This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer File: _6PlUUHBofny4ogR7X53-tN4pXk.cer (raw, json) Hash identifier: hfbT6wEt4HuQ7A5KEckORypS5+VxopwQYrT7A9R0jcI= Subject key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B0CCF5522977B855276771F61EE6BBF69 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 11 Dec 2025 09:47:52 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 109.122.0.0/19 IP: 2a12:180::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:cf:55:22:97:7b:85:52:76:77:1f:61:ee:6b:bf:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 11 09:47:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:ae:46:7a:37:b9:e6:ea:50:36:c2:e3:9c: d3:22:3b:e7:2e:fa:4c:27:f2:d6:c5:80:50:7e:8e: b5:1e:6e:2f:0b:40:93:aa:4d:d3:3a:d9:c0:1f:ea: 44:50:95:c1:2b:37:67:01:bf:56:e6:e1:ec:40:f3: 39:4e:28:02:95:e1:51:22:9b:0a:e2:4a:bb:40:d7: 3e:ad:4d:84:28:5a:bd:57:47:f8:71:8b:35:7a:2e: 5b:f8:e1:f9:5f:8b:4d:07:a4:37:55:b0:10:af:7d: 1c:93:00:88:a3:9d:9b:aa:c9:80:c7:a2:17:27:5f: 2b:13:41:75:20:57:9c:f7:d0:1a:35:c0:7f:d2:6e: ee:78:ff:c5:f4:b3:91:8c:9e:15:a7:73:27:64:dc: 0c:fb:86:8a:ba:f3:bb:fc:21:5c:35:29:a3:af:80: 68:b3:17:54:14:42:de:76:76:f4:31:c2:bd:91:6a: 59:e3:ba:0f:e3:cb:e8:3e:8f:5e:fd:11:df:d0:f9: 54:91:ba:87:7f:97:08:ab:11:d5:93:d0:d3:ec:dd: 59:df:0c:54:18:7d:02:dd:f9:ce:76:54:45:25:15: 3a:02:30:f0:06:14:c7:d6:8a:4d:b4:ca:c4:91:33: 93:39:e4:4d:cb:8b:37:6b:73:3f:c8:c1:9e:ee:b4: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.122.0.0/19 IPv6: 2a12:180::/29 Signature Algorithm: sha256WithRSAEncryption 8e:d4:71:47:ec:c9:4b:1c:0b:56:f0:58:59:71:c4:83:f1:3b: c7:9a:d2:88:30:63:32:8c:f9:00:89:dc:12:2e:11:42:ed:eb: 9c:93:69:62:05:09:cc:23:8a:3c:0c:28:e7:6c:d2:0f:45:e3: 92:8a:c2:0a:7f:55:6a:d8:02:79:57:ba:1f:c1:21:fd:2a:30: ac:02:8e:fe:97:dd:24:f9:7e:2e:5a:e8:69:42:54:82:b2:ce: 28:ec:75:40:ea:96:33:b9:0d:86:69:c0:33:5a:c2:d6:6e:48: b0:84:bd:24:22:7a:6e:2a:65:6a:fc:89:06:21:cc:92:f6:e5: 66:9a:74:62:16:7f:8d:6a:65:7e:8e:8e:e2:8b:26:69:9d:31: 09:e5:4a:9e:10:01:75:42:c2:73:0f:f7:5b:bd:98:65:2d:31: e1:c9:50:0c:ba:01:95:dc:0e:fb:dd:5c:62:f2:25:cc:ad:84: c6:85:c0:67:8f:56:32:dd:ce:ee:29:1c:2d:b6:96:6f:7f:8c: 5d:20:6c:8a:a5:f4:0b:1d:c2:47:75:11:db:ee:b3:8d:ab:3c: f0:e0:af:b4:43:3a:89:32:8b:e4:e0:1e:e8:64:14:f0:c0:a9: cc:6a:da:25:25:b1:cf:ea:4e:d9:6d:da:cf:d2:a7:2b:ea:fb: 66:eb:46:c9 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZsMz1Uil3uFUnZ3H2Hua79pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjExMDk0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmEzZTU1MTQxYzFhMWY5ZjJlMjg4MTFlZDdlNzdmYWQzNzhhNTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5yuRno3uebqUDbC45zTIjvnLvpM J/LWxYBQfo61Hm4vC0CTqk3TOtnAH+pEUJXBKzdnAb9W5uHsQPM5TigCleFRIpsK 4kq7QNc+rU2EKFq9V0f4cYs1ei5b+OH5X4tNB6Q3VbAQr30ckwCIo52bqsmAx6IX J18rE0F1IFec99AaNcB/0m7ueP/F9LORjJ4Vp3MnZNwM+4aKuvO7/CFcNSmjr4Bo sxdUFELednb0McK9kWpZ47oP48voPo9e/RHf0PlUkbqHf5cIqxHVk9DT7N1Z3wxU GH0C3fnOdlRFJRU6AjDwBhTH1opNtMrEkTOTOeRNy4s3a3M/yMGe7rQObQIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFP+j5VFBwaH58uKIEe1+d/rTeKV5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzExL2IyNjNh Mi0wZjZmLTRmNWQtYWY5ZS1hMzlhYzI1MzlmYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEvYjI2M2Ey LTBmNmYtNGY1ZC1hZjllLWEzOWFjMjUzOWZjNS8xL182UGxVVUhCb2ZueTRvZ1I3 WDUzLXRONHBYay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQFbXoAMA0EAgACMAcDBQMqEgGAMA0GCSqGSIb3 DQEBCwUAA4IBAQCO1HFH7MlLHAtW8FhZccSD8TvHmtKIMGMyjPkAidwSLhFC7euc k2liBQnMI4o8DCjnbNIPReOSisIKf1Vq2AJ5V7ofwSH9KjCsAo7+l90k+X4uWuhp QlSCss4o7HVA6pYzuQ2GacAzWsLWbkiwhL0kInpuKmVq/IkGIcyS9uVmmnRiFn+N amV+jo7iiyZpnTEJ5UqeEAF1QsJzD/dbvZhlLTHhyVAMugGV3A773Vxi8iXMrYTG hcBnj1Yy3c7uKRwttpZvf4xdIGyKpfQLHcJHdRHb7rONqzzw4K+0QzqJMovk4B7o ZBTwwKnMatolJbHP6k7ZbdrP0qcr6vtm60bJ -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:59 2025 by rpki-client