This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer File: txOOSEDKo6G9UYUnFKE1-w6DfEU.cer (raw, json) Hash identifier: KWZwofnZmwdN6tuTO7snnMNx2oF/JDYyHB5LviQUdws= Subject key identifier: B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3207C2A4E7C28D9D1BE8F0122F291FE7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 15:15:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 216359 IP: 194.153.212.0/23 IP: 195.128.131.0/24 IP: 2a13:8840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:07:c2:a4:e7:c2:8d:9d:1b:e8:f0:12:2f:29:1f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 15:15:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b7138e4840caa3a1bd51852714a135fb0e837c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:c3:f3:c3:3a:f2:14:61:5b:7e:b1:24:b7: 36:11:d1:84:c0:b9:7e:f3:9a:09:91:31:79:14:02: c5:17:f0:95:ae:73:78:15:13:9e:6b:9c:b9:b8:46: 5c:1e:e4:1e:4f:ce:b5:c8:67:72:38:17:b1:40:b5: 45:46:43:ed:e5:a4:6a:9f:5a:91:ec:6e:b8:7b:d8: 1d:32:30:d6:05:b1:68:49:ce:d3:84:f5:a1:41:ba: d0:3b:ab:26:b4:f0:69:2e:ba:0d:8b:72:74:7c:78: f6:9a:d0:9c:0f:43:ab:b6:d0:98:18:95:e9:c2:83: 8c:b1:91:6a:25:83:46:7c:46:24:2d:2d:12:f5:a2: cb:15:8c:44:2c:d7:fe:92:12:e2:a1:91:de:af:a8: 7e:ea:db:c1:fb:de:67:2b:54:c2:29:88:47:71:f0: 6f:f4:92:96:bb:36:47:5b:10:c7:d8:6f:6d:4a:43: eb:d6:fe:f0:46:08:43:6a:de:54:cc:a9:0c:2b:9a: d6:f5:e2:80:f5:6c:d9:e6:88:7f:5c:58:fe:ad:1a: 69:f9:fc:9f:84:41:00:f0:12:66:10:ca:78:bc:14: 4c:52:8f:de:d3:b8:88:c7:7c:c8:e9:33:6b:6d:0f: 6d:9c:00:10:75:83:89:01:e0:a3:da:2c:11:66:16: 28:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.212.0/23 195.128.131.0/24 IPv6: 2a13:8840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 216359 Signature Algorithm: sha256WithRSAEncryption 7f:7e:27:84:fc:c2:59:3b:44:97:20:0c:5f:6c:91:f3:91:5b: 2d:6b:43:32:21:2c:ec:bf:f8:64:5c:4e:9f:bb:b4:a0:d8:2f: 28:f3:50:68:ef:ee:0a:97:ee:55:70:5f:9f:a5:f5:e9:6e:39: b2:f8:05:d7:fe:01:f5:56:be:7d:b8:64:a5:67:43:78:73:ad: e0:56:2b:4b:00:1b:f7:e5:ac:72:26:93:ba:4c:60:d1:f9:77: c3:47:b4:66:50:1e:de:f7:4e:ea:84:f2:73:8b:e5:af:43:4c: 6a:40:c9:d4:66:7a:e9:7c:ee:00:fc:b7:41:c6:f3:98:37:d4: d8:b9:55:b6:7a:3d:93:54:7f:1c:31:c8:0e:8b:54:a8:56:1c: c9:e2:c0:91:7b:5b:6c:e5:91:33:8c:c6:c4:7a:78:02:cf:04: 0d:ae:49:d2:01:45:7b:11:1d:b3:15:fb:4c:d3:20:c2:b4:6c: 1d:3b:56:da:40:20:7d:69:dd:6a:33:2b:55:c8:89:38:16:49: f1:ae:4f:60:cb:74:07:0a:dc:5a:87:ca:99:ca:77:4a:ac:41: 57:95:17:07:c9:ac:d8:79:e3:4c:fc:f1:e7:bb:00:c7:a4:8e: d3:6a:df:aa:a6:c3:0b:c9:6d:7f:98:ad:98:94:ae:e6:4c:42: 10:b1:a6:e1 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZsyB8Kk58KNnRvo8BIvKR/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTUxNTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzEzOGU0ODQwY2FhM2ExYmQ1MTg1MjcxNGExMzVmYjBlODM3YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM7D88M68hRhW36xJLc2EdGEwLl+ 85oJkTF5FALFF/CVrnN4FROea5y5uEZcHuQeT861yGdyOBexQLVFRkPt5aRqn1qR 7G64e9gdMjDWBbFoSc7ThPWhQbrQO6smtPBpLroNi3J0fHj2mtCcD0OrttCYGJXp woOMsZFqJYNGfEYkLS0S9aLLFYxELNf+khLioZHer6h+6tvB+95nK1TCKYhHcfBv 9JKWuzZHWxDH2G9tSkPr1v7wRghDat5UzKkMK5rW9eKA9WzZ5oh/XFj+rRpp+fyf hEEA8BJmEMp4vBRMUo/e07iIx3zI6TNrbQ9tnAAQdYOJAeCj2iwRZhYoXQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFLcTjkhAyqOhvVGFJxShNfsOg3xFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FkLzIwOTdl YS0yMzJkLTRhMmYtOTBlNy00M2ZlNGE1MWI1NGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvMjA5N2Vh LTIzMmQtNGEyZi05MGU3LTQzZmU0YTUxYjU0Yi8xL3R4T09TRURLbzZHOVVZVW5G S0UxLXc2RGZFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBwpnUAwQAw4CDMA0EAgACMAcDBQMqE4hAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNNJzANBgkqhkiG9w0BAQsFAAOCAQEAf34n hPzCWTtElyAMX2yR85FbLWtDMiEs7L/4ZFxOn7u0oNgvKPNQaO/uCpfuVXBfn6X1 6W45svgF1/4B9Va+fbhkpWdDeHOt4FYrSwAb9+WsciaTukxg0fl3w0e0ZlAe3vdO 6oTyc4vlr0NMakDJ1GZ66XzuAPy3QcbzmDfU2LlVtno9k1R/HDHIDotUqFYcyeLA kXtbbOWRM4zGxHp4As8EDa5J0gFFexEdsxX7TNMgwrRsHTtW2kAgfWndajMrVciJ OBZJ8a5PYMt0BwrcWofKmcp3SqxBV5UXB8ms2HnjTPzx57sAx6SO02rfqqbDC8lt f5itmJSu5kxCELGm4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:29 2025 by rpki-client