This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer File: a30B3ePCq3-ntYjsrU0c0xOXvYQ.cer (raw, json) Hash identifier: FBkykYO4f0AbFA8NZa52gq+vIrnZIDQoSQydByQvVWM= Subject key identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3623CA65BE406118CF117B990E8A818D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 19 Dec 2025 10:24:33 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202050 IP: 193.108.215.0/24 IP: 193.108.219.0/24 IP: 193.109.92.0/24 IP: 193.109.94.0/24 IP: 2a0f:f840::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:23:ca:65:be:40:61:18:cf:11:7b:99:0e:8a:81:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 19 10:24:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6b7d01dde3c2ab7fa7b588ecad4d1cd31397bd84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:18:5b:ad:e3:0a:a4:cf:db:e9:5c:93:9d: 6f:6c:94:5b:83:c0:90:68:a6:e2:5b:69:cc:1e:86: 9d:2f:35:d7:8a:68:66:2b:8e:e6:4f:c6:46:f9:30: 07:30:4f:44:c0:f3:da:9e:a1:e1:42:13:03:af:3a: e5:de:d5:71:a2:ad:5a:04:41:8f:94:da:ed:3f:3d: 33:a6:dc:f9:2b:00:22:3f:0a:7a:fb:56:12:2a:1c: fe:aa:74:45:e3:58:ba:7e:71:67:a6:26:c9:d6:fd: a2:ac:5e:07:a1:b4:f5:c2:e4:4c:45:52:b0:20:7b: 98:aa:68:11:21:29:e5:f5:00:d4:fb:f0:38:f1:d6: 77:74:c3:26:d9:ee:ee:88:d0:dd:ef:ed:f4:7f:ca: 99:3b:f5:6e:69:d0:4b:08:b7:7d:f4:77:59:d0:32: a3:01:1c:d8:5b:fb:21:2f:a6:40:ab:8d:a2:02:9b: 57:d6:04:83:ea:f6:ba:7f:97:b7:72:f7:e5:0f:3a: fa:b7:d3:3a:ee:20:78:9d:a8:23:32:85:74:0a:80: 46:28:d3:ae:17:95:dd:3e:7f:88:9b:9f:94:b0:4f: ac:e3:59:84:4d:37:05:31:48:94:c9:d7:a5:aa:93: 07:ac:43:53:8d:e5:c8:7a:52:fb:df:93:98:d4:76: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7D:01:DD:E3:C2:AB:7F:A7:B5:88:EC:AD:4D:1C:D3:13:97:BD:84 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20f23d-1fc9-471a-82bd-fe8af9a6efd2/1/a30B3ePCq3-ntYjsrU0c0xOXvYQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.215.0/24 193.108.219.0/24 193.109.92.0/24 193.109.94.0/24 IPv6: 2a0f:f840::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202050 Signature Algorithm: sha256WithRSAEncryption 52:4f:10:95:ef:2e:7b:76:b4:c4:8a:fc:31:14:59:17:59:e3: d8:00:00:e9:28:b0:c6:bf:38:05:9b:e8:ec:2c:0a:f8:b7:07: 6f:56:2f:ab:83:68:5a:8b:0b:a3:77:a1:a2:52:db:1f:b1:64: b2:fc:1d:18:a3:6a:13:95:52:5a:95:92:5b:73:a7:49:e4:96: d1:76:fe:98:ab:c5:f9:a3:27:03:53:99:54:82:11:f6:fb:81: f9:fc:98:3c:06:2f:e6:1a:5d:41:3a:65:4f:7f:4f:c8:98:cf: 00:6b:23:cc:a0:b7:38:04:3e:78:44:21:98:83:f9:82:50:6d: a6:0d:e1:f4:ef:52:c6:21:dd:26:1c:80:dd:8e:ef:5e:ab:d0: 5a:db:50:3a:7f:39:db:a1:9b:fa:bb:b8:28:0d:95:f2:d8:42: bb:44:b7:84:76:db:c2:a1:8d:f6:53:84:7b:2a:3c:c9:6c:e4: f5:28:ce:2a:84:e9:f2:bd:b5:a3:32:c6:e7:20:68:a4:d3:1d: af:63:aa:99:ba:8b:dc:0c:ed:42:24:7e:4a:07:12:99:cb:9b: 9f:98:b9:42:e0:f3:29:87:3a:c5:dc:8f:5a:21:5c:26:53:dd: 1a:41:e9:45:2d:7e:b6:9e:e7:76:00:00:2f:6e:2d:2a:92:db: e8:63:51:05 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZs2I8plvkBhGM8Re5kOioGNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE5MTAyNDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjdkMDFkZGUzYzJhYjdmYTdiNTg4ZWNhZDRkMWNkMzEzOTdiZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBAYW63jCqTP2+lck51vbJRbg8CQ aKbiW2nMHoadLzXXimhmK47mT8ZG+TAHME9EwPPanqHhQhMDrzrl3tVxoq1aBEGP lNrtPz0zptz5KwAiPwp6+1YSKhz+qnRF41i6fnFnpibJ1v2irF4HobT1wuRMRVKw IHuYqmgRISnl9QDU+/A48dZ3dMMm2e7uiNDd7+30f8qZO/VuadBLCLd99HdZ0DKj ARzYW/shL6ZAq42iAptX1gSD6va6f5e3cvflDzr6t9M67iB4nagjMoV0CoBGKNOu F5XdPn+Im5+UsE+s41mETTcFMUiUydelqpMHrENTjeXIelL735OY1HaM4wIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFGt9Ad3jwqt/p7WI7K1NHNMTl72EMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzIwZjIz ZC0xZmM5LTQ3MWEtODJiZC1mZThhZjlhNmVmZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMjBmMjNk LTFmYzktNDcxYS04MmJkLWZlOGFmOWE2ZWZkMi8xL2EzMEIzZVBDcTMtbnRZanNy VTBjMHhPWHZZUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQAwWzXAwQAwWzbAwQAwW1cAwQAwW1eMA0EAgAC MAcDBQMqD/hAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMVQjANBgkqhkiG9w0B AQsFAAOCAQEAUk8Qle8ue3a0xIr8MRRZF1nj2AAA6Siwxr84BZvo7CwK+LcHb1Yv q4NoWosLo3eholLbH7FksvwdGKNqE5VSWpWSW3OnSeSW0Xb+mKvF+aMnA1OZVIIR 9vuB+fyYPAYv5hpdQTplT39PyJjPAGsjzKC3OAQ+eEQhmIP5glBtpg3h9O9SxiHd JhyA3Y7vXqvQWttQOn8526Gb+ru4KA2V8thCu0S3hHbbwqGN9lOEeyo8yWzk9SjO KoTp8r21ozLG5yBopNMdr2OqmbqL3AztQiR+SgcSmcubn5i5QuDzKYc6xdyPWiFc JlPdGkHpRS1+tp7ndgAAL24tKpLb6GNRBQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:35:48 2025 by rpki-client