This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVXDPIsCBMRAwPl46lhSCAHixcc.cer File: nVXDPIsCBMRAwPl46lhSCAHixcc.cer (raw, json) Hash identifier: RXvy8KvYGbrja7drfG9Xjv9L6X8Mf6VwT0+fJ05bEQo= Subject key identifier: 9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE7E72C522C47D8212AA3564CBE101C6B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 05:47:58 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203202 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:e7:2c:52:2c:47:d8:21:2a:a3:56:4c:be:10:1c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 05:47:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9d55c33c8b0204c440c0f978ea58520801e2c5c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5d:1e:ee:1d:8a:df:33:45:a2:31:40:48:a8: 5b:d0:60:55:8d:fd:2d:e1:3c:f2:9b:54:d0:e8:cf: a5:07:07:d5:44:89:4b:66:73:a5:90:94:9d:e4:0b: 52:75:4e:26:2d:0b:0c:58:94:f2:0f:ed:31:fe:67: 5d:c7:bb:a0:73:45:ff:40:7e:25:d4:bf:80:aa:ce: eb:16:68:5a:52:99:16:65:4b:b0:45:44:6a:3c:7c: be:42:5a:4b:af:c5:eb:b1:ba:d1:b8:37:61:b4:fa: b9:60:a1:3f:d0:b4:7e:b1:8f:1b:f5:4f:75:01:59: c7:e1:46:71:c3:3e:3d:bb:88:b0:61:a3:24:50:52: 50:12:bb:d2:8d:26:7f:b0:92:94:bc:fd:eb:ee:b3: bd:54:de:f5:74:52:09:9d:15:5d:65:9b:a3:b4:da: 91:88:84:7e:24:13:f0:c0:ee:c6:35:57:0a:fe:c8: 42:7a:8e:f4:02:62:22:5d:63:17:35:61:67:04:1f: fe:40:29:66:9e:30:ae:69:dc:70:42:2b:80:02:76: f0:be:08:65:cd:7a:7c:bd:45:f3:e8:a5:5c:43:f5: 0a:80:39:c9:e2:69:8a:f9:db:31:ea:3e:a5:a4:e5: 3d:48:1e:b8:80:c1:9e:72:19:03:e6:97:76:6e:f7: 62:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:55:C3:3C:8B:02:04:C4:40:C0:F9:78:EA:58:52:08:01:E2:C5:C7 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/26f3b1-8988-4f39-b231-c3ab87738fe7/1/nVXDPIsCBMRAwPl46lhSCAHixcc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203202 Signature Algorithm: sha256WithRSAEncryption ae:b5:20:ef:df:29:2f:ec:32:04:1d:63:19:84:0f:8e:a1:3a: 17:14:70:6b:5c:74:79:20:db:8e:74:ec:17:fa:9a:f1:af:2b: 69:9a:f5:be:ae:38:a0:8b:18:4f:af:dc:2a:64:e3:81:cd:06: 6b:33:77:e0:db:aa:b1:ed:46:15:31:9c:1b:54:01:b5:c4:c5: ac:8d:65:43:0e:7b:74:72:25:12:59:69:d7:1a:1b:85:5f:75: d7:e5:28:07:4a:47:c2:db:8a:93:0b:c0:b0:d7:e4:72:6b:09: 46:89:f9:bc:d2:40:b3:30:a9:2b:b9:06:24:22:85:c4:0f:c4: d6:59:e9:1c:f7:dd:52:9d:f6:85:96:4b:f7:f3:3a:59:53:69: 18:a9:2d:37:c1:ca:51:66:69:84:19:f9:16:a3:99:a1:f9:91: 01:b9:77:60:bb:bf:06:7c:64:72:02:22:9c:97:6f:96:ce:50: 26:00:c6:54:4a:6c:98:d5:39:21:32:5d:e2:8e:8b:7e:39:83: e7:dd:fe:d6:b4:81:57:8d:d5:99:94:7d:44:36:57:f1:43:21: b8:a2:ae:e6:40:ab:34:d7:f7:9c:0e:fc:2b:48:22:3e:41:70: 3d:9f:f6:df:a7:14:3b:2b:fa:31:ac:f9:61:95:fa:5b:00:e8: 8f:71:39:07 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZrn5yxSLEfYISqjVky+EBxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MDU0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDU1YzMzYzhiMDIwNGM0NDBjMGY5NzhlYTU4NTIwODAxZTJjNWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV0e7h2K3zNFojFASKhb0GBVjf0t 4Tzym1TQ6M+lBwfVRIlLZnOlkJSd5AtSdU4mLQsMWJTyD+0x/mddx7ugc0X/QH4l 1L+Aqs7rFmhaUpkWZUuwRURqPHy+QlpLr8XrsbrRuDdhtPq5YKE/0LR+sY8b9U91 AVnH4UZxwz49u4iwYaMkUFJQErvSjSZ/sJKUvP3r7rO9VN71dFIJnRVdZZujtNqR iIR+JBPwwO7GNVcK/shCeo70AmIiXWMXNWFnBB/+QClmnjCuadxwQiuAAnbwvghl zXp8vUXz6KVcQ/UKgDnJ4mmK+dsx6j6lpOU9SB64gMGechkD5pd2bvdiuwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFJ1VwzyLAgTEQMD5eOpYUggB4sXHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzI2ZjNi MS04OTg4LTRmMzktYjIzMS1jM2FiODc3MzhmZTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMjZmM2Ix LTg5ODgtNGYzOS1iMjMxLWMzYWI4NzczOGZlNy8xL25WWERQSXNDQk1SQXdQbDQ2 bGhTQ0FIaXhjYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMZwjANBgkqhkiG9w0BAQsFAAOCAQEArrUg798pL+wy BB1jGYQPjqE6FxRwa1x0eSDbjnTsF/qa8a8raZr1vq44oIsYT6/cKmTjgc0GazN3 4Nuqse1GFTGcG1QBtcTFrI1lQw57dHIlEllp1xobhV911+UoB0pHwtuKkwvAsNfk cmsJRon5vNJAszCpK7kGJCKFxA/E1lnpHPfdUp32hZZL9/M6WVNpGKktN8HKUWZp hBn5FqOZofmRAbl3YLu/BnxkcgIinJdvls5QJgDGVEpsmNU5ITJd4o6LfjmD593+ 1rSBV43VmZR9RDZX8UMhuKKu5kCrNNf3nA78K0giPkFwPZ/236cUOyv6Maz5YZX6 WwDoj3E5Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:07 2025 by rpki-client