This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ji88c55RceTAJtqW5bUP_CZ9YG8.cer File: ji88c55RceTAJtqW5bUP_CZ9YG8.cer (raw, json) Hash identifier: vsVwhVGgTPtnmY81ZmBiK2Yhe/J7E8EA3hAhC2oy1ow= Subject key identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7478DDDA3D1B5D2CCA6B08677797F21F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 11 Nov 2025 19:51:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203874 IP: 2001:67c:2598::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:74:78:dd:da:3d:1b:5d:2c:ca:6b:08:67:77:97:f2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 11 19:51:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e2f3c739e5171e4c026da96e5b50ffc267d606f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:62:26:64:6f:71:3c:57:84:45:3d:85:4c: ef:45:4f:c2:fa:fe:aa:77:ab:38:d8:47:8e:47:f3: ad:c0:71:d4:1e:a8:6e:10:26:cb:c4:26:3c:bd:2f: 8c:75:c1:c9:96:cc:26:6d:04:c1:d0:f7:ff:03:f9: ca:61:ab:ad:0a:41:eb:33:27:8e:7c:80:24:eb:4d: b8:1d:64:7f:79:11:98:87:5d:fd:b5:03:8b:22:fb: 69:7d:01:c7:7f:bd:53:16:84:d8:11:6a:b1:3f:5d: bc:f3:f8:ee:5a:0d:38:0f:b9:05:39:5f:1c:89:ea: 86:95:da:e5:06:22:6b:93:a2:38:03:dc:14:78:8d: 7a:47:48:ba:c4:12:19:4b:34:d8:35:cd:18:c8:9d: 51:75:da:2e:46:fb:24:fc:c3:e7:6f:3a:72:8a:47: 7b:ab:90:ef:b3:76:e8:28:9a:cc:36:db:25:00:22: 32:d1:9c:0f:17:ca:00:6a:cd:06:ab:6c:d7:03:24: a7:31:2a:3f:77:a3:55:43:5b:e4:04:66:db:7b:0c: ef:ce:cd:6b:84:83:f3:e9:88:92:c6:74:2d:17:a3: 66:98:5a:76:8a:8d:30:03:d6:07:47:61:14:be:e9: 24:a7:24:b1:d2:29:17:79:1e:b9:53:e3:35:6a:2c: bb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2F:3C:73:9E:51:71:E4:C0:26:DA:96:E5:B5:0F:FC:26:7D:60:6F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe5600-d0dc-4bf9-bb99-1aec1458bdb7/1/ji88c55RceTAJtqW5bUP_CZ9YG8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2598::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203874 Signature Algorithm: sha256WithRSAEncryption 76:b5:72:cf:1f:50:1c:5e:89:55:84:47:65:f8:21:e1:e0:4c: af:2a:76:5d:e0:b0:1c:6f:fb:30:01:3e:f5:fc:c4:2b:b5:12: 2a:46:ec:46:37:f7:de:7e:e1:ba:02:b2:ff:20:73:8b:05:d6: cf:2b:e4:d2:fc:e9:3c:b0:ff:4b:72:b8:98:5f:20:61:3d:37: 79:2d:e2:6e:9a:73:71:30:7d:34:f5:12:a5:dd:6d:62:3c:87: 83:9a:2a:a9:db:28:5d:1e:34:f6:d2:1f:e3:6a:0d:24:47:48: a2:16:58:fb:43:1d:d3:9c:bc:cb:12:db:ff:6b:6f:98:2e:fb: 4e:22:29:f3:a3:45:ee:3f:1b:61:f3:8f:94:87:d7:73:d9:34: 66:d8:2c:cf:13:cd:14:a5:01:ff:a5:81:ba:36:61:0d:c1:b3: 91:42:89:48:71:c5:e4:9b:a1:94:ca:74:2c:aa:41:7a:94:93: 96:8d:21:2c:55:1a:cd:f6:31:77:96:b2:61:2f:85:1e:84:b4: 4f:22:2b:f8:f5:ec:bc:d6:3f:61:d1:ee:c5:29:bd:cc:45:78: 55:d6:7a:f0:90:a5:0b:5a:c8:8d:a1:0e:71:ab:84:f2:41:e2: 04:d8:8b:9f:f6:c9:b7:f4:e9:1c:82:30:e3:0c:39:d1:81:d7: df:35:81:21 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgISAZp0eN3aPRtdLMprCGd3l/IfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTExMTk1MTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTJmM2M3MzllNTE3MWU0YzAyNmRhOTZlNWI1MGZmYzI2N2Q2MDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbpiJmRvcTxXhEU9hUzvRU/C+v6q d6s42EeOR/OtwHHUHqhuECbLxCY8vS+MdcHJlswmbQTB0Pf/A/nKYautCkHrMyeO fIAk6024HWR/eRGYh139tQOLIvtpfQHHf71TFoTYEWqxP1288/juWg04D7kFOV8c ieqGldrlBiJrk6I4A9wUeI16R0i6xBIZSzTYNc0YyJ1RddouRvsk/MPnbzpyikd7 q5Dvs3boKJrMNtslACIy0ZwPF8oAas0Gq2zXAySnMSo/d6NVQ1vkBGbbewzvzs1r hIPz6YiSxnQtF6NmmFp2io0wA9YHR2EUvukkpySx0ikXeR65U+M1aiy74QIDAQAB o4ICozCCAp8wHQYDVR0OBBYEFI4vPHOeUXHkwCbaluW1D/wmfWBvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMyL2ZlNTYw MC1kMGRjLTRiZjktYmI5OS0xYWVjMTQ1OGJkYjcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvZmU1NjAw LWQwZGMtNGJmOS1iYjk5LTFhZWMxNDU4YmRiNy8xL2ppODhjNTVSY2VUQUp0cVc1 YlVQX0NaOVlHOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCWYMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwMcYjANBgkqhkiG9w0BAQsFAAOCAQEAdrVyzx9QHF6JVYRHZfgh4eBMryp2 XeCwHG/7MAE+9fzEK7USKkbsRjf33n7hugKy/yBziwXWzyvk0vzpPLD/S3K4mF8g YT03eS3ibppzcTB9NPUSpd1tYjyHg5oqqdsoXR409tIf42oNJEdIohZY+0Md05y8 yxLb/2tvmC77TiIp86NF7j8bYfOPlIfXc9k0ZtgszxPNFKUB/6WBujZhDcGzkUKJ SHHF5JuhlMp0LKpBepSTlo0hLFUazfYxd5ayYS+FHoS0TyIr+PXsvNY/YdHuxSm9 zEV4VdZ68JClC1rIjaEOcauE8kHiBNiLn/bJt/TpHIIw4ww50YHX3zWBIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:19 2025 by rpki-client