This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/spAqmJWp6izi7CS799ryNABY5JQ.cer File: spAqmJWp6izi7CS799ryNABY5JQ.cer (raw, json) Hash identifier: xJC3czuZV4nyJVuM+8B6khG69nYmHVc/pi/eDp7/CyY= Subject key identifier: B2:90:2A:98:95:A9:EA:2C:E2:EC:24:BB:F7:DA:F2:34:00:58:E4:94 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AFEA88CC70A3C81D388C7928B5A60090F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/spAqmJWp6izi7CS799ryNABY5JQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 08 Dec 2025 15:50:50 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 216423 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:a8:8c:c7:0a:3c:81:d3:88:c7:92:8b:5a:60:09:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 8 15:50:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b2902a9895a9ea2ce2ec24bbf7daf2340058e494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:75:81:3d:9f:2d:7d:ef:b0:38:25:7c:de:c4: 31:9c:e0:9f:9c:d9:c2:38:3c:ea:97:43:31:1c:16: 51:11:8e:8e:44:ef:98:dc:97:2a:ba:39:d1:63:8f: 3a:fa:82:c1:97:1f:d5:f5:e7:e5:b3:4a:42:d9:37: 21:dc:5d:af:c2:f8:be:c5:56:5d:d8:f0:f4:75:03: ef:a7:c4:23:01:bd:cc:3e:69:9d:fe:5c:5c:2b:67: 60:f6:61:e0:29:9a:69:7b:31:ff:7a:3c:33:33:b1: 2d:54:93:10:b3:78:9b:87:b7:76:f5:74:79:aa:86: 23:d2:4c:95:d8:85:64:3f:0c:f7:5c:4c:93:3b:ee: f3:c7:9d:a6:1b:ae:b7:b8:88:99:54:0f:39:af:1d: 9b:0e:e6:27:e0:7a:22:8e:e5:60:ca:82:49:2b:39: 67:c4:40:07:ab:ee:03:45:f4:63:b1:01:a9:81:86: ec:0d:d5:af:98:eb:eb:76:02:08:a1:f3:4a:bb:80: 80:2b:8e:36:8f:f9:19:49:59:1c:1a:e6:dc:74:94: 43:26:84:91:8f:20:74:08:99:ae:37:34:4c:03:9e: a2:e7:3d:e9:32:45:88:9e:5b:f2:18:9c:6c:57:4b: a8:34:4f:48:76:d6:22:6f:ea:4d:cb:81:a9:86:34: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:90:2A:98:95:A9:EA:2C:E2:EC:24:BB:F7:DA:F2:34:00:58:E4:94 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/85b463-9870-4549-97de-3cabe94b4356/1/spAqmJWp6izi7CS799ryNABY5JQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 216423 Signature Algorithm: sha256WithRSAEncryption 0a:e2:51:ee:92:62:42:f3:c0:db:af:e2:da:8c:10:b7:ef:44: 98:e4:8c:9d:7f:5b:08:9c:b6:99:22:50:0d:6e:c9:05:7d:90: 61:0a:95:d1:e1:83:0f:86:e8:18:b1:a7:bb:29:ed:58:57:a8: 3f:1b:7b:90:b0:07:4e:fd:63:63:56:47:c7:85:2d:d5:1c:0d: ac:c4:b1:c4:76:5a:7e:d3:cd:2e:a2:c1:31:8a:74:e0:0b:2b: df:bd:e4:7d:ed:44:40:6f:2c:ca:7a:95:32:33:bb:82:3d:5e: 45:82:a8:e1:35:7f:8e:29:2f:11:96:9f:64:15:17:79:a8:d3: 20:02:7f:83:b9:81:68:a1:47:92:95:96:75:17:94:51:c6:ec: b0:3c:3f:cc:93:bb:82:20:c5:f1:9d:4f:f4:63:a0:6a:51:9f: 3d:f5:14:a7:a7:dd:2d:58:5f:49:ce:2a:60:f1:f2:e4:00:39: 67:35:7c:6c:46:dd:a4:26:d7:51:ac:6e:57:eb:12:b3:8e:dc: 06:f1:70:f6:9f:53:36:a3:80:b7:60:7c:01:28:24:d4:5f:02: 1b:cf:88:f8:d5:d9:b0:c3:49:1c:e2:01:57:74:90:d8:23:84: 23:9b:d0:d1:57:55:f5:f0:b7:9e:e4:93:fb:e1:23:28:2c:9b: 48:a7:99:c1 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZr+qIzHCjyB04jHkotaYAkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA4MTU1MDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjkwMmE5ODk1YTllYTJjZTJlYzI0YmJmN2RhZjIzNDAwNThlNDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HWBPZ8tfe+wOCV83sQxnOCfnNnC ODzql0MxHBZREY6ORO+Y3JcqujnRY486+oLBlx/V9efls0pC2Tch3F2vwvi+xVZd 2PD0dQPvp8QjAb3MPmmd/lxcK2dg9mHgKZppezH/ejwzM7EtVJMQs3ibh7d29XR5 qoYj0kyV2IVkPwz3XEyTO+7zx52mG663uIiZVA85rx2bDuYn4HoijuVgyoJJKzln xEAHq+4DRfRjsQGpgYbsDdWvmOvrdgIIofNKu4CAK442j/kZSVkcGubcdJRDJoSR jyB0CJmuNzRMA56i5z3pMkWInlvyGJxsV0uoNE9IdtYib+pNy4GphjTN1wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLKQKpiVqeos4uwku/fa8jQAWOSUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZkLzg1YjQ2 My05ODcwLTQ1NDktOTdkZS0zY2FiZTk0YjQzNTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQvODViNDYz LTk4NzAtNDU0OS05N2RlLTNjYWJlOTRiNDM1Ni8xL3NwQXFtSldwNml6aTdDUzc5 OXJ5TkFCWTVKUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNNZzANBgkqhkiG9w0BAQsFAAOCAQEACuJR7pJiQvPA 26/i2owQt+9EmOSMnX9bCJy2mSJQDW7JBX2QYQqV0eGDD4boGLGnuyntWFeoPxt7 kLAHTv1jY1ZHx4Ut1RwNrMSxxHZaftPNLqLBMYp04Asr373kfe1EQG8synqVMjO7 gj1eRYKo4TV/jikvEZafZBUXeajTIAJ/g7mBaKFHkpWWdReUUcbssDw/zJO7giDF 8Z1P9GOgalGfPfUUp6fdLVhfSc4qYPHy5AA5ZzV8bEbdpCbXUaxuV+sSs47cBvFw 9p9TNqOAt2B8ASgk1F8CG8+I+NXZsMNJHOIBV3SQ2COEI5vQ0VdV9fC3nuST++Ej KCybSKeZwQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:25 2025 by rpki-client