This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer File: 0EXNAHNuWg7CO5CCZYcNVg1VGwI.cer (raw, json) Hash identifier: OXnD864fIFmFzIXXYwlZpJfTuwL4AdLpbFfXnXGiQtQ= Subject key identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A81FB027FB45F65DB481FA8EC7F6EDCA2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 10:48:22 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 8956 IP: 193.188.197.0/24 IP: 2001:678:bac::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:fb:02:7f:b4:5f:65:db:48:1f:a8:ec:7f:6e:dc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 10:48:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d045cd00736e5a0ec23b908265870d560d551b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a0:83:55:a0:1e:87:1a:f7:1c:b5:88:01:07: 02:55:4f:33:c7:d9:68:29:0c:b1:cd:44:7e:2a:4f: 9b:78:70:d9:54:cb:28:0e:8b:bf:a4:7e:69:b9:e4: fa:c3:34:6d:04:dd:22:4c:a9:e8:87:63:27:f0:63: 88:3b:0a:48:c3:20:69:a7:93:5d:b2:a7:1a:db:2d: e5:dd:d8:58:ab:1d:41:92:ba:c5:4d:91:09:d2:30: 9f:ce:77:c5:67:66:a5:7b:98:45:16:1a:ec:f7:32: a4:29:83:42:dd:50:0c:8c:ea:56:94:ab:81:3e:c7: f3:53:16:a5:c8:6b:e0:a7:46:74:9b:8b:ce:3a:0f: 8f:a3:49:65:77:d9:5f:89:28:06:a3:b1:5d:a2:81: 5b:72:0e:3a:5d:86:ba:95:0b:ec:f0:f6:df:a3:7b: d9:68:5f:33:51:46:d9:6c:1d:bb:79:9a:f5:c2:a6: d4:a7:58:51:fb:a4:66:b9:dc:e8:99:04:a9:90:77: 03:f4:3e:9c:5f:17:78:56:92:05:61:c1:2c:59:3c: 98:b9:25:8a:31:2a:8b:11:73:1a:be:8b:84:8f:91: 08:07:de:a7:24:0d:5b:07:fc:19:09:66:01:88:d7: 86:05:d0:eb:fa:e0:97:26:f8:ad:2c:d0:42:ad:80: 7c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:45:CD:00:73:6E:5A:0E:C2:3B:90:82:65:87:0D:56:0D:55:1B:02 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4625da-a982-4548-bee1-8e3ef39ecc12/1/0EXNAHNuWg7CO5CCZYcNVg1VGwI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.197.0/24 IPv6: 2001:678:bac::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8956 Signature Algorithm: sha256WithRSAEncryption 4e:4f:55:ed:4f:e9:4d:df:31:f8:0f:ab:90:76:34:0f:bf:c8: 19:b8:3b:e7:ea:0c:7b:1a:fd:fe:61:0a:1f:96:4c:9c:96:66: ce:ba:6b:9d:98:af:85:4b:f9:b0:12:30:6c:17:2b:8a:77:60: b9:32:4f:5c:4b:2c:3c:2b:7c:37:cc:54:21:02:57:b5:e6:15: 8d:dc:76:3b:31:58:6b:52:dd:1f:40:f0:a3:be:37:1f:32:49: a6:cf:a2:fe:23:d4:44:67:a8:39:b6:19:19:f9:40:0b:6f:e8: 2e:20:3f:41:e7:4c:08:a1:0f:00:4c:61:93:e6:83:dc:4d:6b: 48:b8:91:bc:15:a3:06:50:9d:5b:e7:41:2c:d5:a0:66:b1:07: 83:29:bc:66:cc:50:2b:b4:b8:51:c6:28:53:20:ee:3d:e5:20: 40:d8:6b:9d:da:5d:8d:42:b7:0b:12:26:c2:03:56:da:16:e3: e8:ce:68:98:6f:d7:e5:b7:9a:fb:a9:60:a7:7a:51:64:44:d9: 29:7a:3b:31:13:1e:e5:6f:04:d5:a8:84:0a:b9:c0:5d:45:d6: 79:4c:3e:79:fe:17:1f:68:76:e1:11:74:ec:83:0f:50:5e:7b: 03:1d:1a:3e:e2:3a:3b:05:9e:60:41:0d:5f:5a:98:d9:80:8a: 72:5c:54:7f -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZqB+wJ/tF9l20gfqOx/btyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MTA0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDQ1Y2QwMDczNmU1YTBlYzIzYjkwODI2NTg3MGQ1NjBkNTUxYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKCDVaAehxr3HLWIAQcCVU8zx9lo KQyxzUR+Kk+beHDZVMsoDou/pH5pueT6wzRtBN0iTKnoh2Mn8GOIOwpIwyBpp5Nd sqca2y3l3dhYqx1BkrrFTZEJ0jCfznfFZ2ale5hFFhrs9zKkKYNC3VAMjOpWlKuB PsfzUxalyGvgp0Z0m4vOOg+Po0lld9lfiSgGo7FdooFbcg46XYa6lQvs8Pbfo3vZ aF8zUUbZbB27eZr1wqbUp1hR+6RmudzomQSpkHcD9D6cXxd4VpIFYcEsWTyYuSWK MSqLEXMavouEj5EIB96nJA1bB/wZCWYBiNeGBdDr+uCXJvitLNBCrYB8JQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFNBFzQBzbloOwjuQgmWHDVYNVRsCMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM4LzQ2MjVk YS1hOTgyLTQ1NDgtYmVlMS04ZTNlZjM5ZWNjMTIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzgvNDYyNWRh LWE5ODItNDU0OC1iZWUxLThlM2VmMzllY2MxMi8xLzBFWE5BSE51V2c3Q081Q0Na WWNOVmcxVkd3SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQAwbzFMA8EAgACMAkDBwAgAQZ4C6wwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICIvwwDQYJKoZIhvcNAQELBQADggEBAE5PVe1P6U3f MfgPq5B2NA+/yBm4O+fqDHsa/f5hCh+WTJyWZs66a52Yr4VL+bASMGwXK4p3YLky T1xLLDwrfDfMVCECV7XmFY3cdjsxWGtS3R9A8KO+Nx8ySabPov4j1ERnqDm2GRn5 QAtv6C4gP0HnTAihDwBMYZPmg9xNa0i4kbwVowZQnVvnQSzVoGaxB4MpvGbMUCu0 uFHGKFMg7j3lIEDYa53aXY1CtwsSJsIDVtoW4+jOaJhv1+W3mvupYKd6UWRE2Sl6 OzETHuVvBNWohAq5wF1F1nlMPnn+Fx9oduERdOyDD1BeewMdGj7iOjsFnmBBDV9a mNmAinJcVH8= -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:14 2025 by rpki-client