This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x1KtRhPu9BzbgSTyfc-b-HJNHAw.cer File: x1KtRhPu9BzbgSTyfc-b-HJNHAw.cer (raw, json) Hash identifier: xYJvmbjbA1lRXhHRwEznS6p54/prFkwt+583hojodlI= Subject key identifier: C7:52:AD:46:13:EE:F4:1C:DB:81:24:F2:7D:CF:9B:F8:72:4D:1C:0C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA0F7BF25BA6159C97E07618D38F8643C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 11:13:02 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 44343 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:f7:bf:25:ba:61:59:c9:7e:07:61:8d:38:f8:64:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 11:13:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c752ad4613eef41cdb8124f27dcf9bf8724d1c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:3c:51:b4:41:84:d4:00:64:f0:37:0f:97: 81:e1:4d:dd:ce:86:18:34:18:fe:ab:e4:e6:2a:b4: 03:63:be:b0:1a:be:6a:5b:0c:4b:53:d0:82:29:a9: 2d:35:50:c0:bd:29:80:23:c9:7b:cf:7f:c8:0c:41: 1a:87:67:77:a4:62:be:cc:4c:4a:20:99:dd:fc:01: 94:ea:3d:33:5c:16:ab:b3:07:45:b9:71:ee:76:47: 68:ac:cb:d4:02:d3:00:c9:9a:db:f7:6e:9c:9c:41: c7:1b:06:26:44:a5:b9:b6:d9:89:fe:7f:3e:be:70: f4:73:76:5e:1f:06:ca:4e:04:9a:96:08:5c:4f:c1: ba:b5:ae:29:c8:73:f1:51:eb:86:9b:57:d9:b1:d6: 54:ed:e8:7d:62:9f:a5:16:91:da:1e:f3:cd:e6:41: 1e:7d:23:6e:83:d0:cb:20:d7:39:52:aa:33:93:65: 4e:f3:90:2c:16:50:2c:ce:a0:3c:94:a6:0b:6a:48: e6:ff:cb:21:8e:cb:cb:2e:bc:52:db:c4:25:26:1d: a5:70:ef:d7:59:7d:2e:74:5f:a4:5a:26:31:e3:7b: 69:5d:00:28:aa:c8:4f:37:6c:23:06:4d:e4:e4:1c: 79:85:cf:dd:e6:8f:90:34:05:08:96:94:ba:7a:a1: 93:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:52:AD:46:13:EE:F4:1C:DB:81:24:F2:7D:CF:9B:F8:72:4D:1C:0C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 44343 Signature Algorithm: sha256WithRSAEncryption 73:88:8d:f0:ef:74:38:b5:1f:c6:95:e2:5d:3c:3b:4a:83:e8: 70:58:62:51:38:05:c0:04:11:4e:2a:5a:44:05:df:7a:b7:ce: 72:ea:72:8e:cc:0a:98:79:2b:c6:72:d3:27:93:74:e0:e9:26: c1:16:56:2e:70:63:a2:38:58:e5:59:5f:67:1f:ad:23:51:db: 42:1e:04:2f:68:48:59:56:41:9d:15:39:c6:3c:fa:ee:9f:a5: f1:15:7f:25:c6:7f:34:3b:1f:ef:19:2c:56:23:0e:7d:58:64: b0:95:34:39:ca:d2:23:ef:6c:e4:9c:a1:85:86:8b:ef:a9:b3: e0:3c:03:a1:3b:1c:1c:af:1f:92:4f:6b:d5:00:53:fb:ec:f8: 3c:2d:f4:da:c4:e1:5d:88:a4:61:18:de:41:d1:65:33:b1:8b: d2:f9:66:aa:7a:87:d5:72:cd:fa:4f:2d:12:77:0d:6c:68:08: 97:a7:87:12:03:4f:b4:a1:24:5e:92:74:38:0b:ec:29:12:f5: 5c:2d:0d:e7:95:ae:f0:2b:97:a4:ea:e8:8e:cb:db:b4:ee:a2: 78:02:5a:fb:7a:bb:f1:55:70:46:af:20:79:c4:a8:97:c0:d2: f8:f9:60:b4:18:f1:1b:62:df:65:c4:2a:b5:28:11:74:41:00: 95:dd:a8:55 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZqg978lumFZyX4HYY04+GQ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTExMzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzUyYWQ0NjEzZWVmNDFjZGI4MTI0ZjI3ZGNmOWJmODcyNGQxYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzs8UbRBhNQAZPA3D5eB4U3dzoYY NBj+q+TmKrQDY76wGr5qWwxLU9CCKaktNVDAvSmAI8l7z3/IDEEah2d3pGK+zExK IJnd/AGU6j0zXBarswdFuXHudkdorMvUAtMAyZrb926cnEHHGwYmRKW5ttmJ/n8+ vnD0c3ZeHwbKTgSalghcT8G6ta4pyHPxUeuGm1fZsdZU7eh9Yp+lFpHaHvPN5kEe fSNug9DLINc5Uqozk2VO85AsFlAszqA8lKYLakjm/8shjsvLLrxS28QlJh2lcO/X WX0udF+kWiYx43tpXQAoqshPN2wjBk3k5Bx5hc/d5o+QNAUIlpS6eqGTpQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMdSrUYT7vQc24Ek8n3Pm/hyTRwMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc1L2ZkNjE3 Yi1iMWNlLTQ5OTMtYTczYS0xNTM2OWNjZTVkZjUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzUvZmQ2MTdi LWIxY2UtNDk5My1hNzNhLTE1MzY5Y2NlNWRmNS8xL3gxS3RSaFB1OUJ6YmdTVHlm Yy1iLUhKTkhBdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCtNzANBgkqhkiG9w0BAQsFAAOCAQEAc4iN8O90OLUf xpXiXTw7SoPocFhiUTgFwAQRTipaRAXferfOcupyjswKmHkrxnLTJ5N04OkmwRZW LnBjojhY5VlfZx+tI1HbQh4EL2hIWVZBnRU5xjz67p+l8RV/JcZ/NDsf7xksViMO fVhksJU0OcrSI+9s5JyhhYaL76mz4DwDoTscHK8fkk9r1QBT++z4PC302sThXYik YRjeQdFlM7GL0vlmqnqH1XLN+k8tEncNbGgIl6eHEgNPtKEkXpJ0OAvsKRL1XC0N 55Wu8CuXpOrojsvbtO6ieAJa+3q78VVwRq8gecSol8DS+PlgtBjxG2LfZcQqtSgR dEEAld2oVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:15 2025 by rpki-client