This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Aq2woU5Vr3chH_18j80XsqMGSaA.cer File: Aq2woU5Vr3chH_18j80XsqMGSaA.cer (raw, json) Hash identifier: E0k2nVSdPMIVuf/S0QtT8nORecRATW6hlUEl2spvc68= Subject key identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEE108360E4556BD9C7D9F2BC2B4E4B8F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 05 Dec 2025 10:30:50 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 15932 IP: 185.142.240.0/22 IP: 213.230.160.0/19 IP: 2a02:2b48::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:10:83:60:e4:55:6b:d9:c7:d9:f2:bc:2b:4e:4b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 5 10:30:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=02adb0a14e55af77211ffd7c8fcd17b2a30649a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:d1:30:5d:09:ef:04:9d:80:05:b7:48:ac: 4f:0c:f7:e7:3b:92:0b:49:75:e0:68:14:7b:49:f0: 7c:8d:62:20:ed:46:a6:19:bf:55:f4:a0:7a:6d:89: b6:11:e1:03:6f:9c:27:55:b3:84:56:bf:3b:71:84: 0e:77:e6:55:23:6a:1c:5e:bd:72:6d:70:8a:f5:86: 63:13:b6:f0:d7:15:5e:5b:9d:4c:8d:20:d7:90:0b: d9:c0:5f:1b:17:7b:eb:61:49:9e:bc:47:f6:78:31: 92:d5:06:81:9e:1c:d5:e5:7b:6b:46:fe:0e:72:f0: 22:47:c3:2b:e8:78:a5:e2:53:cc:f5:ff:a1:bf:ec: 25:41:25:9c:e1:88:d3:2e:40:b4:c5:e9:94:3f:60: 7d:d8:6a:47:8f:d4:eb:81:52:94:1c:44:b2:08:0b: 35:c1:65:a8:4e:df:53:ce:41:eb:76:29:d0:48:8e: f8:c7:6d:8c:c2:8c:e2:5c:97:fe:73:5d:83:a2:3e: 47:ff:80:b1:7c:a7:59:28:10:c0:ea:ab:dc:5c:19: d4:bc:9c:42:b9:f1:44:67:46:8f:2b:69:b6:c0:25: 4d:04:08:2a:c4:39:42:1e:bd:c9:b6:c6:6e:8e:b6: 7d:d1:23:9b:9e:a2:b4:53:9d:d5:31:76:a2:b7:0e: ce:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AD:B0:A1:4E:55:AF:77:21:1F:FD:7C:8F:CD:17:B2:A3:06:49:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c10383-cf6e-46c4-b8e6-ca41c72caf96/1/Aq2woU5Vr3chH_18j80XsqMGSaA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.240.0/22 213.230.160.0/19 IPv6: 2a02:2b48::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15932 Signature Algorithm: sha256WithRSAEncryption 28:56:f2:f7:9a:c7:af:17:96:6f:eb:10:5a:bd:c6:c2:59:2c: 38:9c:76:7b:db:57:db:b5:15:6b:11:32:99:c2:28:dc:17:46: e6:d6:60:fe:74:52:c7:91:38:76:dd:4f:de:fa:a3:3c:fe:4d: fc:dc:99:63:21:7b:2d:65:d6:8a:f1:13:9b:cc:8e:82:78:88: 12:15:cf:db:9d:73:d7:6a:0c:7a:01:00:ae:ff:e6:3a:f0:4e: 55:de:6f:ec:f4:e1:c4:c3:27:ef:cd:7b:ae:25:a0:63:9c:f1: 28:01:1f:8d:50:38:14:38:21:3f:ad:37:af:dd:f5:71:87:da: b3:34:a2:b1:27:c8:b6:ad:70:1d:83:f7:9a:30:7c:b3:43:3a: cc:18:0c:dc:76:91:93:f6:b8:23:bb:f6:f8:7a:1a:9c:31:08: 40:4b:44:da:a4:85:1a:51:8d:42:a6:e2:68:87:1b:e9:61:18: f3:be:e8:4c:78:6e:62:fb:c0:75:2d:22:40:56:08:11:c2:be: 48:11:88:5f:64:a2:9a:32:00:97:c1:aa:d6:39:b2:9f:ad:d2: b4:fa:5a:c4:4d:89:14:7c:3f:82:35:08:b4:94:90:f0:0e:59: af:85:f3:f3:43:a0:b9:84:ca:4b:52:0e:8b:6e:81:ae:c1:5b: 6e:1d:c7:52 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZruEINg5FVr2cfZ8rwrTkuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA1MTAzMDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmFkYjBhMTRlNTVhZjc3MjExZmZkN2M4ZmNkMTdiMmEzMDY0OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs33RMF0J7wSdgAW3SKxPDPfnO5IL SXXgaBR7SfB8jWIg7UamGb9V9KB6bYm2EeEDb5wnVbOEVr87cYQOd+ZVI2ocXr1y bXCK9YZjE7bw1xVeW51MjSDXkAvZwF8bF3vrYUmevEf2eDGS1QaBnhzV5XtrRv4O cvAiR8Mr6Hil4lPM9f+hv+wlQSWc4YjTLkC0xemUP2B92GpHj9TrgVKUHESyCAs1 wWWoTt9TzkHrdinQSI74x22MwoziXJf+c12Doj5H/4CxfKdZKBDA6qvcXBnUvJxC ufFEZ0aPK2m2wCVNBAgqxDlCHr3JtsZujrZ90SObnqK0U53VMXaitw7OnQIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFAKtsKFOVa93IR/9fI/NF7KjBkmgMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZiL2MxMDM4 My1jZjZlLTQ2YzQtYjhlNi1jYTQxYzcyY2FmOTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvYzEwMzgz LWNmNmUtNDZjNC1iOGU2LWNhNDFjNzJjYWY5Ni8xL0FxMndvVTVWcjNjaEhfMThq ODBYc3FNR1NhQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQCuY7wAwQF1eagMA0EAgACMAcDBQMqAitIMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAj48MA0GCSqGSIb3DQEBCwUAA4IBAQAoVvL3 msevF5Zv6xBavcbCWSw4nHZ721fbtRVrETKZwijcF0bm1mD+dFLHkTh23U/e+qM8 /k383JljIXstZdaK8RObzI6CeIgSFc/bnXPXagx6AQCu/+Y68E5V3m/s9OHEwyfv zXuuJaBjnPEoAR+NUDgUOCE/rTev3fVxh9qzNKKxJ8i2rXAdg/eaMHyzQzrMGAzc dpGT9rgju/b4ehqcMQhAS0TapIUaUY1CpuJohxvpYRjzvuhMeG5i+8B1LSJAVggR wr5IEYhfZKKaMgCXwarWObKfrdK0+lrETYkUfD+CNQi0lJDwDlmvhfPzQ6C5hMpL Ug6LboGuwVtuHcdS -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:27 2025 by rpki-client