This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer (raw, json) Hash identifier: sbwU63vXNMCxGUU2T6DggLjiIIyp1i4HFnE04p4YH7Y= Subject key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A82DDD1C20876B1BE2279E69460CA138F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 14:56:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203786 AS: 213842 IP: 193.101.12.0/23 IP: 2a01:e540::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:dd:d1:c2:08:76:b1:be:22:79:e6:94:60:ca:13:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 14:56:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:3c:56:9a:0b:9a:32:8c:de:24:bd:61:2a: 5b:91:bc:08:75:fd:ce:c8:92:75:be:f9:2f:8e:a8: 36:4d:11:3f:f6:a7:40:4b:87:0a:81:12:5a:de:6f: 52:a2:9f:cc:94:df:9b:27:ad:8e:78:10:37:32:b1: 74:b6:5e:7f:a1:1b:f7:40:ca:84:1a:24:de:be:d5: 5b:93:ce:4f:42:2a:00:3e:38:42:16:fd:6e:79:fe: 27:40:ec:c2:f1:40:05:bd:ad:9c:fd:32:15:e9:d9: de:76:3e:22:6f:0c:0c:81:ed:d9:81:a0:5d:00:a8: 2e:d2:ed:fb:6d:f0:e9:6b:be:6c:ae:0d:54:44:32: ef:a0:b3:58:5b:14:28:2a:0f:c4:8e:e8:82:bf:4a: 02:41:69:1f:6c:86:b5:89:47:40:55:4b:f2:83:49: a6:82:90:2b:ef:84:54:78:48:85:fe:0e:82:4f:2f: 5a:8e:f8:61:e0:ad:95:60:86:d6:58:90:af:d9:7c: 81:0c:47:73:4b:b9:16:c9:32:da:8f:e0:28:c9:3b: 56:54:e1:1a:0f:05:d2:4c:dd:6f:2f:cc:0d:fc:c0: 39:65:82:8e:a6:d4:06:87:fb:26:b2:68:52:44:31: b4:34:74:46:02:dd:bc:4e:67:ea:56:de:41:83:db: 9c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.101.12.0/23 IPv6: 2a01:e540::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203786 213842 Signature Algorithm: sha256WithRSAEncryption 6e:93:b2:4b:7b:16:d8:4c:cb:91:d1:05:a8:9a:cd:67:de:5a: 20:40:19:74:57:44:75:71:d7:b6:8b:b9:2a:99:55:a4:bf:99: 0d:a3:fc:53:4e:2b:b2:17:f5:b8:58:21:cd:55:d0:05:07:9a: 1e:48:ea:23:65:ba:4c:4e:b8:f8:06:23:01:8b:9f:cf:47:37: d3:d0:93:57:e8:3f:e3:db:43:82:4b:a4:8a:2a:7e:45:b7:5e: 98:5c:9d:8b:c9:19:80:83:02:3f:a7:24:89:c6:70:21:23:f2: 7b:b4:8b:aa:c7:4c:b6:1b:1d:62:1d:d4:a8:86:10:b3:0e:c9: d1:e9:84:60:91:54:3d:48:6a:df:43:c2:d9:bb:76:20:8f:81: c2:3f:4f:54:ba:71:80:63:12:0e:99:e2:b1:d2:62:55:c9:f4: 96:79:80:db:67:9a:9f:8a:61:00:3c:67:48:fc:4a:74:93:e1: b0:24:b2:9d:ce:38:36:c7:f4:bf:a6:e6:5f:0a:d0:16:e5:da: a4:7f:76:0a:cf:ba:06:52:30:af:73:61:dc:37:b4:d3:06:c4: 57:b0:cf:1e:87:d9:21:e7:ea:8c:48:6f:9c:1e:4c:c9:cb:09: 7d:dc:6a:35:ca:98:1b:ca:fd:66:77:c1:ef:41:bf:86:02:82: fd:67:4b:af -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZqC3dHCCHaxviJ55pRgyhOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MTQ1NjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGM1Njg2NTdlNTBlNmY4ZTVjNmJmZWZhODljZWYzNTBkOTRmODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2o8VpoLmjKM3iS9YSpbkbwIdf3O yJJ1vvkvjqg2TRE/9qdAS4cKgRJa3m9Sop/MlN+bJ62OeBA3MrF0tl5/oRv3QMqE GiTevtVbk85PQioAPjhCFv1uef4nQOzC8UAFva2c/TIV6dnedj4ibwwMge3ZgaBd AKgu0u37bfDpa75srg1URDLvoLNYWxQoKg/EjuiCv0oCQWkfbIa1iUdAVUvyg0mm gpAr74RUeEiF/g6CTy9ajvhh4K2VYIbWWJCv2XyBDEdzS7kWyTLaj+AoyTtWVOEa DwXSTN1vL8wN/MA5ZYKOptQGh/smsmhSRDG0NHRGAt28TmfqVt5Bg9ucwwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFP3FaGV+UOb45ca/76ic7zUNlPguMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmLzgzNGFh MC1hOGY0LTQ1NGMtYjMxNS00MzVhZjE0YWEwN2EvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvODM0YWEw LWE4ZjQtNDU0Yy1iMzE1LTQzNWFmMTRhYTA3YS8xL19jVm9aWDVRNXZqbHhyX3Zx Snp2TlEyVS1DNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBwWUMMA0EAgACMAcDBQMqAeVAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMcCgIDA0NSMA0GCSqGSIb3DQEBCwUAA4IBAQBuk7JL exbYTMuR0QWoms1n3logQBl0V0R1cde2i7kqmVWkv5kNo/xTTiuyF/W4WCHNVdAF B5oeSOojZbpMTrj4BiMBi5/PRzfT0JNX6D/j20OCS6SKKn5Ft16YXJ2LyRmAgwI/ pySJxnAhI/J7tIuqx0y2Gx1iHdSohhCzDsnR6YRgkVQ9SGrfQ8LZu3Ygj4HCP09U unGAYxIOmeKx0mJVyfSWeYDbZ5qfimEAPGdI/Ep0k+GwJLKdzjg2x/S/puZfCtAW 5dqkf3YKz7oGUjCvc2HcN7TTBsRXsM8eh9kh5+qMSG+cHkzJywl93Go1ypgbyv1m d8HvQb+GAoL9Z0uv -----END CERTIFICATE-----Generated at Sat Dec 6 07:38:29 2025 by rpki-client