This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aPgE6F8ICkuVFSbfi3IwEAe37es.cer File: aPgE6F8ICkuVFSbfi3IwEAe37es.cer (raw, json) Hash identifier: Jz/9lZSLx0Lctu8VzBBjRU2zGOQ85p+3WBgxSgNNqS8= Subject key identifier: 68:F8:04:E8:5F:08:0A:4B:95:15:26:DF:8B:72:30:10:07:B7:ED:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ACC5F623A0A6D5E0E483CE93E853F1E75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/e6b0ca-fd49-4889-a92e-89af1f2628e6/1/aPgE6F8ICkuVFSbfi3IwEAe37es.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/e6b0ca-fd49-4889-a92e-89af1f2628e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 21:29:54 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203458 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cc:5f:62:3a:0a:6d:5e:0e:48:3c:e9:3e:85:3f:1e:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 21:29:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68f804e85f080a4b951526df8b72301007b7edeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:50:7b:ad:6e:be:b6:7e:71:78:52:04:ff:02: 27:19:41:3a:23:ee:1d:79:95:91:5b:e8:c5:3e:a5: db:e6:ed:fa:1a:f4:e9:23:c9:cd:82:f2:bc:73:7a: eb:1b:99:0a:49:93:a9:96:e5:38:80:5d:cc:67:c3: 2d:8c:3f:76:cf:47:c5:68:c4:ed:08:3d:5f:fe:ee: 14:ee:36:79:4d:0f:ac:95:4a:c2:fc:77:ca:b7:27: 8a:77:ed:d9:38:24:a6:13:ac:f8:9f:72:e2:71:ee: 25:6d:5a:9d:47:93:55:2f:2a:fe:22:cd:2d:fc:9f: a5:ba:5f:ec:fd:10:42:40:b7:bd:5c:eb:7e:e4:84: f9:6e:5d:2d:36:29:6c:3e:50:33:5a:56:d1:0e:f8: b8:1c:65:ce:f5:c9:f1:36:56:fe:58:45:08:2f:63: 7b:49:f7:3a:ab:d6:db:47:ce:be:c7:86:b3:7e:65: 3b:2d:2c:57:e6:e6:b5:01:6d:c8:3e:18:9a:ed:03: 01:1a:d3:70:f7:fc:c6:57:67:1e:1f:d3:cf:96:83: 5f:00:65:8f:54:c3:60:ad:42:a7:7f:64:65:8d:b7: f6:a0:a0:32:8e:4b:af:45:94:15:1e:ed:08:44:c2: 4d:7a:ae:7c:c7:1b:b4:6f:ab:14:0b:6a:3d:b3:43: 99:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F8:04:E8:5F:08:0A:4B:95:15:26:DF:8B:72:30:10:07:B7:ED:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e6b0ca-fd49-4889-a92e-89af1f2628e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e6b0ca-fd49-4889-a92e-89af1f2628e6/1/aPgE6F8ICkuVFSbfi3IwEAe37es.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203458 Signature Algorithm: sha256WithRSAEncryption a5:6a:79:f8:36:3f:26:95:bd:13:80:a6:36:4f:02:5e:d1:34: 08:62:6d:3f:4d:5b:f0:88:92:51:f2:26:95:47:85:40:43:4c: dc:c5:20:59:3e:8c:87:74:69:1e:5d:95:82:35:59:f1:fe:c7: e4:77:0c:4f:ad:f5:27:a4:a7:87:86:19:5a:80:eb:59:2f:eb: 9b:0e:d8:5b:c7:c7:bf:66:7e:10:1b:2a:30:3e:0e:cf:44:45: 12:5d:35:1c:29:35:5f:1b:e5:9c:e9:e4:2b:18:28:b4:a3:70: ec:23:2e:dc:7a:14:71:93:0e:f2:cb:ac:59:b6:c3:7d:b0:e1: 81:87:8d:2b:0f:8a:8b:c2:62:a1:ab:31:d3:03:a8:e8:55:f2: bf:8f:1c:91:15:54:ff:1b:92:fd:95:1c:8f:61:cb:0c:08:f1: 9a:8f:d3:38:3b:e5:4f:50:61:db:f9:ae:1c:cb:d4:33:a8:fa: 6a:6c:7d:89:b6:9a:d4:0a:9e:aa:c7:18:01:05:c3:bc:7c:fb: b6:32:cb:15:25:35:af:7c:3b:c3:74:47:c6:4f:7f:28:a1:07: 45:37:29:1c:9a:fa:e5:be:2c:f8:33:46:85:b9:26:c7:53:57: 6b:aa:26:dc:40:47:96:ad:62:fb:ce:a3:f2:eb:40:43:9a:62: f8:c5:f8:c5 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZrMX2I6Cm1eDkg86T6FPx51MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MjEyOTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGY4MDRlODVmMDgwYTRiOTUxNTI2ZGY4YjcyMzAxMDA3YjdlZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1B7rW6+tn5xeFIE/wInGUE6I+4d eZWRW+jFPqXb5u36GvTpI8nNgvK8c3rrG5kKSZOpluU4gF3MZ8MtjD92z0fFaMTt CD1f/u4U7jZ5TQ+slUrC/HfKtyeKd+3ZOCSmE6z4n3Lice4lbVqdR5NVLyr+Is0t /J+lul/s/RBCQLe9XOt+5IT5bl0tNilsPlAzWlbRDvi4HGXO9cnxNlb+WEUIL2N7 Sfc6q9bbR86+x4azfmU7LSxX5ua1AW3IPhia7QMBGtNw9/zGV2ceH9PPloNfAGWP VMNgrUKnf2Rljbf2oKAyjkuvRZQVHu0IRMJNeq58xxu0b6sUC2o9s0OZdwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFGj4BOhfCApLlRUm34tyMBAHt+3rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2L2U2YjBj YS1mZDQ5LTQ4ODktYTkyZS04OWFmMWYyNjI4ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvZTZiMGNh LWZkNDktNDg4OS1hOTJlLTg5YWYxZjI2MjhlNi8xL2FQZ0U2RjhJQ2t1VkZTYmZp M0l3RUFlMzdlcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMawjANBgkqhkiG9w0BAQsFAAOCAQEApWp5+DY/JpW9 E4CmNk8CXtE0CGJtP01b8IiSUfImlUeFQENM3MUgWT6Mh3RpHl2VgjVZ8f7H5HcM T631J6Snh4YZWoDrWS/rmw7YW8fHv2Z+EBsqMD4Oz0RFEl01HCk1XxvlnOnkKxgo tKNw7CMu3HoUcZMO8susWbbDfbDhgYeNKw+Ki8Jioasx0wOo6FXyv48ckRVU/xuS /ZUcj2HLDAjxmo/TODvlT1Bh2/muHMvUM6j6amx9ibaa1AqeqscYAQXDvHz7tjLL FSU1r3w7w3RHxk9/KKEHRTcpHJr65b4s+DNGhbkmx1NXa6om3EBHlq1i+86j8utA Q5pi+MX4xQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:18 2025 by rpki-client