This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_AzBczfYTpuF2W_dk-N7bx25080.cer File: _AzBczfYTpuF2W_dk-N7bx25080.cer (raw, json) Hash identifier: cfVtkUGgUm8VlzQZqb/ikAsBY5Z7rs/SYe45w01/gpQ= Subject key identifier: FC:0C:C1:73:37:D8:4E:9B:85:D9:6F:DD:93:E3:7B:6F:1D:B9:D3:CD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7CDBB28749B081D1857C7259C2E94EF6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 13 Nov 2025 10:56:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 2a06:b580::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:db:b2:87:49:b0:81:d1:85:7c:72:59:c2:e9:4e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 13 10:56:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc0cc17337d84e9b85d96fdd93e37b6f1db9d3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cf:37:4d:d9:0e:31:17:a8:e5:8c:2f:7b:ff: 4b:fc:f2:5d:61:db:28:a4:be:ec:3b:3b:fb:9b:9d: 60:a0:30:bb:30:49:6a:86:55:da:38:92:39:f0:25: c7:aa:80:06:a3:73:25:ce:e0:59:af:aa:16:68:f3: c4:47:9d:eb:1d:6d:cb:94:27:24:e5:dd:97:52:a5: bd:a0:1e:88:54:5a:41:26:33:16:44:32:77:c0:e5: ac:ef:e2:1f:4f:54:ad:75:b0:4b:ab:53:ba:f4:6a: fd:70:49:06:ed:3c:bb:b4:31:df:7b:71:53:46:a2: 27:dd:5c:96:8b:29:b2:75:2e:5f:6d:6c:bf:16:2b: 50:62:08:37:dd:e9:9f:b2:6c:54:82:fa:bb:28:8f: 73:8e:4e:99:07:e9:bb:fc:4b:93:b8:3c:9e:8e:ed: f4:33:a6:9f:d9:99:99:a7:0b:e4:41:f1:91:6b:26: 63:a8:e8:57:fa:48:bf:20:65:c3:c8:6d:5d:ad:bd: 86:a8:a5:e8:d0:cb:9e:53:6b:a1:51:65:49:4c:99: 6d:79:94:33:74:4f:7e:b7:3b:98:db:a4:5b:55:f3: 3f:fb:a6:f7:f4:5e:c8:b9:ae:99:6e:b5:32:d8:01: a5:1e:02:a0:3c:c3:55:aa:26:54:e7:68:6d:0a:e6: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0C:C1:73:37:D8:4E:9B:85:D9:6F:DD:93:E3:7B:6F:1D:B9:D3:CD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1eee82-9f0c-4f9a-9d75-d9ebb7f18dd1/1/_AzBczfYTpuF2W_dk-N7bx25080.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:b580::/29 Signature Algorithm: sha256WithRSAEncryption 5b:a7:b3:e0:c2:3c:6d:b2:29:58:52:c5:ad:1c:70:5c:8a:bf: 24:b0:46:8c:58:10:90:19:c5:7d:3e:4b:63:62:00:eb:9d:41: ec:6c:4a:14:9d:ec:28:0f:a9:5a:db:b1:36:49:0c:27:eb:17: 16:bb:dd:06:b3:cb:64:88:c2:46:64:5c:34:4b:a3:7e:69:b0: de:08:43:e2:92:64:69:6b:71:32:88:6b:88:be:27:62:d9:c8: 27:c5:1e:41:13:09:09:70:f2:3f:7a:8f:90:93:93:81:52:28: 5d:bc:9d:bd:55:46:06:5b:1b:51:83:a1:d7:e1:28:25:0a:51: 60:7e:29:3a:a2:12:03:2e:1a:01:63:80:44:1d:36:1e:83:14: 9b:4e:f0:2a:98:bc:c0:0c:30:e9:b5:23:2a:39:5b:a0:64:da: b7:03:5b:8a:08:bb:71:c6:58:ea:08:c0:04:d6:3d:72:49:39: 83:59:b0:b4:14:c0:c3:df:0c:5b:92:bb:52:4d:19:34:6e:01: 6a:52:4f:f6:61:94:37:4e:50:29:c3:90:26:f4:09:20:d4:8d: 0a:1c:89:c4:26:71:1b:fb:84:44:a3:01:fb:60:5e:7a:4a:dc: e0:db:af:ca:59:60:9b:5a:2d:fb:2b:e6:58:96:28:3d:56:a3: 40:27:0e:13 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgISAZp827KHSbCB0YV8clnC6U72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEzMTA1NjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzBjYzE3MzM3ZDg0ZTliODVkOTZmZGQ5M2UzN2I2ZjFkYjlkM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s83TdkOMReo5Ywve/9L/PJdYdso pL7sOzv7m51goDC7MElqhlXaOJI58CXHqoAGo3MlzuBZr6oWaPPER53rHW3LlCck 5d2XUqW9oB6IVFpBJjMWRDJ3wOWs7+IfT1StdbBLq1O69Gr9cEkG7Ty7tDHfe3FT RqIn3VyWiymydS5fbWy/FitQYgg33emfsmxUgvq7KI9zjk6ZB+m7/EuTuDyeju30 M6af2ZmZpwvkQfGRayZjqOhX+ki/IGXDyG1drb2GqKXo0MueU2uhUWVJTJlteZQz dE9+tzuY26RbVfM/+6b39F7Iua6ZbrUy2AGlHgKgPMNVqiZU52htCuZtzQIDAQAB o4IChTCCAoEwHQYDVR0OBBYEFPwMwXM32E6bhdlv3ZPje28dudPNMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzFlZWU4 Mi05ZjBjLTRmOWEtOWQ3NS1kOWViYjdmMThkZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvMWVlZTgy LTlmMGMtNGY5YS05ZDc1LWQ5ZWJiN2YxOGRkMS8xL19BekJjemZZVHB1RjJXX2Rr LU43YngyNTA4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKga1gDANBgkqhkiG9w0BAQsFAAOCAQEAW6ez 4MI8bbIpWFLFrRxwXIq/JLBGjFgQkBnFfT5LY2IA651B7GxKFJ3sKA+pWtuxNkkM J+sXFrvdBrPLZIjCRmRcNEujfmmw3ghD4pJkaWtxMohriL4nYtnIJ8UeQRMJCXDy P3qPkJOTgVIoXbydvVVGBlsbUYOh1+EoJQpRYH4pOqISAy4aAWOARB02HoMUm07w Kpi8wAww6bUjKjlboGTatwNbigi7ccZY6gjABNY9ckk5g1mwtBTAw98MW5K7Uk0Z NG4BalJP9mGUN05QKcOQJvQJINSNChyJxCZxG/uERKMB+2Beekrc4Nuvyllgm1ot +yvmWJYoPVajQCcOEw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:43 2025 by rpki-client