97:1b:f1:1d: d3:b2:fd:67:7c:6e:4b:a8:bf:5e:6b:38:6c:ea:c3: cd:83:72:30:4a:ea:ef:1c:1b:a6:ba:c0:bd:02:57: 46:7a:a0:2b:0a:c4:99:4c:51:9f:01:27:e1:56:15: 24:c8:b3:27:ce:69:bf:59:9c:86:8f:91:91:56:65: 72:d5:84:70:b6:8a:aa:d3:1f:e0:b6:70:4a:ee:5f: 37:4b:3f:7f:cf:f3:37:3e:b9:a1:07:f5:1c:af:e0: cc:d9:9b:49:4d:4b:1f:1b:02:2e:a3:4e:58:bc:a0: 27:84:9b:3c:2c:ca:a1:3e:64:f6:65:e7:39:d1:2b: 98:d9:b3:1a:24:0a:d0:7c:7f:ce:c5:4d:b2:62:37: 9c:d1:76:c4:81:f1:c8:c4:1b:34:86:88:71:eb:88: 57:e7:04:e8:7c:a3:b3:a4:69:be:a1:64:f0:7d:b6: 22:af:53:3a:78:cd:e5:4a:4c:ae:cb:f3:6a:3e:fc: 7b:91:df:bf:3b:40:78:62:1e:55:d8:29:a9:44:ce: 59:60:32:d3:2d:24:6e:bb:db:dc:cb:11:2e:8f:32: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2D:C7:BD:BC:9D:09:73:36:DE:62:43:B5:50:AB:17:33:75:EA:39 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0b4629-39cc-4e6c-9e1c-991b7aee746c/1/qS3HvbydCXM23mJDtVCrFzN16jk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.192.0/18 212.39.32.0/19 IPv6: 2a12:1580::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 212632 Signature Algorithm: sha256WithRSAEncryption 5d:36:85:b7:ee:7c:19:54:cb:3b:d2:4d:be:a2:7d:73:41:52: 0b:d8:fe:39:cb:b2:2b:ed:6e:1b:88:fe:2f:c3:c9:e5:50:0d: 19:20:7a:af:f7:c0:0d:0d:f9:f5:ac:6c:8f:ad:ae:e7:e0:5e: 5d:aa:2f:94:48:38:32:05:71:20:bf:14:2a:9f:94:1e:27:c6: 10:28:28:5a:e9:4c:b4:7e:c2:26:1a:6a:3d:11:27:6d:69:3e: af:b9:16:8f:ac:17:9d:75:0b:33:9d:22:85:ed:35:0f:a5:a3: 7e:21:8b:d6:dd:bc:d6:24:91:fe:07:f6:91:8a:12:17:01:e5: 4e:43:46:ce:4f:f1:94:83:f7:6a:9d:71:0b:46:66:d5:67:df: 2b:d6:90:cf:0f:d6:ea:9a:a2:d5:19:33:71:71:29:a8:7d:77: 48:62:00:8c:16:09:c2:da:24:7f:23:b4:68:77:bf:10:9a:03: 3d:7d:87:7f:7f:76:5b:e6:f2:6e:03:a4:11:53:97:aa:a8:d3: 8f:b3:19:4e:b1:58:9d:f8:c6:25:1f:81:5f:53:48:99:8e:02: 77:cc:ac:be:45:a2:31:83:1c:0c:b3:f7:9c:53:6e:9b:0f:9d: ee:e3:54:f9:07:c7:88:ce:30:cf:e5:83:3c:43:cb:79:5f:3e: 16:25:1c:22 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZsSbxAIT+Uvq+j3m/C3F/HDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEyMTIwMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTJkYzdiZGJjOWQwOTczMzZkZTYyNDNiNTUwYWIxNzMzNzVlYTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6fhBeDIaGsLu3EzBC1mdWEurkIC 8CS1u+QxP2WpnOPT7PtzA/HG2pcb8R3Tsv1nfG5LqL9eazhs6sPNg3IwSurvHBum usC9AldGeqArCsSZTFGfASfhVhUkyLMnzmm/WZyGj5GRVmVy1YRwtoqq0x/gtnBK 7l83Sz9/z/M3PrmhB/Ucr+DM2ZtJTUsfGwIuo05YvKAnhJs8LMqhPmT2Zec50SuY 2bMaJArQfH/OxU2yYjec0XbEgfHIxBs0hohx64hX5wTofKOzpGm+oWTwfbYir1M6 eM3lSkyuy/NqPvx7kd+/O0B4Yh5V2CmpRM5ZYDLTLSRuu9vcyxEujzLAQQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFKktx728nQlzNt5iQ7VQqxczdeo5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzBiNDYy OS0zOWNjLTRlNmMtOWUxYy05OTFiN2FlZTc0NmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvMGI0NjI5 LTM5Y2MtNGU2Yy05ZTFjLTk5MWI3YWVlNzQ2Yy8xL3FTM0h2YnlkQ1hNMjNtSkR0 VkNyRnpOMTZqay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQGwcLAAwQF1CcgMA0EAgACMAcDBQMqEhWAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM+mDANBgkqhkiG9w0BAQsFAAOCAQEAXTaF t+58GVTLO9JNvqJ9c0FSC9j+OcuyK+1uG4j+L8PJ5VANGSB6r/fADQ359axsj62u 5+BeXaovlEg4MgVxIL8UKp+UHifGECgoWulMtH7CJhpqPREnbWk+r7kWj6wXnXUL M50ihe01D6WjfiGL1t281iSR/gf2kYoSFwHlTkNGzk/xlIP3ap1xC0Zm1WffK9aQ zw/W6pqi1RkzcXEpqH13SGIAjBYJwtokfyO0aHe/EJoDPX2Hf392W+bybgOkEVOX qqjTj7MZTrFYnfjGJR+BX1NImY4Cd8ysvkWiMYMcDLP3nFNumw+d7uNU+QfHiM4w z+WDPEPLeV8+FiUcIg== -----END CERTIFICATE-----Generated at Tue Dec 16 03:13:10 2025 by rpki-client