This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer (raw, json) Hash identifier: SwAmMpsEbOnIOXYE95aYuu/+dRvpEi/bCIGwaeRYhWc= Subject key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A78911546F2C79966F441C716E5614C48 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 14:56:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214844 IP: 193.186.160.0/24 IP: 2a14:56c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:91:15:46:f2:c7:99:66:f4:41:c7:16:e5:61:4c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 14:56:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4367547d851e3cd776cd33290b2454acc0e851bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:c8:23:62:e1:9b:c7:7e:3e:30:83:ae:29: f0:34:d0:e3:33:d5:2b:36:7f:eb:25:18:77:46:13: fb:2e:7b:3a:fd:71:75:5a:7b:cd:ca:3a:fd:ac:fb: 69:88:70:7a:14:36:eb:9d:a8:6d:f0:3b:f1:a2:3d: 04:a2:d9:6a:9f:e0:0e:8f:9a:b0:4a:7b:8f:44:3f: 51:4c:aa:f5:ba:b9:6f:62:e1:46:f8:f8:5b:be:75: a7:e0:4c:62:e0:d9:8d:12:91:33:7c:26:40:e8:49: eb:0f:ff:64:ac:ee:f4:85:d8:98:a6:03:c4:07:6d: 98:11:9d:f5:88:1e:0d:ea:d0:c2:d3:3a:6b:cb:f5: 5e:ed:76:93:57:41:96:68:1f:80:9b:d8:9a:a3:4a: 05:7b:ad:ed:5a:e3:e7:3a:e5:85:e3:05:5b:8f:d1: a5:e8:7e:09:b4:e8:77:fb:59:7f:01:3a:d3:3f:d2: 91:1f:4e:6b:11:d1:d4:f0:b4:b4:ad:a4:b1:6d:7d: aa:65:d9:44:4a:6c:ca:30:36:de:dc:c2:d2:91:e7: 2a:e6:39:05:fd:ca:e7:6c:36:39:62:0f:a0:1f:f7: 65:08:6b:0f:c7:da:40:b3:79:01:a1:3b:d3:24:b0: 84:c3:f1:66:77:2b:fc:61:84:d1:47:45:fd:03:0f: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.160.0/24 IPv6: 2a14:56c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214844 Signature Algorithm: sha256WithRSAEncryption 98:70:c3:2d:53:eb:25:ee:36:a6:f0:cf:ca:dd:33:dd:70:71: 51:1a:a9:32:1a:97:93:fa:86:e8:8a:65:75:96:35:9d:85:2d: 30:97:a0:3d:a6:3b:cd:d8:89:5c:ba:4c:ea:2e:1a:be:41:a5: 8c:57:04:c3:8f:58:de:f1:e9:b7:95:b5:be:a4:90:7c:c4:75: 5b:5e:f4:bb:34:37:79:f7:48:0a:4d:dc:40:ef:1f:e5:be:f9: 55:8c:35:d1:d2:6f:2b:86:d0:b0:7e:07:3b:c8:f7:15:a3:90: 15:bf:7c:4c:a9:e1:9f:75:7e:d8:42:5a:60:c9:1c:ee:f2:5c: 6d:5f:dc:f4:5c:c6:5a:fb:69:2b:fd:69:04:58:74:ab:25:11: 67:48:e0:8e:87:9b:52:eb:21:1e:b9:cd:56:9f:6f:89:93:09: b5:e9:97:4e:f3:8e:6b:75:e9:4f:a8:31:c9:b1:f1:6b:98:0c: fd:cc:75:9f:0c:55:2a:87:d3:fa:62:a1:60:d8:c4:29:a1:09: 41:35:93:e1:63:bc:48:bf:28:7e:87:af:db:d2:3a:7f:3c:b4: e0:33:70:a5:d4:77:d2:ce:c5:78:d4:0a:f2:e5:d3:85:39:ad: 0e:6a:1e:18:2a:c6:bb:d9:31:e7:70:b9:4d:ec:81:cf:3a:24: a1:4b:01:89 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZp4kRVG8seZZvRBxxblYUxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMTQ1NjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MzY3NTQ3ZDg1MWUzY2Q3NzZjZDMzMjkwYjI0NTRhY2MwZTg1MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRXII2Lhm8d+PjCDrinwNNDjM9Ur Nn/rJRh3RhP7Lns6/XF1WnvNyjr9rPtpiHB6FDbrnaht8Dvxoj0Eotlqn+AOj5qw SnuPRD9RTKr1urlvYuFG+PhbvnWn4Exi4NmNEpEzfCZA6EnrD/9krO70hdiYpgPE B22YEZ31iB4N6tDC0zpry/Ve7XaTV0GWaB+Am9iao0oFe63tWuPnOuWF4wVbj9Gl 6H4JtOh3+1l/ATrTP9KRH05rEdHU8LS0raSxbX2qZdlESmzKMDbe3MLSkecq5jkF /crnbDY5Yg+gH/dlCGsPx9pAs3kBoTvTJLCEw/Fmdyv8YYTRR0X9Aw9bCwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFENnVH2FHjzXds0zKQskVKzA6FG7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzg3NGM4 NS05ZTdkLTRhY2UtOTU4Zi1kYWI3ZjBjOGQyNDAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvODc0Yzg1 LTllN2QtNGFjZS05NThmLWRhYjdmMGM4ZDI0MC8xL1EyZFVmWVVlUE5kMnpUTXBD eVJVck1Eb1Vicy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAwbqgMA0EAgACMAcDBQAqFFbAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHPDANBgkqhkiG9w0BAQsFAAOCAQEAmHDDLVPrJe42 pvDPyt0z3XBxURqpMhqXk/qG6IpldZY1nYUtMJegPaY7zdiJXLpM6i4avkGljFcE w49Y3vHpt5W1vqSQfMR1W170uzQ3efdICk3cQO8f5b75VYw10dJvK4bQsH4HO8j3 FaOQFb98TKnhn3V+2EJaYMkc7vJcbV/c9FzGWvtpK/1pBFh0qyURZ0jgjoebUush HrnNVp9viZMJtemXTvOOa3XpT6gxybHxa5gM/cx1nwxVKofT+mKhYNjEKaEJQTWT 4WO8SL8ofoev29I6fzy04DNwpdR30s7FeNQK8uXThTmtDmoeGCrGu9kx53C5TeyB zzokoUsBiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:57:41 2025 by rpki-client