This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer File: 6Ff6t2FjLbO-eBpbm0hVcInv2VA.cer (raw, json) Hash identifier: /kxKlrnCYqsDzW5eSIdoWf/yRa6sH+891vtwTSDXxaI= Subject key identifier: E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC15182BA3D621557AE1D41254968B1BD Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 26 Nov 2025 17:58:55 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 35629 IP: 185.133.228.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:51:82:ba:3d:62:15:57:ae:1d:41:25:49:68:b1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 26 17:58:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e857fab761632db3be781a5b9b48557089efd950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:9d:72:19:94:27:1c:68:7c:96:02:f1:96: c2:d7:08:94:6e:1e:7e:2a:87:a8:da:c3:df:42:6a: d5:64:39:b7:15:ce:87:3f:d7:5e:cc:83:b5:9d:a5: d3:53:6c:2e:9e:19:37:ab:f2:23:48:c5:7d:20:22: 40:ba:68:3c:7e:16:50:d8:80:c0:a8:c4:5e:34:5d: f8:e0:2a:16:40:52:50:9b:84:c3:8e:34:fd:e2:2d: 90:fe:04:a8:e6:e5:a9:07:1e:b8:f0:e0:96:57:86: 7e:4d:84:2c:b5:00:c1:bf:5a:0f:31:e4:47:c3:4c: 07:66:5b:fe:65:fc:e3:25:b0:e6:fc:22:de:c8:1b: 0c:33:53:74:d5:ee:65:61:d5:48:0b:e3:5e:e4:cd: 84:59:d1:78:63:3a:cc:05:e5:0d:67:c7:17:2b:91: 6c:37:38:d4:77:59:5a:07:a9:dd:0c:e0:90:ba:4a: 9b:a5:05:25:50:82:61:7b:4c:eb:60:58:fb:61:44: 04:20:4b:ae:6c:41:b0:de:99:51:d4:99:aa:76:f3: 2e:8e:7d:eb:ed:b4:8f:0f:cf:1a:b6:be:43:3e:70: 82:b3:eb:78:58:69:a3:ad:31:c5:50:35:24:65:d2: f4:f2:f4:af:82:83:81:17:bc:45:73:ca:51:c9:99: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:57:FA:B7:61:63:2D:B3:BE:78:1A:5B:9B:48:55:70:89:EF:D9:50 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b081e3-8096-4318-beda-825526d607c7/1/6Ff6t2FjLbO-eBpbm0hVcInv2VA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35629 Signature Algorithm: sha256WithRSAEncryption 25:c8:b6:b7:17:96:92:13:3f:77:01:e8:02:04:7e:b3:37:8d: bb:61:9e:c9:92:32:d6:13:7b:1e:6c:0a:5f:81:c6:cd:12:65: 7d:fe:0a:d9:76:a4:b3:c5:72:f1:36:e1:d1:28:34:e0:e1:2b: 92:d2:7a:7f:8f:3c:06:7e:d2:6c:01:29:41:f8:81:e5:51:a2: e8:68:f3:b3:f8:50:0f:b8:5d:34:ee:c1:ae:40:8f:15:4d:3d: 88:df:7c:3a:52:e2:93:d2:29:dd:35:82:65:57:e0:29:de:c8: 14:f6:ca:93:10:ff:1f:98:ff:1c:87:a3:8d:0b:d4:d5:c6:8a: 0e:c7:68:ce:d1:ce:7d:b9:bb:97:15:cc:ce:2f:e1:eb:96:62: 75:31:6c:22:3b:f7:49:ae:8b:86:c4:0a:eb:42:68:b9:c2:61: 93:87:e7:72:cc:c4:51:c6:25:28:98:b8:6c:05:f3:9b:35:07: 84:87:5a:56:1e:63:0f:c1:61:d8:9e:0f:db:09:81:46:60:0d: 23:28:b9:4b:16:b9:40:23:ae:bd:cf:db:3f:6d:0a:17:2a:75: 5d:7a:17:1f:42:bc:52:95:41:01:52:f1:94:77:ca:87:a5:e6: bb:0f:7a:2e:3a:0a:cf:fc:10:80:70:40:fa:f0:64:ce:33:e8: c0:dd:53:ce -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZrBUYK6PWIVV64dQSVJaLG9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI2MTc1ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODU3ZmFiNzYxNjMyZGIzYmU3ODFhNWI5YjQ4NTU3MDg5ZWZkOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquedchmUJxxofJYC8ZbC1wiUbh5+ Koeo2sPfQmrVZDm3Fc6HP9dezIO1naXTU2wunhk3q/IjSMV9ICJAumg8fhZQ2IDA qMReNF344CoWQFJQm4TDjjT94i2Q/gSo5uWpBx648OCWV4Z+TYQstQDBv1oPMeRH w0wHZlv+ZfzjJbDm/CLeyBsMM1N01e5lYdVIC+Ne5M2EWdF4YzrMBeUNZ8cXK5Fs NzjUd1laB6ndDOCQukqbpQUlUIJhe0zrYFj7YUQEIEuubEGw3plR1JmqdvMujn3r 7bSPD88atr5DPnCCs+t4WGmjrTHFUDUkZdL08vSvgoOBF7xFc8pRyZkyKQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFOhX+rdhYy2zvngaW5tIVXCJ79lQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5L2IwODFl My04MDk2LTQzMTgtYmVkYS04MjU1MjZkNjA3YzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjA4MWUz LTgwOTYtNDMxOC1iZWRhLTgyNTUyNmQ2MDdjNy8xLzZGZjZ0MkZqTGJPLWVCcGJt MGhWY0ludjJWQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCuYXkMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCLLTANBgkqhkiG9w0BAQsFAAOCAQEAJci2txeWkhM/dwHoAgR+szeNu2GeyZIy 1hN7HmwKX4HGzRJlff4K2Xaks8Vy8Tbh0Sg04OErktJ6f488Bn7SbAEpQfiB5VGi 6Gjzs/hQD7hdNO7BrkCPFU09iN98OlLik9Ip3TWCZVfgKd7IFPbKkxD/H5j/HIej jQvU1caKDsdoztHOfbm7lxXMzi/h65ZidTFsIjv3Sa6LhsQK60JoucJhk4fncszE UcYlKJi4bAXzmzUHhIdaVh5jD8Fh2J4P2wmBRmANIyi5Sxa5QCOuvc/bP20KFyp1 XXoXH0K8UpVBAVLxlHfKh6Xmuw96LjoKz/wQgHBA+vBkzjPowN1Tzg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:38 2025 by rpki-client