This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer File: DFw5jABFpPD-D47c8geV5fjqqjA.cer (raw, json) Hash identifier: hYcm85M35jtLwjpnYNh+Qx3BdAUfDfcig/QF46+cjss= Subject key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B1251F95E14F1AE3E738FA8654C910259 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Fri 12 Dec 2025 11:28:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208754 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:51:f9:5e:14:f1:ae:3e:73:8f:a8:65:4c:91:02:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 12 11:28:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:32:d1:91:9a:c8:b0:53:bb:7c:a9:7d:0d:02: ce:2c:df:11:d1:2a:3b:19:a3:73:62:05:6d:d7:3b: be:62:19:c8:26:33:ce:7f:25:cd:89:9b:77:ab:8b: 4d:dd:ef:59:5d:1c:b2:ae:4a:b4:8c:5a:72:38:12: 3e:06:16:b6:fd:3e:74:05:0a:7c:cd:a8:07:53:53: a1:21:8d:5a:ca:df:0d:ae:09:fe:75:45:74:eb:64: 49:3f:60:7f:db:f5:a7:61:02:d7:b1:48:e8:fd:ae: 3e:2f:95:29:57:00:df:ea:d4:6f:b2:b9:b0:37:79: cd:21:6c:fd:e7:53:18:a8:d6:24:e8:ef:cc:ad:cf: e2:78:c4:07:c0:88:3f:e0:b7:7b:5d:bf:ea:ca:35: 83:8e:74:2a:a7:28:39:6f:ce:2d:8c:34:28:b5:8f: 35:ce:20:e5:b9:d2:cd:29:6e:2d:fd:22:a4:7f:11: 8b:78:81:a6:40:fc:0c:13:07:a2:d1:49:52:46:ac: 36:33:5b:0d:1c:20:2f:6a:67:10:65:b0:e1:f6:b5: 9a:87:5c:19:88:95:75:75:40:a0:d2:6c:60:c2:9c: d0:32:f9:7d:84:b1:a2:49:3a:81:88:55:12:6f:f1: e4:ec:c3:9f:cf:2d:6b:3b:5d:a7:cc:cb:ca:f0:2d: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 208754 Signature Algorithm: sha256WithRSAEncryption 3b:58:cf:b4:18:84:91:47:42:ff:ad:b8:bc:2f:3b:71:17:db: ac:7d:b4:99:92:07:bd:5a:05:72:bc:61:0f:4c:28:a7:3a:c8: 7e:2b:94:c2:9e:a9:68:3b:8d:01:90:c8:f9:44:e7:21:c9:2a: a8:e8:79:27:bd:e8:de:eb:c0:fb:20:8f:3b:02:23:a4:86:58: 45:11:67:8c:20:8d:97:0c:07:3a:e1:cc:fb:31:bc:54:7c:06: 60:e1:1b:8e:15:28:bc:b3:23:d0:09:1f:68:05:1e:46:4a:f1: 47:82:41:b5:6a:11:25:ad:93:ac:e3:6f:f9:ae:61:43:37:57: 06:e9:2b:94:ba:ac:84:85:a2:60:13:d8:7c:59:fd:e3:fe:0d: 6e:4a:b8:1d:f5:ef:9f:a8:e3:a8:25:0d:e4:25:37:c1:f3:32: 75:d3:43:0d:8d:b5:4a:4b:49:84:0f:c2:89:79:b8:a0:8b:73: ae:4b:ec:5c:6e:72:5f:58:93:ea:b2:0c:0b:8e:58:26:49:01: ee:8c:11:e1:55:fa:75:3f:23:7b:bb:96:b1:07:4c:34:16:55: 18:1b:19:62:15:6a:60:36:05:d7:f8:25:8e:75:35:af:b2:6e: 13:11:26:54:b9:fc:37:de:c3:09:53:dd:bd:01:11:e4:12:82: e4:82:b9:70 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgISAZsSUfleFPGuPnOPqGVMkQJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjEyMTEyODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzVjMzk4YzAwNDVhNGYwZmUwZjhlZGNmMjA3OTVlNWY4ZWFhYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujLRkZrIsFO7fKl9DQLOLN8R0So7 GaNzYgVt1zu+YhnIJjPOfyXNiZt3q4tN3e9ZXRyyrkq0jFpyOBI+Bha2/T50BQp8 zagHU1OhIY1ayt8Nrgn+dUV062RJP2B/2/WnYQLXsUjo/a4+L5UpVwDf6tRvsrmw N3nNIWz951MYqNYk6O/Mrc/ieMQHwIg/4Ld7Xb/qyjWDjnQqpyg5b84tjDQotY81 ziDludLNKW4t/SKkfxGLeIGmQPwMEwei0UlSRqw2M1sNHCAvamcQZbDh9rWah1wZ iJV1dUCg0mxgwpzQMvl9hLGiSTqBiFUSb/Hk7MOfzy1rO12nzMvK8C0/ZQIDAQAB o4ICmzCCApcwHQYDVR0OBBYEFAxcOYwARaTw/g+O3PIHleX46qowMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4MTJk M2VmLWM1ZmMtNDViMC05NTRhLThhNTIyMTBjMmU5MC8xLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZjgx MmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMyZTkwLzEvMEM1QzM5OEMwMDQ1 QTRGMEZFMEY4RURDRjIwNzk1RTVGOEVBQUEzMC5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDL3Iw DQYJKoZIhvcNAQELBQADggEBADtYz7QYhJFHQv+tuLwvO3EX26x9tJmSB71aBXK8 YQ9MKKc6yH4rlMKeqWg7jQGQyPlE5yHJKqjoeSe96N7rwPsgjzsCI6SGWEURZ4wg jZcMBzrhzPsxvFR8BmDhG44VKLyzI9AJH2gFHkZK8UeCQbVqESWtk6zjb/muYUM3 VwbpK5S6rISFomAT2HxZ/eP+DW5KuB3175+o46glDeQlN8HzMnXTQw2NtUpLSYQP wol5uKCLc65L7Fxucl9Yk+qyDAuOWCZJAe6MEeFV+nU/I3u7lrEHTDQWVRgbGWIV amA2Bdf4JY51Na+ybhMRJlS5/DfewwlT3b0BEeQSguSCuXA= -----END CERTIFICATE-----Generated at Tue Dec 16 04:33:15 2025 by rpki-client