This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer File: 6s3B4kf6qVMYCCpKxe29gFEfjfc.cer (raw, json) Hash identifier: yRbz17Qh6NsXrRYgu4vB/X2cUIF8Bv/DDTDnX7QVkzg= Subject key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE4B3EC84E70DD3A4574D6FBD9A102DD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 14:53:08 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208002 IP: 104.247.160.0/19 IP: 185.73.84.0/24 IP: 185.73.128.0/22 IP: 185.137.212.0/22 IP: 2a03:a5a0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:b3:ec:84:e7:0d:d3:a4:57:4d:6f:bd:9a:10:2d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 14:53:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:96:e5:5c:89:ee:3b:a4:1b:21:09:c7:65:77: 28:62:38:1a:e9:37:5d:ff:36:e4:17:a4:da:3f:ea: c3:07:cb:cb:1a:a0:2c:d5:5b:6f:e4:a6:15:d9:f0: a3:66:e5:7f:06:cb:18:42:8c:c8:b2:c1:aa:a2:d5: c9:d5:7e:c3:8e:c7:35:46:17:f9:f5:bf:79:51:3c: ab:32:9f:4b:11:92:de:c4:73:b9:ec:bb:77:98:57: d0:ee:53:cb:9e:ed:03:4d:80:20:cf:c1:ff:3d:a1: be:14:ea:f2:b5:74:78:42:0f:33:8a:73:92:52:08: 5d:94:ec:79:7a:1f:6a:82:8d:6a:10:6a:27:d5:05: d2:35:60:f1:10:5e:5d:2c:63:c6:e7:97:a5:c9:e8: b4:57:cc:50:21:44:89:24:04:84:55:55:e1:11:cd: 3f:21:2e:98:c5:47:5d:6f:ea:fe:0e:4a:d0:a7:1d: 44:9e:7b:91:86:75:57:36:6c:57:35:1e:67:16:4d: f0:5b:b2:cb:1c:48:02:41:90:62:23:cc:89:c9:49: 0a:ab:2d:87:55:79:06:06:df:68:ac:45:2b:6d:58: e1:1f:55:c0:78:76:cf:85:bb:42:46:b8:83:e3:60: 75:84:3d:4d:1c:3e:c2:42:25:ed:81:e7:c7:96:25: 14:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.247.160.0/19 185.73.84.0/24 185.73.128.0/22 185.137.212.0/22 IPv6: 2a03:a5a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208002 Signature Algorithm: sha256WithRSAEncryption 77:76:9e:43:fe:0a:66:7c:30:86:25:83:ac:93:35:e6:4e:72: 7d:5a:c2:a3:b0:b2:1b:d4:cd:04:a2:0a:78:19:d9:b0:7e:d6: ca:85:f8:12:73:0b:72:3f:f3:2b:3e:33:5c:0f:49:c2:c3:83: 56:51:9f:b4:e6:e5:72:ac:f0:ae:b5:16:e4:d8:68:58:33:1c: f7:32:a7:20:8e:e0:c9:16:fd:3f:bb:16:14:b4:c6:f8:91:22: c1:1b:59:3c:fe:c6:da:5d:d5:4b:54:c0:da:d8:57:7e:7e:e0: 5b:74:11:48:ae:57:a4:91:a8:13:29:da:8e:89:8e:6f:8c:ea: 82:97:46:2e:4d:95:58:8f:16:d5:25:1f:8b:23:52:17:d5:67: ef:f9:b6:c8:17:62:8c:ae:32:c8:4b:87:1f:25:e8:c0:ff:4c: 5a:fe:55:a2:61:2a:c2:e1:6c:d3:78:ec:7e:41:ee:eb:fc:56: 15:fa:20:92:5d:c0:eb:b5:71:4a:db:f3:4d:56:ea:ef:99:3f: 6f:a9:55:7c:1b:8f:0e:8d:3c:3d:0b:7a:7b:76:18:79:6f:00: 45:7c:33:07:77:fe:97:44:52:e1:ab:32:29:b2:e7:ef:1d:e2: 5c:2c:f6:06:5d:c3:63:a5:ef:35:cf:5a:a9:b8:6a:9c:c5:7e: dc:b2:df:74 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgISAZrks+yE5w3TpFdNb72aEC3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTQ1MzA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWNkYzFlMjQ3ZmFhOTUzMTgwODJhNGFjNWVkYmQ4MDUxMWY4ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspblXInuO6QbIQnHZXcoYjga6Tdd /zbkF6TaP+rDB8vLGqAs1Vtv5KYV2fCjZuV/BssYQozIssGqotXJ1X7Djsc1Rhf5 9b95UTyrMp9LEZLexHO57Lt3mFfQ7lPLnu0DTYAgz8H/PaG+FOrytXR4Qg8zinOS UghdlOx5eh9qgo1qEGon1QXSNWDxEF5dLGPG55elyei0V8xQIUSJJASEVVXhEc0/ IS6YxUddb+r+DkrQpx1EnnuRhnVXNmxXNR5nFk3wW7LLHEgCQZBiI8yJyUkKqy2H VXkGBt9orEUrbVjhH1XAeHbPhbtCRriD42B1hD1NHD7CQiXtgefHliUUKwIDAQAB o4ICwTCCAr0wHQYDVR0OBBYEFOrNweJH+qlTGAgqSsXtvYBRH433MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M1L2U2YzQ0 Yy0zMTI1LTRmZTYtYTAwZC02MjhjY2YwMGRmYmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZTZjNDRj LTMxMjUtNGZlNi1hMDBkLTYyOGNjZjAwZGZiZC8xLzZzM0I0a2Y2cVZNWUNDcEt4 ZTI5Z0ZFZmpmYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQFaPegAwQAuUlUAwQCuUmAAwQCuYnUMA0EAgAC MAcDBQAqA6WgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMsgjANBgkqhkiG9w0B AQsFAAOCAQEAd3aeQ/4KZnwwhiWDrJM15k5yfVrCo7CyG9TNBKIKeBnZsH7WyoX4 EnMLcj/zKz4zXA9JwsODVlGftOblcqzwrrUW5NhoWDMc9zKnII7gyRb9P7sWFLTG +JEiwRtZPP7G2l3VS1TA2thXfn7gW3QRSK5XpJGoEynajomOb4zqgpdGLk2VWI8W 1SUfiyNSF9Vn7/m2yBdijK4yyEuHHyXowP9MWv5VomEqwuFs03jsfkHu6/xWFfog kl3A67VxStvzTVbq75k/b6lVfBuPDo08PQt6e3YYeW8ARXwzB3f+l0RS4asyKbLn 7x3iXCz2Bl3DY6XvNc9aqbhqnMV+3LLfdA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:10:53 2025 by rpki-client