This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67XTVXRBaWDqp27yWMsvpZuKz84.cer File: 67XTVXRBaWDqp27yWMsvpZuKz84.cer (raw, json) Hash identifier: Wcu0RYf9ypm0Udbgp7lahkyPnM/RLtY5HFWNizk19EE= Subject key identifier: EB:B5:D3:55:74:41:69:60:EA:A7:6E:F2:58:CB:2F:A5:9B:8A:CF:CE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEE8862372305D2C69D6996B300756712 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/67XTVXRBaWDqp27yWMsvpZuKz84.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 05 Dec 2025 12:41:46 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 213663 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:88:62:37:23:05:d2:c6:9d:69:96:b3:00:75:67:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 5 12:41:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ebb5d35574416960eaa76ef258cb2fa59b8acfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:76:3f:02:d5:37:e8:7d:c5:57:b3:32:d1: f3:36:63:d0:e6:94:3f:e0:84:6b:0b:56:0e:61:ec: d1:0d:1c:29:1d:30:4a:3b:74:8a:8f:60:b2:3b:52: 91:69:91:db:8c:99:1e:d3:03:8b:9a:ac:c8:c2:70: 8b:e4:5c:62:2b:91:82:b0:eb:47:cf:2e:f7:08:8d: 10:08:24:3a:65:22:b7:82:b9:48:5b:7a:0a:93:b2: 61:24:18:ef:fc:02:14:0f:51:0f:79:e2:f6:f7:ac: d1:d1:85:97:44:0e:2f:37:e3:8a:54:9c:af:bd:3b: ab:36:83:9d:6f:24:a6:60:22:0e:0f:a7:0a:87:38: cf:7f:6d:9a:8b:2e:df:f5:ec:3a:92:cb:a1:ad:0e: 4e:5a:31:e7:89:1f:76:b3:d9:a8:8b:d1:3b:56:d5: 66:de:0d:3c:fd:22:75:ea:1d:9c:0d:c4:02:1e:d7: e6:09:54:74:b7:10:55:b6:58:a2:b1:19:f5:00:22: 86:b2:d8:c3:59:0c:f9:d0:56:13:73:65:60:8e:3f: 85:fc:bc:62:f4:7b:6b:24:38:1a:4f:0c:82:50:64: dd:48:92:f2:2f:4b:b2:88:84:48:7a:e6:c7:62:c3: b0:0d:09:0f:b4:1c:62:fc:4f:51:52:c6:11:4e:36: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B5:D3:55:74:41:69:60:EA:A7:6E:F2:58:CB:2F:A5:9B:8A:CF:CE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e1377f-6908-4f27-9eb3-9b80141c0aeb/1/67XTVXRBaWDqp27yWMsvpZuKz84.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 213663 Signature Algorithm: sha256WithRSAEncryption 3a:2e:fe:cb:c5:75:3b:da:72:31:1d:2a:47:66:60:f9:ba:b3: c5:d2:99:8d:c6:48:2f:95:a6:90:de:f5:ac:f0:cb:68:86:04: 1f:51:fe:47:0d:79:22:ee:b1:11:eb:70:17:a2:8f:d4:d2:fc: 2c:d8:72:ba:77:70:e2:e3:59:af:90:11:ea:10:5f:6f:c3:16: ab:63:1b:ed:a5:16:27:10:d1:c2:ef:63:7c:56:05:8f:39:d8: 9b:c0:ac:a2:b1:63:6f:f4:49:eb:fb:86:ed:16:e9:4f:a2:05: 55:f9:2f:60:e5:7a:6c:25:94:78:45:94:76:eb:ea:9c:1b:19: 54:e8:5e:28:86:a7:98:e3:39:bf:b7:ec:4b:e6:30:e4:60:80: 67:bb:76:87:2c:6a:19:31:0b:d3:b7:0b:31:73:a6:1c:20:9c: 4f:eb:12:2b:6f:b8:1d:4c:c0:37:88:9d:1c:cd:71:5c:26:ee: 24:a4:2d:ec:62:2f:01:15:29:48:3e:90:37:6f:f5:84:67:17: 1c:ee:00:54:7c:6c:63:a5:a3:c3:24:3a:84:06:4c:98:69:be: 77:96:f4:bb:a5:09:e5:99:3f:4d:fd:30:ff:e7:15:7a:66:b5: 44:37:b3:88:f1:7b:8a:fa:3b:1a:a1:c5:80:0b:b9:15:94:ee: 03:69:70:5f -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZruiGI3IwXSxp1plrMAdWcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA1MTI0MTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmI1ZDM1NTc0NDE2OTYwZWFhNzZlZjI1OGNiMmZhNTliOGFjZmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kl2PwLVN+h9xVezMtHzNmPQ5pQ/ 4IRrC1YOYezRDRwpHTBKO3SKj2CyO1KRaZHbjJke0wOLmqzIwnCL5FxiK5GCsOtH zy73CI0QCCQ6ZSK3grlIW3oKk7JhJBjv/AIUD1EPeeL296zR0YWXRA4vN+OKVJyv vTurNoOdbySmYCIOD6cKhzjPf22aiy7f9ew6ksuhrQ5OWjHniR92s9moi9E7VtVm 3g08/SJ16h2cDcQCHtfmCVR0txBVtliisRn1ACKGstjDWQz50FYTc2Vgjj+F/Lxi 9HtrJDgaTwyCUGTdSJLyL0uyiIRIeubHYsOwDQkPtBxi/E9RUsYRTjbDbwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFOu101V0QWlg6qdu8ljLL6Wbis/OMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQwL2UxMzc3 Zi02OTA4LTRmMjctOWViMy05YjgwMTQxYzBhZWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAvZTEzNzdm LTY5MDgtNGYyNy05ZWIzLTliODAxNDFjMGFlYi8xLzY3WFRWWFJCYVdEcXAyN3lX TXN2cFp1S3o4NC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNCnzANBgkqhkiG9w0BAQsFAAOCAQEAOi7+y8V1O9py MR0qR2Zg+bqzxdKZjcZIL5WmkN71rPDLaIYEH1H+Rw15Iu6xEetwF6KP1NL8LNhy undw4uNZr5AR6hBfb8MWq2Mb7aUWJxDRwu9jfFYFjznYm8CsorFjb/RJ6/uG7Rbp T6IFVfkvYOV6bCWUeEWUduvqnBsZVOheKIanmOM5v7fsS+Yw5GCAZ7t2hyxqGTEL 07cLMXOmHCCcT+sSK2+4HUzAN4idHM1xXCbuJKQt7GIvARUpSD6QN2/1hGcXHO4A VHxsY6WjwyQ6hAZMmGm+d5b0u6UJ5Zk/Tf0w/+cVema1RDeziPF7ivo7GqHFgAu5 FZTuA2lwXw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:27 2025 by rpki-client