This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B2yh-gAAa6SP7plAIRY6koqhgE4.cer File: B2yh-gAAa6SP7plAIRY6koqhgE4.cer (raw, json) Hash identifier: rlUidzxQ7VdtFQfixze7HOyWa/zZD30lQw3xQ30Esgo= Subject key identifier: 07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB1A57BC16F9AAACA3EEB5471E76B6B3F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 23 Nov 2025 16:56:43 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 207299 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b1:a5:7b:c1:6f:9a:aa:ca:3e:eb:54:71:e7:6b:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 23 16:56:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=076ca1fa00006ba48fee994021163a928aa1804e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:77:80:85:2b:80:80:07:93:49:48:9e:c7: 3a:13:74:66:a9:10:aa:42:6f:4a:2e:2e:b9:67:12: a9:e8:53:a4:c4:2e:aa:f0:19:c7:e9:59:57:f6:08: de:c7:2c:4a:5e:86:8e:9b:60:c7:b9:07:fb:cc:75: 32:d7:aa:19:2c:da:29:f7:a5:f5:45:f9:cd:aa:ca: e3:36:a4:38:a4:b1:c3:21:80:1d:4b:b5:2a:fc:1e: be:a7:35:41:48:d5:5a:86:9a:06:09:7e:81:48:bd: cf:02:1c:7a:b4:9d:9b:be:35:9c:c4:d5:93:32:21: 25:ae:78:de:6a:cc:e9:2d:f1:8e:82:a5:61:ed:43: 8a:9c:32:f6:2a:1c:34:c8:47:1f:70:f9:e2:76:b7: f7:40:3c:24:86:c8:57:83:00:40:e4:c0:d6:24:7c: 3b:0e:56:05:f4:e9:19:0c:e7:5d:50:13:39:d6:87: 0c:15:78:63:0e:c5:cf:8e:31:29:a8:6d:72:52:cc: b4:e8:4b:16:b7:62:d6:61:c1:8c:52:24:7a:37:52: 27:17:d8:38:88:f8:76:66:15:f3:ac:68:a0:e7:cc: 0e:3c:99:d1:4a:77:cd:4e:6e:db:ce:ea:ce:fb:68: 5e:82:ce:fc:ee:0c:bb:0c:aa:a8:c0:b6:4e:13:e3: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6C:A1:FA:00:00:6B:A4:8F:EE:99:40:21:16:3A:92:8A:A1:80:4E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b30ea1-5bff-4575-84e3-14fb48ed454d/1/B2yh-gAAa6SP7plAIRY6koqhgE4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 207299 Signature Algorithm: sha256WithRSAEncryption 17:5c:ae:49:fd:98:b6:0b:d9:56:df:23:a4:94:a8:73:35:e8: de:be:b5:14:f7:3e:dc:b1:ff:cf:43:59:11:d7:cc:65:21:96: f6:0e:b7:0f:13:2f:ca:ba:22:da:09:ab:bf:e9:10:e0:26:ef: 04:ff:29:c8:00:11:d7:bb:ce:3d:e4:ea:ad:0a:f2:e1:7e:f2: 35:56:f2:73:d5:44:84:62:73:2b:1e:7a:98:5a:41:08:de:57: c3:54:91:0c:3d:75:ef:12:e3:5c:9d:70:f7:85:18:0c:ca:4f: 94:71:30:d1:90:20:a3:e3:32:00:1e:78:cd:f2:3c:46:c8:c3: f4:34:b8:91:78:33:06:56:8d:fe:27:c7:59:8e:2d:4e:d4:b2: cf:01:5d:8a:bc:9a:be:51:19:d7:ef:c6:79:63:0b:f3:a0:f8: 00:ff:32:09:7c:60:22:7a:3b:1b:67:86:fa:fc:27:09:a0:3a: c8:55:ea:cb:e6:e3:52:c9:64:4c:49:4a:9f:09:d7:14:29:83: 3d:f5:b1:a8:14:14:c8:1b:0d:f3:0e:1e:4a:e5:60:cd:08:68: 14:ed:4a:b7:37:36:8b:fe:9e:74:8b:d2:11:7f:cf:79:66:2c: 43:53:d5:cc:e0:fa:31:30:67:63:d2:00:57:8b:3d:c7:4f:40: 45:a5:97:69 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZqxpXvBb5qqyj7rVHHna2s/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIzMTY1NjQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzZjYTFmYTAwMDA2YmE0OGZlZTk5NDAyMTE2M2E5MjhhYTE4MDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n93gIUrgIAHk0lInsc6E3RmqRCq Qm9KLi65ZxKp6FOkxC6q8BnH6VlX9gjexyxKXoaOm2DHuQf7zHUy16oZLNop96X1 RfnNqsrjNqQ4pLHDIYAdS7Uq/B6+pzVBSNVahpoGCX6BSL3PAhx6tJ2bvjWcxNWT MiElrnjeaszpLfGOgqVh7UOKnDL2Khw0yEcfcPnidrf3QDwkhshXgwBA5MDWJHw7 DlYF9OkZDOddUBM51ocMFXhjDsXPjjEpqG1yUsy06EsWt2LWYcGMUiR6N1InF9g4 iPh2ZhXzrGig58wOPJnRSnfNTm7bzurO+2hegs787gy7DKqowLZOE+MXKQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFAdsofoAAGukj+6ZQCEWOpKKoYBOMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5L2IzMGVh MS01YmZmLTQ1NzUtODRlMy0xNGZiNDhlZDQ1NGQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvYjMwZWEx LTViZmYtNDU3NS04NGUzLTE0ZmI0OGVkNDU0ZC8xL0IyeWgtZ0FBYTZTUDdwbEFJ Ulk2a29xaGdFNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMpwzANBgkqhkiG9w0BAQsFAAOCAQEAF1yuSf2YtgvZ Vt8jpJSoczXo3r61FPc+3LH/z0NZEdfMZSGW9g63DxMvyroi2gmrv+kQ4CbvBP8p yAAR17vOPeTqrQry4X7yNVbyc9VEhGJzKx56mFpBCN5Xw1SRDD117xLjXJ1w94UY DMpPlHEw0ZAgo+MyAB54zfI8RsjD9DS4kXgzBlaN/ifHWY4tTtSyzwFdiryavlEZ 1+/GeWML86D4AP8yCXxgIno7G2eG+vwnCaA6yFXqy+bjUslkTElKnwnXFCmDPfWx qBQUyBsN8w4eSuVgzQhoFO1Ktzc2i/6edIvSEX/PeWYsQ1PVzOD6MTBnY9IAV4s9 x09ARaWXaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:32 2025 by rpki-client