This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer File: v0nfV38O5EMYjAKTI0V7vFoOrTs.cer (raw, json) Hash identifier: VydxK9c9w/wuJLdnfXQMBtoO2Z6sQZVcbIiOVO2+Tt4= Subject key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2DF5DCB345416A135A0C9DF2D9D60038 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 17 Dec 2025 20:17:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208323 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:f5:dc:b3:45:41:6a:13:5a:0c:9d:f2:d9:d6:00:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 17 20:17:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf49df577f0ee443188c029323457bbc5a0ead3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:25:a1:cb:48:7a:ee:28:eb:f5:c2:7a:3e:3e: 26:21:ef:a6:5a:c1:d5:8b:46:f7:ec:27:13:bd:25: d5:67:68:52:7c:71:16:73:a4:eb:30:e8:17:ab:6f: 0c:a4:41:6f:0b:5b:56:73:00:6d:c4:bd:ed:a0:ea: 4f:30:0a:93:ae:73:8d:6d:d9:a0:a8:b7:77:84:0c: 59:0d:98:58:5b:b1:9a:cf:4f:fe:3f:d3:a8:2a:29: 04:77:ba:23:3f:81:70:39:15:55:40:24:75:84:1a: 26:ca:da:b0:eb:10:dc:1f:8d:cd:cf:af:f1:60:cb: 9c:3d:7b:e2:f1:1a:fa:6c:3d:fc:71:f9:53:d3:71: 55:e1:1d:62:9c:86:78:e6:31:fb:cc:a5:fa:d5:77: eb:01:38:4f:ec:3d:68:bc:54:be:b7:21:18:39:d9: 67:6d:13:91:41:96:6a:2c:b0:ae:01:b0:34:9f:de: ca:b6:e0:fe:65:17:44:ad:a6:73:bc:e1:d8:fa:98: e3:b8:87:9c:a8:77:55:be:89:2a:ef:c4:f2:19:ca: 58:f2:d0:ce:1a:38:da:75:dc:3e:16:f2:27:1d:39: 59:e0:4d:2e:59:fc:da:0d:02:cc:22:ba:c9:06:be: 57:97:d9:b9:7f:f2:a8:6e:3f:0c:3c:7f:90:03:f6: f1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208323 Signature Algorithm: sha256WithRSAEncryption 0c:d4:c3:a5:f6:fd:4d:34:8a:4e:56:33:c4:0f:e9:cf:81:1e: 6b:35:02:f7:83:96:56:a7:0b:6f:04:20:ea:fa:bb:91:1e:62: 45:be:1f:d6:08:cd:6e:2e:9a:e5:5e:ab:fe:ee:52:49:98:86: 4b:b2:8e:45:c4:7b:10:23:0a:c9:b6:be:bf:3b:fb:1a:e7:3c: 75:53:bd:9f:ec:fe:d4:ad:9d:57:18:16:c2:f1:36:9a:50:1b: 36:dd:1b:86:05:08:8f:02:41:15:9c:f4:1f:49:fc:7b:95:f8: 4d:a4:7d:3a:aa:f9:ce:21:38:d1:96:5e:ca:4b:ae:ae:9c:0c: 58:b4:69:88:cf:78:00:1d:f8:a3:a3:aa:6d:df:a3:4e:55:d6: 99:c3:81:53:b3:02:9e:4c:b3:7b:67:28:12:cc:46:7b:c9:7a: fb:12:f2:54:ce:15:72:fb:88:12:a4:49:00:7b:08:75:aa:b7: a0:fc:e7:08:ce:ba:b8:42:59:68:d5:27:f9:1b:6c:48:3f:84: dc:f6:8e:8c:3a:67:d8:4d:58:8c:c7:22:78:4e:cd:f3:54:d1: 81:e4:bf:14:35:2b:4e:01:4a:b7:60:33:ba:8e:3a:a8:7f:df: 7b:d5:15:e2:3d:4f:0a:74:67:b6:0d:98:39:0a:84:00:49:35: 11:f5:e6:a4 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZst9dyzRUFqE1oMnfLZ1gA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE3MjAxNzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjQ5ZGY1NzdmMGVlNDQzMTg4YzAyOTMyMzQ1N2JiYzVhMGVhZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCWhy0h67ijr9cJ6Pj4mIe+mWsHV i0b37CcTvSXVZ2hSfHEWc6TrMOgXq28MpEFvC1tWcwBtxL3toOpPMAqTrnONbdmg qLd3hAxZDZhYW7Gaz0/+P9OoKikEd7ojP4FwORVVQCR1hBomytqw6xDcH43Nz6/x YMucPXvi8Rr6bD38cflT03FV4R1inIZ45jH7zKX61XfrAThP7D1ovFS+tyEYOdln bRORQZZqLLCuAbA0n97KtuD+ZRdEraZzvOHY+pjjuIecqHdVvokq78TyGcpY8tDO Gjjaddw+FvInHTlZ4E0uWfzaDQLMIrrJBr5Xl9m5f/Kobj8MPH+QA/bx+wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFL9J31d/DuRDGIwCkyNFe7xaDq07MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3L2E2NzEx YS0zNzI5LTQ5MWItOGRiYy05OGMyYTNjNTdiODgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvYTY3MTFh LTM3MjktNDkxYi04ZGJjLTk4YzJhM2M1N2I4OC8xL3YwbmZWMzhPNUVNWWpBS1RJ MFY3dkZvT3JUcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMtwzANBgkqhkiG9w0BAQsFAAOCAQEADNTDpfb9TTSK TlYzxA/pz4EeazUC94OWVqcLbwQg6vq7kR5iRb4f1gjNbi6a5V6r/u5SSZiGS7KO RcR7ECMKyba+vzv7Guc8dVO9n+z+1K2dVxgWwvE2mlAbNt0bhgUIjwJBFZz0H0n8 e5X4TaR9Oqr5ziE40ZZeykuurpwMWLRpiM94AB34o6Oqbd+jTlXWmcOBU7MCnkyz e2coEsxGe8l6+xLyVM4VcvuIEqRJAHsIdaq3oPznCM66uEJZaNUn+RtsSD+E3PaO jDpn2E1YjMcieE7N81TRgeS/FDUrTgFKt2Azuo46qH/fe9UV4j1PCnRntg2YOQqE AEk1EfXmpA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:16:08 2025 by rpki-client