This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2NBovdF2amQDhaaHlGypxruOyQ.cer File: a2NBovdF2amQDhaaHlGypxruOyQ.cer (raw, json) Hash identifier: cpyCGWRfd1OBcnAsopnvUf/8/hxhImo6275BWk9wFQ4= Subject key identifier: 6B:63:41:A2:F7:45:D9:A9:90:0E:16:9A:1E:51:B2:A7:1A:EE:3B:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ABBC37BA58C021DF4D0E3580BA9BF4A00 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/a2NBovdF2amQDhaaHlGypxruOyQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 25 Nov 2025 16:05:41 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203453 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:c3:7b:a5:8c:02:1d:f4:d0:e3:58:0b:a9:bf:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 25 16:05:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6b6341a2f745d9a9900e169a1e51b2a71aee3b24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:3d:52:85:21:65:09:83:52:01:34:f6:f3: 3b:82:79:a3:f7:55:c4:91:75:95:e7:54:78:c8:ec: 61:40:0b:84:93:9f:32:15:f2:b5:24:30:cd:d5:8e: b3:fc:ca:eb:d3:87:5c:81:87:ea:ee:21:68:d0:45: 00:bd:72:4d:af:5f:fb:df:b7:5a:4a:2f:54:76:1d: 50:fb:be:e2:e6:65:61:90:e6:ad:60:14:24:b5:8d: 9b:40:00:b1:fb:b1:48:da:45:29:91:59:d4:99:ff: 7d:56:62:f3:3a:76:d6:48:d5:c6:f7:55:c4:bb:15: 54:7c:31:6a:ae:8f:79:19:0d:3a:a6:e9:f8:0a:ba: d1:88:db:88:34:1b:f9:81:3e:0c:86:f5:2c:71:8e: c4:6e:9a:da:d3:f2:97:46:62:cb:7c:4d:aa:0b:32: 8a:55:75:55:a5:2d:1b:5d:ba:3b:5e:b0:f3:be:77: 33:8f:10:59:13:11:ca:cc:b9:79:31:8d:fa:73:8d: b0:11:70:63:f6:ac:99:4b:90:8e:1f:85:42:f7:9c: 2c:fe:23:1e:06:a2:dc:31:40:a9:e0:06:00:27:77: d0:53:72:8f:e7:1e:98:3b:f9:4b:52:8e:12:eb:b6: db:3d:77:29:ee:5a:b4:cc:57:ff:98:04:8d:97:44: c2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:63:41:A2:F7:45:D9:A9:90:0E:16:9A:1E:51:B2:A7:1A:EE:3B:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/655bca-5550-4c7a-9f16-d78b3e1cabb1/1/a2NBovdF2amQDhaaHlGypxruOyQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203453 Signature Algorithm: sha256WithRSAEncryption 43:86:f4:17:c2:3a:89:ee:80:4a:03:45:0c:de:a8:28:a4:ff: ea:a8:18:10:df:03:60:41:f9:05:ba:44:f7:c2:b9:c9:a5:d8: 42:07:26:27:86:6f:2d:b2:b4:16:7c:00:bd:2c:92:26:94:6b: ca:6f:b2:a0:84:40:0b:93:f8:c1:c5:92:4e:c6:1f:12:f9:ae: f6:18:15:32:2b:61:bb:ba:55:b7:f7:d6:f1:6b:b0:a8:8a:50: b9:a3:61:fc:16:9d:c8:da:03:4c:ef:d8:6f:26:9c:81:00:27: 04:30:e3:c8:ea:85:7a:01:17:62:be:85:7e:9f:16:f2:f7:85: ca:2c:67:74:e5:f8:b6:18:8c:41:67:d4:39:58:23:dc:7a:73: a8:42:1e:d6:df:75:ea:18:98:ff:5d:50:07:9b:b4:06:25:ae: 7c:5e:11:46:cc:0c:5e:55:9e:57:c8:b9:a1:50:37:74:57:e6: d7:a0:56:51:9d:a2:64:aa:ea:c5:56:0a:6e:09:b7:b4:0c:bf: 94:a4:aa:dd:48:33:e1:4d:ce:79:2f:c3:60:52:d1:6e:14:54: 53:8d:f6:f2:e3:32:35:3e:63:ef:03:87:d6:ae:55:87:e7:f6: 21:d3:aa:9a:91:5c:68:2b:db:b8:54:ce:e8:63:df:0f:b1:53: d2:27:54:d8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZq7w3uljAId9NDjWAupv0oAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI1MTYwNTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjYzNDFhMmY3NDVkOWE5OTAwZTE2OWExZTUxYjJhNzFhZWUzYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdc9UoUhZQmDUgE09vM7gnmj91XE kXWV51R4yOxhQAuEk58yFfK1JDDN1Y6z/Mrr04dcgYfq7iFo0EUAvXJNr1/737da Si9Udh1Q+77i5mVhkOatYBQktY2bQACx+7FI2kUpkVnUmf99VmLzOnbWSNXG91XE uxVUfDFqro95GQ06pun4CrrRiNuINBv5gT4MhvUscY7Ebpra0/KXRmLLfE2qCzKK VXVVpS0bXbo7XrDzvnczjxBZExHKzLl5MY36c42wEXBj9qyZS5COH4VC95ws/iMe BqLcMUCp4AYAJ3fQU3KP5x6YO/lLUo4S67bbPXcp7lq0zFf/mASNl0TCnQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGtjQaL3RdmpkA4Wmh5Rsqca7jskMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzY1NWJj YS01NTUwLTRjN2EtOWYxNi1kNzhiM2UxY2FiYjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNjU1YmNh LTU1NTAtNGM3YS05ZjE2LWQ3OGIzZTFjYWJiMS8xL2EyTkJvdmRGMmFtUURoYWFI bEd5cHhydU95US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMavTANBgkqhkiG9w0BAQsFAAOCAQEAQ4b0F8I6ie6A SgNFDN6oKKT/6qgYEN8DYEH5BbpE98K5yaXYQgcmJ4ZvLbK0FnwAvSySJpRrym+y oIRAC5P4wcWSTsYfEvmu9hgVMithu7pVt/fW8WuwqIpQuaNh/BadyNoDTO/Ybyac gQAnBDDjyOqFegEXYr6Ffp8W8veFyixndOX4thiMQWfUOVgj3HpzqEIe1t916hiY /11QB5u0BiWufF4RRswMXlWeV8i5oVA3dFfm16BWUZ2iZKrqxVYKbgm3tAy/lKSq 3Ugz4U3OeS/DYFLRbhRUU4328uMyNT5j7wOH1q5Vh+f2IdOqmpFcaCvbuFTO6GPf D7FT0idU2A== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:16 2025 by rpki-client