This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer File: xU9qEXeCbFq2S9OvATiptXpLkeU.cer (raw, json) Hash identifier: QYQAE7T5T1P6dw0lUMscx8I/m96OxKQZeMdFmBV5t7s= Subject key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B1264FB05E68DB5D81C6B8847C27E4390 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 11:49:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214132 IP: 2001:67c:f24::/48 IP: 2a12:e00::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:64:fb:05:e6:8d:b5:d8:1c:6b:88:47:c2:7e:43:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 12 11:49:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:c6:6f:d5:10:a4:18:c2:7f:ee:37:ed:80: 88:b2:fb:f4:19:0c:e9:62:25:3d:c8:9c:77:bb:cc: 59:ff:3e:96:48:ee:dc:18:bd:60:55:b9:e8:4f:3c: bf:6e:c8:82:22:4c:8a:60:73:a4:3f:7c:ef:6d:2c: ee:8d:98:0e:e2:24:84:2b:55:2c:d4:3e:01:1e:f8: 09:14:26:ff:af:7b:75:94:cf:ab:cd:a8:3b:d4:f3: 2e:ae:68:e0:33:28:42:4b:43:20:57:26:4b:07:56: 43:3c:76:09:9c:01:c8:7e:c1:42:2d:89:2b:46:49: 81:58:be:42:61:54:8c:d7:57:de:c0:d7:0a:95:10: 33:26:f1:be:8d:8e:92:93:24:48:f7:53:c8:07:68: d4:57:f1:fc:ad:fa:2a:28:f4:9b:40:1e:a5:ea:7e: 51:7c:12:ee:fa:b5:b1:d6:71:d4:7d:eb:35:0b:52: 4c:23:91:56:2f:6b:f9:ce:0b:05:dc:6f:94:af:e7: 84:c0:7d:64:7b:28:cf:d6:86:97:2e:d8:e6:eb:b3: 20:78:3f:a2:88:7e:08:f6:d8:c4:45:9f:e8:be:c8: d9:6f:cb:16:af:7d:60:ae:77:b4:d1:fe:f9:c5:be: bd:66:f7:53:31:aa:1c:9d:43:64:d8:c5:b0:7f:76: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:f24::/48 2a12:e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214132 Signature Algorithm: sha256WithRSAEncryption 00:24:95:22:9c:1f:ec:81:8b:95:c5:dc:23:92:87:48:60:58: 63:b8:5a:63:c7:46:e3:7c:87:b8:e6:58:d7:60:c1:0b:d7:99: b8:c4:68:5a:48:34:d2:2a:fb:ce:c0:0a:09:30:0e:4c:cf:7f: 11:3e:3b:dc:84:71:68:0b:94:6e:89:53:4a:1b:47:71:5a:e1: 45:83:86:95:74:67:9f:72:38:48:c0:6a:67:fd:d5:bf:2a:0d: 9e:e9:17:7e:b9:a8:2a:9f:28:d0:e1:f5:f8:f9:f8:f0:34:90: e2:88:80:57:ad:46:0c:2c:41:e7:f1:10:ac:89:bd:08:8c:13: d5:cb:a2:6e:6e:26:2e:46:eb:78:f5:ac:08:f3:75:77:d4:a8: 9d:c7:4f:66:48:fa:01:aa:ab:72:a2:05:91:f8:5d:26:e2:c5: fc:1e:ce:30:89:25:ec:0e:0a:fa:99:37:ab:5e:0c:af:da:3a: 79:8f:05:ca:8a:c6:08:64:a0:c2:8d:6a:5b:f7:3b:57:d6:a8: fa:f8:30:fc:1e:59:d8:a6:d3:f1:f1:05:20:23:2b:d6:bf:d4: 6f:d9:b4:a0:6a:ba:e9:25:5a:d9:6f:cb:4f:62:4a:e9:b8:bf: 7e:6d:91:66:f0:ee:a9:99:8a:f4:5a:fa:10:f9:df:e5:58:7b: 91:62:7d:6a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgISAZsSZPsF5o212BxriEfCfkOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEyMTE0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTRmNmExMTc3ODI2YzVhYjY0YmQzYWYwMTM4YTliNTdhNGI5MWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhvGb9UQpBjCf+437YCIsvv0GQzp YiU9yJx3u8xZ/z6WSO7cGL1gVbnoTzy/bsiCIkyKYHOkP3zvbSzujZgO4iSEK1Us 1D4BHvgJFCb/r3t1lM+rzag71PMurmjgMyhCS0MgVyZLB1ZDPHYJnAHIfsFCLYkr RkmBWL5CYVSM11fewNcKlRAzJvG+jY6SkyRI91PIB2jUV/H8rfoqKPSbQB6l6n5R fBLu+rWx1nHUfes1C1JMI5FWL2v5zgsF3G+Ur+eEwH1keyjP1oaXLtjm67MgeD+i iH4I9tjERZ/ovsjZb8sWr31grne00f75xb69ZvdTMaocnUNk2MWwf3YunwIDAQAB o4ICqjCCAqYwHQYDVR0OBBYEFMVPahF3gmxatkvTrwE4qbV6S5HlMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzE0ZjM2 Ny0zYjllLTQ5ZDQtOTY4Ni0yZWE4YWNlNWI5NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvMTRmMzY3 LTNiOWUtNDlkNC05Njg2LTJlYThhY2U1Yjk1ZS8xL3hVOXFFWGVDYkZxMlM5T3ZB VGlwdFhwTGtlVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF BwEHAQH/BBowGDAWBAIAAjAQAwcAIAEGfA8kAwUAKhIOADAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMDRHQwDQYJKoZIhvcNAQELBQADggEBAAAklSKcH+yBi5XF3COS h0hgWGO4WmPHRuN8h7jmWNdgwQvXmbjEaFpINNIq+87ACgkwDkzPfxE+O9yEcWgL lG6JU0obR3Fa4UWDhpV0Z59yOEjAamf91b8qDZ7pF365qCqfKNDh9fj5+PA0kOKI gFetRgwsQefxEKyJvQiME9XLom5uJi5G63j1rAjzdXfUqJ3HT2ZI+gGqq3KiBZH4 XSbixfwezjCJJewOCvqZN6teDK/aOnmPBcqKxghkoMKNalv3O1fWqPr4MPweWdim 0/HxBSAjK9a/1G/ZtKBquuklWtlvy09iSum4v35tkWbw7qmZivRa+hD53+VYe5Fi fWo= -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:30 2025 by rpki-client