This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer File: xe6WP4Kg-whm1CVTszeFl9nz72g.cer (raw, json) Hash identifier: QE3gZlh2clMqi3QVNYrRJ9wXH9vTRRMFvx8fybGt13o= Subject key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2286FA2B765DECDA6185C4A7B55F1F94 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 15 Dec 2025 15:00:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 211814 IP: 185.225.199.0/24 IP: 188.125.170.0/24 IP: 2a0c:8380::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:86:fa:2b:76:5d:ec:da:61:85:c4:a7:b5:5f:1f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 15 15:00:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:16:fb:69:61:a7:53:be:c1:b5:b1:4e:ac: c4:b6:e5:36:4e:52:5f:33:0e:e6:de:31:8d:1b:e4: bb:76:a0:69:b8:8e:23:3a:2b:ac:b7:fb:e6:5b:67: 70:84:42:37:35:55:65:86:1a:f7:d2:d7:b4:d8:02: 88:95:29:16:e2:dc:e9:20:03:97:31:16:f0:51:52: e3:be:29:ec:e5:64:91:94:19:c5:9b:36:6f:5d:cb: 0a:48:9e:fc:74:6d:e0:bc:91:d1:f3:ca:cc:93:cc: 59:75:f5:cd:57:f1:08:d2:75:f1:e5:32:99:42:9c: 42:35:09:0f:da:54:2e:28:6b:b3:24:2b:59:90:c3: 59:8f:d6:35:2e:d9:24:14:99:66:37:0c:79:d8:09: 11:68:58:bc:ab:a3:90:21:5e:26:72:48:99:bb:94: 48:35:20:a0:28:81:fd:86:39:df:04:4b:61:86:98: 9b:06:5b:fa:19:f2:56:0f:10:42:65:1f:9d:63:71: c7:39:4e:64:65:ed:5d:04:76:b1:35:35:b0:ee:f5: 0c:ab:26:a2:49:13:50:5d:83:93:03:d7:e2:13:d0: f9:b4:65:b5:9c:27:2b:3a:07:2b:26:d9:26:e9:fc: f2:a0:94:ce:b9:74:cf:22:8f:99:72:fc:0a:f3:4d: 13:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.225.199.0/24 188.125.170.0/24 IPv6: 2a0c:8380::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 211814 Signature Algorithm: sha256WithRSAEncryption 16:84:9c:f2:11:71:90:f9:d3:ae:cd:b9:ed:09:90:70:5b:15: 80:6b:c4:63:d4:04:e6:9e:dc:34:21:db:57:e6:35:5f:07:d9: 08:89:1f:de:38:1b:96:b8:aa:cb:05:6e:d2:8f:e0:41:ee:7f: 36:84:4b:ab:f0:a6:57:84:68:f0:1e:af:0b:da:b2:03:45:d9: 86:3a:da:c5:12:ca:4d:83:7a:27:82:85:91:5e:62:4f:7e:71: f6:4c:cb:bc:de:25:96:48:fe:b9:c3:0a:12:63:c6:24:d6:6b: e1:f7:b9:e7:99:0a:b2:36:3d:0b:58:4f:09:a0:8e:36:8f:66: cb:d5:2a:88:e1:41:d9:08:c8:40:ab:a3:25:03:00:42:e8:0b: b1:b4:39:39:9c:69:a5:b6:86:e4:ff:6b:46:b7:9b:bf:9f:66: 69:1d:84:fa:d3:06:dc:98:07:2e:b8:b7:3d:ca:0a:d4:3c:58: b9:e2:04:bd:ec:4a:03:1f:4f:33:cd:cb:ee:79:73:a9:c0:ef: bc:44:1c:05:21:c5:8b:4d:91:04:9a:76:b1:ac:2c:15:0f:e5: b8:02:e6:3c:ed:03:08:6b:3e:81:96:9c:4c:47:30:c1:a4:69: f6:40:81:e5:1a:2e:9f:1a:49:28:b9:ac:d9:3c:dc:0f:45:8a: 81:cf:97:b8 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZsihvordl3s2mGFxKe1Xx+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE1MTUwMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWVlOTYzZjgyYTBmYjA4NjZkNDI1NTNiMzM3ODU5N2Q5ZjNlZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy0W+2lhp1O+wbWxTqzEtuU2TlJf Mw7m3jGNG+S7dqBpuI4jOiust/vmW2dwhEI3NVVlhhr30te02AKIlSkW4tzpIAOX MRbwUVLjvins5WSRlBnFmzZvXcsKSJ78dG3gvJHR88rMk8xZdfXNV/EI0nXx5TKZ QpxCNQkP2lQuKGuzJCtZkMNZj9Y1LtkkFJlmNwx52AkRaFi8q6OQIV4mckiZu5RI NSCgKIH9hjnfBEthhpibBlv6GfJWDxBCZR+dY3HHOU5kZe1dBHaxNTWw7vUMqyai SRNQXYOTA9fiE9D5tGW1nCcrOgcrJtkm6fzyoJTOuXTPIo+ZcvwK800TwwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFMXulj+CoPsIZtQlU7M3hZfZ8+9oMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzgzZDI0 Ni03NDBkLTRiMDEtOTAyMC1kYjVhYTU3N2MzYWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvODNkMjQ2 LTc0MGQtNGIwMS05MDIwLWRiNWFhNTc3YzNhZi8xL3hlNldQNEtnLXdobTFDVlRz emVGbDluejcyZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAueHHAwQAvH2qMA0EAgACMAcDBQMqDIOAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwM7ZjANBgkqhkiG9w0BAQsFAAOCAQEAFoSc 8hFxkPnTrs257QmQcFsVgGvEY9QE5p7cNCHbV+Y1XwfZCIkf3jgblriqywVu0o/g Qe5/NoRLq/CmV4Ro8B6vC9qyA0XZhjraxRLKTYN6J4KFkV5iT35x9kzLvN4llkj+ ucMKEmPGJNZr4fe555kKsjY9C1hPCaCONo9my9UqiOFB2QjIQKujJQMAQugLsbQ5 OZxppbaG5P9rRrebv59maR2E+tMG3JgHLri3PcoK1DxYueIEvexKAx9PM83L7nlz qcDvvEQcBSHFi02RBJp2sawsFQ/luALmPO0DCGs+gZacTEcwwaRp9kCB5RounxpJ KLms2TzcD0WKgc+XuA== -----END CERTIFICATE-----Generated at Sat Dec 27 10:01:49 2025 by rpki-client