This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer (raw, json) Hash identifier: gj9WYcwj5neW5okfLOsMK2ebPiNNlRr2VN3n8CSRy4s= Subject key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A596641499599971CF3D4CB6F9D931B4D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 06 Nov 2025 13:41:04 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 24991 AS: 201237 IP: 81.93.192.0/20 IP: 185.81.20.0/22 IP: 185.198.168.0/22 IP: 2a03:da00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:66:41:49:95:99:97:1c:f3:d4:cb:6f:9d:93:1b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 6 13:41:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6c58ed1af964a7668e44397619ee1985a2491c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7e:eb:4a:c1:cc:01:cd:3c:36:8a:cd:7b:02: 9c:40:fc:37:42:fa:51:5a:17:9f:11:71:3a:db:38: 16:92:aa:dc:a8:ad:3f:c4:68:08:ee:14:9d:cc:c9: a5:d9:7a:27:2a:de:f7:c1:1f:91:ad:e4:fa:aa:32: 96:1c:66:89:84:70:9a:e1:5c:e5:64:62:cd:dc:29: ac:42:0e:7f:7c:66:2b:bb:29:19:f3:35:7a:e3:0a: 86:f1:cc:d5:62:c4:d5:8b:d7:cf:a6:d2:b9:a8:50: 29:0b:81:52:68:fd:a4:27:02:2a:4f:38:28:4a:1c: ef:91:8b:34:cc:89:d1:a1:ad:32:85:3a:ef:4f:e6: c9:db:16:1a:f5:41:e0:b0:21:2c:5e:51:91:f5:41: 36:b3:5e:8c:a8:41:9c:16:73:d2:54:d1:a1:6f:94: 45:1d:23:13:9b:ae:04:f1:49:f4:37:46:e5:3a:c0: c6:f8:82:63:67:c2:2f:43:10:a8:aa:52:e8:9b:97: e0:0d:6f:5e:93:12:04:94:39:31:32:51:83:7d:28: eb:49:cd:25:c2:02:09:10:d1:5e:bd:4b:9e:98:c8: 91:98:a9:9b:04:61:d5:b7:6d:60:ba:0f:db:ee:ed: 30:82:63:2c:f9:f3:bb:33:bb:59:a6:e8:62:b1:4f: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.93.192.0/20 185.81.20.0/22 185.198.168.0/22 IPv6: 2a03:da00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 24991 201237 Signature Algorithm: sha256WithRSAEncryption 81:06:1c:b2:b7:23:29:e4:2d:d6:d3:02:2c:28:84:1d:5e:18: c4:6f:49:a9:2b:3a:aa:91:a7:72:97:41:4f:f8:73:2e:7f:46: a1:a7:74:b1:3e:a0:ea:52:0c:d4:25:61:6a:d4:eb:b2:22:d6: 1b:61:87:ae:99:2c:6f:c6:0a:26:42:b2:bd:63:68:a4:55:ea: 3f:1e:bf:90:0b:71:96:fb:87:86:e7:02:60:8d:40:48:dc:36: 12:87:5c:3a:fa:9f:34:61:cd:61:a1:28:89:8f:b3:64:4d:6e: 0c:24:52:0e:38:5f:c7:1a:e2:d5:9e:aa:66:24:1f:ea:b6:38: be:2d:00:6b:22:42:e4:05:c6:8f:2c:be:85:cc:b2:ff:ef:29: ca:a7:e9:56:4a:e9:1b:f4:f6:50:83:10:ae:12:ce:6d:aa:2a: 13:ff:3f:c5:a3:03:54:df:70:65:de:73:19:63:47:e2:ce:e4: e7:eb:c5:0b:98:c2:35:61:a6:7d:26:09:dc:b7:18:f7:71:77: cb:b2:ce:07:e2:1b:b0:4e:c6:16:13:3b:1f:13:39:90:44:7b: 61:0c:94:46:cd:9b:f3:27:f4:0d:55:33:1f:5c:b2:90:1a:c2: 54:72:f3:b7:f6:2b:e4:9e:5a:d0:1e:71:6c:e8:65:c3:fc:75: d4:61:8c:38 -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZpZZkFJlZmXHPPUy2+dkxtNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA2MTM0MTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmM1OGVkMWFmOTY0YTc2NjhlNDQzOTc2MTllZTE5ODVhMjQ5MWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X7rSsHMAc08NorNewKcQPw3QvpR WhefEXE62zgWkqrcqK0/xGgI7hSdzMml2XonKt73wR+RreT6qjKWHGaJhHCa4Vzl ZGLN3CmsQg5/fGYruykZ8zV64wqG8czVYsTVi9fPptK5qFApC4FSaP2kJwIqTzgo ShzvkYs0zInRoa0yhTrvT+bJ2xYa9UHgsCEsXlGR9UE2s16MqEGcFnPSVNGhb5RF HSMTm64E8Un0N0blOsDG+IJjZ8IvQxCoqlLom5fgDW9ekxIElDkxMlGDfSjrSc0l wgIJENFevUuemMiRmKmbBGHVt21gug/b7u0wgmMs+fO7M7tZpuhisU8G/QIDAQAB o4ICvzCCArswHQYDVR0OBBYEFMbFjtGvlkp2aORDl2Ge4ZhaJJHFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2ZjMjgx NS1kMjkzLTQwYWYtYmYzYy0xYzhhZmQxOWZkYmIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvZmMyODE1 LWQyOTMtNDBhZi1iZjNjLTFjOGFmZDE5ZmRiYi8xL3hzV08wYS1XU25abzVFT1hZ WjdobUZva2tjVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQEUV3AAwQCuVEUAwQCucaoMA0EAgACMAcDBQMq A9oAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAmGfAgMDEhUwDQYJKoZIhvcNAQEL BQADggEBAIEGHLK3IynkLdbTAiwohB1eGMRvSakrOqqRp3KXQU/4cy5/RqGndLE+ oOpSDNQlYWrU67Ii1hthh66ZLG/GCiZCsr1jaKRV6j8ev5ALcZb7h4bnAmCNQEjc NhKHXDr6nzRhzWGhKImPs2RNbgwkUg44X8ca4tWeqmYkH+q2OL4tAGsiQuQFxo8s voXMsv/vKcqn6VZK6Rv09lCDEK4Szm2qKhP/P8WjA1TfcGXecxljR+LO5OfrxQuY wjVhpn0mCdy3GPdxd8uyzgfiG7BOxhYTOx8TOZBEe2EMlEbNm/Mn9A1VMx9cspAa wlRy87f2K+SeWtAecWzoZcP8ddRhjDg= -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:02 2025 by rpki-client