This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x5bOarhccn-dyUh3amz9NHFBMQE.cer File: x5bOarhccn-dyUh3amz9NHFBMQE.cer (raw, json) Hash identifier: XOPBZ5jHdTKyrPJ5HcfBgVGWZYjYvFMzhtkZMvIFhiM= Subject key identifier: C7:96:CE:6A:B8:5C:72:7F:9D:C9:48:77:6A:6C:FD:34:71:41:31:01 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7A162F3299E875CC952183CC1A01DF7D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/x5bOarhccn-dyUh3amz9NHFBMQE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 22:01:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203992 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7a:16:2f:32:99:e8:75:cc:95:21:83:cc:1a:01:df:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 22:01:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c796ce6ab85c727f9dc948776a6cfd3471413101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:2f:e6:04:14:2e:50:0a:8b:5b:7c:0a:59: 56:b7:67:16:76:88:4e:31:62:74:08:73:a9:5f:f8: b2:da:59:5d:cc:bf:76:25:71:24:2d:92:b8:a3:dc: f3:9e:1e:09:68:e1:70:5b:87:87:ff:9b:0e:f5:e3: e0:49:5d:65:82:00:f8:27:a6:33:40:d3:9b:48:4c: 47:4c:43:e1:38:af:98:76:b2:da:b4:56:4d:a9:20: 02:56:c1:de:ab:49:0e:95:b7:ad:49:0d:19:34:fb: 2b:df:cc:ac:ed:1b:d7:93:63:48:10:06:7e:4d:94: 33:9b:4c:79:0a:58:5d:05:bf:39:28:01:1b:46:f7: e4:6b:4f:94:46:87:ad:f9:ec:f8:bc:57:09:52:cc: da:5c:26:e5:97:18:ef:3a:af:bc:a0:a9:1a:dd:94: 49:d2:27:62:9f:a6:3c:d6:27:3a:79:28:42:cf:63: 50:1a:06:aa:8b:0c:ac:97:df:33:5a:e6:b0:f2:ab: fc:f0:65:58:cb:ac:30:4e:84:62:ae:17:85:7d:e1: ca:5c:84:d8:e3:8b:56:5a:14:70:2d:ff:26:2b:9e: 4c:51:d4:13:a2:37:fc:5f:1d:03:75:7d:6f:62:2e: b4:95:98:35:78:7c:f1:eb:2b:3d:c5:b9:d8:82:e1: 92:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:96:CE:6A:B8:5C:72:7F:9D:C9:48:77:6A:6C:FD:34:71:41:31:01 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/x5bOarhccn-dyUh3amz9NHFBMQE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 203992 Signature Algorithm: sha256WithRSAEncryption 7d:d1:9b:71:04:2c:1d:16:f7:c6:fa:c4:1a:f4:f7:a5:a7:71: 43:a8:69:3a:0d:b6:40:c8:85:4c:c9:13:d2:f7:1c:d5:7e:6b: 46:e1:5c:0b:e7:5f:5f:0e:93:f8:b5:23:f5:0a:f1:bf:89:58: e1:bd:39:28:a8:0c:14:78:b8:b0:78:26:e6:c5:6e:14:e0:ae: 62:2e:b9:09:10:54:f6:e7:b6:fe:bb:b8:7e:ab:32:e0:70:91: 28:6e:1a:28:9a:a7:cb:f0:92:4f:cf:e9:44:9c:a3:be:cc:c7: 6b:52:e2:0b:b9:b9:f1:a7:46:3a:b6:fa:70:e0:55:ed:29:e6: 30:77:c4:8f:b7:ad:b3:c7:cb:7e:e5:2a:d1:5a:28:33:2e:be: 2b:ff:85:19:2f:fb:9e:5c:32:ca:77:fe:e1:77:71:68:95:38: 34:85:f7:4f:86:9b:94:63:66:49:11:33:65:c8:a3:16:b7:9f: 08:a1:7d:6e:37:37:cb:ce:52:56:76:a5:4c:f3:39:1d:63:e9: 4b:6c:ba:3d:b1:26:c8:5b:26:d0:67:3d:a2:b4:bc:f5:eb:1e: 9d:8d:ad:20:ab:52:cf:b0:6c:f1:af:80:df:71:c8:1f:0c:b1: 55:ac:ce:ca:75:f0:d8:79:fa:53:0f:b7:9e:17:d7:e4:85:10: ca:a1:be:c8 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZp6Fi8ymeh1zJUhg8waAd99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMjIwMTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk2Y2U2YWI4NWM3MjdmOWRjOTQ4Nzc2YTZjZmQzNDcxNDEzMTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3scv5gQULlAKi1t8CllWt2cWdohO MWJ0CHOpX/iy2lldzL92JXEkLZK4o9zznh4JaOFwW4eH/5sO9ePgSV1lggD4J6Yz QNObSExHTEPhOK+YdrLatFZNqSACVsHeq0kOlbetSQ0ZNPsr38ys7RvXk2NIEAZ+ TZQzm0x5ClhdBb85KAEbRvfka0+URoet+ez4vFcJUszaXCbllxjvOq+8oKka3ZRJ 0idin6Y81ic6eShCz2NQGgaqiwysl98zWuaw8qv88GVYy6wwToRirheFfeHKXITY 44tWWhRwLf8mK55MUdQTojf8Xx0DdX1vYi60lZg1eHzx6ys9xbnYguGSjQIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFMeWzmq4XHJ/nclId2ps/TRxQTEBMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwLzNhOTIx MC1lYWM5LTQ4OTMtOGZmYy05YTZhZjYxNzUxOWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvM2E5MjEw LWVhYzktNDg5My04ZmZjLTlhNmFmNjE3NTE5ZS8xL3g1Yk9hcmhjY24tZHlVaDNh bXo5TkhGQk1RRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMc2DANBgkqhkiG9w0BAQsFAAOCAQEAfdGbcQQsHRb3 xvrEGvT3padxQ6hpOg22QMiFTMkT0vcc1X5rRuFcC+dfXw6T+LUj9Qrxv4lY4b05 KKgMFHi4sHgm5sVuFOCuYi65CRBU9ue2/ru4fqsy4HCRKG4aKJqny/CST8/pRJyj vszHa1LiC7m58adGOrb6cOBV7SnmMHfEj7ets8fLfuUq0VooMy6+K/+FGS/7nlwy ynf+4XdxaJU4NIX3T4ablGNmSREzZcijFrefCKF9bjc3y85SVnalTPM5HWPpS2y6 PbEmyFsm0Gc9orS89esenY2tIKtSz7Bs8a+A33HIHwyxVazOynXw2Hn6Uw+3nhfX 5IUQyqG+yA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:31 2025 by rpki-client