This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25ebiYwPWDTLyDimmgXjq-jAKQM.cer File: 25ebiYwPWDTLyDimmgXjq-jAKQM.cer (raw, json) Hash identifier: rivz8tHzCDkevgfVALJPOQUdGcw1tSAqWKhQ1Feponc= Subject key identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7910B54EE4CA640CAA0DAC4E0BB35240 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:18:16 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 178.255.216.0/24 IP: 2a09:2140::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b5:4e:e4:ca:64:0c:aa:0d:ac:4e:0b:b3:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db979b898c0f5834cbc838a69a05e3abe8c02903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:ca:16:c4:39:2b:bb:26:d2:53:24:93:fc: 81:29:d1:97:09:e2:6d:0b:ac:d9:4b:cb:86:71:75: d9:a9:84:eb:dc:b2:4c:2c:4e:61:22:81:a0:50:1c: 1e:75:17:27:6a:2d:ad:08:2d:24:d9:c1:08:39:2a: 3d:4b:af:38:ec:23:a2:ca:20:7f:87:d8:d7:d7:b3: 52:44:91:f9:f9:04:c5:88:bd:a5:3a:79:66:5f:aa: 65:24:76:e1:b3:b1:0c:78:67:f9:e4:23:c0:f8:fe: 9f:5d:0a:10:d8:14:c7:a9:ce:0e:81:d2:ab:c4:89: cf:d9:9b:20:4d:78:7b:bb:ff:e6:ac:11:2d:da:65: 5b:f6:51:8f:0a:60:42:70:94:7c:61:7c:e2:90:f7: cf:34:0f:94:1e:c3:ec:37:5f:f5:11:5e:e2:44:06: 82:a9:7e:2b:bc:df:83:3e:be:bc:e6:f1:e8:e0:87: 51:d0:95:9b:3a:18:52:04:5e:38:51:f9:6e:92:f4: e2:c8:00:fd:91:08:6e:c8:f2:69:b7:9b:a2:fa:dc: 4f:51:88:07:36:2c:28:05:7b:71:c1:a7:44:7d:33: 17:87:a1:c4:0b:07:bf:68:51:be:f9:9e:bb:9c:8a: e7:e5:13:e5:80:e0:2b:e2:af:17:df:21:3f:1b:6f: a7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:97:9B:89:8C:0F:58:34:CB:C8:38:A6:9A:05:E3:AB:E8:C0:29:03 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/d5fde6-1951-47b8-a325-4cb257ee192c/1/25ebiYwPWDTLyDimmgXjq-jAKQM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.216.0/24 IPv6: 2a09:2140::/32 Signature Algorithm: sha256WithRSAEncryption 8a:95:fa:99:4a:78:a3:93:b0:90:03:2a:4d:50:c5:50:e2:1c: 3d:b2:14:f7:8d:9a:d2:4b:0a:02:d5:12:72:6d:b6:2b:64:53: a4:ab:bf:46:75:bd:49:9f:27:6e:98:8c:c4:97:4a:72:06:5a: 2a:3c:f0:1d:6d:0e:51:d4:96:ec:3e:46:7f:69:98:5d:b9:53: 77:c0:b2:ff:4c:40:1c:5f:41:7e:4f:30:5f:e8:e6:5c:c6:26: ac:44:45:ff:18:90:6d:5f:89:31:47:ed:99:8d:eb:69:2b:43: a8:1b:5e:e6:a3:3c:91:09:cd:d1:22:aa:be:4d:ab:ab:cd:9a: c7:b7:29:5f:45:cf:7a:d5:c7:4d:af:3e:33:b4:b7:3f:7d:74: 1f:b3:79:58:32:33:d1:f1:bf:38:f8:13:3c:7d:f8:0b:b8:9e: 98:09:f9:41:4d:8d:6d:d9:5a:f0:fc:81:7b:c7:8c:1e:41:08: 97:d3:00:8d:5a:6d:7c:82:fb:6b:cf:2d:d8:df:3a:ba:40:f2: e4:86:75:37:c7:5c:31:c4:98:02:a0:41:5b:5b:fd:68:dd:e2: 6b:91:a5:9b:70:bc:68:57:3b:c1:d4:e7:27:62:b9:5d:bc:ab: 15:39:d9:15:05:14:f0:f5:ee:0d:fa:60:65:ce:a6:72:fc:8a: 0f:69:2c:c8 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgISAZt5ELVO5MpkDKoNrE4Ls1JAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjk3OWI4OThjMGY1ODM0Y2JjODM4YTY5YTA1ZTNhYmU4YzAyOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfjKFsQ5K7sm0lMkk/yBKdGXCeJt C6zZS8uGcXXZqYTr3LJMLE5hIoGgUBwedRcnai2tCC0k2cEIOSo9S6847COiyiB/ h9jX17NSRJH5+QTFiL2lOnlmX6plJHbhs7EMeGf55CPA+P6fXQoQ2BTHqc4OgdKr xInP2ZsgTXh7u//mrBEt2mVb9lGPCmBCcJR8YXzikPfPNA+UHsPsN1/1EV7iRAaC qX4rvN+DPr685vHo4IdR0JWbOhhSBF44UflukvTiyAD9kQhuyPJpt5ui+txPUYgH NiwoBXtxwadEfTMXh6HECwe/aFG++Z67nIrn5RPlgOAr4q8X3yE/G2+n+QIDAQAB o4ICkzCCAo8wHQYDVR0OBBYEFNuXm4mMD1g0y8g4ppoF46vowCkDMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxL2Q1ZmRl Ni0xOTUxLTQ3YjgtYTMyNS00Y2IyNTdlZTE5MmMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvZDVmZGU2 LTE5NTEtNDdiOC1hMzI1LTRjYjI1N2VlMTkyYy8xLzI1ZWJpWXdQV0RUTHlEaW1t Z1hqcS1qQUtRTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQAsv/YMA0EAgACMAcDBQAqCSFAMA0GCSqGSIb3 DQEBCwUAA4IBAQCKlfqZSnijk7CQAypNUMVQ4hw9shT3jZrSSwoC1RJybbYrZFOk q79Gdb1JnydumIzEl0pyBloqPPAdbQ5R1JbsPkZ/aZhduVN3wLL/TEAcX0F+TzBf 6OZcxiasREX/GJBtX4kxR+2ZjetpK0OoG17mozyRCc3RIqq+TaurzZrHtylfRc96 1cdNrz4ztLc/fXQfs3lYMjPR8b84+BM8ffgLuJ6YCflBTY1t2Vrw/IF7x4weQQiX 0wCNWm18gvtrzy3Y3zq6QPLkhnU3x1wxxJgCoEFbW/1o3eJrkaWbcLxoVzvB1Ocn YrldvKsVOdkVBRTw9e4N+mBlzqZy/IoPaSzI -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:32 2026 by rpki-client