This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sSUy4p8i-iMdxvyOUw77HHYRngo.cer File: sSUy4p8i-iMdxvyOUw77HHYRngo.cer (raw, json) Hash identifier: eZkbbSlr5muuAwv8N+9K4tQv+eQB0DcW+mX10sP5ZDc= Subject key identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE73B81A85BAB38F39F7F2F4D7D85F97E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 02:40:28 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 212001 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:3b:81:a8:5b:ab:38:f3:9f:7f:2f:4d:7d:85:f9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 02:40:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b12532e29f22fa231dc6fc8e530efb1c76119e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:80:5a:17:b0:f0:72:d8:23:e8:e2:dc:1e: 67:ce:2f:93:03:85:9b:ee:96:37:2b:7d:66:8f:4b: 23:3d:3f:e8:4a:af:63:b0:47:04:54:0f:28:2f:af: 9b:c8:6d:05:4c:bd:e2:58:dc:7e:90:57:58:90:67: 60:a5:75:d3:98:fe:fa:d1:c8:43:a2:2e:e0:e6:46: 35:d6:2d:58:2a:75:58:06:7f:8d:f3:f6:18:5f:6c: da:0f:83:cf:ad:ce:98:33:07:57:e1:66:56:b1:71: bf:66:40:85:6e:2e:fd:3f:ae:d8:9f:e4:e6:7f:99: 12:a5:c8:7a:ef:8c:cc:09:81:ab:57:9a:c4:58:4a: 8c:83:4d:f1:34:79:cf:ae:fb:6c:ae:dc:96:e8:ba: eb:00:a3:93:fa:6d:26:70:8a:e2:a2:2c:d6:e6:f8: 67:c6:98:22:44:e0:9e:78:8c:2e:63:ec:d3:47:9d: f9:09:81:93:94:eb:52:38:fe:d9:cb:22:56:c7:50: 2f:3d:f0:48:c1:8b:3a:a4:09:2d:0b:ba:25:f9:1b: 27:1d:3a:a4:10:cb:f9:7e:f2:40:09:6d:2b:dc:a9: e8:32:50:c7:8d:9c:f6:59:fb:25:2f:86:77:fe:6a: 5e:5f:e7:df:7c:aa:dd:9c:16:43:ac:c0:99:4e:e1: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:25:32:E2:9F:22:FA:23:1D:C6:FC:8E:53:0E:FB:1C:76:11:9E:0A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/472dd4-19a6-440f-a87d-933efbd77f5b/1/sSUy4p8i-iMdxvyOUw77HHYRngo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 212001 Signature Algorithm: sha256WithRSAEncryption 9f:f8:92:d0:29:a2:88:c7:3e:c2:6c:8d:29:e6:d2:dc:52:de: a5:cc:ce:ca:a0:4b:72:40:99:ed:47:29:65:fe:e6:4e:ee:da: 28:19:0a:fc:53:28:c2:b8:33:6a:72:9b:45:6b:f9:e8:0c:5a: 84:e5:c2:7d:a0:41:52:6a:97:a4:b9:c4:f7:c8:b2:53:fd:5a: 26:f2:53:c5:17:2f:d0:b6:08:d5:1e:e3:b1:0a:b8:ac:ab:cb: 21:4a:01:61:bb:d1:ba:2f:cf:cc:28:2e:7b:41:7c:06:0d:e9: f1:42:d4:c2:95:54:b4:41:e4:70:f4:1d:ad:ad:48:a8:6e:67: c5:db:fc:41:03:3a:1f:ab:75:d8:0e:38:d0:ed:2e:72:8b:d5: 8b:3c:97:f9:16:b5:35:12:22:f4:dd:99:a7:b2:aa:ba:46:db: f9:2c:25:1f:e9:7a:ff:51:40:0d:1d:b2:96:1c:67:ad:dc:8c: 2e:1e:65:5b:0d:dd:b9:cc:2e:ba:4e:b1:7e:f2:fc:2f:b4:c3: 59:b3:2b:25:0a:6e:a4:d9:52:37:5b:8f:ed:86:37:8f:5a:c6: dc:d9:5d:c6:e5:c0:8b:c6:07:22:93:23:cd:a4:9b:5d:62:46: be:da:cc:c9:bb:d7:35:61:08:0a:55:bd:48:d7:82:3e:6d:e7: 86:bf:0e:9b -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZrnO4GoW6s4859/L019hfl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MDI0MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTI1MzJlMjlmMjJmYTIzMWRjNmZjOGU1MzBlZmIxYzc2MTE5ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4mAWhew8HLYI+ji3B5nzi+TA4Wb 7pY3K31mj0sjPT/oSq9jsEcEVA8oL6+byG0FTL3iWNx+kFdYkGdgpXXTmP760chD oi7g5kY11i1YKnVYBn+N8/YYX2zaD4PPrc6YMwdX4WZWsXG/ZkCFbi79P67Yn+Tm f5kSpch674zMCYGrV5rEWEqMg03xNHnPrvtsrtyW6LrrAKOT+m0mcIrioizW5vhn xpgiROCeeIwuY+zTR535CYGTlOtSOP7ZyyJWx1AvPfBIwYs6pAktC7ol+RsnHTqk EMv5fvJACW0r3KnoMlDHjZz2WfslL4Z3/mpeX+fffKrdnBZDrMCZTuE/mwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFLElMuKfIvojHcb8jlMO+xx2EZ4KMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JhLzQ3MmRk NC0xOWE2LTQ0MGYtYTg3ZC05MzNlZmJkNzdmNWIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvNDcyZGQ0 LTE5YTYtNDQwZi1hODdkLTkzM2VmYmQ3N2Y1Yi8xL3NTVXk0cDhpLWlNZHh2eU9V dzc3SEhZUm5nby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwM8ITANBgkqhkiG9w0BAQsFAAOCAQEAn/iS0CmiiMc+ wmyNKebS3FLepczOyqBLckCZ7UcpZf7mTu7aKBkK/FMowrgzanKbRWv56AxahOXC faBBUmqXpLnE98iyU/1aJvJTxRcv0LYI1R7jsQq4rKvLIUoBYbvRui/PzCgue0F8 Bg3p8ULUwpVUtEHkcPQdra1IqG5nxdv8QQM6H6t12A440O0ucovVizyX+Ra1NRIi 9N2Zp7Kqukbb+SwlH+l6/1FADR2ylhxnrdyMLh5lWw3ducwuuk6xfvL8L7TDWbMr JQpupNlSN1uP7YY3j1rG3NldxuXAi8YHIpMjzaSbXWJGvtrMybvXNWEIClW9SNeC Pm3nhr8Omw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:44:54 2025 by rpki-client