This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer (raw, json) Hash identifier: xbca+HVeDDx9mXmRUD2ZR5KPXqctkHMOZTSK6tiqY94= Subject key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B484D1BF6F81318792BD7963BC6DE2AA7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 22 Dec 2025 23:02:51 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 215737 IP: 2001:67c:2924::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4d:1b:f6:f8:13:18:79:2b:d7:96:3b:c6:de:2a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 22 23:02:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:74:b9:a5:d5:ca:15:c1:d9:5c:c7:16:b8: 8c:62:4e:8a:5b:f2:7a:22:78:80:24:1e:f0:30:32: 1b:72:f4:2f:f3:59:4a:b4:8b:b6:63:9e:fb:ba:e4: cf:c2:94:39:ba:1e:51:5f:17:b9:6d:0a:5b:48:be: a8:4e:5c:96:ce:44:c7:b5:33:ee:a6:c2:32:bc:ec: f3:40:8d:eb:6c:15:84:4b:00:92:98:38:d5:e9:9c: c0:e5:6b:f1:42:2c:97:36:d2:13:61:30:53:71:e6: 00:82:8d:d7:37:0f:b4:1c:de:da:40:c0:30:ee:c6: af:5a:be:f5:91:89:e4:d2:c6:c8:02:4d:8e:d5:d8: 0c:a2:96:15:7f:d5:6a:a4:fb:2c:68:4d:46:10:9f: 0c:94:85:c4:fe:99:38:ba:20:6f:32:ff:4e:6c:60: 85:5d:54:b4:96:c8:4d:86:c8:59:0d:dd:96:b8:ec: 28:8e:8c:45:83:9b:74:4b:ce:84:10:82:90:75:4d: b1:fe:c1:39:d5:1a:52:b8:f1:1f:2b:81:56:8d:46: a1:40:2f:08:ec:8c:12:25:dd:bd:01:08:70:c1:01: a4:c3:bf:79:d3:ce:b7:f6:e8:38:54:af:b5:2f:4d: ff:d2:54:61:4d:32:c1:5c:38:1b:a1:f3:36:4b:a6: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2924::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215737 Signature Algorithm: sha256WithRSAEncryption 6e:76:3c:1f:6b:cf:69:33:7b:3a:ac:56:30:d7:93:04:78:f0: a9:b5:b6:33:e6:93:62:ca:b2:7c:ae:01:6e:fc:96:33:53:cb: 36:10:cd:62:64:1d:46:80:b8:83:26:b5:3b:85:f3:a7:a6:7d: 3f:51:ef:a7:a2:29:90:8f:8e:d8:5f:fc:37:84:69:0b:a6:ca: da:a0:55:81:ad:d3:61:2a:35:14:d4:92:36:41:b6:68:a5:1c: 40:bf:7e:70:51:a5:1f:2c:22:e3:cf:63:35:f6:d6:88:27:44: 98:a3:ea:dc:11:eb:38:a7:4c:b0:87:44:f0:ed:92:a1:9c:42: 3d:c5:62:89:2b:71:dc:03:ec:62:ae:2f:44:22:93:3e:8c:a1: 4b:b3:94:c3:03:67:68:77:19:10:d1:c4:6c:32:57:ba:6d:a1: 79:98:e0:3d:0c:5d:5f:8e:a3:68:a7:51:38:7f:f3:5c:23:4c: cd:70:17:fd:92:18:4c:e8:d0:b7:1e:fc:e6:1d:7f:5f:b8:5e: ea:3f:28:9e:fe:03:09:dd:74:d3:74:43:35:8e:b0:60:a1:29: 27:ed:41:f4:c1:c1:7d:95:82:62:ca:c3:a2:9f:33:ac:5b:00: 3a:b4:97:d9:f9:f3:6c:de:a6:38:51:fc:0b:43:3a:ae:37:f1: f3:ad:e3:5d -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZtITRv2+BMYeSvXljvG3iqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIyMjMwMjUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmJhZjhlMzA4ODIxN2U0YjdjMGMyMzE3MThmYWI5MDliMTg4MWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eN0uaXVyhXB2VzHFriMYk6KW/J6 IniAJB7wMDIbcvQv81lKtIu2Y577uuTPwpQ5uh5RXxe5bQpbSL6oTlyWzkTHtTPu psIyvOzzQI3rbBWESwCSmDjV6ZzA5WvxQiyXNtITYTBTceYAgo3XNw+0HN7aQMAw 7savWr71kYnk0sbIAk2O1dgMopYVf9VqpPssaE1GEJ8MlIXE/pk4uiBvMv9ObGCF XVS0lshNhshZDd2WuOwojoxFg5t0S86EEIKQdU2x/sE51RpSuPEfK4FWjUahQC8I 7IwSJd29AQhwwQGkw79508639ug4VK+1L03/0lRhTTLBXDgbofM2S6bZdwIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFMa6+OMIghfkt8DCMXGPq5CbGIHkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzg3M2Rk MC1hZjg4LTRiZTUtOTg2MS1mZWE1ZWZmMzc3MjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvODczZGQw LWFmODgtNGJlNS05ODYxLWZlYTVlZmYzNzcyNC8xL3hycjQ0d2lDRi1TM3dNSXhj WS1ya0pzWWdlUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCkkMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNKuTANBgkqhkiG9w0BAQsFAAOCAQEAbnY8H2vPaTN7OqxWMNeTBHjwqbW2 M+aTYsqyfK4BbvyWM1PLNhDNYmQdRoC4gya1O4Xzp6Z9P1Hvp6IpkI+O2F/8N4Rp C6bK2qBVga3TYSo1FNSSNkG2aKUcQL9+cFGlHywi489jNfbWiCdEmKPq3BHrOKdM sIdE8O2SoZxCPcViiStx3APsYq4vRCKTPoyhS7OUwwNnaHcZENHEbDJXum2heZjg PQxdX46jaKdROH/zXCNMzXAX/ZIYTOjQtx785h1/X7he6j8onv4DCd1003RDNY6w YKEpJ+1B9MHBfZWCYsrDop8zrFsAOrSX2fnzbN6mOFH8C0M6rjfx863jXQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:22 2025 by rpki-client