This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer File: 1-83RF-rHV7b485QoZTrhJQjMaYk.cer (raw, json) Hash identifier: +ZGUes2fOrT2SwYydZqHe11D2B8PtIY63EpXcneLeNk= Subject key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7762F6E7959811B8699293810A264EB2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 09:26:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 25581 IP: 45.81.12.0/22 IP: 45.90.8.0/22 IP: 91.207.130.0/23 IP: 185.34.148.0/22 IP: 185.170.216.0/21 IP: 2a00:da60::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:62:f6:e7:95:98:11:b8:69:92:93:81:0a:26:4e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 09:26:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:39:41:36:33:5f:ab:28:98:f8:fc:83:11: b5:e9:db:71:f2:ab:79:58:3e:05:b5:0c:03:00:0a: 32:56:a2:88:0c:ab:08:bc:73:1b:d3:d2:fb:83:8e: 1d:bb:d2:f4:7e:3c:1c:f3:1d:4f:36:1f:98:24:28: fd:9f:df:0d:e2:e5:0a:93:2f:71:88:31:01:ac:85: 4b:ed:14:aa:36:b5:29:74:a4:08:f3:2a:bf:31:d1: fd:c9:01:f1:93:7f:41:36:b0:77:35:15:68:5e:72: c7:84:b8:0d:8e:9e:cc:1f:a0:e8:b3:be:ae:9e:51: 91:ed:c3:4c:01:97:74:2e:1c:80:ac:a1:33:e6:14: dd:76:e4:a9:89:b8:3d:61:1d:d1:50:cb:0a:a1:ad: 20:10:30:0d:77:7f:58:a1:71:6b:4d:7d:74:55:69: e4:12:4a:03:63:b1:47:ba:24:37:a9:6b:39:4d:7f: 80:b6:62:b5:a8:b3:4c:9c:bb:e8:4c:14:8b:42:2e: 3b:88:01:88:96:30:44:25:61:8c:3f:15:69:e2:f5: db:1a:9c:05:0c:1d:4d:f2:84:94:c0:21:4c:8a:cd: 34:19:b0:81:10:01:5b:44:a0:ae:0e:d4:22:02:d8: 41:03:fc:6f:0b:18:58:5d:69:4d:f4:94:fe:5e:f0: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.12.0/22 45.90.8.0/22 91.207.130.0/23 185.34.148.0/22 185.170.216.0/21 IPv6: 2a00:da60::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25581 Signature Algorithm: sha256WithRSAEncryption 47:50:17:a6:0e:ec:b5:ae:fd:fa:20:26:40:b7:53:03:b9:1d: 24:17:2f:83:df:92:b6:4c:8b:1e:de:83:66:f2:70:1d:fa:68: 05:8a:18:8b:58:2f:88:6a:21:df:e4:af:92:cd:ce:ce:4b:77: 3a:bd:d5:ee:a9:98:d0:07:51:73:4b:b3:c3:d1:3c:ef:21:34: 04:a1:4e:47:a5:75:bd:fd:c2:98:0b:e2:53:e1:aa:e9:13:8d: 1a:2c:76:e8:ab:48:b3:0e:d8:27:1e:09:7c:51:df:a2:6c:87: 85:4d:b8:47:f8:7c:8b:98:62:53:51:9a:1e:f2:2c:c4:55:7c: 47:5a:7b:8a:d6:08:84:f8:bc:88:62:5a:5a:66:b3:d7:3d:76: fd:29:88:72:e5:84:68:65:b6:5a:38:44:81:8e:2d:7f:55:18: a7:40:1d:6e:44:b7:1a:c5:dc:ab:d9:91:70:69:80:40:a5:0c: a8:5c:a1:26:96:d8:b8:99:d4:7b:9c:06:a8:f2:11:d5:0d:da: 8b:5a:06:23:88:5e:50:70:ef:2f:de:72:fa:4d:e5:3e:0f:18: 9e:80:bf:f9:1c:35:e1:43:87:2a:8e:72:b0:cd:00:a0:a0:92: 1a:e4:19:ef:93:c6:be:70:4a:01:b5:96:8c:a2:63:7c:7c:05: a5:72:bb:eb -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgISAZp3YvbnlZgRuGmSk4EKJk6yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMDkyNjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmNkZDExN2VhYzc1N2I2ZjhmMzk0Mjg2NTNhZTEyNTA4Y2M2OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzc5QTYzX6somPj8gxG16dtx8qt5 WD4FtQwDAAoyVqKIDKsIvHMb09L7g44du9L0fjwc8x1PNh+YJCj9n98N4uUKky9x iDEBrIVL7RSqNrUpdKQI8yq/MdH9yQHxk39BNrB3NRVoXnLHhLgNjp7MH6Dos76u nlGR7cNMAZd0LhyArKEz5hTdduSpibg9YR3RUMsKoa0gEDANd39YoXFrTX10VWnk EkoDY7FHuiQ3qWs5TX+AtmK1qLNMnLvoTBSLQi47iAGIljBEJWGMPxVp4vXbGpwF DB1N8oSUwCFMis00GbCBEAFbRKCuDtQiAthBA/xvCxhYXWlN9JT+XvDJcQIDAQAB o4ICxzCCAsMwHQYDVR0OBBYEFPvN0Rfqx1e2+POUKGU64SUIzGmJMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzliLzlhYTk5 ZC1iZTQzLTRkNzQtYWZjOS05NjQ0MjVjMThjNmYvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOWFhOTlk LWJlNDMtNGQ3NC1hZmM5LTk2NDQyNWMxOGM2Zi8xLzEtODNSRi1ySFY3YjQ4NVFv WlRyaEpRak1hWWsubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEF BQcBBwEB/wQ3MDUwJAQCAAEwHgMEAi1RDAMEAi1aCAMEAVvPggMEArkilAMEA7mq 2DANBAIAAjAHAwUDKgDaYDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJj7TANBgkq hkiG9w0BAQsFAAOCAQEAR1AXpg7sta79+iAmQLdTA7kdJBcvg9+StkyLHt6DZvJw HfpoBYoYi1gviGoh3+Svks3Ozkt3Or3V7qmY0AdRc0uzw9E87yE0BKFOR6V1vf3C mAviU+Gq6RONGix26KtIsw7YJx4JfFHfomyHhU24R/h8i5hiU1GaHvIsxFV8R1p7 itYIhPi8iGJaWmaz1z12/SmIcuWEaGW2WjhEgY4tf1UYp0AdbkS3GsXcq9mRcGmA QKUMqFyhJpbYuJnUe5wGqPIR1Q3ai1oGI4heUHDvL95y+k3lPg8YnoC/+Rw14UOH Ko5ysM0AoKCSGuQZ75PGvnBKAbWWjKJjfHwFpXK76w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:55:10 2025 by rpki-client