This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer File: uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer (raw, json) Hash identifier: 1W8KtHSVYq/VIke0/KtN3xdtINbE2irl6bHI/GeArg0= Subject key identifier: B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD9BEA6D6640070B043649A9A0DB42CC8 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 11:49:01 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 12468 IP: 212.28.160.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:be:a6:d6:64:00:70:b0:43:64:9a:9a:0d:b4:2c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 11:49:01 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:c1:7f:8b:ca:ca:80:0f:b5:d7:6b:17:a8: 33:82:95:78:47:11:dc:7f:69:eb:d5:b3:72:e1:fc: cb:2d:29:1f:85:81:54:86:62:95:15:b7:2f:74:3f: a4:cb:ff:7c:59:01:f7:2c:00:19:d8:5c:5a:7a:70: bd:17:31:4c:46:ff:d1:97:ed:32:a8:60:14:a6:10: ab:1e:90:73:da:6e:45:95:f3:cc:e4:0f:c7:08:d4: 0c:ae:22:4a:c5:19:e6:46:57:ec:e4:f3:e0:fb:78: 48:14:fd:51:89:2e:fe:45:8f:a9:b6:01:8a:90:ad: c2:90:11:12:3d:c0:39:36:d9:b2:c3:83:8d:39:d9: e0:d9:78:6a:97:b3:fd:78:e7:83:b8:f0:eb:96:bf: 44:ac:f0:b1:da:4d:30:e3:45:c0:5d:a9:d0:72:0a: e5:5f:9c:75:43:c3:23:8e:35:9e:38:e8:88:5d:8b: f7:fd:f8:7d:4f:aa:5f:f7:ac:75:de:b4:49:83:d0: f4:1a:98:20:a3:e6:2f:49:a0:64:a7:78:ed:7b:c7: 56:2d:c6:6a:87:99:60:fa:37:d4:51:8c:9b:0c:8b: 9c:11:09:f4:e7:00:52:30:22:8e:22:26:30:1c:69: c0:60:a0:d1:d0:01:a5:03:53:fd:67:20:28:94:86: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.28.160.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12468 Signature Algorithm: sha256WithRSAEncryption 6b:0d:4b:cc:72:74:62:9f:dc:a0:7b:3c:dc:a0:c3:2e:b9:62: 34:e4:7f:ff:79:eb:76:eb:2a:de:9f:27:d7:5c:65:c2:f3:99: ee:45:cd:62:a0:33:59:d8:5e:34:22:bc:b9:19:d6:fa:a9:48: d5:05:ef:a3:89:cc:82:d6:6b:47:71:f9:1b:2d:8a:f7:3e:60: 0b:35:23:97:38:76:7d:72:ee:29:23:ae:73:30:24:af:0e:77: 60:73:be:b6:55:5e:ad:35:e4:52:7d:05:ac:c0:1c:f7:b7:79: 62:5c:31:ff:1b:34:aa:42:b7:13:24:ec:dd:c6:26:76:f8:4e: 15:80:78:36:ef:ef:41:22:c4:e1:6e:17:7b:21:49:d6:e9:8e: 31:4f:41:82:a9:b0:2e:98:f5:c8:af:0b:cc:10:c8:86:1d:bb: fb:14:86:c7:19:4f:94:45:4b:5c:cb:fe:4e:12:c8:39:e7:b1: 26:95:61:8b:ae:3f:4d:16:e0:78:05:90:96:7b:d7:da:33:ba: 6f:4b:13:ce:d1:1a:24:59:50:a7:dd:b6:b1:af:01:f4:1a:50: 54:0e:72:76:17:81:79:1a:36:07:da:c2:f5:0c:61:b5:89:6d: 68:c6:a1:aa:5b:ef:d5:15:78:d2:70:b6:90:41:b7:01:4f:93: 45:bf:7f:e8 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZrZvqbWZABwsENkmpoNtCzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMTE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODhkMDM0MmNmM2U3MTRmOWMxNTVhNGQwZGY3NWZmOWZiM2ZmNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YrBf4vKyoAPtddrF6gzgpV4RxHc f2nr1bNy4fzLLSkfhYFUhmKVFbcvdD+ky/98WQH3LAAZ2FxaenC9FzFMRv/Rl+0y qGAUphCrHpBz2m5FlfPM5A/HCNQMriJKxRnmRlfs5PPg+3hIFP1RiS7+RY+ptgGK kK3CkBESPcA5Ntmyw4ONOdng2Xhql7P9eOeDuPDrlr9ErPCx2k0w40XAXanQcgrl X5x1Q8MjjjWeOOiIXYv3/fh9T6pf96x13rRJg9D0Gpggo+YvSaBkp3jte8dWLcZq h5lg+jfUUYybDIucEQn05wBSMCKOIiYwHGnAYKDR0AGlA1P9ZyAolIbwBQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLiNA0LPPnFPnBVaTQ33X/n7P/c8MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzM3ZDc0 Ni01ZWY5LTRiNzQtYmY2Zi1mZTcxNjI3MWEyYWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvMzdkNzQ2 LTVlZjktNGI3NC1iZjZmLWZlNzE2MjcxYTJhZC8xL3VJMERRczgtY1UtY0ZWcE5E ZmRmLWZzXzl6dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQD1BygMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AjC0MA0GCSqGSIb3DQEBCwUAA4IBAQBrDUvMcnRin9ygezzcoMMuuWI05H//eet2 6yrenyfXXGXC85nuRc1ioDNZ2F40Iry5Gdb6qUjVBe+jicyC1mtHcfkbLYr3PmAL NSOXOHZ9cu4pI65zMCSvDndgc762VV6tNeRSfQWswBz3t3liXDH/GzSqQrcTJOzd xiZ2+E4VgHg27+9BIsThbhd7IUnW6Y4xT0GCqbAumPXIrwvMEMiGHbv7FIbHGU+U RUtcy/5OEsg557EmlWGLrj9NFuB4BZCWe9faM7pvSxPO0RokWVCn3baxrwH0GlBU DnJ2F4F5GjYH2sL1DGG1iW1oxqGqW+/VFXjScLaQQbcBT5NFv3/o -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:12 2025 by rpki-client