This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_6AZpcGWu9HMF9Go02xNZX84FqA.cer File: _6AZpcGWu9HMF9Go02xNZX84FqA.cer (raw, json) Hash identifier: Wg6Pca5GThx6YbDUiW2q74EJeueB1XaC3XPlQ36Gguc= Subject key identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD5611A55F7F1AC5DA983875F8822A272 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sun 30 Nov 2025 15:28:22 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203656 IP: 193.32.114.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d5:61:1a:55:f7:f1:ac:5d:a9:83:87:5f:88:22:a2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 30 15:28:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ffa019a5c196bbd1cc17d1a8d36c4d657f3816a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6f:62:f1:35:4f:71:7e:4a:35:51:26:a0:1c: b1:48:e3:de:92:e0:5b:3a:c4:cc:7e:19:78:6e:1a: 5e:db:b5:96:a6:9a:48:30:6f:14:53:7e:87:2a:45: d5:be:10:d4:a4:5c:cf:3b:7d:55:98:de:4d:6a:8c: 28:5d:08:77:e5:ab:34:7e:36:b2:c0:fa:b7:97:5d: 23:43:0f:15:1d:99:3b:62:10:76:a1:5d:9d:7c:35: b0:b2:37:72:26:c4:4d:2b:73:8e:ac:79:0f:62:66: e0:4d:ee:92:d8:97:c5:ee:e8:7a:f7:0e:1e:09:72: 13:6a:92:c7:e5:b6:79:0e:ba:5d:81:16:44:19:d0: 49:37:3c:61:8e:26:f3:52:9b:61:a0:31:eb:dd:37: 6a:50:9b:33:29:50:63:93:41:2e:cd:06:f3:f4:4c: 6e:c4:e7:de:23:f6:e1:44:03:61:40:c7:12:d0:64: 4b:60:b2:76:e2:3a:c4:82:1c:81:9b:8a:b1:75:25: f3:2e:3c:96:6c:55:fc:d7:5f:18:4b:53:7d:b2:0e: cc:03:d6:07:54:76:1a:f3:b9:bd:87:5c:46:c0:4c: ad:69:d2:4d:be:87:ff:2c:fd:b2:2b:f7:35:4b:1d: c5:68:4b:34:00:f1:01:0e:60:6a:8b:41:b5:9d:4a: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:19:A5:C1:96:BB:D1:CC:17:D1:A8:D3:6C:4D:65:7F:38:16:A0 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/c0905e-91bd-41b0-9d77-9e56f975d7e6/1/_6AZpcGWu9HMF9Go02xNZX84FqA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.114.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203656 Signature Algorithm: sha256WithRSAEncryption 85:3b:dd:10:2a:a4:0f:58:8c:29:29:f0:c5:30:85:28:a2:69: 02:59:91:76:7a:2b:b0:99:dd:6f:a5:56:2d:65:ce:54:db:88: 6f:ed:0a:8a:53:78:42:6a:e5:ce:a2:a5:ce:6b:58:2c:21:03: 88:b9:79:39:f2:8c:c3:1f:65:d4:fe:dc:e9:4d:2c:17:10:2a: 5f:a4:39:ce:63:3f:a0:d4:79:b2:fd:17:75:00:f9:73:c4:79: c3:b6:65:03:cd:0f:da:fb:49:44:d8:0d:88:e9:54:79:78:b5: f9:5f:c1:1c:e5:f7:f5:a2:45:ce:5a:c0:99:7b:4b:84:be:6e: 63:3f:d5:3c:7d:83:b6:8b:b1:5b:3d:20:b5:65:a5:b4:39:74: d2:26:58:40:96:da:c2:e6:ba:24:7e:a3:e9:11:b1:b4:7b:de: f0:94:59:14:9d:fe:f2:62:ca:77:d0:d0:f8:e6:4d:6c:40:34: 71:eb:15:6d:63:8d:40:eb:45:6d:26:7c:27:3d:32:98:36:33: 54:aa:cb:52:10:70:97:ce:50:29:29:d7:ab:01:35:6d:02:20: 59:fc:3f:36:d6:60:f8:f9:72:0a:2e:1b:74:d8:17:8c:58:14: fa:60:48:f1:20:ab:9d:65:63:fe:6b:16:d2:1c:11:44:e6:90: 27:52:ec:f7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZrVYRpV9/GsXamDh1+IIqJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTMwMTUyODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmEwMTlhNWMxOTZiYmQxY2MxN2QxYThkMzZjNGQ2NTdmMzgxNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm9i8TVPcX5KNVEmoByxSOPekuBb OsTMfhl4bhpe27WWpppIMG8UU36HKkXVvhDUpFzPO31VmN5NaowoXQh35as0fjay wPq3l10jQw8VHZk7YhB2oV2dfDWwsjdyJsRNK3OOrHkPYmbgTe6S2JfF7uh69w4e CXITapLH5bZ5DrpdgRZEGdBJNzxhjibzUpthoDHr3TdqUJszKVBjk0EuzQbz9Exu xOfeI/bhRANhQMcS0GRLYLJ24jrEghyBm4qxdSXzLjyWbFX8118YS1N9sg7MA9YH VHYa87m9h1xGwEytadJNvof/LP2yK/c1Sx3FaEs0APEBDmBqi0G1nUo0TQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFP+gGaXBlrvRzBfRqNNsTWV/OBagMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2MwOTA1 ZS05MWJkLTQxYjAtOWQ3Ny05ZTU2Zjk3NWQ3ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvYzA5MDVl LTkxYmQtNDFiMC05ZDc3LTllNTZmOTc1ZDdlNi8xL182QVpwY0dXdTlITUY5R28w MnhOWlg4NEZxQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQBwSByMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwMbiDANBgkqhkiG9w0BAQsFAAOCAQEAhTvdECqkD1iMKSnwxTCFKKJpAlmRdnor sJndb6VWLWXOVNuIb+0KilN4QmrlzqKlzmtYLCEDiLl5OfKMwx9l1P7c6U0sFxAq X6Q5zmM/oNR5sv0XdQD5c8R5w7ZlA80P2vtJRNgNiOlUeXi1+V/BHOX39aJFzlrA mXtLhL5uYz/VPH2DtouxWz0gtWWltDl00iZYQJbawua6JH6j6RGxtHve8JRZFJ3+ 8mLKd9DQ+OZNbEA0cesVbWONQOtFbSZ8Jz0ymDYzVKrLUhBwl85QKSnXqwE1bQIg Wfw/NtZg+PlyCi4bdNgXjFgU+mBI8SCrnWVj/msW0hwRROaQJ1Ls9w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:18 2025 by rpki-client