This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer File: aXejEW7MnXpCnxNlFhPorRSf8yQ.cer (raw, json) Hash identifier: 0l1BYdHXBv4r2q/NRvUYbviWcOsfghKNY38gYtv9clA= Subject key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A6E5FE62E0FD2103C0A8E89914C52C736 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 10 Nov 2025 15:26:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 58051 IP: 45.154.196.0/22 IP: 176.116.126.0/24 IP: 185.139.7.0/24 IP: 185.185.42.0/24 IP: 185.221.63.0/24 IP: 193.105.184.0/24 IP: 193.105.207.0/24 IP: 2a01:fdc0::/29 IP: 2a12:ab40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:5f:e6:2e:0f:d2:10:3c:0a:8e:89:91:4c:52:c7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 10 15:26:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6977a3116ecc9d7a429f13651613e8ad149ff324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:6e:ae:80:3d:81:31:0b:86:89:5b:28:01: 0a:be:b8:a9:5a:f1:c5:15:bb:c8:f5:51:39:3a:46: d1:d4:96:45:21:18:8b:02:93:07:61:a2:92:6a:31: 0e:55:03:52:3e:ea:b6:50:7d:4c:49:4b:ce:d0:94: 70:91:38:cc:9b:36:f9:54:02:0f:aa:4b:ae:dc:05: af:3e:df:bc:5f:b9:63:59:ab:90:df:41:bf:6b:a8: db:3a:a3:e3:38:6f:b8:f2:3b:06:b7:07:26:95:79: 5b:3f:d2:dc:b0:31:fc:60:e6:05:31:b8:e1:ce:e1: ea:88:76:79:41:4d:92:30:c3:c2:59:d5:58:06:98: df:c0:c9:4a:1a:96:d1:92:54:3b:19:43:2c:4d:76: 1e:3d:f7:69:e4:1e:c2:12:03:86:e2:91:40:b5:5f: 93:2f:88:c7:4a:e7:7e:37:82:93:34:c1:12:47:2e: ab:f0:f7:b1:21:9a:a6:5f:c0:d9:c2:7f:48:73:c3: ee:e0:e2:6b:20:9b:eb:21:35:38:bc:c7:23:c2:71: 13:40:da:e6:76:88:7e:b0:a6:35:fb:6c:63:f1:57: 4c:7a:e0:de:81:b9:10:63:a8:01:76:31:79:3e:1b: 2a:91:54:34:de:fa:27:b7:43:37:d7:a0:8f:5c:7f: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.196.0/22 176.116.126.0/24 185.139.7.0/24 185.185.42.0/24 185.221.63.0/24 193.105.184.0/24 193.105.207.0/24 IPv6: 2a01:fdc0::/29 2a12:ab40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 58051 Signature Algorithm: sha256WithRSAEncryption 96:ad:bb:8a:59:15:cd:ed:c0:6f:79:ba:2a:aa:25:62:58:05: 97:5d:2f:97:c9:25:a7:aa:55:da:03:44:ff:1c:02:ab:49:4f: 41:ea:fc:5a:65:d8:de:78:9b:a0:51:fd:b2:08:e4:34:f7:62: b0:90:5e:05:dd:cf:d4:28:8a:26:fa:6f:31:ec:4f:12:a9:e8: 41:ff:06:5c:e6:ce:78:78:64:be:ad:30:d8:03:e8:0f:17:f8: a7:b4:19:1b:75:c2:89:37:e0:3c:33:d3:50:76:43:d9:9b:5a: 65:7b:a7:3d:9c:1e:66:3e:87:bf:12:d5:8f:94:90:1a:a9:b2: bf:f7:86:08:68:fe:4b:a1:c5:4a:24:ec:e1:e9:fe:52:e9:88: cc:11:24:5f:e6:f1:61:d1:9d:d7:24:7e:c1:3f:dd:78:62:82: 9b:62:d6:15:39:be:2c:aa:77:3f:67:bf:4f:92:eb:78:f7:49: 6a:e5:ed:ef:e4:d7:bd:1d:4b:ea:26:5f:3c:d8:94:04:19:42: db:35:7f:0a:4f:b2:89:ee:5d:16:51:04:9e:6d:71:e0:62:0c: 13:ed:b1:5f:34:66:3f:7c:40:f2:0d:c4:21:f7:10:d0:61:e2: 1c:ef:52:68:6c:03:96:20:44:16:29:e4:5b:13:30:54:a9:22: 61:27:df:12 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZpuX+YuD9IQPAqOiZFMUsc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEwMTUyNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTc3YTMxMTZlY2M5ZDdhNDI5ZjEzNjUxNjEzZThhZDE0OWZmMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZZuroA9gTELholbKAEKvripWvHF FbvI9VE5OkbR1JZFIRiLApMHYaKSajEOVQNSPuq2UH1MSUvO0JRwkTjMmzb5VAIP qkuu3AWvPt+8X7ljWauQ30G/a6jbOqPjOG+48jsGtwcmlXlbP9LcsDH8YOYFMbjh zuHqiHZ5QU2SMMPCWdVYBpjfwMlKGpbRklQ7GUMsTXYePfdp5B7CEgOG4pFAtV+T L4jHSud+N4KTNMESRy6r8PexIZqmX8DZwn9Ic8Pu4OJrIJvrITU4vMcjwnETQNrm doh+sKY1+2xj8VdMeuDegbkQY6gBdjF5PhsqkVQ03vont0M316CPXH88ywIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzljNjY5 MS1hZGFjLTQxZTUtOGNlOS1mNGI3YjM5OGM2MzQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvOWM2Njkx LWFkYWMtNDFlNS04Y2U5LWY0YjdiMzk4YzYzNC8xL2FYZWpFVzdNblhwQ254TmxG aFBvclJTZjh5US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFkGCCsGAQUF BwEHAQH/BEowSDAwBAIAATAqAwQCLZrEAwQAsHR+AwQAuYsHAwQAubkqAwQAud0/ AwQAwWm4AwQAwWnPMBQEAgACMA4DBQMqAf3AAwUDKhKrQDAaBggrBgEFBQcBCAEB /wQLMAmgBzAFAgMA4sMwDQYJKoZIhvcNAQELBQADggEBAJatu4pZFc3twG95uiqq JWJYBZddL5fJJaeqVdoDRP8cAqtJT0Hq/Fpl2N54m6BR/bII5DT3YrCQXgXdz9Qo iib6bzHsTxKp6EH/Blzmznh4ZL6tMNgD6A8X+Ke0GRt1wok34Dwz01B2Q9mbWmV7 pz2cHmY+h78S1Y+UkBqpsr/3hgho/kuhxUok7OHp/lLpiMwRJF/m8WHRndckfsE/ 3Xhigpti1hU5viyqdz9nv0+S63j3SWrl7e/k170dS+omXzzYlAQZQts1fwpPsonu XRZRBJ5tceBiDBPtsV80Zj98QPINxCH3ENBh4hzvUmhsA5YgRBYp5FsTMFSpImEn 3xI= -----END CERTIFICATE-----Generated at Sat Dec 6 06:06:43 2025 by rpki-client