This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer (raw, json) Hash identifier: 9KQbxgFkUy6tzK9SnfurTa4wtKetDLzyB4bpr0c1xEs= Subject key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ADEE32B8BAED01FA6231107EB5C902B80 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 02 Dec 2025 11:47:01 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 15765 IP: 45.15.108.0/22 IP: 83.243.128.0/17 IP: 213.161.224.0/19 IP: 213.184.192.0/19 IP: 2a0b:5100::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:e3:2b:8b:ae:d0:1f:a6:23:11:07:eb:5c:90:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 2 11:47:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:b1:f3:cd:71:9e:a3:46:47:b3:cc:d9:1b: e9:19:5f:af:3f:f8:f8:2d:0d:b7:ac:e3:97:cf:c2: d3:79:98:87:7b:17:fd:de:93:c1:e3:14:f4:e8:e3: 4b:45:4b:ee:0e:f3:83:96:82:9f:c2:5e:43:c6:1d: d7:5d:6a:bc:d0:8d:dd:1e:61:1c:5a:69:b3:ac:85: ba:e3:0e:a6:0c:f1:ee:8e:98:68:c9:54:a6:40:e9: 65:a0:e2:c2:37:be:ea:2c:9e:ec:74:39:4f:5c:16: cf:81:97:40:ff:9e:d7:96:7a:0e:88:41:66:89:af: cc:53:7a:7c:65:e7:04:8a:37:50:b8:d8:6e:39:28: ca:c6:10:38:ed:2e:72:d0:ef:ae:60:f2:78:02:65: e5:5b:75:5e:35:6c:ef:3a:d2:2e:d8:9d:7d:53:f8: 98:45:81:bc:3b:10:b5:b5:48:06:7d:0e:d3:10:23: 87:1a:ec:f5:da:bb:60:5c:d2:2e:c6:5a:52:1a:0e: 73:92:e6:ac:7d:94:39:7f:a2:c9:6f:3a:85:ee:07: 1f:c4:a9:f5:95:d4:11:41:1c:3e:39:bb:85:de:6c: 03:6a:24:a4:5b:be:34:d4:03:34:9a:5c:45:f5:2d: fe:ea:6f:f7:1e:4c:b9:bc:cb:c8:a0:e2:e9:14:fe: 82:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.108.0/22 83.243.128.0/17 213.161.224.0/19 213.184.192.0/19 IPv6: 2a0b:5100::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15765 Signature Algorithm: sha256WithRSAEncryption a8:d7:42:60:14:b9:e5:71:41:1a:e9:b8:0c:55:13:1f:b6:9d: e2:20:b2:8b:d8:c3:7a:e0:02:95:8b:ac:16:c4:47:22:36:d9: 66:06:18:20:c6:f1:ba:a2:5a:8e:c1:32:95:49:98:11:91:0c: ff:42:48:66:a9:0e:ee:94:1b:bd:f3:5a:23:8f:f8:a8:d0:56: b3:6c:be:11:00:c1:45:3a:e2:a0:b7:ec:36:17:ac:3a:55:99: 09:24:24:65:49:7b:62:40:27:a8:ba:10:b2:31:8b:7a:5c:96: 22:f9:1a:cd:ee:d6:be:27:7c:f6:71:82:1b:d0:32:df:ad:f2: e5:f9:a6:c3:fd:f9:0a:93:57:d7:68:76:db:39:36:95:57:0d: b3:06:44:ed:4b:06:49:f6:c3:66:56:78:c7:41:59:86:3a:b4: df:ff:33:e6:f0:78:03:d5:95:c5:ac:dd:f0:c6:15:da:5f:33: 8a:5c:d7:16:c0:0f:cc:a5:3d:fb:c2:bf:fe:bc:5c:bf:ac:27: 9b:58:85:45:95:b2:75:0f:70:43:02:ab:c4:e5:0a:4e:28:1f: f2:f7:81:d7:36:a9:fb:8c:57:61:bf:fa:60:11:c8:25:55:8d: 66:da:0f:05:df:9b:0c:9e:6b:ee:ab:05:50:64:ae:4f:ad:25: 55:99:c9:66 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgISAZre4yuLrtAfpiMRB+tckCuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAyMTE0NzAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Q5MWNkY2MwYzFiMzYzYjQ5YmZjM2MyYWM1OGU5MzAwMmRmMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg+x881xnqNGR7PM2RvpGV+vP/j4 LQ23rOOXz8LTeZiHexf93pPB4xT06ONLRUvuDvODloKfwl5Dxh3XXWq80I3dHmEc WmmzrIW64w6mDPHujphoyVSmQOlloOLCN77qLJ7sdDlPXBbPgZdA/57XlnoOiEFm ia/MU3p8ZecEijdQuNhuOSjKxhA47S5y0O+uYPJ4AmXlW3VeNWzvOtIu2J19U/iY RYG8OxC1tUgGfQ7TECOHGuz12rtgXNIuxlpSGg5zkuasfZQ5f6LJbzqF7gcfxKn1 ldQRQRw+ObuF3mwDaiSkW7401AM0mlxF9S3+6m/3Hky5vMvIoOLpFP6C2wIDAQAB o4ICwDCCArwwHQYDVR0OBBYEFHPZHNzAwbNjtJv8PCrFjpMALfB9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzZjODI3 ZS1iMDMxLTQ2NzUtYjM0OC1iMTU1MjQwOWI2ZDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvNmM4Mjdl LWIwMzEtNDY3NS1iMzQ4LWIxNTUyNDA5YjZkMS8xL2M5a2MzTURCczJPMG1fdzhL c1dPa3dBdDhIMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCLQ9sAwQHU/OAAwQF1aHgAwQF1bjAMA0EAgAC MAcDBQMqC1EAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAj2VMA0GCSqGSIb3DQEB CwUAA4IBAQCo10JgFLnlcUEa6bgMVRMftp3iILKL2MN64AKVi6wWxEciNtlmBhgg xvG6olqOwTKVSZgRkQz/QkhmqQ7ulBu981ojj/io0FazbL4RAMFFOuKgt+w2F6w6 VZkJJCRlSXtiQCeouhCyMYt6XJYi+RrN7ta+J3z2cYIb0DLfrfLl+abD/fkKk1fX aHbbOTaVVw2zBkTtSwZJ9sNmVnjHQVmGOrTf/zPm8HgD1ZXFrN3wxhXaXzOKXNcW wA/MpT37wr/+vFy/rCebWIVFlbJ1D3BDAqvE5QpOKB/y94HXNqn7jFdhv/pgEcgl VY1m2g8F35sMnmvuqwVQZK5PrSVVmclm -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:06 2025 by rpki-client