This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iVA8QRkyg2x8SOlhMJmRQWi79dg.cer File: iVA8QRkyg2x8SOlhMJmRQWi79dg.cer (raw, json) Hash identifier: +xtTRwx50WDlX9I7KiIA7T6pJilC6EdTJX/75P4LE6w= Subject key identifier: 89:50:3C:41:19:32:83:6C:7C:48:E9:61:30:99:91:41:68:BB:F5:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A9E7BCB4226AB42F7CCF23B8EA3C40152 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/89503C411932836C7C48E9613099914168BBF5D8.mft caRepository: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/ Notify URL: https://rpki.as207960.net/rrdp/notification.xml Certificate not before: Wed 19 Nov 2025 23:38:24 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214749 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9e:7b:cb:42:26:ab:42:f7:cc:f2:3b:8e:a3:c4:01:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 19 23:38:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=89503c411932836c7c48e9613099914168bbf5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:5a:ec:a0:48:2d:9c:5b:eb:f7:7e:53:a4: d3:a8:bc:7c:11:f2:68:43:4a:18:2b:bd:6b:40:3d: 04:76:da:b5:ae:04:a2:da:f6:f7:22:13:07:73:a3: ab:55:62:b8:90:a7:ae:71:7a:db:9f:a9:1a:17:63: 82:9f:79:f4:29:1a:2e:81:23:37:cd:20:af:de:6a: 27:e8:23:ff:b8:11:2a:d0:9f:98:4c:da:0f:d2:b5: 1c:63:55:c9:76:de:8f:bf:9c:f0:e4:9d:63:79:66: 1c:78:14:e2:22:bb:00:4d:b0:0e:bf:e8:5a:08:31: 33:26:dc:b2:bb:41:11:87:a6:ff:ba:77:32:56:dc: fb:26:e7:91:3f:55:d4:ce:ec:8f:ce:4c:86:f6:95: c6:65:22:ac:a3:ee:8d:0e:6e:6f:44:7d:8b:03:b5: 8d:b8:58:19:e4:d1:ee:35:a3:75:b0:64:05:34:04: 92:5e:38:7e:86:80:ff:d7:47:35:ab:2c:04:52:66: 8b:e5:26:c2:4a:38:f3:b1:d2:2e:ae:69:cc:d9:8a: 3a:ae:35:fb:d5:b1:49:bc:b3:30:16:bf:6f:e4:5d: 08:5f:07:ee:36:99:c7:83:1b:46:2a:3f:49:13:2a: 55:17:76:2c:ea:19:ed:79:8b:5b:a5:15:e9:9a:87: 14:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:50:3C:41:19:32:83:6C:7C:48:E9:61:30:99:91:41:68:BB:F5:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/ RPKI Manifest - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/1/89503C411932836C7C48E9613099914168BBF5D8.mft RPKI Notify - URI:https://rpki.as207960.net/rrdp/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214749 Signature Algorithm: sha256WithRSAEncryption 24:df:92:2c:23:62:56:f3:01:4b:c5:18:36:87:0c:a5:54:6c: d4:8a:55:6e:bb:ed:a2:a1:e1:20:31:09:33:4c:14:dc:f6:ef: a9:04:1c:86:77:e7:6f:ee:70:55:92:34:da:25:ec:59:e1:a0: 93:c0:d6:71:d6:be:e7:96:f7:57:2b:41:63:12:46:30:02:ed: 7a:dd:78:3d:bd:7d:6b:cc:62:9f:ec:e9:29:34:85:16:8e:89: 9c:1e:3d:e6:9f:15:48:90:be:e3:b3:bc:f1:82:6d:2b:d4:f0: 67:5d:d3:54:d5:c6:0f:ab:7f:53:1a:d6:41:9c:5f:d6:f8:9f: 75:9c:ed:b5:1c:40:71:ea:c6:b1:ae:58:bc:7b:ae:fe:de:ad: d7:32:df:48:a8:3d:f0:d7:0f:6f:04:4c:46:b2:a9:88:06:54: 29:82:13:17:35:64:6b:2c:58:95:1c:37:b0:dd:84:b1:2e:c0: 83:24:81:24:04:4b:ce:15:65:b9:4c:01:79:9b:e4:c1:9d:8f: b9:1a:4a:69:e6:6d:38:16:0c:e1:18:e2:bd:ca:74:61:c2:67: ed:69:3b:bb:1c:9b:79:00:94:29:6b:70:7f:36:30:b2:30:7d: 17:57:7a:1d:4a:6e:f8:35:7e:f5:af:2d:0e:ec:3c:e2:03:96: 01:d6:4d:54 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZqee8tCJqtC98zyO46jxAFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTE5MjMzODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTUwM2M0MTE5MzI4MzZjN2M0OGU5NjEzMDk5OTE0MTY4YmJmNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwxa7KBILZxb6/d+U6TTqLx8EfJo Q0oYK71rQD0Edtq1rgSi2vb3IhMHc6OrVWK4kKeucXrbn6kaF2OCn3n0KRougSM3 zSCv3mon6CP/uBEq0J+YTNoP0rUcY1XJdt6Pv5zw5J1jeWYceBTiIrsATbAOv+ha CDEzJtyyu0ERh6b/uncyVtz7JueRP1XUzuyPzkyG9pXGZSKso+6NDm5vRH2LA7WN uFgZ5NHuNaN1sGQFNASSXjh+hoD/10c1qywEUmaL5SbCSjjzsdIurmnM2Yo6rjX7 1bFJvLMwFr9v5F0IXwfuNpnHgxtGKj9JEypVF3Ys6hnteYtbpRXpmocUpQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFIlQPEEZMoNsfEjpYTCZkUFou/XYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE2BggrBgEFBQcBCwSCASgwggEkMFsGCCsGAQUFBzAFhk9y c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzEvMIGHBggrBgEFBQcwCoZ7cnN5 bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9mMTE0YzFl YTc3ODg0NTJjYmYzOGJlODU0ZWE4MzU5ZC8xLzg5NTAzQzQxMTkzMjgzNkM3QzQ4 RTk2MTMwOTk5MTQxNjhCQkY1RDgubWZ0MDsGCCsGAQUFBzANhi9odHRwczovL3Jw a2kuYXMyMDc5NjAubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQ ME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU L0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDRt0wDQYJKoZIhvcN AQELBQADggEBACTfkiwjYlbzAUvFGDaHDKVUbNSKVW677aKh4SAxCTNMFNz276kE HIZ352/ucFWSNNol7FnhoJPA1nHWvueW91crQWMSRjAC7XrdeD29fWvMYp/s6Sk0 hRaOiZwePeafFUiQvuOzvPGCbSvU8Gdd01TVxg+rf1Ma1kGcX9b4n3Wc7bUcQHHq xrGuWLx7rv7erdcy30ioPfDXD28ETEayqYgGVCmCExc1ZGssWJUcN7DdhLEuwIMk gSQES84VZblMAXmb5MGdj7kaSmnmbTgWDOEY4r3KdGHCZ+1pO7scm3kAlClrcH82 MLIwfRdXeh1Kbvg1fvWvLQ7sPOIDlgHWTVQ= -----END CERTIFICATE-----Generated at Sat Dec 6 05:43:56 2025 by rpki-client