This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer File: w_sAsiDqeEoEaDBU_L9OS0ietCA.cer (raw, json) Hash identifier: kyZKG/Db+s0y8dR9bxHb2KNGzn7UTO809zoCwbhFdHA= Subject key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B08F24EA05736B74D407CE3E598FB7849 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 10 Dec 2025 15:47:36 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 201636 IP: 185.198.154.0/24 IP: 2a11:dfc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:f2:4e:a0:57:36:b7:4d:40:7c:e3:e5:98:fb:78:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 10 15:47:36 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7c:77:e4:51:87:c9:14:29:91:66:93:e7:d7: 65:89:11:f5:24:ab:93:cd:7f:23:78:d1:21:c3:5e: ac:cf:eb:99:b1:fd:98:30:5f:c1:b8:31:de:4d:a3: c8:f5:76:87:8f:51:3c:fe:15:b3:33:b6:52:f5:8e: 9a:ef:97:9a:12:3d:f6:15:0f:95:c4:c1:0d:1f:8c: ef:9f:49:60:1d:45:97:de:32:26:f8:94:c1:d6:f9: d4:38:9b:63:98:da:3d:c0:67:55:f7:ae:89:39:3e: 39:ef:06:52:22:7e:08:c0:d8:0e:83:12:55:56:34: 13:71:a3:63:d5:91:5f:db:0d:b2:f9:2a:06:69:e7: 3c:f9:b4:d5:19:5b:21:3b:34:00:fc:ed:91:78:78: 69:41:42:bf:bd:c5:dc:ca:1e:d0:55:46:22:ae:bf: 14:85:ec:f6:1a:39:ec:e3:c9:99:1b:c7:4d:40:e8: a2:cd:64:80:d7:0d:95:4c:86:49:2b:03:73:0a:cc: 03:ca:b7:d3:4a:50:42:40:fb:2e:b4:eb:10:87:2e: 63:f4:52:ed:92:71:00:5c:bf:b8:6e:ac:b5:f1:ad: 5c:ab:03:53:06:20:bd:1e:9a:5b:a8:61:36:a9:48: a4:d0:ac:14:41:3b:97:11:bb:e0:14:b0:79:f0:fe: 19:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.154.0/24 IPv6: 2a11:dfc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 201636 Signature Algorithm: sha256WithRSAEncryption 9d:b2:c2:f1:96:63:f5:24:47:95:cf:9c:2a:e1:38:f4:93:a1: 6e:c5:bf:09:79:b6:c9:7a:87:9d:16:84:fa:d1:0d:18:48:5f: ee:58:bb:43:20:f9:94:b9:65:8c:d9:f6:3d:c7:cb:24:5a:7b: fe:29:42:fb:87:28:87:63:03:91:c3:7d:ed:4f:84:34:40:18: 30:e5:ff:52:40:4c:03:37:02:68:df:4e:f0:da:0c:f8:d9:4b: f7:75:3a:5d:7e:08:ca:6f:76:7e:74:1a:87:7c:d8:22:a1:bc: b2:96:92:88:6e:6e:27:4c:55:26:ac:04:c0:e7:5d:a3:5d:6a: 63:13:97:14:23:d5:10:52:a2:6a:39:95:0f:4a:fa:14:e2:d8: 05:f9:5e:ea:24:03:f7:6a:8a:15:d7:8e:8d:7e:52:c3:b8:0e: 8f:58:a6:ac:55:41:84:48:39:79:d3:8c:45:c5:78:15:15:b8: 52:20:88:a2:3a:31:d0:13:e3:9a:e2:44:1d:a2:9b:0e:18:f6: a0:17:67:05:fe:f7:41:c9:3f:6e:ae:c8:44:f0:93:9d:9e:19: f8:c8:0e:b4:eb:5a:b6:df:50:47:5c:7c:d0:3d:f6:08:cb:48: 66:c0:7b:33:ad:23:18:73:eb:6f:e8:b0:48:18:a9:1c:ff:e7: 87:0a:54:c9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZsI8k6gVza3TUB84+WY+3hJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEwMTU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2ZiMDBiMjIwZWE3ODRhMDQ2ODMwNTRmY2JmNGU0YjQ4OWViNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnx35FGHyRQpkWaT59dliRH1JKuT zX8jeNEhw16sz+uZsf2YMF/BuDHeTaPI9XaHj1E8/hWzM7ZS9Y6a75eaEj32FQ+V xMENH4zvn0lgHUWX3jIm+JTB1vnUOJtjmNo9wGdV966JOT457wZSIn4IwNgOgxJV VjQTcaNj1ZFf2w2y+SoGaec8+bTVGVshOzQA/O2ReHhpQUK/vcXcyh7QVUYirr8U hez2Gjns48mZG8dNQOiizWSA1w2VTIZJKwNzCswDyrfTSlBCQPsutOsQhy5j9FLt knEAXL+4bqy18a1cqwNTBiC9HppbqGE2qUik0KwUQTuXEbvgFLB58P4ZNwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFMP7ALIg6nhKBGgwVPy/TktInrQgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0LzIxMDIx MS1mZmVhLTQ3ZWUtODliYS02Y2NjYmE5OTc0ZWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvMjEwMjEx LWZmZWEtNDdlZS04OWJhLTZjY2NiYTk5NzRlYy8xL3dfc0FzaURxZUVvRWFEQlVf TDlPUzBpZXRDQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAucaaMA0EAgACMAcDBQMqEd/AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMTpDANBgkqhkiG9w0BAQsFAAOCAQEAnbLC8ZZj9SRH lc+cKuE49JOhbsW/CXm2yXqHnRaE+tENGEhf7li7QyD5lLlljNn2PcfLJFp7/ilC +4coh2MDkcN97U+ENEAYMOX/UkBMAzcCaN9O8NoM+NlL93U6XX4Iym92fnQah3zY IqG8spaSiG5uJ0xVJqwEwOddo11qYxOXFCPVEFKiajmVD0r6FOLYBfle6iQD92qK FdeOjX5Sw7gOj1imrFVBhEg5edOMRcV4FRW4UiCIojox0BPjmuJEHaKbDhj2oBdn Bf73Qck/bq7IRPCTnZ4Z+MgOtOtatt9QR1x80D32CMtIZsB7M60jGHPrb+iwSBip HP/nhwpUyQ== -----END CERTIFICATE-----Generated at Tue Dec 23 22:37:56 2025 by rpki-client