This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E--253AYyTVaU4hW1OueUGl19TU.cer File: E--253AYyTVaU4hW1OueUGl19TU.cer (raw, json) Hash identifier: sr0xQxhU3aBiF25KUdYf8fyhFomUtyqC6Z0HyrsIEzA= Subject key identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC57BEDFCFD5B5CF969BDCC80F080F5A3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 27 Nov 2025 13:23:44 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 193.138.88.0/24 IP: 195.78.40.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:7b:ed:fc:fd:5b:5c:f9:69:bd:cc:80:f0:80:f5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 27 13:23:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13efb6e77018c9355a538856d4eb9e506975f535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:b3:54:2c:79:c2:57:3b:4a:58:a3:e8:8f: 67:aa:e0:ee:f9:cc:e0:72:95:ab:8c:7c:4c:b1:bc: fa:f8:0c:6f:da:5d:0e:d4:3b:c2:c8:d6:a7:c0:b7: d2:dc:59:ab:c0:e4:ea:89:1e:a0:a7:98:5e:7c:ab: 04:10:88:7d:9c:8b:b2:57:6b:84:d5:15:5b:bc:dc: f5:15:e4:94:21:ac:15:96:e0:c5:6c:66:97:4e:77: dc:21:83:31:a9:c0:37:e3:86:30:ae:64:5b:50:bd: 04:b8:42:b7:15:bf:ee:f9:9a:84:ec:e3:b6:87:cd: d7:f8:ad:91:96:b3:3f:fa:c8:0f:f8:1b:6c:53:d0: 20:b9:52:6a:b2:17:1f:e1:87:55:45:1b:ed:68:f0: 1e:5b:26:60:3c:f2:f7:5c:c4:13:f3:b8:8f:d7:a1: db:c6:57:83:0c:83:e0:3d:1c:44:21:21:95:99:a9: b9:9c:68:13:9e:00:54:0d:29:4c:40:4c:8d:81:25: 7f:35:3e:cd:16:59:04:47:62:9f:89:94:22:b2:f7: 44:4d:42:4d:b1:09:06:0a:a2:be:01:b4:e9:7e:e9: 86:41:a4:fb:e4:74:fc:a0:9c:b3:d0:4f:db:e7:4c: 4b:63:95:e5:e5:1d:30:c2:96:c7:52:1f:a6:22:59: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EF:B6:E7:70:18:C9:35:5A:53:88:56:D4:EB:9E:50:69:75:F5:35 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/91b2d2-dfb9-48d7-8436-ebc5b67823c5/1/E--253AYyTVaU4hW1OueUGl19TU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.88.0/24 195.78.40.0/23 Signature Algorithm: sha256WithRSAEncryption 17:2f:b5:b9:d6:7f:83:2c:29:81:08:d2:d0:7e:5b:f9:5c:88: a6:e3:38:b4:55:ae:66:71:2f:3f:a7:74:48:0c:18:35:a2:6c: 5f:32:c0:e5:aa:79:e5:07:87:7c:a7:c8:85:44:89:88:c3:9b: 69:fb:a4:39:ae:b9:0a:e0:e0:3d:16:82:7e:28:b8:5d:a8:41: a2:b8:b5:74:1d:8f:1e:ec:ec:2d:db:ca:9f:b0:93:80:7f:1a: f2:d0:cd:40:38:5d:f7:1d:03:36:6b:0b:cc:ca:14:15:46:5c: 39:18:72:c8:b5:58:3c:8e:3c:13:10:d2:f8:77:7f:51:6a:8b: 84:7a:f8:7f:52:05:b4:98:69:0e:f7:7f:78:71:97:3f:7d:96: e3:b9:3d:30:4c:52:0d:e8:0e:60:32:65:25:f1:8b:d0:3b:ba: f1:de:d2:9c:50:fc:ad:50:49:2e:c0:8f:32:5f:ca:ac:fb:5d: f6:3f:d4:91:2d:0d:82:1e:17:b2:7e:fa:6f:25:a8:30:93:f0: d2:90:a5:84:cd:62:a4:f6:ee:52:d1:12:fb:bb:a1:8c:6e:00: 01:ec:6e:c6:a3:86:3f:23:ba:7a:3d:d4:7d:94:c0:bb:c2:95: fb:2c:77:5c:51:2b:58:9f:e6:64:f6:e9:7a:59:5f:e5:04:85: 3e:15:b0:ad -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZrFe+38/Vtc+Wm9zIDwgPWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI3MTMyMzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2VmYjZlNzcwMThjOTM1NWE1Mzg4NTZkNGViOWU1MDY5NzVmNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlKzVCx5wlc7Slij6I9nquDu+czg cpWrjHxMsbz6+Axv2l0O1DvCyNanwLfS3FmrwOTqiR6gp5hefKsEEIh9nIuyV2uE 1RVbvNz1FeSUIawVluDFbGaXTnfcIYMxqcA344YwrmRbUL0EuEK3Fb/u+ZqE7OO2 h83X+K2RlrM/+sgP+BtsU9AguVJqshcf4YdVRRvtaPAeWyZgPPL3XMQT87iP16Hb xleDDIPgPRxEISGVmam5nGgTngBUDSlMQEyNgSV/NT7NFlkER2KfiZQisvdETUJN sQkGCqK+AbTpfumGQaT75HT8oJyz0E/b50xLY5Xl5R0wwpbHUh+mIlkYJQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFBPvtudwGMk1WlOIVtTrnlBpdfU1MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzkxYjJk Mi1kZmI5LTQ4ZDctODQzNi1lYmM1YjY3ODIzYzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvOTFiMmQy LWRmYjktNDhkNy04NDM2LWViYzViNjc4MjNjNS8xL0UtLTI1M0FZeVRWYVU0aFcx T3VlVUdsMTlUVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQAwYpYAwQBw04oMA0GCSqGSIb3DQEBCwUAA4IB AQAXL7W51n+DLCmBCNLQflv5XIim4zi0Va5mcS8/p3RIDBg1omxfMsDlqnnlB4d8 p8iFRImIw5tp+6Q5rrkK4OA9FoJ+KLhdqEGiuLV0HY8e7Owt28qfsJOAfxry0M1A OF33HQM2awvMyhQVRlw5GHLItVg8jjwTENL4d39RaouEevh/UgW0mGkO9394cZc/ fZbjuT0wTFIN6A5gMmUl8YvQO7rx3tKcUPytUEkuwI8yX8qs+132P9SRLQ2CHhey fvpvJagwk/DSkKWEzWKk9u5S0RL7u6GMbgAB7G7Go4Y/I7p6PdR9lMC7wpX7LHdc UStYn+Zk9ul6WV/lBIU+FbCt -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:07 2025 by rpki-client