This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer File: SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.cer (raw, json) Hash identifier: jEGY7z7A7nTU3YlK7ikcHUqnVjfxvPR1EnDwQbj7Kr0= Subject key identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEDE2AA2219858AEB4220268F37994EA2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 05 Dec 2025 09:40:46 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209807 IP: 2001:67c:ed0::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:e2:aa:22:19:85:8a:eb:42:20:26:8f:37:99:4e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 5 09:40:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=491758773a99e771b90ca9bb22f7fcadbfb63248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a8:ab:1a:64:13:5a:4b:dd:16:a4:08:09:06: be:d9:70:cc:c0:73:86:d6:cb:ca:73:37:36:68:5d: 54:d2:60:45:98:c6:b0:e7:2d:e3:90:5b:95:c7:73: 2c:f0:43:1e:85:ea:b3:a6:7b:1b:99:de:ff:0b:90: 1c:04:f8:54:a2:4b:a3:1d:aa:fd:c9:f4:39:bf:5e: d3:09:e6:e9:2c:ba:cf:22:7e:d2:03:4c:87:a3:6f: c8:93:24:8f:ee:92:e7:00:da:f7:3a:38:af:dc:1f: 77:4e:8d:92:c2:d7:cc:18:05:1f:7b:7e:72:e5:5d: 94:5a:0c:27:10:d8:f3:00:da:77:e2:a7:de:e6:a7: 66:8c:4f:cb:3a:f5:85:76:82:6f:ba:72:4f:76:69: d1:de:09:32:36:e8:ec:60:8a:fc:af:d2:8a:ec:2c: c4:42:ae:17:65:60:c1:91:92:6a:36:f6:e7:8d:ee: 2b:d6:84:d1:ae:c7:f1:5a:d1:f9:3d:a8:b9:3c:51: 42:0f:f6:2e:39:85:9b:95:1e:39:e1:35:0b:68:da: fc:3e:33:2f:a4:8c:2a:96:b4:e1:8a:2f:84:79:00: 6d:f9:48:c1:fc:87:f0:32:dd:f8:2d:f6:b7:5a:64: 16:51:3f:f8:f6:cf:33:da:d0:04:99:68:53:25:33: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:17:58:77:3A:99:E7:71:B9:0C:A9:BB:22:F7:FC:AD:BF:B6:32:48 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e8c672-da1a-4133-921e-e7db95e3bcc4/1/SRdYdzqZ53G5DKm7Ivf8rb-2Mkg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:ed0::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209807 Signature Algorithm: sha256WithRSAEncryption 48:62:e6:d5:c5:56:e0:75:0a:80:06:45:26:71:28:a2:e5:f0: f9:87:cb:7a:44:89:67:8d:05:3d:41:b1:7f:cc:9a:24:32:13: 8c:2f:7c:09:c1:70:e1:9e:62:02:19:0f:70:df:56:eb:10:c2: b3:aa:b8:21:c1:c9:7b:9d:26:00:c8:8d:cf:d8:e5:84:f3:ff: 9c:95:73:cf:1d:f1:bd:56:95:d2:6f:6f:e9:2a:44:7c:45:38: 20:d9:4d:17:d1:ce:95:61:4c:13:4f:fa:73:cb:3e:bf:3f:49: 24:ff:3f:d0:1d:9e:ff:1f:b4:bd:59:44:3d:f4:be:1f:81:d8: 44:c5:f8:bc:51:d2:c2:ae:3f:39:31:e9:a7:78:65:51:83:a0: ac:63:c3:99:8c:7a:97:2f:ed:c9:66:d0:44:7f:64:60:a1:b6: 7e:be:f2:c6:a6:4e:85:69:41:a0:e5:a7:4b:b7:a8:2f:44:21: bc:72:4b:63:c7:70:80:c0:7f:4a:1b:ec:4a:15:89:ae:60:75: 19:c8:5f:15:c0:66:66:9a:41:27:78:d2:19:67:59:11:b2:ef: ba:9c:4e:e2:4b:50:38:e9:8d:55:9f:1e:0d:c8:1e:59:30:3e: 16:4d:e9:9e:cd:ff:62:b9:89:86:e4:41:73:ca:b8:53:61:f4: b3:82:ce:fd -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZrt4qoiGYWK60IgJo83mU6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA1MDk0MDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTE3NTg3NzNhOTllNzcxYjkwY2E5YmIyMmY3ZmNhZGJmYjYzMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKirGmQTWkvdFqQICQa+2XDMwHOG 1svKczc2aF1U0mBFmMaw5y3jkFuVx3Ms8EMeheqzpnsbmd7/C5AcBPhUokujHar9 yfQ5v17TCebpLLrPIn7SA0yHo2/IkySP7pLnANr3Ojiv3B93To2SwtfMGAUfe35y 5V2UWgwnENjzANp34qfe5qdmjE/LOvWFdoJvunJPdmnR3gkyNujsYIr8r9KK7CzE Qq4XZWDBkZJqNvbnje4r1oTRrsfxWtH5Pai5PFFCD/YuOYWblR454TULaNr8PjMv pIwqlrThii+EeQBt+UjB/IfwMt34Lfa3WmQWUT/49s8z2tAEmWhTJTOrXQIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFEkXWHc6medxuQypuyL3/K2/tjJIMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2U4YzY3 Mi1kYTFhLTQxMzMtOTIxZS1lN2RiOTVlM2JjYzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvZThjNjcy LWRhMWEtNDEzMy05MjFlLWU3ZGI5NWUzYmNjNC8xL1NSZFlkenFaNTNHNURLbTdJ dmY4cmItMk1rZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA7QMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMzjzANBgkqhkiG9w0BAQsFAAOCAQEASGLm1cVW4HUKgAZFJnEoouXw+YfL ekSJZ40FPUGxf8yaJDITjC98CcFw4Z5iAhkPcN9W6xDCs6q4IcHJe50mAMiNz9jl hPP/nJVzzx3xvVaV0m9v6SpEfEU4INlNF9HOlWFME0/6c8s+vz9JJP8/0B2e/x+0 vVlEPfS+H4HYRMX4vFHSwq4/OTHpp3hlUYOgrGPDmYx6ly/tyWbQRH9kYKG2fr7y xqZOhWlBoOWnS7eoL0QhvHJLY8dwgMB/ShvsShWJrmB1GchfFcBmZppBJ3jSGWdZ EbLvupxO4ktQOOmNVZ8eDcgeWTA+Fk3pns3/YrmJhuRBc8q4U2H0s4LO/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 05:45:00 2025 by rpki-client