This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer File: aotaN08UbXtqbcfTFujrsS3upnA.cer (raw, json) Hash identifier: 8Yf8Un0TOY/kEx8RSVz4SX0H1knIdiZXmY4W888ZAKU= Subject key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA1C15A2B8E7260B47BB7BD34124C2024 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 14:53:14 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 204335 AS: 205227 AS: 215819 IP: 62.68.79.0/24 IP: 185.80.90.0/24 IP: 185.102.86.0/24 IP: 185.234.219.0/24 IP: 2a0c:34c0::/29 IP: 2a12:1780::/29 IP: 2a12:8440::/29 IP: 2a12:8dc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:c1:5a:2b:8e:72:60:b4:7b:b7:bd:34:12:4c:20:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 14:53:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:15:15:e8:b0:99:40:00:00:ec:8e:21:1d: 23:cf:17:07:9f:73:32:12:82:b9:35:1b:de:bc:43: 01:a6:44:99:b3:54:5d:0c:cf:43:90:62:6c:00:e8: 28:76:5b:8f:67:07:51:e1:73:79:19:eb:bb:30:ef: 54:36:77:6a:8c:cf:14:e1:3f:d1:62:b8:54:e8:17: 55:c3:9f:33:df:dd:d3:dc:26:e5:00:f6:d5:88:a3: 5e:a2:b5:02:16:40:8f:5a:1f:52:84:cd:b4:bb:c9: 82:de:ea:e4:dc:ca:f8:80:41:8d:59:f0:7b:8b:b2: 7c:eb:b4:85:eb:5f:0a:9e:2f:27:23:44:67:24:f1: b6:75:b4:cb:21:cb:50:f3:23:56:a2:f5:3b:92:8a: 74:67:f9:f7:14:c5:7c:8f:f0:e9:51:ea:14:7b:c9: c1:a4:72:88:3c:c2:01:70:4d:9b:65:5c:55:20:1f: 33:d3:71:98:5f:13:76:e0:5d:eb:22:41:a8:7f:20: 9e:0c:ad:d9:f7:d3:41:0f:bc:5e:b7:06:21:36:99: 7b:38:81:33:a8:e1:28:27:d4:fe:b2:a1:b4:48:1f: f0:09:12:4a:08:12:3d:00:34:e7:b1:77:ec:c3:6e: a4:82:6b:c8:71:9e:0e:a0:ba:1a:30:f4:97:9e:03: c5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.68.79.0/24 185.80.90.0/24 185.102.86.0/24 185.234.219.0/24 IPv6: 2a0c:34c0::/29 2a12:1780::/29 2a12:8440::/29 2a12:8dc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204335 205227 215819 Signature Algorithm: sha256WithRSAEncryption 74:e9:3a:c6:9b:71:bb:e4:10:d9:a4:fa:bf:76:0d:ae:34:93: ea:0f:17:4b:92:8e:3a:b1:38:cc:bf:cd:6f:7c:17:a1:86:30: 1c:3d:a4:1d:77:34:31:41:ef:f2:2a:74:1d:d7:03:3a:d2:f6: a4:1c:dd:48:39:0b:42:b1:7d:6a:83:c1:7a:5b:b8:92:3a:fc: b1:d8:36:4a:fe:69:ec:5b:0c:45:87:80:18:b3:2d:d9:fc:63: 4b:48:b9:5b:58:ae:59:b6:15:29:6b:fd:2f:78:f4:51:92:18: 40:c6:11:de:cd:25:c5:b3:d5:01:b9:34:0b:fc:ae:e2:89:6c: 3d:1e:e8:b0:3f:45:b3:c7:7c:35:f2:48:ca:5d:50:6e:9c:c4: bc:c2:cf:a4:56:48:b3:d8:1c:1d:16:f0:3d:d1:7a:71:b5:f8: bb:af:c9:2e:90:9e:84:73:db:5d:f9:c4:4e:e7:46:f7:31:ef: 8f:c3:06:cd:ae:61:b6:46:44:bb:84:4d:3a:17:8a:06:d5:f0: ac:5a:8f:7d:a7:c0:fb:51:0f:a1:17:84:ca:37:7d:14:d5:de: 8d:74:14:68:eb:78:1f:25:20:74:21:61:e5:60:21:09:f5:d1: 17:2f:5e:c8:08:bb:23:c2:0b:ce:73:b5:6e:f5:7a:37:89:05: 77:c2:3f:a0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZqhwVorjnJgtHu3vTQSTCAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTQ1MzE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YThiNWEzNzRmMTQ2ZDdiNmE2ZGM3ZDMxNmU4ZWJiMTJkZWVhNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbkVFeiwmUAAAOyOIR0jzxcHn3My EoK5NRvevEMBpkSZs1RdDM9DkGJsAOgodluPZwdR4XN5Geu7MO9UNndqjM8U4T/R YrhU6BdVw58z393T3CblAPbViKNeorUCFkCPWh9ShM20u8mC3urk3Mr4gEGNWfB7 i7J867SF618Kni8nI0RnJPG2dbTLIctQ8yNWovU7kop0Z/n3FMV8j/DpUeoUe8nB pHKIPMIBcE2bZVxVIB8z03GYXxN24F3rIkGofyCeDK3Z99NBD7xetwYhNpl7OIEz qOEoJ9T+sqG0SB/wCRJKCBI9ADTnsXfsw26kgmvIcZ4OoLoaMPSXngPFwwIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFGqLWjdPFG17am3H0xbo67Et7qZwMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2Y2Yzg2 Mi1hZjhiLTQzZjMtOThhZC00NDI0MWZlYzFhOWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZjZjODYy LWFmOGItNDNmMy05OGFkLTQ0MjQxZmVjMWE5Zi8xL2FvdGFOMDhVYlh0cWJjZlRG dWpyc1MzdXBuQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAeBAIAATAYAwQAPkRPAwQAuVBaAwQAuWZWAwQAuerbMCIEAgAC MBwDBQMqDDTAAwUDKhIXgAMFAyoShEADBQMqEo3AMCQGCCsGAQUFBwEIAQH/BBUw E6ARMA8CAwMeLwIDAyGrAgMDSwswDQYJKoZIhvcNAQELBQADggEBAHTpOsabcbvk ENmk+r92Da40k+oPF0uSjjqxOMy/zW98F6GGMBw9pB13NDFB7/IqdB3XAzrS9qQc 3Ug5C0KxfWqDwXpbuJI6/LHYNkr+aexbDEWHgBizLdn8Y0tIuVtYrlm2FSlr/S94 9FGSGEDGEd7NJcWz1QG5NAv8ruKJbD0e6LA/RbPHfDXySMpdUG6cxLzCz6RWSLPY HB0W8D3RenG1+LuvyS6QnoRz2135xE7nRvcx74/DBs2uYbZGRLuETToXigbV8Kxa j32nwPtRD6EXhMo3fRTV3o10FGjreB8lIHQhYeVgIQn10RcvXsgIuyPCC85ztW71 ejeJBXfCP6A= -----END CERTIFICATE-----Generated at Sat Dec 6 05:56:54 2025 by rpki-client