This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer File: x6TS9okT6s5sn1CSvcfdIPV09Dg.cer (raw, json) Hash identifier: u2vs9AGVJ3NEqZjNZx+A9RwN6pW+gkKLrpThm2Js0XA= Subject key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3A00078350D34A1702E23672DD34C51 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 09:51:45 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202632 IP: 31.47.0.0/19 IP: 185.12.168.0/22 IP: 185.173.28.0/22 IP: 185.210.180.0/22 IP: 209.162.200.0/24 IP: 213.91.64.0/21 IP: 213.91.112.0/20 IP: 217.71.48.0/24 IP: 217.71.56.0/21 IP: 2a03:9240::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a0:00:78:35:0d:34:a1:70:2e:23:67:2d:d3:4c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 09:51:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d8:ef:ef:f6:19:b0:9f:cd:93:59:b8:35:99: c0:ec:a9:78:f6:bb:b3:0c:46:0d:fa:da:ac:41:c0: 26:5d:a4:63:00:9f:29:14:ba:1c:40:af:a0:35:da: 0b:23:d3:39:0f:38:1d:4e:48:7d:64:04:6b:98:15: 92:aa:f8:bf:42:fd:5c:7d:da:ff:ef:3d:00:5d:7f: 27:44:cb:70:c2:5d:62:e7:b6:61:91:cd:76:1a:91: 56:c3:8d:1c:8e:ec:e5:49:07:26:31:5d:c2:e9:12: cc:99:ef:e4:dd:1a:dc:c4:6b:89:ba:dc:4d:ef:86: 10:86:d8:be:92:c8:38:30:09:39:71:3b:b0:38:65: 0b:0b:0d:f9:15:9b:a4:ac:53:00:7a:a1:8f:f8:a8: d8:f2:da:6b:ba:24:c8:43:3b:1a:c8:89:14:e9:29: 85:fb:ba:04:0f:de:98:2f:bc:52:5e:a3:c0:2d:d6: ee:ad:52:f8:69:1f:e8:2b:45:6f:02:72:8d:5a:14: 91:87:d2:e4:fb:3a:62:b9:68:e8:a1:9b:bb:9e:ad: c9:95:5c:f8:ab:8a:92:3d:99:9a:18:f2:8f:7b:4a: b7:6d:41:c2:a6:16:ec:19:22:f1:c3:cd:ba:2f:f3: f9:4f:15:d5:1f:d6:be:23:a0:b0:30:18:84:66:90: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.0.0/19 185.12.168.0/22 185.173.28.0/22 185.210.180.0/22 209.162.200.0/24 213.91.64.0/21 213.91.112.0/20 217.71.48.0/24 217.71.56.0/21 IPv6: 2a03:9240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202632 Signature Algorithm: sha256WithRSAEncryption 39:4d:e0:bf:36:ad:20:ae:60:ba:10:b8:66:22:17:a2:5c:b7: 0f:58:b1:0b:bf:5b:aa:22:26:61:40:a9:c3:6c:1a:b4:b0:8f: 3f:38:6d:ab:37:57:eb:ed:b8:5f:5d:93:3d:97:4e:74:d4:61: a1:2a:cd:8c:70:08:8d:66:f4:e7:db:f7:c8:69:15:7c:c7:cb: ca:04:b5:3e:01:e1:1f:ce:0a:43:41:50:99:4d:52:93:d1:b5: 62:08:08:75:24:ae:ce:91:68:80:53:5f:8f:60:21:bf:28:6b: f4:24:6e:8c:0a:ba:e7:c7:18:4e:54:90:85:d7:33:33:01:51: 04:5e:d7:e5:76:e2:bb:ec:ed:a9:af:1d:6e:8e:03:80:54:e9: 05:f4:b5:9e:b1:e8:14:bc:16:2c:ef:ae:5b:2a:1b:11:15:be: 67:3b:58:34:a6:9a:8e:86:7a:b6:6c:ca:76:b5:05:24:23:55: 93:14:21:c5:67:76:0a:77:cb:89:c9:a5:15:4a:96:33:b6:e6: 15:30:d4:54:d8:3a:e9:bd:a8:1d:40:29:97:3f:98:70:98:e0: 18:2d:1e:48:6a:89:36:a0:35:3c:07:4b:67:bf:3d:de:73:80: ee:0a:f5:52:e4:ed:3f:0d:00:6b:f0:4f:9f:63:5c:96:1d:3e: 0d:b7:8b:1f -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZrjoAB4NQ00oXAuI2ct00xRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMDk1MTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2E0ZDJmNjg5MTNlYWNlNmM5ZjUwOTJiZGM3ZGQyMGY1NzRmNDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6djv7/YZsJ/Nk1m4NZnA7Kl49ruz DEYN+tqsQcAmXaRjAJ8pFLocQK+gNdoLI9M5DzgdTkh9ZARrmBWSqvi/Qv1cfdr/ 7z0AXX8nRMtwwl1i57Zhkc12GpFWw40cjuzlSQcmMV3C6RLMme/k3RrcxGuJutxN 74YQhti+ksg4MAk5cTuwOGULCw35FZukrFMAeqGP+KjY8tpruiTIQzsayIkU6SmF +7oED96YL7xSXqPALdburVL4aR/oK0VvAnKNWhSRh9Lk+zpiuWjooZu7nq3JlVz4 q4qSPZmaGPKPe0q3bUHCphbsGSLxw826L/P5TxXVH9a+I6CwMBiEZpDGIwIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFMek0vaJE+rObJ9Qkr3H3SD1dPQ4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4L2YwM2Nh MS03MjZiLTRkZTktYjQxOS1mOWExYmJjMzY4NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvZjAzY2Ex LTcyNmItNGRlOS1iNDE5LWY5YTFiYmMzNjg0NS8xL3g2VFM5b2tUNnM1c24xQ1N2 Y2ZkSVBWMDlEZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GCCsGAQUF BwEHAQH/BE8wTTA8BAIAATA2AwQFHy8AAwQCuQyoAwQCua0cAwQCudK0AwQA0aLI AwQD1VtAAwQE1VtwAwQA2UcwAwQD2Uc4MA0EAgACMAcDBQAqA5JAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMXiDANBgkqhkiG9w0BAQsFAAOCAQEAOU3gvzatIK5g uhC4ZiIXoly3D1ixC79bqiImYUCpw2watLCPPzhtqzdX6+24X12TPZdOdNRhoSrN jHAIjWb059v3yGkVfMfLygS1PgHhH84KQ0FQmU1Sk9G1YggIdSSuzpFogFNfj2Ah vyhr9CRujAq658cYTlSQhdczMwFRBF7X5Xbiu+ztqa8dbo4DgFTpBfS1nrHoFLwW LO+uWyobERW+ZztYNKaajoZ6tmzKdrUFJCNVkxQhxWd2CnfLicmlFUqWM7bmFTDU VNg66b2oHUAplz+YcJjgGC0eSGqJNqA1PAdLZ7893nOA7gr1UuTtPw0Aa/BPn2Nc lh0+DbeLHw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:09:18 2025 by rpki-client