This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jT81agLZZ5zokLXVHg3sLz82M2E.cer File: jT81agLZZ5zokLXVHg3sLz82M2E.cer (raw, json) Hash identifier: cNzcj7PwoGWZ2gTtZ/DDKXWWPhQp1Bt/nIg4kCy2KrI= Subject key identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE8E30D03C687B8E53EFAFF32CFB1F77C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 10:23:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208565 AS: 213042 IP: 2a11:4e00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:e3:0d:03:c6:87:b8:e5:3e:fa:ff:32:cf:b1:f7:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 10:23:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8d3f356a02d9679ce890b5d51e0dec2f3f363361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:3b:d5:cc:0b:95:2f:fd:00:73:d9:1d:53: e5:de:4a:fe:58:22:a4:64:78:86:b0:a6:9d:09:f4: eb:e9:74:e6:94:67:3b:ef:85:19:14:2f:88:c6:79: 63:94:49:4b:2c:f3:70:89:30:66:94:dc:03:5f:68: 5d:5d:fb:5e:1e:97:81:fe:2b:87:ca:43:48:97:13: 55:bc:6e:72:66:05:b1:81:19:27:7c:05:19:61:80: 56:22:42:bf:10:cb:4c:e6:3f:72:a8:da:f0:81:68: 11:40:86:98:21:99:4b:5a:25:5a:ca:44:2f:d8:9f: 08:e6:2e:7b:e7:67:a6:6d:b5:f7:d5:2e:ff:b9:4d: fd:cd:40:16:e0:02:45:bb:31:d8:0b:48:8c:62:cc: 76:27:b1:ba:ea:6d:54:9c:fe:bf:b2:de:84:f7:8b: d9:4f:b8:9f:0a:93:fe:a9:9a:62:e5:e6:ac:04:7b: e6:22:01:ef:22:92:6d:83:14:01:3a:05:bd:70:e6: c3:9f:aa:93:bb:29:f5:25:6c:3d:fd:5b:65:47:e6: 71:b3:35:73:e9:a6:4a:a8:e3:0e:0e:13:d8:e1:ec: 59:89:56:2c:24:af:bb:74:35:a0:f1:a4:d7:73:34: f7:29:ea:15:d8:57:18:cd:80:04:2c:6c:74:d0:5b: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3F:35:6A:02:D9:67:9C:E8:90:B5:D5:1E:0D:EC:2F:3F:36:33:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/566cb1-7915-4ffd-8570-6b93af613d7d/1/jT81agLZZ5zokLXVHg3sLz82M2E.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:4e00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208565 213042 Signature Algorithm: sha256WithRSAEncryption 97:a5:27:0d:a5:84:04:7d:2b:be:42:17:8a:28:73:09:93:6b: a1:ba:ba:64:6b:30:56:5b:49:59:6d:01:71:c2:7a:06:72:57: a3:d9:7d:e3:a3:6d:4e:33:ff:54:69:81:0a:51:63:b5:85:1a: 42:a0:89:0a:a4:42:de:92:e8:04:15:9b:ee:b0:73:2c:c0:69: b2:4c:43:44:e9:ec:a9:16:7f:44:5b:8a:c5:32:e1:16:7e:39: c3:bd:07:c8:09:ea:1e:67:52:df:1d:b2:2a:bc:f4:d9:59:22: 43:10:9c:af:a1:b5:dd:5c:33:3c:84:4e:b5:c6:31:70:a9:7d: 0b:07:cf:8a:dd:c6:c1:1d:5b:04:f6:c9:41:cb:a8:f5:cb:eb: e3:51:93:ac:75:6e:87:e9:f2:37:20:64:b0:67:b5:2f:c7:12: 03:2f:8c:da:de:22:1c:98:b6:47:22:fa:70:03:b8:2c:d0:b0: 0a:f1:64:22:20:65:78:d0:f6:08:6f:bc:0f:3d:48:a0:85:14: 06:ed:3b:2f:70:b9:39:df:76:ff:a9:9c:da:b1:f2:11:f2:b4: 3f:66:bb:5d:da:a3:18:ac:e2:e9:e3:1d:56:a9:2c:1a:87:55: df:65:c2:2b:6d:1c:af:40:09:34:c0:52:3e:69:3a:16:a3:d3: ef:95:64:cb -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZro4w0Dxoe45T76/zLPsfd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTAyMzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDNmMzU2YTAyZDk2NzljZTg5MGI1ZDUxZTBkZWMyZjNmMzYzMzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy071cwLlS/9AHPZHVPl3kr+WCKk ZHiGsKadCfTr6XTmlGc774UZFC+IxnljlElLLPNwiTBmlNwDX2hdXfteHpeB/iuH ykNIlxNVvG5yZgWxgRknfAUZYYBWIkK/EMtM5j9yqNrwgWgRQIaYIZlLWiVaykQv 2J8I5i5752embbX31S7/uU39zUAW4AJFuzHYC0iMYsx2J7G66m1UnP6/st6E94vZ T7ifCpP+qZpi5easBHvmIgHvIpJtgxQBOgW9cObDn6qTuyn1JWw9/VtlR+ZxszVz 6aZKqOMODhPY4exZiVYsJK+7dDWg8aTXczT3KeoV2FcYzYAELGx00FunvQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFI0/NWoC2Wec6JC11R4N7C8/NjNhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY3LzU2NmNi MS03OTE1LTRmZmQtODU3MC02YjkzYWY2MTNkN2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvNTY2Y2Ix LTc5MTUtNGZmZC04NTcwLTZiOTNhZjYxM2Q3ZC8xL2pUODFhZ0xaWjV6b2tMWFZI ZzNzTHo4Mk0yRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF BwEHAQH/BBEwDzANBAIAAjAHAwUDKhFOADAfBggrBgEFBQcBCAEB/wQQMA6gDDAK AgMDLrUCAwNAMjANBgkqhkiG9w0BAQsFAAOCAQEAl6UnDaWEBH0rvkIXiihzCZNr obq6ZGswVltJWW0BccJ6BnJXo9l946NtTjP/VGmBClFjtYUaQqCJCqRC3pLoBBWb 7rBzLMBpskxDROnsqRZ/RFuKxTLhFn45w70HyAnqHmdS3x2yKrz02VkiQxCcr6G1 3VwzPIROtcYxcKl9CwfPit3GwR1bBPbJQcuo9cvr41GTrHVuh+nyNyBksGe1L8cS Ay+M2t4iHJi2RyL6cAO4LNCwCvFkIiBleND2CG+8Dz1IoIUUBu07L3C5Od92/6mc 2rHyEfK0P2a7XdqjGKzi6eMdVqksGodV32XCK20cr0AJNMBSPmk6FqPT75Vkyw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:07:19 2025 by rpki-client