This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oXYKUBSDGdYXKjgg2IipJMCdel8.cer File: oXYKUBSDGdYXKjgg2IipJMCdel8.cer (raw, json) Hash identifier: 70no3l2WRPQ1FwBeboUj1W2/WE3fwR2gI/Rali0KYQE= Subject key identifier: A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AC4C2A0C919E2A122A9F2776FCE504011 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 27 Nov 2025 10:01:20 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 25167 IP: 193.109.113.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c4:c2:a0:c9:19:e2:a1:22:a9:f2:77:6f:ce:50:40:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 27 10:01:20 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a1760a50148319d6172a3820d888a924c09d7a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:42:f0:8d:69:93:f2:84:16:de:6d:07:2e: 87:96:94:1b:43:95:ef:db:af:d7:ab:36:f7:44:1f: 91:43:af:97:01:2a:cd:58:07:bf:91:5a:d3:b3:67: ea:ad:97:b7:6b:d2:7d:4c:64:38:5f:58:e2:67:4b: 08:c2:84:7b:9b:3d:f7:ce:75:65:31:62:3f:8e:a1: f3:5b:26:98:68:54:ee:2f:59:6f:11:ea:fd:d0:ba: a6:0d:37:12:23:d9:0c:a0:4c:84:f3:32:73:d2:c5: d7:c6:6b:55:50:28:f4:85:17:8a:91:bd:08:8b:73: af:7c:06:8f:e9:99:b5:bd:25:f3:5c:be:f5:5a:d7: 17:45:14:79:b2:c8:22:8d:e2:fb:2e:a4:6e:8e:64: e2:5b:11:2e:45:d7:42:e9:1a:19:b6:9a:bb:66:e3: 63:49:29:eb:68:55:64:81:bd:d3:a0:3b:13:0b:fa: 13:9c:61:01:02:35:86:1b:2a:1f:5e:f5:ef:a6:7c: 4c:30:fd:92:07:ff:5a:c9:ca:22:90:ad:d0:4d:18: 7e:17:4b:08:38:8f:a2:85:02:7b:2e:fe:32:f0:b9: 77:29:ad:a6:2d:bb:cb:ee:4a:bf:32:a1:4c:84:fa: 7b:40:63:3f:9a:c1:26:a3:e2:b1:21:3a:35:2c:50: 8e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:76:0A:50:14:83:19:D6:17:2A:38:20:D8:88:A9:24:C0:9D:7A:5F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0fbe17-b58c-4ea2-8b32-91f719b5b046/1/oXYKUBSDGdYXKjgg2IipJMCdel8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.113.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25167 Signature Algorithm: sha256WithRSAEncryption 39:7e:c2:a3:73:be:a4:fa:1b:67:af:ce:e2:4f:c0:be:83:d5: 21:36:79:55:54:93:42:fd:94:03:21:16:9c:3c:a8:be:9a:76: f8:8f:71:1b:86:25:3f:b6:6d:0a:52:1c:ba:d2:e3:44:81:52: ed:a3:0e:07:a2:1f:4c:95:61:5c:b6:d8:0c:2a:42:12:46:fb: 2b:23:79:14:77:b5:d5:c1:1c:31:5e:3d:8a:ff:ec:25:78:da: 6d:bb:59:7f:e1:c3:e8:5c:57:ce:98:24:ec:11:61:72:d8:bb: 20:51:a7:16:ca:28:5b:2e:7c:da:55:b7:e0:c4:0a:9d:68:1c: 19:79:f9:9d:f4:98:f3:59:cc:73:4b:bc:10:2b:c7:e1:33:d9: 39:5b:41:fc:12:50:3d:1c:ff:10:ad:5b:40:c6:1f:0b:e1:c3: 0d:1d:8d:ea:5f:1e:50:1e:cd:6e:31:af:14:70:8e:a2:c5:a2: 95:a5:78:8c:85:0e:07:3a:e1:85:5a:e7:35:04:aa:7b:75:4e: a1:a6:75:94:b1:c7:b8:93:b2:25:a2:e0:34:64:94:6f:87:55: 32:98:ac:17:20:1e:e5:2d:be:54:24:05:cd:8f:32:f8:d7:22: a3:12:b8:d5:db:9c:7e:87:6c:d0:7c:e8:17:c6:bc:68:16:64: 59:7d:97:67 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZrEwqDJGeKhIqnyd2/OUEARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI3MTAwMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTc2MGE1MDE0ODMxOWQ2MTcyYTM4MjBkODg4YTkyNGMwOWQ3YTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB9C8I1pk/KEFt5tBy6HlpQbQ5Xv 26/Xqzb3RB+RQ6+XASrNWAe/kVrTs2fqrZe3a9J9TGQ4X1jiZ0sIwoR7mz33znVl MWI/jqHzWyaYaFTuL1lvEer90LqmDTcSI9kMoEyE8zJz0sXXxmtVUCj0hReKkb0I i3OvfAaP6Zm1vSXzXL71WtcXRRR5ssgijeL7LqRujmTiWxEuRddC6RoZtpq7ZuNj SSnraFVkgb3ToDsTC/oTnGEBAjWGGyofXvXvpnxMMP2SB/9aycoikK3QTRh+F0sI OI+ihQJ7Lv4y8Ll3Ka2mLbvL7kq/MqFMhPp7QGM/msEmo+KxITo1LFCOywIDAQAB o4ICnzCCApswHQYDVR0OBBYEFKF2ClAUgxnWFyo4INiIqSTAnXpfMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzLzBmYmUx Ny1iNThjLTRlYTItOGIzMi05MWY3MTliNWIwNDYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvMGZiZTE3 LWI1OGMtNGVhMi04YjMyLTkxZjcxOWI1YjA0Ni8xL29YWUtVQlNER2RZWEtqZ2cy SWlwSk1DZGVsOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwW1xMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AmJPMA0GCSqGSIb3DQEBCwUAA4IBAQA5fsKjc76k+htnr87iT8C+g9UhNnlVVJNC /ZQDIRacPKi+mnb4j3EbhiU/tm0KUhy60uNEgVLtow4Hoh9MlWFcttgMKkISRvsr I3kUd7XVwRwxXj2K/+wleNptu1l/4cPoXFfOmCTsEWFy2LsgUacWyihbLnzaVbfg xAqdaBwZefmd9JjzWcxzS7wQK8fhM9k5W0H8ElA9HP8QrVtAxh8L4cMNHY3qXx5Q Hs1uMa8UcI6ixaKVpXiMhQ4HOuGFWuc1BKp7dU6hpnWUsce4k7IlouA0ZJRvh1Uy mKwXIB7lLb5UJAXNjzL41yKjErjV25x+h2zQfOgXxrxoFmRZfZdn -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:25 2025 by rpki-client