This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer File: q2yACAY3-ssW9RnF2X7Cez2FCX0.cer (raw, json) Hash identifier: BU7WhhzVOLIFM28eDErOMxrtbg6Zp2PXAwOySwXgdgM= Subject key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ADF1C6DB5D65338C2CC61167E23913EC3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 02 Dec 2025 12:49:33 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 28925 IP: 195.222.104.0 -- 195.222.106.255 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:1c:6d:b5:d6:53:38:c2:cc:61:16:7e:23:91:3e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 2 12:49:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ab6c80080637facb16f519c5d97ec27b3d85097d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0e:89:cb:8d:b0:8a:b6:28:bf:92:dd:19:33: 91:6a:ae:d7:11:28:25:6d:c3:27:6c:f1:ab:56:bc: 67:10:15:4e:5e:27:f8:09:03:35:2f:27:49:74:fc: 13:1c:bb:99:c7:10:48:cf:ee:cb:44:9d:3e:87:6f: 16:2f:8c:ae:03:e2:86:37:56:46:95:44:b3:fb:b7: 50:f1:27:f4:f8:31:bd:1f:79:f6:46:31:e4:5b:82: 4c:db:85:69:0f:3a:30:c4:6a:a3:45:69:dd:d0:bc: a6:26:32:04:b0:d6:29:da:51:03:c4:64:e0:15:63: 51:75:b3:4d:f7:eb:84:ed:9e:bc:64:79:1b:a4:57: 84:d7:11:93:8e:6d:24:ac:c4:1e:d6:8a:3f:4d:0c: ff:fb:c9:07:36:fd:54:aa:88:cd:21:85:d5:a5:79: a8:b1:65:6e:da:2a:c4:3d:63:76:b2:25:38:6b:7f: 16:29:1e:53:92:0f:b5:16:7c:be:bb:ca:0b:cc:d3: 7b:e6:14:97:d5:39:0e:38:d8:bb:a1:50:c9:58:a5: 28:03:f0:79:3b:a8:d9:90:f1:67:d6:32:a6:e0:8e: c3:54:93:22:3a:ee:8e:ca:10:a1:07:d1:e0:be:60: f7:a9:b4:16:6b:8a:f3:fb:6c:17:40:ad:70:b3:56: db:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.222.104.0-195.222.106.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28925 Signature Algorithm: sha256WithRSAEncryption 4f:57:86:81:6e:a5:96:e3:55:a0:4e:49:a8:92:68:a2:29:e3: d2:db:04:74:38:0f:a7:9a:37:b7:5e:79:ca:41:02:63:04:21: b2:fe:8d:a1:e5:6f:49:3c:0f:8a:fd:de:3b:92:1c:cb:a0:1e: b1:5b:da:6a:82:96:4d:d0:bc:f4:36:ad:bc:53:34:da:31:c1: ba:d6:d1:49:9b:77:1c:43:c5:42:e8:1c:f9:22:3c:84:0a:e7: 55:ef:f0:fa:62:02:3b:5b:37:e1:1c:09:14:72:05:5a:d1:33: df:e5:d5:64:8a:e6:a3:97:98:0b:4d:38:6d:2b:ef:8f:07:1d: 92:5b:5d:e9:7d:7d:f6:0f:41:ff:c4:74:45:83:da:af:14:f3: ef:ec:da:6c:d2:60:44:b8:b6:a3:cc:1e:7e:65:ec:84:bc:3e: 81:fc:c3:6d:56:07:77:2e:88:46:12:4c:07:a4:62:21:74:db: 35:0c:b9:e6:22:55:80:e2:6d:23:09:67:0d:4d:fe:56:db:2d: bc:da:52:56:00:c1:01:44:b6:36:05:9f:db:0b:14:ba:41:74: cd:aa:c4:3f:71:80:13:1e:2a:c6:98:04:e3:ad:3e:7c:5d:ba: d6:bd:39:bb:90:fb:10:2f:d2:1a:73:ba:fc:86:59:47:60:29: 90:a8:9c:be -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZrfHG211lM4wsxhFn4jkT7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAyMTI0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjZjODAwODA2MzdmYWNiMTZmNTE5YzVkOTdlYzI3YjNkODUwOTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ6Jy42wirYov5LdGTORaq7XESgl bcMnbPGrVrxnEBVOXif4CQM1LydJdPwTHLuZxxBIz+7LRJ0+h28WL4yuA+KGN1ZG lUSz+7dQ8Sf0+DG9H3n2RjHkW4JM24VpDzowxGqjRWnd0LymJjIEsNYp2lEDxGTg FWNRdbNN9+uE7Z68ZHkbpFeE1xGTjm0krMQe1oo/TQz/+8kHNv1UqojNIYXVpXmo sWVu2irEPWN2siU4a38WKR5Tkg+1Fny+u8oLzNN75hSX1TkOONi7oVDJWKUoA/B5 O6jZkPFn1jKm4I7DVJMiOu6OyhChB9HgvmD3qbQWa4rz+2wXQK1ws1bbIQIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFKtsgAgGN/rLFvUZxdl+wns9hQl9MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkLzZhMmM1 Yy05ZTFiLTQ1NjEtYTRlOS1lOWUxZDkxYTk4MTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvNmEyYzVj LTllMWItNDU2MS1hNGU5LWU5ZTFkOTFhOTgxNi8xL3EyeUFDQVkzLXNzVzlSbkYy WDdDZXoyRkNYMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF BwEHAQH/BBgwFjAUBAIAATAOMAwDBAPD3mgDBADD3mowGQYIKwYBBQUHAQgBAf8E CjAIoAYwBAICcP0wDQYJKoZIhvcNAQELBQADggEBAE9XhoFupZbjVaBOSaiSaKIp 49LbBHQ4D6eaN7deecpBAmMEIbL+jaHlb0k8D4r93juSHMugHrFb2mqClk3QvPQ2 rbxTNNoxwbrW0UmbdxxDxULoHPkiPIQK51Xv8PpiAjtbN+EcCRRyBVrRM9/l1WSK 5qOXmAtNOG0r748HHZJbXel9ffYPQf/EdEWD2q8U8+/s2mzSYES4tqPMHn5l7IS8 PoH8w21WB3cuiEYSTAekYiF02zUMueYiVYDibSMJZw1N/lbbLbzaUlYAwQFEtjYF n9sLFLpBdM2qxD9xgBMeKsaYBOOtPnxduta9ObuQ+xAv0hpzuvyGWUdgKZConL4= -----END CERTIFICATE-----Generated at Sat Dec 6 05:58:04 2025 by rpki-client