This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cM8vAv8fpzt72x-_g6u77C07HL0.cer File: cM8vAv8fpzt72x-_g6u77C07HL0.cer (raw, json) Hash identifier: siNeOXxgCdrt8M+ceRxxyURJXiYJBUBU7FvGmWH2NU8= Subject key identifier: 70:CF:2F:02:FF:1F:A7:3B:7B:DB:1F:BF:83:AB:BB:EC:2D:3B:1C:BD Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A82072ECCC547545B06690833054146D9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 14 Nov 2025 11:01:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 215714 IP: 2a11:4f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:07:2e:cc:c5:47:54:5b:06:69:08:33:05:41:46:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 14 11:01:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70cf2f02ff1fa73b7bdb1fbf83abbbec2d3b1cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:95:39:f1:88:54:1e:fd:87:8a:c1:8f:ec: 73:17:82:18:9f:b7:98:e7:5c:9d:fd:80:c2:94:2a: 1e:39:db:66:46:a8:8d:b2:eb:ac:89:1c:b5:30:0c: c9:ee:cf:39:d1:8b:42:5e:0a:41:e6:79:db:a5:0c: df:57:99:a5:b4:73:19:5c:54:72:8b:d1:54:60:ff: 65:65:c8:5d:48:4c:ba:d7:c4:e3:c6:8c:01:f0:eb: 43:45:bf:5a:7e:83:e3:9a:70:0c:ed:1e:18:3e:e3: dc:12:62:35:5b:30:50:a1:27:94:5b:8b:90:39:8d: bf:32:b7:98:25:14:62:c1:11:ab:6d:3f:4f:b3:3b: 95:66:c5:ea:a6:a7:4a:00:ba:4a:10:56:47:e1:0a: 88:a0:78:53:6b:86:e7:c9:bf:1b:3a:3a:c6:e9:6c: 21:ee:1c:c9:c5:bc:74:2c:07:7c:27:c8:b4:87:94: e7:f1:23:c1:b4:3f:79:2b:3d:06:aa:c4:3c:e3:2a: 1c:6e:65:76:ea:40:e5:ff:48:eb:e1:f4:30:3a:a7: 28:a3:00:15:fb:fc:fe:8a:3f:ff:fb:4d:13:02:a0: e5:06:31:64:fe:b4:b2:fc:72:74:01:7c:eb:74:ca: 37:53:68:00:ce:f1:9b:c5:d6:2c:ec:fa:23:52:7e: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CF:2F:02:FF:1F:A7:3B:7B:DB:1F:BF:83:AB:BB:EC:2D:3B:1C:BD X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4cfd0c-8c20-45c2-97fa-4ac3a4ee4b3e/1/cM8vAv8fpzt72x-_g6u77C07HL0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:4f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215714 Signature Algorithm: sha256WithRSAEncryption 88:eb:54:c2:4d:7c:3a:d6:f6:5b:ec:1d:93:be:88:7f:2a:0a: 3a:7f:3c:97:e6:ef:ce:03:25:c1:e3:9b:74:72:df:c7:23:a8: 2e:07:b4:b4:89:f0:0d:c0:8b:35:ab:3f:d5:9f:d6:a4:05:d3: 7c:12:3f:7b:06:7f:f2:ab:2c:c5:d1:1e:b0:e0:3c:16:f8:4c: 04:9b:f9:c4:f5:71:a2:7c:c7:d5:38:f3:08:99:af:7b:e7:55: 73:31:d6:20:14:27:d5:4e:e9:94:b0:80:ed:22:ec:8a:2c:35: 1a:30:61:b9:64:8d:b7:a4:ef:52:25:33:8a:97:33:f0:49:c9: f2:00:92:c9:d6:c4:06:2d:a1:c0:a4:89:01:86:d5:c3:96:8b: 38:b3:e8:c1:fa:80:ef:9f:cc:7b:8c:3b:e6:ff:60:b0:ff:1d: 63:c3:26:14:7f:7d:5d:ac:c1:60:70:22:56:c3:b4:d9:97:8f: d4:22:64:ae:7f:f4:fb:c0:fa:0a:9b:c0:4d:2f:32:8e:f9:da: fa:9b:df:17:4f:20:10:89:e7:47:99:a3:d0:75:85:da:6f:2d: a8:f5:32:5b:7b:3e:d3:cf:0d:b6:df:9f:e6:75:9f:d2:b2:70: 53:aa:23:4d:35:ec:8e:ee:a1:83:4c:6f:bf:a0:4c:ff:c6:e4: 22:a5:3b:4a -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZqCBy7MxUdUWwZpCDMFQUbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE0MTEwMTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGNmMmYwMmZmMWZhNzNiN2JkYjFmYmY4M2FiYmJlYzJkM2IxY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp2VOfGIVB79h4rBj+xzF4IYn7eY 51yd/YDClCoeOdtmRqiNsuusiRy1MAzJ7s850YtCXgpB5nnbpQzfV5mltHMZXFRy i9FUYP9lZchdSEy618TjxowB8OtDRb9afoPjmnAM7R4YPuPcEmI1WzBQoSeUW4uQ OY2/MreYJRRiwRGrbT9PszuVZsXqpqdKALpKEFZH4QqIoHhTa4bnyb8bOjrG6Wwh 7hzJxbx0LAd8J8i0h5Tn8SPBtD95Kz0GqsQ84yocbmV26kDl/0jr4fQwOqcoowAV +/z+ij//+00TAqDlBjFk/rSy/HJ0AXzrdMo3U2gAzvGbxdYs7PojUn7d2wIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFHDPLwL/H6c7e9sfv4Oru+wtOxy9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzRjZmQw Yy04YzIwLTQ1YzItOTdmYS00YWMzYTRlZTRiM2UvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvNGNmZDBj LThjMjAtNDVjMi05N2ZhLTRhYzNhNGVlNGIzZS8xL2NNOHZBdjhmcHp0NzJ4LV9n NnU3N0MwN0hMMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhFPgDAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMDSqIwDQYJKoZIhvcNAQELBQADggEBAIjrVMJNfDrW9lvsHZO+iH8qCjp/PJfm 784DJcHjm3Ry38cjqC4HtLSJ8A3AizWrP9Wf1qQF03wSP3sGf/KrLMXRHrDgPBb4 TASb+cT1caJ8x9U48wiZr3vnVXMx1iAUJ9VO6ZSwgO0i7IosNRowYblkjbek71Il M4qXM/BJyfIAksnWxAYtocCkiQGG1cOWiziz6MH6gO+fzHuMO+b/YLD/HWPDJhR/ fV2swWBwIlbDtNmXj9QiZK5/9PvA+gqbwE0vMo752vqb3xdPIBCJ50eZo9B1hdpv Laj1Mlt7PtPPDbbfn+Z1n9KycFOqI0017I7uoYNMb7+gTP/G5CKlO0o= -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:14 2025 by rpki-client