This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_xcGtTYa7OO3e5sag2JA1IS9C1Q.cer File: _xcGtTYa7OO3e5sag2JA1IS9C1Q.cer (raw, json) Hash identifier: fHnI4Ym6xj6b3ytSERdlLpn1TeGIT6dZ9gPnF91MjUE= Subject key identifier: FF:17:06:B5:36:1A:EC:E3:B7:7B:9B:1A:83:62:40:D4:84:BD:0B:54 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEE4B7D5A4144607DC17B3C1407DFC38D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 05 Dec 2025 11:35:16 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214899 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:4b:7d:5a:41:44:60:7d:c1:7b:3c:14:07:df:c3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 5 11:35:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff1706b5361aece3b77b9b1a836240d484bd0b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:ce:13:d7:0d:23:2b:09:3b:8b:d9:79:d9: b0:34:d7:cf:19:1d:70:57:e1:57:1c:15:42:43:1c: 20:e0:17:43:b3:fb:4c:30:ba:b7:db:7a:84:44:76: a2:26:e6:e6:7a:f3:4b:c8:90:ca:6c:70:4b:6c:b4: 2f:8a:5e:d1:b3:9b:02:e5:ed:07:da:9d:06:e1:1f: 58:f0:0f:82:57:3c:ab:33:ae:ae:15:87:26:3b:1f: 26:4c:4f:78:57:1c:ac:ca:bd:ba:af:80:17:00:1c: db:66:b5:0c:1c:31:64:ab:ba:00:1f:b6:05:72:63: c0:12:b8:2f:90:ac:32:d7:1a:75:48:9a:98:5b:b3: 92:3c:5c:7b:0f:81:f2:33:69:d7:c7:18:63:c7:de: 76:6e:69:02:96:2d:c1:d1:5b:2d:dd:5b:4e:95:eb: 71:63:74:a4:24:e9:4b:65:bf:e7:ee:f8:8b:59:7f: 38:ad:9d:6d:58:83:fe:88:20:6b:bf:77:7e:3c:b6: 40:ea:7e:8e:b2:47:57:8d:67:52:c2:e0:66:c1:ec: 87:f0:38:32:bf:0d:2d:d8:d1:c0:03:73:03:df:70: a2:3a:9c:ca:7b:cf:db:f9:e9:3d:62:14:03:64:4e: d1:0d:6c:80:04:b1:8c:c0:fe:1e:64:08:81:75:c4: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:17:06:B5:36:1A:EC:E3:B7:7B:9B:1A:83:62:40:D4:84:BD:0B:54 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214899 Signature Algorithm: sha256WithRSAEncryption 8f:af:0c:41:4d:49:81:c3:d6:10:60:68:64:65:cc:78:1f:ba: 4b:2f:c1:77:d8:19:94:ae:c8:72:29:33:07:ab:06:d6:f5:3c: 15:18:d4:3d:04:b8:a0:33:30:fa:68:79:33:ca:3a:23:47:a7: 1d:dd:c1:3e:d4:23:ca:42:54:07:dc:c2:22:d6:1a:ec:21:4a: 15:40:48:04:a1:68:16:4d:ae:05:7f:30:7b:e9:3e:7a:13:6d: ce:e4:54:1d:a2:7d:24:2b:aa:67:51:17:d9:30:d3:19:b6:28: 6c:cf:f0:57:16:63:85:2e:35:75:0e:73:88:d2:7f:a2:ee:4d: ca:d0:19:73:49:f9:c7:38:c7:f2:66:b8:9f:a4:d3:66:b1:22: 5c:2f:52:56:46:28:68:69:8c:bf:cd:4e:93:a9:80:89:29:11: ed:94:1b:83:a8:90:38:7f:29:38:ab:12:f8:17:2c:42:3e:2e: ce:84:8a:b6:14:9b:ff:dd:4f:42:ab:a9:4b:fa:8d:69:58:bb: c2:4a:2b:78:45:98:e0:9d:4d:10:4b:69:4d:1e:b5:22:c5:f8: b4:3f:3b:b3:5a:ac:9f:53:ed:93:e4:64:98:d9:b5:7a:7f:b1: de:37:7c:ca:b3:55:62:da:20:ff:09:bc:e3:c4:00:f2:2a:b3: 4a:7f:ac:30 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZruS31aQURgfcF7PBQH38ONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA1MTEzNTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjE3MDZiNTM2MWFlY2UzYjc3YjliMWE4MzYyNDBkNDg0YmQwYjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvnOE9cNIysJO4vZedmwNNfPGR1w V+FXHBVCQxwg4BdDs/tMMLq323qERHaiJubmevNLyJDKbHBLbLQvil7Rs5sC5e0H 2p0G4R9Y8A+CVzyrM66uFYcmOx8mTE94Vxysyr26r4AXABzbZrUMHDFkq7oAH7YF cmPAErgvkKwy1xp1SJqYW7OSPFx7D4HyM2nXxxhjx952bmkCli3B0Vst3VtOletx Y3SkJOlLZb/n7viLWX84rZ1tWIP+iCBrv3d+PLZA6n6OskdXjWdSwuBmweyH8Dgy vw0t2NHAA3MD33CiOpzKe8/b+ek9YhQDZE7RDWyABLGMwP4eZAiBdcTgrwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFP8XBrU2Guzjt3ubGoNiQNSEvQtUMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzFmOTVh Yi1mMmE1LTQwZmMtOTBjNC1hYzg1NGNjNWQwNTEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMWY5NWFi LWYyYTUtNDBmYy05MGM0LWFjODU0Y2M1ZDA1MS8xL194Y0d0VFlhN09PM2U1c2Fn MkpBMUlTOUMxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHczANBgkqhkiG9w0BAQsFAAOCAQEAj68MQU1JgcPW EGBoZGXMeB+6Sy/Bd9gZlK7IcikzB6sG1vU8FRjUPQS4oDMw+mh5M8o6I0enHd3B PtQjykJUB9zCItYa7CFKFUBIBKFoFk2uBX8we+k+ehNtzuRUHaJ9JCuqZ1EX2TDT GbYobM/wVxZjhS41dQ5ziNJ/ou5NytAZc0n5xzjH8ma4n6TTZrEiXC9SVkYoaGmM v81Ok6mAiSkR7ZQbg6iQOH8pOKsS+BcsQj4uzoSKthSb/91PQqupS/qNaVi7wkor eEWY4J1NEEtpTR61IsX4tD87s1qsn1Ptk+RkmNm1en+x3jd8yrNVYtog/wm848QA 8iqzSn+sMA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:33 2025 by rpki-client