This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6SXoqaI_f8UF2ubf9qtGrkfaErU.cer File: 6SXoqaI_f8UF2ubf9qtGrkfaErU.cer (raw, json) Hash identifier: /yDOdRCVApklcNo5FUsrd424lOnG37NXelbFEjnuuv8= Subject key identifier: E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B39BF48C6D462E528AAB22A9878D729E5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft caRepository: rsync://rpki.blw.moe/repo/AS51087/1/ Notify URL: https://rpki.blw.moe/rrdp/notification.xml Certificate not before: Sat 20 Dec 2025 03:13:15 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 51087 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:bf:48:c6:d4:62:e5:28:aa:b2:2a:98:78:d7:29:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 20 03:13:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e925e8a9a23f7fc505dae6dff6ab46ae47da12b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:03:c0:5a:a1:1c:a2:d9:4d:b3:c2:02:43: 73:0d:df:2d:08:66:e0:27:3f:a1:ba:6f:c8:f1:5f: c8:f5:00:00:b1:18:93:b3:37:9a:b4:d2:80:1f:ac: 81:a9:7a:9f:3c:c7:fb:85:cf:ce:89:f0:33:98:41: cb:ee:09:fe:32:e9:b7:31:90:b1:33:fa:5e:e0:db: 17:67:bd:ee:72:9e:77:87:b7:52:09:3d:1e:8e:21: 82:66:7b:e7:b1:b0:df:40:e6:4a:51:79:59:bb:7c: f4:95:60:95:36:c7:ad:00:39:6f:7b:0e:25:ca:49: a5:0d:6a:a8:60:af:0b:71:6f:67:ad:27:23:30:8e: 66:24:fc:94:1f:d2:b0:1b:b3:82:cc:42:c2:68:5c: 02:63:3d:71:c3:98:d1:a5:ba:20:b4:d6:db:e5:c9: be:ac:18:d2:6e:4b:86:b1:fc:1b:72:d6:aa:b5:3e: 73:4e:e4:f9:10:d8:ba:8e:98:1c:65:31:80:49:d8: c4:a8:d0:56:78:4f:17:8d:96:dc:f1:bd:68:a4:77: 7e:9d:45:53:e5:a8:90:21:11:99:16:fa:32:be:66: c2:1e:20:3f:d5:e3:90:79:a8:20:55:50:39:5f:9f: 45:d3:5d:d0:dc:e5:42:bf:bc:1a:18:72:75:e0:47: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:25:E8:A9:A2:3F:7F:C5:05:DA:E6:DF:F6:AB:46:AE:47:DA:12:B5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.blw.moe/repo/AS51087/1/ RPKI Manifest - URI:rsync://rpki.blw.moe/repo/AS51087/1/E925E8A9A23F7FC505DAE6DFF6AB46AE47DA12B5.mft RPKI Notify - URI:https://rpki.blw.moe/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 51087 Signature Algorithm: sha256WithRSAEncryption ab:c9:60:a6:43:21:30:36:37:6f:14:bb:ae:1e:70:a1:8f:b3: a8:90:ce:29:b1:ff:b5:e4:57:a2:c5:29:9f:a0:d1:e5:a0:55: 89:8e:a6:93:57:51:7b:e7:27:c8:c1:e0:cc:64:83:0a:70:da: c5:1d:cf:c7:e9:de:d4:c7:93:45:a6:77:6b:bc:dc:6e:63:f1: f5:eb:41:67:66:81:5a:fd:84:d5:dd:ef:cf:a7:e5:f3:e6:20: d8:fb:6e:d0:04:7f:4d:cc:1a:91:38:f1:74:15:22:dd:82:f2: 72:ea:cf:62:fb:8e:b3:50:00:42:af:19:ee:a3:c4:e8:aa:de: 6f:08:9a:0c:06:d7:69:c3:c4:db:d2:bf:ef:43:cc:7a:53:36: 2d:e2:56:21:34:c5:eb:ce:11:ec:81:45:24:5a:8b:5b:3a:89: a2:31:2c:a7:28:b6:5b:ad:cf:c0:17:cd:6d:70:05:0a:07:a9: 5b:c7:31:d3:a0:b9:20:03:50:f5:60:3c:ea:64:e6:f5:76:0f: b7:c3:8f:d5:20:cc:92:73:47:2d:a2:a9:4b:a3:7b:71:c6:3f: e1:27:95:32:8a:6f:9a:fd:f7:84:d0:3c:cf:df:3c:9a:c7:ca: 5f:f0:87:1c:a7:59:04:0e:00:85:d0:fc:63:35:8b:fd:55:4a: 7d:94:30:74 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZs5v0jG1GLlKKqyKph41ynlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjIwMDMxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTI1ZThhOWEyM2Y3ZmM1MDVkYWU2ZGZmNmFiNDZhZTQ3ZGExMmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEwDwFqhHKLZTbPCAkNzDd8tCGbg Jz+hum/I8V/I9QAAsRiTszeatNKAH6yBqXqfPMf7hc/OifAzmEHL7gn+Mum3MZCx M/pe4NsXZ73ucp53h7dSCT0ejiGCZnvnsbDfQOZKUXlZu3z0lWCVNsetADlvew4l ykmlDWqoYK8LcW9nrScjMI5mJPyUH9KwG7OCzELCaFwCYz1xw5jRpbogtNbb5cm+ rBjSbkuGsfwbctaqtT5zTuT5ENi6jpgcZTGASdjEqNBWeE8XjZbc8b1opHd+nUVT 5aiQIRGZFvoyvmbCHiA/1eOQeaggVVA5X59F013Q3OVCv7waGHJ14EfuGQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFOkl6KmiP3/FBdrm3/arRq5H2hK1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwgdgGCCsGAQUFBwELBIHLMIHIMDAGCCsGAQUFBzAFhiRyc3lu YzovL3Jwa2kuYmx3Lm1vZS9yZXBvL0FTNTEwODcvMS8wXAYIKwYBBQUHMAqGUHJz eW5jOi8vcnBraS5ibHcubW9lL3JlcG8vQVM1MTA4Ny8xL0U5MjVFOEE5QTIzRjdG QzUwNURBRTZERkY2QUI0NkFFNDdEQTEyQjUubWZ0MDYGCCsGAQUFBzANhipodHRw czovL3Jwa2kuYmx3Lm1vZS9ycmRwL25vdGlmaWNhdGlvbi54bWwwWQYDVR0fBFIw UDBOoEygSoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM VC9LcFNvM1ZWSzV3RUhJSm5IQzJRSFZWM2Q1bWsuY3JsMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMePMA0GCSqGSIb3 DQEBCwUAA4IBAQCryWCmQyEwNjdvFLuuHnChj7OokM4psf+15FeixSmfoNHloFWJ jqaTV1F75yfIweDMZIMKcNrFHc/H6d7Ux5NFpndrvNxuY/H160FnZoFa/YTV3e/P p+Xz5iDY+27QBH9NzBqROPF0FSLdgvJy6s9i+46zUABCrxnuo8Toqt5vCJoMBtdp w8Tb0r/vQ8x6UzYt4lYhNMXrzhHsgUUkWotbOomiMSynKLZbrc/AF81tcAUKB6lb xzHToLkgA1D1YDzqZOb1dg+3w4/VIMySc0ctoqlLo3txxj/hJ5Uyim+a/feE0DzP 3zyax8pf8Iccp1kEDgCF0PxjNYv9VUp9lDB0 -----END CERTIFICATE-----Generated at Sat Dec 20 18:21:57 2025 by rpki-client