This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer File: K94VUTok977ZjoTw4zigbGcObzY.cer (raw, json) Hash identifier: 3Vb8MGNe9pzLviZoAHBT1fi43tALgq7DjRofeV7DxwI= Subject key identifier: 2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AAFF20F30C46E090EC3EE326043846B24 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 23 Nov 2025 09:01:07 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203579 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:af:f2:0f:30:c4:6e:09:0e:c3:ee:32:60:43:84:6b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 23 09:01:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2bde15513a24f7bed98e84f0e338a06c670e6f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:8b:92:23:d9:18:f5:90:79:93:9d:dc:a3: 28:6a:61:47:b2:4b:10:66:18:b2:55:c3:70:f1:d7: 91:ca:56:dd:3f:93:e8:1d:b3:1a:49:1f:92:5b:12: 96:17:9f:5e:cc:16:b1:1f:29:bd:a3:98:20:ce:05: 62:29:cd:7c:40:05:3c:46:92:8d:6e:2a:3c:77:42: 28:d8:11:d3:88:18:30:5d:b8:14:74:9b:3b:c9:c4: 77:81:bc:ba:b3:bb:31:27:d9:3e:4f:1a:31:5e:de: 3f:fc:b6:e1:f6:15:db:13:37:07:1f:00:f5:98:ab: 9e:12:f8:85:b2:c7:c1:6a:67:18:18:74:78:32:6f: 10:d0:6e:fa:08:64:56:28:ba:b3:35:40:43:a0:08: ab:48:bc:4a:5d:c0:31:79:0a:41:a4:dd:41:57:e1: cf:e2:fd:a9:3c:ac:a4:f5:3a:23:03:65:1a:97:5c: 27:1a:f7:70:52:ae:a1:2c:01:c7:cf:c6:83:24:d2: eb:1f:de:08:54:d1:36:ef:18:06:db:c7:d6:4c:ec: 25:52:1f:5e:82:c1:59:1b:ee:19:b8:b7:93:49:fb: 1f:95:98:55:2c:d2:b9:4d:4c:a4:a6:df:6f:e6:f6: bb:65:28:36:1e:f9:0c:ba:eb:4c:07:cd:77:86:63: e7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203579 Signature Algorithm: sha256WithRSAEncryption 45:71:42:11:75:71:b5:ef:81:6e:9a:49:54:ef:38:13:fa:09: cf:7f:76:f5:e0:94:c4:fe:5b:c4:fa:20:ff:d6:0c:dc:be:4d: 93:92:78:ce:a1:d1:0a:59:e3:f1:20:40:d6:da:ce:9b:bd:fd: 39:a7:00:68:5d:29:76:8a:4c:05:1b:6a:5d:c0:be:eb:ff:f8: db:4f:d3:ee:12:13:a2:c7:ae:06:79:82:2f:53:9a:f7:96:ca: 10:06:ad:94:c0:f5:f5:e5:87:43:2a:c9:c2:79:a0:53:cd:a4: d4:14:c9:ec:71:68:42:5e:08:ff:d1:b0:87:f0:80:f8:46:ee: a0:01:85:74:13:c9:9c:36:c4:2d:05:2f:ff:9e:a7:4c:24:d2: 0d:1f:89:b1:a9:92:8c:82:b7:f6:d6:11:1f:28:69:35:02:95: 99:09:bc:b3:2a:b9:d4:a2:91:14:dd:b0:67:a1:44:70:36:0d: 64:6e:6c:5a:9c:c5:8a:37:8e:cc:17:4d:f4:76:c0:20:74:bc: d2:72:7d:f4:4d:25:92:21:d9:c1:17:ef:ef:84:9a:3e:cc:42: 46:39:f4:1e:50:79:1f:80:8f:72:3a:84:26:d4:6b:40:a2:0a: 9f:19:b9:5b:6a:06:ae:b0:fc:9a:2e:2c:c5:f3:56:2b:f0:ae: 6b:f0:8b:2d -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZqv8g8wxG4JDsPuMmBDhGskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIzMDkwMTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmRlMTU1MTNhMjRmN2JlZDk4ZTg0ZjBlMzM4YTA2YzY3MGU2ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorqLkiPZGPWQeZOd3KMoamFHsksQ ZhiyVcNw8deRylbdP5PoHbMaSR+SWxKWF59ezBaxHym9o5ggzgViKc18QAU8RpKN bio8d0Io2BHTiBgwXbgUdJs7ycR3gby6s7sxJ9k+TxoxXt4//Lbh9hXbEzcHHwD1 mKueEviFssfBamcYGHR4Mm8Q0G76CGRWKLqzNUBDoAirSLxKXcAxeQpBpN1BV+HP 4v2pPKyk9TojA2Ual1wnGvdwUq6hLAHHz8aDJNLrH94IVNE27xgG28fWTOwlUh9e gsFZG+4ZuLeTSfsflZhVLNK5TUykpt9v5va7ZSg2HvkMuutMB813hmPnDwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFCveFVE6JPe+2Y6E8OM4oGxnDm82MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NmLzQwYjY2 MC0yZDlmLTQ1NTUtOGQwNC00ZDdkZjQwYzBmNWMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2YvNDBiNjYw LTJkOWYtNDU1NS04ZDA0LTRkN2RmNDBjMGY1Yy8xL0s5NFZVVG9rOTc3WmpvVHc0 emlnYkdjT2J6WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMbOzANBgkqhkiG9w0BAQsFAAOCAQEARXFCEXVxte+B bppJVO84E/oJz3929eCUxP5bxPog/9YM3L5Nk5J4zqHRClnj8SBA1trOm739OacA aF0pdopMBRtqXcC+6//420/T7hIToseuBnmCL1Oa95bKEAatlMD19eWHQyrJwnmg U82k1BTJ7HFoQl4I/9Gwh/CA+EbuoAGFdBPJnDbELQUv/56nTCTSDR+JsamSjIK3 9tYRHyhpNQKVmQm8syq51KKRFN2wZ6FEcDYNZG5sWpzFijeOzBdN9HbAIHS80nJ9 9E0lkiHZwRfv74SaPsxCRjn0HlB5H4CPcjqEJtRrQKIKnxm5W2oGrrD8mi4sxfNW K/Cua/CLLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:43 2025 by rpki-client