This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-enaRkroBgtbvSosU13p0RUfeZE.cer File: 1-enaRkroBgtbvSosU13p0RUfeZE.cer (raw, json) Hash identifier: uzNoXP9eeWEPnTnVBlcRVUMwk/EOFidX7ffXoF1zyzA= Subject key identifier: F9:E9:DA:46:4A:E8:06:0B:5B:BD:2A:2C:53:5D:E9:D1:15:1F:79:91 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEF8D563DD04C2B4A448B60030590303B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 05 Dec 2025 17:26:48 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210632 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:8d:56:3d:d0:4c:2b:4a:44:8b:60:03:05:90:30:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 5 17:26:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9e9da464ae8060b5bbd2a2c535de9d1151f7991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:30:3b:82:cc:32:d0:0d:d8:bc:f9:6f:43:9c: ac:de:7b:ab:a0:03:f4:98:f2:11:64:ae:a1:59:98: bb:56:13:5e:e7:f6:5d:33:8a:e3:c7:2f:43:c8:28: c3:9e:c6:39:1a:e0:cc:fb:68:14:ab:f6:49:a3:82: 61:6f:ac:0c:5f:2f:97:49:ad:d2:f1:83:8d:6c:58: 0f:1c:d2:52:ea:2b:99:56:e5:0d:c5:99:02:9d:aa: 94:38:f8:a9:87:cd:36:e0:fa:79:99:7c:59:8c:20: e7:f0:c3:82:48:0f:92:0c:84:b6:4d:cb:57:b6:4d: ee:2a:37:10:85:19:0d:17:d3:5b:15:0e:e2:2d:05: 10:71:69:38:d9:b3:62:c4:2a:69:60:12:95:b9:4b: 2c:41:1b:5c:52:e7:2e:4d:fe:df:1f:87:79:5c:4d: cd:ae:37:36:b2:31:fe:5c:d6:97:c0:a8:d7:63:05: 8b:ed:d6:6d:a9:f7:52:5f:42:fd:72:9e:44:3f:94: 3c:0e:ea:4f:6d:70:97:37:79:c8:5f:f7:5d:65:a3: ae:40:76:58:1f:d9:41:35:31:43:ae:c7:e3:37:6e: b5:8f:44:da:e4:5a:05:35:24:e5:74:17:e1:84:24: f7:eb:aa:07:cc:8c:b3:ca:cb:8e:1b:a9:dd:61:df: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E9:DA:46:4A:E8:06:0B:5B:BD:2A:2C:53:5D:E9:D1:15:1F:79:91 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3a8604-76d9-4e95-9d8b-a42010514296/1/1-enaRkroBgtbvSosU13p0RUfeZE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 210632 Signature Algorithm: sha256WithRSAEncryption 66:a8:d8:e8:b3:6c:0b:56:ef:a4:e7:6f:aa:42:8e:94:60:28: be:e9:ac:47:e8:93:be:5a:39:cf:9d:bb:d0:aa:d0:d8:00:f8: db:62:24:b1:7d:92:70:8a:23:26:76:44:1c:98:93:2c:04:f2: a2:64:3b:2c:f5:26:46:ea:e5:8a:a2:41:d0:ac:95:5b:8b:60: 86:9d:2b:c9:35:8f:e8:a0:b4:01:54:9c:c3:98:a9:21:b9:83: 6f:a8:b1:b7:6a:68:e5:ec:33:0b:e1:bc:06:dd:b1:03:c6:59: cd:e2:17:51:1c:f6:5f:ab:da:2f:21:d0:6e:e3:d1:ce:36:b9: 55:f7:7e:b3:10:04:20:d5:67:b2:75:53:06:cc:9c:01:ea:6e: 6b:bb:a5:c8:64:4f:66:87:39:b0:09:9f:88:c6:f2:6f:9f:da: f3:4e:20:05:a8:95:c8:63:e9:8e:6c:4e:43:35:56:0d:2f:1c: f2:4c:61:34:df:aa:ea:c7:06:d7:79:b1:48:a9:2d:9e:3d:1f: 37:32:13:b2:60:c4:a1:15:85:11:b6:7c:19:1b:44:b3:cd:e9: d8:67:60:b0:e0:c5:bd:38:93:59:3a:72:62:ba:ea:90:0c:d4: e7:bd:e4:1d:a7:a6:d3:51:c4:b9:21:de:69:51:6e:f9:95:31: e1:36:5a:7e -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZrvjVY90EwrSkSLYAMFkDA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA1MTcyNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU5ZGE0NjRhZTgwNjBiNWJiZDJhMmM1MzVkZTlkMTE1MWY3OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjA7gswy0A3YvPlvQ5ys3nuroAP0 mPIRZK6hWZi7VhNe5/ZdM4rjxy9DyCjDnsY5GuDM+2gUq/ZJo4Jhb6wMXy+XSa3S 8YONbFgPHNJS6iuZVuUNxZkCnaqUOPiph8024Pp5mXxZjCDn8MOCSA+SDIS2TctX tk3uKjcQhRkNF9NbFQ7iLQUQcWk42bNixCppYBKVuUssQRtcUucuTf7fH4d5XE3N rjc2sjH+XNaXwKjXYwWL7dZtqfdSX0L9cp5EP5Q8DupPbXCXN3nIX/ddZaOuQHZY H9lBNTFDrsfjN261j0Ta5FoFNSTldBfhhCT366oHzIyzysuOG6ndYd+4iQIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFPnp2kZK6AYLW70qLFNd6dEVH3mRMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzNhODYw NC03NmQ5LTRlOTUtOWQ4Yi1hNDIwMTA1MTQyOTYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvM2E4NjA0 LTc2ZDktNGU5NS05ZDhiLWE0MjAxMDUxNDI5Ni8xLzEtZW5hUmtyb0JndGJ2U29z VTEzcDBSVWZlWkUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMDNsgwDQYJKoZIhvcNAQELBQADggEBAGao2OizbAtW 76Tnb6pCjpRgKL7prEfok75aOc+du9Cq0NgA+NtiJLF9knCKIyZ2RByYkywE8qJk Oyz1Jkbq5YqiQdCslVuLYIadK8k1j+igtAFUnMOYqSG5g2+osbdqaOXsMwvhvAbd sQPGWc3iF1Ec9l+r2i8h0G7j0c42uVX3frMQBCDVZ7J1UwbMnAHqbmu7pchkT2aH ObAJn4jG8m+f2vNOIAWolchj6Y5sTkM1Vg0vHPJMYTTfqurHBtd5sUipLZ49Hzcy E7JgxKEVhRG2fBkbRLPN6dhnYLDgxb04k1k6cmK66pAM1Oe95B2nptNRxLkh3mlR bvmVMeE2Wn4= -----END CERTIFICATE-----Generated at Sat Dec 6 05:41:37 2025 by rpki-client