This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2AOiwMslPPmzM18ONacI2a6fyYY.cer File: 2AOiwMslPPmzM18ONacI2a6fyYY.cer (raw, json) Hash identifier: gB6/2D3qeIahUji0QzeIjPZPtr7a4/eQsZ2FXoFrAMA= Subject key identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7D947CFF8CC07A710FDC35C1FC3FBB03 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 13 Nov 2025 14:17:54 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 61373 IP: 185.9.32.0/22 IP: 185.50.20.0/22 IP: 185.119.60.0/22 IP: 2a02:dd40::/29 IP: 2a06:8980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:94:7c:ff:8c:c0:7a:71:0f:dc:35:c1:fc:3f:bb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 13 14:17:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d803a2c0cb253cf9b3335f0e35a708d9ae9fc986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:93:d7:36:5d:57:97:4c:c4:72:17:31:53: 81:b2:d4:30:e1:2b:ac:07:e2:3d:3e:cc:28:0f:b0: 74:4e:26:3b:a2:8d:3e:c4:af:86:6b:d7:ac:e4:36: 89:09:23:73:ff:e5:7d:b8:a4:bf:bd:d9:33:2d:0a: 93:5a:0f:39:02:03:22:21:b4:82:23:59:7e:f7:da: 60:9e:20:15:63:be:14:b4:d1:10:89:2d:8f:0b:07: 6a:fc:8f:92:b0:37:a0:26:52:2d:a1:10:32:0d:86: 2e:79:f6:bf:d6:cd:a4:c0:6b:67:6f:2f:63:cf:9f: 1c:5b:4d:e4:6a:9c:9b:4e:5e:ba:ba:bd:56:79:c6: 5f:b7:cd:84:96:bf:07:87:5d:b5:2c:f5:48:5a:8d: a9:78:0c:b1:36:50:60:1a:09:73:6e:ad:5a:75:7c: 4f:a4:db:81:4d:e4:81:2e:fc:d7:56:16:9b:ef:63: 83:6e:48:09:af:fa:dd:f6:08:41:17:76:ca:ca:24: df:c9:b7:45:f3:3a:c6:e8:b4:d8:47:7a:a2:31:6b: 7d:e2:7e:a4:d2:79:61:b4:b1:62:3f:bc:42:28:46: 7d:e6:f2:c9:3a:51:e3:eb:6c:63:fe:f3:47:49:3f: 66:89:70:89:61:0f:25:21:bb:4a:1e:2e:68:2f:50: 09:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:03:A2:C0:CB:25:3C:F9:B3:33:5F:0E:35:A7:08:D9:AE:9F:C9:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ddcfd9-d419-40dd-a0f0-8e2d212cefef/1/2AOiwMslPPmzM18ONacI2a6fyYY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.32.0/22 185.50.20.0/22 185.119.60.0/22 IPv6: 2a02:dd40::/29 2a06:8980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61373 Signature Algorithm: sha256WithRSAEncryption 62:fa:8d:f1:3a:ae:68:c8:b6:c2:e0:3f:87:12:fc:6e:7c:2f: cf:19:d0:32:b2:8c:f8:db:0d:3d:ba:d9:c7:01:04:68:ca:b1: eb:f2:5b:5c:d2:25:1a:03:49:c2:57:e1:99:76:01:b6:09:7c: 71:db:be:58:57:93:56:33:f2:29:12:df:eb:28:5a:91:05:dc: 8e:9b:b7:88:2c:c0:be:6e:d8:ce:cb:ae:c3:df:d5:4e:2b:95: 0b:e6:19:1a:b4:db:38:eb:36:66:5e:7a:c0:ae:ed:67:fe:01: fe:54:88:87:ac:5c:30:ec:71:75:0a:75:be:49:56:b4:4c:09: 08:db:90:b3:d8:87:f6:85:9b:d8:86:26:90:00:cb:a8:77:a9: b8:4d:c9:0b:59:96:7b:ec:b5:f5:a0:9a:63:d5:07:24:f3:48: da:25:a9:90:08:7a:ba:07:9f:18:18:f3:b7:2b:f1:ab:37:c6: f2:ab:37:56:6a:4e:fa:13:39:bb:a3:f4:32:e0:45:f2:a9:c2: ec:65:41:5c:4f:d2:af:e8:24:88:e3:12:ce:1b:d8:cd:9a:27: 10:04:f2:5b:e6:6c:26:93:98:31:f0:b5:09:e0:9b:48:15:ff: d6:44:27:4e:89:88:ae:00:df:46:6d:cc:53:4c:6d:29:0c:2c: 51:e5:0f:c7 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgISAZp9lHz/jMB6cQ/cNcH8P7sDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEzMTQxNzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODAzYTJjMGNiMjUzY2Y5YjMzMzVmMGUzNWE3MDhkOWFlOWZjOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSuT1zZdV5dMxHIXMVOBstQw4Sus B+I9PswoD7B0TiY7oo0+xK+Ga9es5DaJCSNz/+V9uKS/vdkzLQqTWg85AgMiIbSC I1l+99pgniAVY74UtNEQiS2PCwdq/I+SsDegJlItoRAyDYYuefa/1s2kwGtnby9j z58cW03kapybTl66ur1WecZft82Elr8Hh121LPVIWo2peAyxNlBgGglzbq1adXxP pNuBTeSBLvzXVhab72ODbkgJr/rd9ghBF3bKyiTfybdF8zrG6LTYR3qiMWt94n6k 0nlhtLFiP7xCKEZ95vLJOlHj62xj/vNHST9miXCJYQ8lIbtKHi5oL1AJcQIDAQAB o4ICwjCCAr4wHQYDVR0OBBYEFNgDosDLJTz5szNfDjWnCNmun8mGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3L2RkY2Zk OS1kNDE5LTQwZGQtYTBmMC04ZTJkMjEyY2VmZWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvZGRjZmQ5 LWQ0MTktNDBkZC1hMGYwLThlMmQyMTJjZWZlZi8xLzJBT2l3TXNsUFBtek0xOE9O YWNJMmE2ZnlZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF BwEHAQH/BDIwMDAYBAIAATASAwQCuQkgAwQCuTIUAwQCuXc8MBQEAgACMA4DBQMq At1AAwUDKgaJgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA770wDQYJKoZIhvcN AQELBQADggEBAGL6jfE6rmjItsLgP4cS/G58L88Z0DKyjPjbDT262ccBBGjKsevy W1zSJRoDScJX4Zl2AbYJfHHbvlhXk1Yz8ikS3+soWpEF3I6bt4gswL5u2M7LrsPf 1U4rlQvmGRq02zjrNmZeesCu7Wf+Af5UiIesXDDscXUKdb5JVrRMCQjbkLPYh/aF m9iGJpAAy6h3qbhNyQtZlnvstfWgmmPVByTzSNolqZAIeroHnxgY87cr8as3xvKr N1ZqTvoTObuj9DLgRfKpwuxlQVxP0q/oJIjjEs4b2M2aJxAE8lvmbCaTmDHwtQng m0gV/9ZEJ06JiK4A30ZtzFNMbSkMLFHlD8c= -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:07 2025 by rpki-client