This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer (raw, json) Hash identifier: wZYxeKLEXhlDC7gNUQDLo29LflWiKn0S0LdkCv7XBxc= Subject key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ACEE8DCADAAD1D4DCAFEE6B8AC883395D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Sat 29 Nov 2025 09:19:18 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 212.108.125.0/24 IP: 2a0d:eb40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ce:e8:dc:ad:aa:d1:d4:dc:af:ee:6b:8a:c8:83:39:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 29 09:19:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a36619427c283fa3b2bb7b45cc35a51286398961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:5f:00:51:5e:18:8c:82:aa:2c:2e:2a:bd: 4b:85:46:60:c6:75:fb:56:cd:b8:08:2e:97:55:1a: 06:97:dd:76:92:31:54:53:4a:e8:2c:3a:8e:59:4f: 11:29:b4:81:f6:30:cd:64:47:f6:2d:66:e0:2b:bf: 44:af:fc:44:02:31:17:99:27:f2:1f:34:24:66:8a: de:b5:81:cb:c3:04:00:de:50:84:6e:e7:af:24:5b: c2:4f:6a:eb:5a:78:54:91:76:15:88:b6:57:15:34: 07:c2:1e:ab:bd:59:ec:f1:d4:fb:0f:ac:30:38:d8: c1:d9:d2:37:8f:d1:02:87:a8:21:ad:83:e9:70:03: 77:a9:b3:fd:20:57:4e:77:cd:85:46:ef:13:7e:01: ea:fd:15:b7:ee:6e:cd:0c:a2:9a:7e:1f:89:84:f1: 19:bb:f9:76:0e:78:78:5f:1e:0f:8c:14:99:05:12: 63:aa:d8:9e:6b:24:e5:c9:0c:fc:7d:08:e2:e0:ed: f0:9e:1a:5f:df:e6:d0:eb:c6:c9:d3:72:9f:9b:d0: ba:a2:ab:7a:6c:52:d1:c4:ff:52:3a:98:72:20:80: db:84:85:34:f0:e9:4f:50:ec:42:0d:22:bc:23:47: c6:6a:ff:83:fc:6c:1e:8f:27:e4:33:ee:84:61:3e: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.108.125.0/24 IPv6: 2a0d:eb40::/29 Signature Algorithm: sha256WithRSAEncryption 0d:73:e2:b1:4a:8e:03:62:8c:a6:5b:84:ad:23:0f:5d:4d:b7: 0f:0b:19:d0:a1:ce:d4:35:2a:88:d2:16:3a:8b:66:e9:ce:b7: be:80:42:90:b0:46:e5:68:c3:fe:5a:0f:1d:48:f9:5e:5c:86: 5a:92:32:f1:83:bf:4f:9a:76:62:30:52:0b:c8:59:6d:0f:a0: 1f:5e:31:29:d5:96:16:da:3e:fe:5b:e6:32:a1:70:63:f6:92: 38:88:08:bc:08:61:3f:30:68:ab:20:ea:90:d0:9c:67:0c:a9: 36:02:0f:5d:27:99:f7:6a:1a:1d:48:7f:9f:4d:1f:a8:ca:f9: 5e:ab:08:8e:d6:49:8f:7d:d9:3f:f0:65:48:10:8d:07:6c:c3: 82:9b:2a:43:e6:ae:e2:9a:97:f0:07:48:3f:29:f9:33:bf:0d: 64:6a:4b:2e:9b:85:d6:51:24:03:a6:9f:db:65:87:42:d8:21: 22:56:5c:1c:dc:2c:3b:ba:d1:16:3c:73:48:73:e1:43:70:0a: 75:1b:71:58:4a:ed:8c:e1:b2:5b:4e:43:89:61:b7:97:6b:fb: db:aa:55:3f:c9:4e:6c:be:54:45:36:5b:ca:4c:af:70:49:82: 3b:43:94:fb:d5:f1:0c:71:10:b3:66:fd:ba:bb:09:e6:fc:49: 7a:9c:95:04 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZrO6NytqtHU3K/ua4rIgzldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI5MDkxOTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzY2MTk0MjdjMjgzZmEzYjJiYjdiNDVjYzM1YTUxMjg2Mzk4OTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzahfAFFeGIyCqiwuKr1LhUZgxnX7 Vs24CC6XVRoGl912kjFUU0roLDqOWU8RKbSB9jDNZEf2LWbgK79Er/xEAjEXmSfy HzQkZoretYHLwwQA3lCEbuevJFvCT2rrWnhUkXYViLZXFTQHwh6rvVns8dT7D6ww ONjB2dI3j9ECh6ghrYPpcAN3qbP9IFdOd82FRu8TfgHq/RW37m7NDKKafh+JhPEZ u/l2Dnh4Xx4PjBSZBRJjqtieayTlyQz8fQji4O3wnhpf3+bQ68bJ03Kfm9C6oqt6 bFLRxP9SOphyIIDbhIU08OlPUOxCDSK8I0fGav+D/GwejyfkM+6EYT6bYwIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFKNmGUJ8KD+jsrt7Rcw1pRKGOYlhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVlLzBmYTI4 MC0wMmRkLTQ1MTctODlhNy0zYjgxNzhkYmI5NGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUvMGZhMjgw LTAyZGQtNDUxNy04OWE3LTNiODE3OGRiYjk0Yy8xL28yWVpRbndvUDZPeXUzdEZ6 RFdsRW9ZNWlXRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQA1Gx9MA0EAgACMAcDBQMqDetAMA0GCSqGSIb3 DQEBCwUAA4IBAQANc+KxSo4DYoymW4StIw9dTbcPCxnQoc7UNSqI0hY6i2bpzre+ gEKQsEblaMP+Wg8dSPleXIZakjLxg79PmnZiMFILyFltD6AfXjEp1ZYW2j7+W+Yy oXBj9pI4iAi8CGE/MGirIOqQ0JxnDKk2Ag9dJ5n3ahodSH+fTR+oyvleqwiO1kmP fdk/8GVIEI0HbMOCmypD5q7impfwB0g/Kfkzvw1kaksum4XWUSQDpp/bZYdC2CEi Vlwc3Cw7utEWPHNIc+FDcAp1G3FYSu2M4bJbTkOJYbeXa/vbqlU/yU5svlRFNlvK TK9wSYI7Q5T71fEMcRCzZv26uwnm/El6nJUE -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:30 2025 by rpki-client