This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer File: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer (raw, json) Hash identifier: 1StxafQDZQR9ayoHqywWdpXkZzaMwGa4nddRCvy8yvI= Subject key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB2CD62959A4BD581AD92D6E6E56ECE13 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 23 Nov 2025 22:19:55 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 215844 IP: 2001:678:9d8::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b2:cd:62:95:9a:4b:d5:81:ad:92:d6:e6:e5:6e:ce:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 23 22:19:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:c1:f8:04:80:e6:ea:e3:9b:7a:32:b2:58: 17:ee:2c:a0:ba:5e:87:26:b9:52:16:97:08:80:5b: 41:a6:b2:91:38:4d:aa:ca:85:77:e9:9f:5d:c4:01: 37:1d:c5:e9:cc:82:a2:51:1f:e4:b2:f3:5e:5c:76: cf:45:27:7e:9f:2b:6d:6f:58:08:82:57:3b:65:9f: e2:bf:18:db:bb:d4:b0:6d:3c:98:51:0e:f0:60:fa: bd:a0:a2:3b:2b:ed:84:82:de:54:f4:65:71:8f:54: 2c:48:34:0a:ab:da:85:74:ca:24:f4:3c:dd:d9:ad: 99:6a:fb:62:5f:3a:e3:67:c3:5f:fb:2b:c7:c7:f3: c7:c1:1e:45:2a:87:f0:e8:c5:f5:c4:46:55:dd:d6: 95:2e:06:5b:bc:3b:a0:b7:4f:fd:a1:b9:aa:45:86: f7:45:b5:fc:4b:81:72:6d:49:8f:bf:0d:f7:56:c2: 05:ca:87:30:3d:10:e0:b7:bf:a2:a1:7c:2b:df:15: 9b:87:fd:1d:e1:f0:85:f8:14:86:2f:1c:f2:f1:b2: 59:21:c1:6c:e7:4f:98:7b:5c:9f:2e:b1:27:7e:d0: 21:74:c8:f9:5f:93:3a:cf:ed:a9:9c:64:2b:5e:96: 58:c2:b1:5d:4f:5e:25:48:ce:71:9a:3d:b1:c6:e4: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:9d8::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215844 Signature Algorithm: sha256WithRSAEncryption 78:cb:f8:77:c2:95:a2:cb:78:a0:0f:05:7e:e5:d6:43:a5:69: 90:38:d2:72:33:16:df:ce:31:e8:9c:78:40:20:de:06:9f:59: c8:27:ac:90:21:d3:5c:0a:f8:24:c3:e5:55:d6:d5:ea:ff:ca: be:5e:44:f0:cc:5c:d2:f3:f1:da:9a:4f:52:58:cb:b1:c8:99: 94:4c:24:ae:b9:6a:34:2b:f6:7a:1b:d2:39:76:32:b4:6b:fc: 96:bc:77:0c:e9:7f:f0:6c:0d:7f:9f:32:3f:c2:ae:b9:81:dc: c3:52:6a:ef:8d:d4:24:ea:80:12:67:f7:8d:cd:8d:90:ae:f1: fa:b2:d2:99:02:9b:6e:3c:d5:ac:b6:d9:f1:91:bf:53:40:4e: 89:84:cf:c5:86:9b:9f:12:d4:1f:05:85:d1:34:5b:e5:ef:5c: 86:c9:0b:e0:2f:58:40:f2:cc:d6:e0:4d:f9:6e:b6:93:da:53: 81:f9:6b:5c:bf:29:55:ee:7c:ac:d9:b1:ed:3b:c4:6f:86:9e: 63:4d:9d:99:de:62:ca:10:ae:ac:06:db:ab:8b:cf:9f:04:2c: 2c:72:35:60:ac:85:bd:33:23:cf:d7:34:31:05:ff:67:9a:32: 2e:ef:b0:60:16:2f:ff:cf:e7:ab:21:1d:42:cd:1a:d6:13:12: 0b:f8:1b:d8 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZqyzWKVmkvVga2S1ublbs4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIzMjIxOTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjRiZmU5MmRlMTBlNjYwZGRmNDVjYzJkMWY1ZmZiNjM2ZWYzNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLbB+ASA5urjm3oyslgX7iygul6H JrlSFpcIgFtBprKROE2qyoV36Z9dxAE3HcXpzIKiUR/ksvNeXHbPRSd+nyttb1gI glc7ZZ/ivxjbu9SwbTyYUQ7wYPq9oKI7K+2Egt5U9GVxj1QsSDQKq9qFdMok9Dzd 2a2ZavtiXzrjZ8Nf+yvHx/PHwR5FKofw6MX1xEZV3daVLgZbvDugt0/9obmqRYb3 RbX8S4FybUmPvw33VsIFyocwPRDgt7+ioXwr3xWbh/0d4fCF+BSGLxzy8bJZIcFs 50+Ye1yfLrEnftAhdMj5X5M6z+2pnGQrXpZYwrFdT14lSM5xmj2xxuST3QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFD9L/pLeEOZg3fRcwtH1/7Y27zWQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzdlYWM0 Zi03N2RkLTQwNzctYWUzZi1jZTY0ODJkMGYxYjYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvN2VhYzRm LTc3ZGQtNDA3Ny1hZTNmLWNlNjQ4MmQwZjFiNi8xL1Awdi1rdDRRNW1EZDlGekMw ZlhfdGpidk5aQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAnYMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwNLJDANBgkqhkiG9w0BAQsFAAOCAQEAeMv4d8KVost4oA8FfuXWQ6VpkDjS cjMW384x6Jx4QCDeBp9ZyCeskCHTXAr4JMPlVdbV6v/Kvl5E8Mxc0vPx2ppPUljL sciZlEwkrrlqNCv2ehvSOXYytGv8lrx3DOl/8GwNf58yP8KuuYHcw1Jq743UJOqA Emf3jc2NkK7x+rLSmQKbbjzVrLbZ8ZG/U0BOiYTPxYabnxLUHwWF0TRb5e9chskL 4C9YQPLM1uBN+W62k9pTgflrXL8pVe58rNmx7TvEb4aeY02dmd5iyhCurAbbq4vP nwQsLHI1YKyFvTMjz9c0MQX/Z5oyLu+wYBYv/8/nqyEdQs0a1hMSC/gb2A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:14 2025 by rpki-client