This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.cer (raw, json) Hash identifier: rF7jHzKUjL75j9A1kdAt8Q4kPJrRVnVc9VPj2Eb/FDo= Subject key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B2B53183A1C81E55926E88B1ABA557588 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 17 Dec 2025 08:00:24 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 5505 IP: 185.123.204.0/22 IP: 185.210.226.0/23 IP: 2a03:9320::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:18:3a:1c:81:e5:59:26:e8:8b:1a:ba:55:75:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 17 08:00:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:ef:ed:3e:f2:72:2d:43:65:35:f8:44:d9: a6:33:bd:8d:67:48:a2:f3:2e:ee:85:6c:69:92:f9: d8:54:16:4f:04:89:b0:5a:1e:b3:b6:17:95:04:1a: 19:85:ac:4d:e3:a3:41:29:6d:bc:71:1f:f3:e6:00: bd:2a:59:86:36:6a:a6:a7:00:12:f8:73:53:27:90: a0:8b:d0:be:27:be:1a:49:8e:a8:1e:3e:25:0e:ed: d1:d0:df:a2:fa:8b:25:a5:6e:72:95:b0:23:79:81: f3:88:2e:17:72:66:21:88:d8:61:83:71:9a:76:41: 8f:90:3b:37:9f:14:37:1d:28:cc:02:f6:ea:9e:28: e9:c2:f9:5c:82:7f:01:6e:8f:98:13:28:64:ba:7f: 34:a8:d5:20:9b:d6:c8:5b:40:92:77:36:82:ba:9d: 71:e7:c7:92:f3:2c:48:7c:84:44:ef:df:4e:e7:97: 22:eb:07:31:ce:b7:aa:db:fa:6e:c6:dc:08:72:1b: f5:a9:a9:1e:ab:58:48:83:40:0a:c7:8f:90:26:ee: 2f:7b:5a:13:f7:b0:1a:63:21:37:e4:25:e5:1d:4b: 8c:81:dd:08:72:77:64:f0:d8:8a:9a:fc:a0:46:99: 94:8c:7b:c6:85:89:d1:ab:57:8b:46:39:b3:69:b6: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.204.0/22 185.210.226.0/23 IPv6: 2a03:9320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5505 Signature Algorithm: sha256WithRSAEncryption a4:9f:af:c7:30:f4:cb:9d:7c:63:5f:06:ed:1e:0a:12:7d:53: 13:aa:cd:61:97:37:2f:c3:da:06:ca:42:75:b3:36:43:77:5a: 9f:fc:07:46:0d:19:19:87:fc:2a:66:3f:2b:ef:cf:ef:81:d2: 01:34:51:92:7e:0a:6e:65:db:50:88:aa:ba:74:f1:7a:cd:96: 49:48:34:19:44:5c:d9:aa:8e:28:52:c3:ec:13:bd:b5:a5:da: 98:6c:6f:7e:55:4d:77:64:52:d4:4c:fe:8a:be:4e:9c:8e:97: 04:58:50:53:ba:d0:b9:9d:94:70:f5:84:ad:16:aa:b7:6d:38: a3:be:bf:37:eb:60:c0:a9:d3:f9:b3:49:f9:87:e9:61:0e:74: f6:6d:41:a3:70:55:d2:3e:65:10:db:35:b9:71:e6:ba:bd:8c: 04:b3:c0:47:94:c3:6a:69:77:f0:8a:b7:da:57:78:5a:15:df: f8:a0:f5:4c:f3:48:b1:ca:06:4d:e5:6b:b9:9e:39:c6:02:80: df:75:3c:dc:80:61:8f:ab:b2:47:0e:a6:b3:fd:2e:ba:06:43: 4f:b7:57:51:1a:d7:e3:88:09:20:eb:06:9d:1f:6d:38:bf:e9: 75:39:8c:b8:ee:36:86:4e:63:12:1d:ed:f3:78:d6:4b:9e:ea: 92:e6:32:10 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZsrUxg6HIHlWSboixq6VXWIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE3MDgwMDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWRmODBmN2M2OTJlODZkM2NkNmI3NTVkMDZjZjdjZTljMTM3ZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Dv7T7yci1DZTX4RNmmM72NZ0ii 8y7uhWxpkvnYVBZPBImwWh6ztheVBBoZhaxN46NBKW28cR/z5gC9KlmGNmqmpwAS +HNTJ5Cgi9C+J74aSY6oHj4lDu3R0N+i+oslpW5ylbAjeYHziC4XcmYhiNhhg3Ga dkGPkDs3nxQ3HSjMAvbqnijpwvlcgn8Bbo+YEyhkun80qNUgm9bIW0CSdzaCup1x 58eS8yxIfIRE799O55ci6wcxzreq2/puxtwIchv1qakeq1hIg0AKx4+QJu4ve1oT 97AaYyE35CXlHUuMgd0Icndk8NiKmvygRpmUjHvGhYnRq1eLRjmzabb4NwIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFPnfgPfGkuhtPNa3VdBs986cE3/yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU3LzY3MWVl NC1hZDgxLTQ1NGYtOTY1Zi02MmE0ZTY3NWVhZWIvMS8wfQYIKwYBBQUHMAqGcXJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjcxZWU0 LWFkODEtNDU0Zi05NjVmLTYyYTRlNjc1ZWFlYi8xLzEtZC1BOThhUzZHMDgxcmRW MEd6M3pwd1RmX0kubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF BQcBBwEB/wQlMCMwEgQCAAEwDAMEArl7zAMEAbnS4jANBAIAAjAHAwUAKgOTIDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgIVgTANBgkqhkiG9w0BAQsFAAOCAQEApJ+v xzD0y518Y18G7R4KEn1TE6rNYZc3L8PaBspCdbM2Q3dan/wHRg0ZGYf8KmY/K+/P 74HSATRRkn4KbmXbUIiqunTxes2WSUg0GURc2aqOKFLD7BO9taXamGxvflVNd2RS 1Ez+ir5OnI6XBFhQU7rQuZ2UcPWErRaqt204o76/N+tgwKnT+bNJ+YfpYQ509m1B o3BV0j5lENs1uXHmur2MBLPAR5TDaml38Iq32ld4WhXf+KD1TPNIscoGTeVruZ45 xgKA33U83IBhj6uyRw6ms/0uugZDT7dXURrX44gJIOsGnR9tOL/pdTmMuO42hk5j Eh3t83jWS57qkuYyEA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:50:15 2025 by rpki-client