This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.cer (raw, json) Hash identifier: X/OFjobERVqtSFhkpscUOd1QrzrTHOlPsHLe+rS1KUI= Subject key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79100A0EF9B40B6C072F492BACDE11AF Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:32 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 49972 IP: 31.214.168.0/21 IP: 134.255.200.0/21 IP: 194.32.209.0/24 IP: 2a0a:32c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:0a:0e:f9:b4:0b:6c:07:2f:49:2b:ac:de:11:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:cc:24:5a:ff:cf:8e:8e:c4:3c:35:42:bc: 3c:d5:2b:76:4f:0f:b9:3f:3f:09:6c:8b:a8:05:68: 4c:2e:29:40:4d:64:24:f9:74:de:58:71:af:01:9b: c7:6f:56:1d:a1:00:ce:61:4c:48:0d:72:f5:08:65: dd:c5:32:cd:da:db:ae:e5:eb:57:76:42:7a:ee:d9: a7:3b:c7:33:f1:b7:bf:a7:d2:55:ff:69:1b:79:0c: 2a:21:0f:16:c8:57:7a:50:43:b6:79:1c:44:53:21: 57:b9:b0:27:aa:a0:3f:03:e9:77:03:a8:20:21:58: 72:78:2d:42:80:1c:ad:fc:9d:67:de:a7:0d:86:5c: a4:44:26:38:48:a1:c7:36:cf:f8:5a:27:f6:7e:d2: 89:7d:ab:7c:99:90:79:db:7a:0c:20:da:ff:e0:ad: 4e:d4:a6:14:c4:7e:f6:e8:00:51:be:34:95:ef:a3: e9:77:69:ea:2a:ef:a4:e6:0b:9a:63:b6:e6:9c:bc: e1:f4:7c:7f:20:2b:47:ee:c6:42:3c:77:ab:73:a7: 98:ee:7e:3c:d0:99:2d:19:9e:df:68:88:f8:16:8f: 6e:6d:28:d7:3e:cc:32:42:ae:95:e7:99:ef:d3:c6: d1:ca:b5:ff:55:df:57:fb:f5:3e:94:b2:75:75:ec: 65:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.168.0/21 134.255.200.0/21 194.32.209.0/24 IPv6: 2a0a:32c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49972 Signature Algorithm: sha256WithRSAEncryption aa:9c:ce:44:e0:24:b7:cd:c2:3c:fb:f5:f0:09:ef:14:bb:a5: 40:08:75:dc:55:a9:d8:14:b4:9e:f2:36:f9:d5:d6:2d:23:ee: 35:8e:31:ef:d9:00:92:c4:b9:44:df:2e:52:97:b2:61:b5:2d: 29:30:fa:24:47:a0:58:80:a6:58:fe:91:7d:cb:6a:bc:08:2e: be:63:95:09:a9:48:be:e5:66:f6:f2:b7:ea:ce:4b:31:64:ab: 7c:41:a3:33:46:ca:de:12:d3:85:b2:2f:07:ae:c0:17:78:14: e7:bf:1f:73:a0:48:7f:b8:b3:8c:95:d0:5a:eb:be:0b:a7:2f: 66:57:3e:77:ce:35:f4:c0:94:f7:f9:73:0d:04:00:bc:c7:5a: 05:71:4b:79:5b:95:28:7a:f6:73:a7:9e:37:29:a2:6e:2d:27: 6d:6a:bd:c3:c2:11:d4:f0:2b:40:4c:e4:7c:dc:63:19:08:52: a4:21:2e:7a:00:ad:9a:23:65:54:c5:52:bd:04:56:f4:d4:b1: ec:4a:18:a0:ae:3b:ca:c1:65:88:d8:bc:73:fa:d5:19:8c:c8: 0b:fd:cb:75:14:94:52:c1:f3:db:0f:70:8a:f7:d6:d0:01:c4: d0:6d:97:0a:3f:8f:c4:93:c9:8f:49:70:8c:ee:e7:85:d6:12: f5:f5:5f:6d -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZt5EAoO+bQLbAcvSSus3hGvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzZlNWQ3MDkzNWI4Y2JjMzdjZjIxNmM0NDY2OTdkNGMyN2E5OTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfPMJFr/z46OxDw1Qrw81St2Tw+5 Pz8JbIuoBWhMLilATWQk+XTeWHGvAZvHb1YdoQDOYUxIDXL1CGXdxTLN2tuu5etX dkJ67tmnO8cz8be/p9JV/2kbeQwqIQ8WyFd6UEO2eRxEUyFXubAnqqA/A+l3A6gg IVhyeC1CgByt/J1n3qcNhlykRCY4SKHHNs/4Wif2ftKJfat8mZB523oMINr/4K1O 1KYUxH726ABRvjSV76Ppd2nqKu+k5guaY7bmnLzh9Hx/ICtH7sZCPHerc6eY7n48 0JktGZ7faIj4Fo9ubSjXPswyQq6V55nv08bRyrX/Vd9X+/U+lLJ1dexlHQIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFNNuXXCTW4y8N88hbERml9TCepk+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzViLzBiMDZj MC1kODkwLTQ5YmQtYTI5Zi1mMDdlZmFjNGUyZGUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIvMGIwNmMw LWQ4OTAtNDliZC1hMjlmLWYwN2VmYWM0ZTJkZS8xLzAyNWRjSk5iakx3M3p5RnNS R2FYMU1KNm1UNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQDH9aoAwQDhv/IAwQAwiDRMA0EAgACMAcDBQAq CjLAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDDNDANBgkqhkiG9w0BAQsFAAOC AQEAqpzOROAkt83CPPv18AnvFLulQAh13FWp2BS0nvI2+dXWLSPuNY4x79kAksS5 RN8uUpeyYbUtKTD6JEegWICmWP6RfctqvAguvmOVCalIvuVm9vK36s5LMWSrfEGj M0bK3hLThbIvB67AF3gU578fc6BIf7izjJXQWuu+C6cvZlc+d8419MCU9/lzDQQA vMdaBXFLeVuVKHr2c6eeNymibi0nbWq9w8IR1PArQEzkfNxjGQhSpCEuegCtmiNl VMVSvQRW9NSx7EoYoK47ysFliNi8c/rVGYzIC/3LdRSUUsHz2w9wivfW0AHE0G2X Cj+PxJPJj0lwjO7nhdYS9fVfbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:45 2026 by rpki-client