This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer File: COfXs7xMB5HAz_4_FVWrdz4-0W4.cer (raw, json) Hash identifier: uPAUqlLjBNd1k2GtyRkvzf6iemqoqTL8tJsXJw76Vs8= Subject key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3A0EA8D8D715DF67B681F57BFBC14D7 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 09:52:45 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 199102 IP: 93.189.224.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a0:ea:8d:8d:71:5d:f6:7b:68:1f:57:bf:bc:14:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 09:52:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:b3:a4:56:4b:b6:1b:1b:d2:9c:2d:0e:2b: db:99:dc:37:22:2a:24:c6:fe:93:99:45:a8:dc:df: 94:07:38:5f:6e:f0:c6:4d:02:a7:1d:6f:f3:fa:56: e7:0d:a5:1f:aa:cf:e3:b4:ee:98:a1:4a:73:b6:4c: c2:47:a9:60:de:a4:d0:8c:e8:2b:0b:97:af:49:02: 80:15:fc:37:97:69:75:e9:87:6a:43:8d:ca:55:c1: a3:8a:26:5a:90:78:d5:61:71:3a:49:22:e7:c4:47: e9:d7:51:3a:87:05:8d:d2:02:ea:75:49:e4:75:32: 0c:53:e8:ed:d4:cf:6b:c1:b6:8e:e7:82:f1:0b:31: fd:10:11:19:f3:79:20:8e:09:f3:0e:ce:40:f0:3b: 90:0c:2c:c7:e0:93:84:3d:05:e3:24:8f:e7:a2:c1: d0:da:1a:e3:c5:9c:c9:b7:4e:6e:56:fe:c7:61:b6: c1:23:ab:b7:20:25:00:62:15:fe:93:a2:61:04:3c: cc:0c:b3:97:15:a3:d4:a1:b0:95:8f:5a:96:b2:3c: b0:62:88:84:f7:39:27:8d:29:d2:0d:d0:84:85:fa: ff:f4:ac:bc:dd:8c:a8:f9:af:55:cd:ef:4a:fd:68: f0:c7:bc:1b:91:be:43:13:ea:d4:cd:07:8a:67:db: 3d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.189.224.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199102 Signature Algorithm: sha256WithRSAEncryption 56:24:7c:a6:7e:91:2a:5b:ea:28:40:7a:63:a3:35:f8:09:6a: 3f:24:4e:53:b0:11:aa:09:0a:1f:47:b1:7c:66:ad:0b:c5:b0: ba:3e:a8:9c:ee:6c:f8:49:43:5f:41:82:e3:54:8a:b0:29:0b: 58:48:73:db:06:41:6d:48:12:66:d9:f5:35:3b:0f:68:da:e4: 86:d7:55:e9:ba:f3:6e:08:33:d1:e5:5c:06:de:a2:6a:77:91: 24:b6:6e:f7:62:36:cf:ae:00:58:37:ce:9b:67:80:30:4f:57: d3:a8:39:53:b3:cd:c0:76:5d:d9:6c:10:18:a8:f5:50:bf:96: a1:3b:ce:ff:71:d2:68:1f:b7:19:f9:29:d0:17:6c:93:9d:ca: 7d:78:80:d3:6c:13:14:71:9b:e6:fd:c7:44:65:77:cf:71:6e: af:15:ff:70:c9:0e:6c:e8:6b:ad:8d:6c:72:08:1f:0a:4d:c5: e3:85:86:31:e2:b6:b9:fa:74:04:ab:77:04:1c:be:e5:ab:84: c2:c0:f0:ee:76:68:2d:99:61:7b:c7:c1:7e:0a:19:54:f4:df: 05:30:ec:be:05:0b:c0:60:57:4d:24:36:8d:67:3a:9f:97:a8: f3:6e:84:5f:55:4b:f5:5a:79:18:0b:60:1b:06:21:f5:74:d9: 63:31:e4:6b -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZrjoOqNjXFd9ntoH1e/vBTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMDk1MjQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGU3ZDdiM2JjNGMwNzkxYzBjZmZlM2YxNTU1YWI3NzNlM2VkMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqSzpFZLthsb0pwtDivbmdw3Iiok xv6TmUWo3N+UBzhfbvDGTQKnHW/z+lbnDaUfqs/jtO6YoUpztkzCR6lg3qTQjOgr C5evSQKAFfw3l2l16YdqQ43KVcGjiiZakHjVYXE6SSLnxEfp11E6hwWN0gLqdUnk dTIMU+jt1M9rwbaO54LxCzH9EBEZ83kgjgnzDs5A8DuQDCzH4JOEPQXjJI/nosHQ 2hrjxZzJt05uVv7HYbbBI6u3ICUAYhX+k6JhBDzMDLOXFaPUobCVj1qWsjywYoiE 9zknjSnSDdCEhfr/9Ky83Yyo+a9Vze9K/Wjwx7wbkb5DE+rUzQeKZ9s9iwIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFAjn17O8TAeRwM/+PxVVq3c+PtFuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI3LzFiOTBk ZS0yYjc2LTRkMGItOTA5My0yZmMzNWNkMWFjMmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvMWI5MGRl LTJiNzYtNGQwYi05MDkzLTJmYzM1Y2QxYWMyYS8xL0NPZlhzN3hNQjVIQXpfNF9G VldyZHo0LTBXNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAXb3gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMJvjANBgkqhkiG9w0BAQsFAAOCAQEAViR8pn6RKlvqKEB6Y6M1+AlqPyROU7AR qgkKH0exfGatC8Wwuj6onO5s+ElDX0GC41SKsCkLWEhz2wZBbUgSZtn1NTsPaNrk htdV6brzbggz0eVcBt6ianeRJLZu92I2z64AWDfOm2eAME9X06g5U7PNwHZd2WwQ GKj1UL+WoTvO/3HSaB+3Gfkp0Bdsk53KfXiA02wTFHGb5v3HRGV3z3FurxX/cMkO bOhrrY1scggfCk3F44WGMeK2ufp0BKt3BBy+5auEwsDw7nZoLZlhe8fBfgoZVPTf BTDsvgULwGBXTSQ2jWc6n5eo826EX1VL9Vp5GAtgGwYh9XTZYzHkaw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:55:20 2025 by rpki-client