This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer File: Z96OLhmBrtyT4YXo_v5uNJWQW-4.cer (raw, json) Hash identifier: 5Xk9ffougnn9l+VKx9F2g90Nm3YTmp40/rmiAiHst2w= Subject key identifier: 67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7EFDCDC391D003F9EDD84FF241139E1F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 13 Nov 2025 20:52:33 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 212743 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7e:fd:cd:c3:91:d0:03:f9:ed:d8:4f:f2:41:13:9e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 13 20:52:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67de8e2e1981aedc93e185e8fefe6e3495905bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:67:9c:6e:7f:49:fe:c8:64:8a:e9:2e:78: 9d:bb:02:df:84:70:99:97:81:e2:ea:d7:fc:c4:78: ba:a0:7a:73:bd:b6:9c:7a:b0:59:a0:30:af:e4:92: f0:e9:89:37:f1:9b:14:a5:6e:0d:b3:18:d3:7e:e1: 2f:97:80:54:44:95:b9:1b:e8:97:57:96:b5:fe:b6: a4:c0:22:7a:f1:54:d2:b2:08:82:d0:6c:f7:37:b2: d5:88:04:db:64:eb:66:53:78:d1:31:96:39:a5:ad: 0b:5e:70:3c:53:88:e4:b0:c3:e4:dc:22:f3:83:81: c6:3f:88:77:c7:7f:a9:02:f8:b3:b2:ac:77:59:27: 91:e5:b2:52:fe:f7:14:17:33:c9:18:8a:3d:35:d5: bf:a5:be:96:1a:2a:99:9f:61:a7:b7:be:5a:6d:6c: 7f:70:69:50:6b:af:df:3e:42:68:0d:4c:29:61:e7: b7:07:4d:58:a6:7f:3e:ac:f9:d5:72:6e:4e:ad:8f: aa:b9:0f:29:7e:17:3c:a3:79:7d:8f:e6:04:d3:3b: 41:f5:b2:82:b9:43:8d:d5:7d:0c:d8:88:ce:9a:bc: 15:e8:ea:df:f2:be:4b:69:53:4a:12:5d:72:c2:79: 8a:b7:4e:f6:89:44:06:6f:b1:f9:3f:5e:41:64:75: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DE:8E:2E:19:81:AE:DC:93:E1:85:E8:FE:FE:6E:34:95:90:5B:EE X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1fdf1a-31b1-4dcb-96dc-b3f9c77789b7/1/Z96OLhmBrtyT4YXo_v5uNJWQW-4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212743 Signature Algorithm: sha256WithRSAEncryption a7:ff:c0:46:96:84:85:11:2f:a6:3e:90:2a:0f:c5:df:d9:40: 19:8c:55:22:89:04:17:f5:43:9f:06:2b:89:ac:60:5c:6a:1b: 08:4a:5e:38:0a:9a:23:55:e3:f9:41:0b:86:7a:ae:c2:2b:ce: ab:92:b2:3c:a1:c1:79:74:f3:2d:d0:56:d1:61:fe:95:f5:9e: 52:92:31:b1:0b:cc:e3:ba:22:15:48:a2:e0:c4:09:cf:fe:81: 56:92:c0:3c:a4:bb:9f:be:34:03:0a:51:97:cc:4c:fe:47:f3: 3a:45:a3:fd:1d:3b:6f:0e:1c:de:5f:35:1f:00:79:8b:23:a0: e0:fd:42:18:35:46:9b:6f:2d:bb:ff:a3:17:5d:7c:43:03:97: 1a:0e:31:39:ee:e5:1b:59:1b:d7:ac:9a:38:f3:55:53:72:9f: cd:50:cb:82:7a:fc:45:ca:56:ce:05:47:bd:9d:78:ff:91:ab: 7e:18:d1:9b:1d:c8:61:2e:9d:51:9f:59:05:bc:4e:16:fb:a6: e4:c2:fa:8e:cc:da:25:02:d8:45:f2:ee:27:dc:ae:34:c2:16: 6c:f3:07:bd:c2:12:37:50:71:6c:27:ab:dd:c9:b4:96:bc:3b: 0a:59:39:e9:fb:9f:cd:9b:c3:10:7e:32:96:ed:4b:cb:cb:1b: ef:10:af:62 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZp+/c3DkdAD+e3YT/JBE54fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEzMjA1MjMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2RlOGUyZTE5ODFhZWRjOTNlMTg1ZThmZWZlNmUzNDk1OTA1YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVxnnG5/Sf7IZIrpLniduwLfhHCZ l4Hi6tf8xHi6oHpzvbacerBZoDCv5JLw6Yk38ZsUpW4NsxjTfuEvl4BURJW5G+iX V5a1/rakwCJ68VTSsgiC0Gz3N7LViATbZOtmU3jRMZY5pa0LXnA8U4jksMPk3CLz g4HGP4h3x3+pAvizsqx3WSeR5bJS/vcUFzPJGIo9NdW/pb6WGiqZn2Gnt75abWx/ cGlQa6/fPkJoDUwpYee3B01Ypn8+rPnVcm5OrY+quQ8pfhc8o3l9j+YE0ztB9bKC uUON1X0M2IjOmrwV6Orf8r5LaVNKEl1ywnmKt072iUQGb7H5P15BZHVf5wIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGfeji4Zga7ck+GF6P7+bjSVkFvuMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E0LzFmZGYx YS0zMWIxLTRkY2ItOTZkYy1iM2Y5Yzc3Nzg5YjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQvMWZkZjFh LTMxYjEtNGRjYi05NmRjLWIzZjljNzc3ODliNy8xL1o5Nk9MaG1CcnR5VDRZWG9f djV1TkpXUVctNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM/BzANBgkqhkiG9w0BAQsFAAOCAQEAp//ARpaEhREv pj6QKg/F39lAGYxVIokEF/VDnwYriaxgXGobCEpeOAqaI1Xj+UELhnquwivOq5Ky PKHBeXTzLdBW0WH+lfWeUpIxsQvM47oiFUii4MQJz/6BVpLAPKS7n740AwpRl8xM /kfzOkWj/R07bw4c3l81HwB5iyOg4P1CGDVGm28tu/+jF118QwOXGg4xOe7lG1kb 16yaOPNVU3KfzVDLgnr8RcpWzgVHvZ14/5GrfhjRmx3IYS6dUZ9ZBbxOFvum5ML6 jszaJQLYRfLuJ9yuNMIWbPMHvcISN1BxbCer3cm0lrw7Clk56fufzZvDEH4ylu1L y8sb7xCvYg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:38 2025 by rpki-client