This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer File: 1m33WZ4kO0YoZBJqjCQQeKLisEU.cer (raw, json) Hash identifier: tml6ZCLEUDviJhzG/AfdKhX7sjTMY3JIEZIN3dcIgk0= Subject key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEA534DB184F5CF9BC1305C1F7A888DEE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 17:05:19 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209504 AS: 209519 AS: 209539 AS: 214609 AS: 214611 IP: 2a07:3580::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ea:53:4d:b1:84:f5:cf:9b:c1:30:5c:1f:7a:88:8d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 17:05:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d66df7599e243b462864126a8c241078a2e2b045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c2:9d:0b:69:68:5d:bf:16:0c:a0:70:ba:64: 3c:46:c1:1a:f9:a8:46:ce:98:85:1f:01:17:11:9b: 4a:0f:c5:f5:56:0b:3c:a4:71:09:a7:1b:1e:50:b6: 7d:dd:3b:a4:b5:a0:8b:4d:1a:eb:4b:32:98:9b:16: f4:a8:74:3f:1c:d9:4e:ce:89:5f:d5:0e:2c:02:25: 0d:f4:12:b1:c7:37:14:34:97:1f:bf:e0:a0:9c:1a: 16:0e:77:be:ae:52:7d:f0:d7:f7:6f:da:e9:a2:17: b7:29:da:ae:87:27:fe:1b:e0:1e:67:ac:9c:cc:bd: 5a:ba:7b:e1:16:14:34:64:59:60:62:fd:02:a1:a0: b7:20:9f:7b:8d:f0:23:a4:25:23:0a:02:b9:31:17: 25:a2:b1:ce:9e:9e:76:db:63:f2:84:79:59:75:34: 8e:d3:f7:a4:82:4f:82:77:a8:7e:f0:78:6b:03:d1: b4:8f:56:1a:9a:3f:a1:0d:c0:25:8b:da:fe:de:3a: 26:68:54:e9:db:b4:4e:ae:b6:4b:ab:5a:08:e5:fb: 4b:8c:f2:60:27:23:14:19:eb:0f:da:b1:ec:bb:09: 96:d1:93:0c:bb:47:1e:cc:52:1d:71:ee:ed:dd:78: 8e:af:3e:4e:89:da:9e:21:1f:15:1f:4e:ea:bd:25: 82:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:3580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209504 209519 209539 214609 214611 Signature Algorithm: sha256WithRSAEncryption 78:0f:34:e2:9c:d3:ad:19:d0:6b:3c:3f:9a:96:4e:9a:80:7e: 7f:14:dd:c3:19:1e:8b:a2:2c:f3:55:3a:b2:4e:5a:c9:8c:5f: fc:51:ca:71:f5:c2:64:c0:c1:85:f0:2c:94:af:06:10:88:75: 03:80:8d:8d:8a:ca:32:83:71:7f:1a:18:79:b7:88:e6:55:3f: 42:7b:08:ca:5e:8a:b4:c3:06:01:d2:d7:76:20:72:6f:61:e3: 59:42:71:a2:29:a4:d2:08:7e:ad:4d:9c:0f:4b:28:1a:9a:df: 96:97:10:c6:71:ae:8a:3d:13:a4:b4:05:16:3c:88:5f:ec:e6: 49:8c:aa:07:cf:91:b3:9b:cb:b0:eb:83:d4:17:89:4d:21:f2: 8d:fb:d8:6a:a1:45:c9:82:95:e9:ec:24:f1:af:59:53:56:4b: fb:9c:bc:a9:d2:3a:57:c7:bc:c9:79:10:13:c1:88:7a:4b:6a: 6b:30:ac:ae:71:88:36:e2:5c:43:2e:67:cd:cd:f6:ff:13:fd: 6c:98:b7:c1:9f:38:07:68:2b:84:22:19:58:db:3d:e0:dc:c2: 30:5b:e5:dc:2c:2f:79:fb:20:ea:00:27:87:02:8a:6b:15:c6: 97:01:42:0e:8d:3b:ed:8b:b5:85:2b:e6:12:ec:e7:ba:8f:eb: dc:5b:87:31 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZrqU02xhPXPm8EwXB96iI3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTcwNTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjZkZjc1OTllMjQzYjQ2Mjg2NDEyNmE4YzI0MTA3OGEyZTJiMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cKdC2loXb8WDKBwumQ8RsEa+ahG zpiFHwEXEZtKD8X1Vgs8pHEJpxseULZ93TuktaCLTRrrSzKYmxb0qHQ/HNlOzolf 1Q4sAiUN9BKxxzcUNJcfv+CgnBoWDne+rlJ98Nf3b9rpohe3Kdquhyf+G+AeZ6yc zL1aunvhFhQ0ZFlgYv0CoaC3IJ97jfAjpCUjCgK5MRclorHOnp5222PyhHlZdTSO 0/ekgk+Cd6h+8HhrA9G0j1Yamj+hDcAli9r+3jomaFTp27ROrrZLq1oI5ftLjPJg JyMUGesP2rHsuwmW0ZMMu0cezFIdce7t3XiOrz5OidqeIR8VH07qvSWCyQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFNZt91meJDtGKGQSaowkEHii4rBFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzgwMzVl Mi0xZjIwLTQ3ZTctYWQ2NC0wNzE0Mzc2NWZmZmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvODAzNWUy LTFmMjAtNDdlNy1hZDY0LTA3MTQzNzY1ZmZmZS8xLzFtMzNXWjRrTzBZb1pCSnFq Q1FRZUtMaXNFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUAKgc1gDAuBggrBgEFBQcBCAEB/wQfMB2gGzAZ AgMDMmACAwMybwIDAzKDAgMDRlECAwNGUzANBgkqhkiG9w0BAQsFAAOCAQEAeA80 4pzTrRnQazw/mpZOmoB+fxTdwxkei6Is81U6sk5ayYxf/FHKcfXCZMDBhfAslK8G EIh1A4CNjYrKMoNxfxoYebeI5lU/QnsIyl6KtMMGAdLXdiByb2HjWUJxoimk0gh+ rU2cD0soGprflpcQxnGuij0TpLQFFjyIX+zmSYyqB8+Rs5vLsOuD1BeJTSHyjfvY aqFFyYKV6ewk8a9ZU1ZL+5y8qdI6V8e8yXkQE8GIektqazCsrnGINuJcQy5nzc32 /xP9bJi3wZ84B2grhCIZWNs94NzCMFvl3Cwvefsg6gAnhwKKaxXGlwFCDo077Yu1 hSvmEuznuo/r3FuHMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:24 2025 by rpki-client