This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer File: 2PH7284hRaDbaQBgn3xUcy37DNg.cer (raw, json) Hash identifier: ehk/SDJkz9HzNIcCOF2EceNFm+lJmeyHna1LYgAAiyk= Subject key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA619C1FF11DE263E1871A7F37B458085 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 11:08:17 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 47339 IP: 93.190.185.0 -- 93.190.189.255 IP: 93.190.191.0/24 IP: 2a04:4200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:19:c1:ff:11:de:26:3e:18:71:a7:f3:7b:45:80:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 11:08:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:33:35:09:1f:27:58:3f:4d:11:63:b8:9d: 6c:c4:2a:2a:d4:e3:38:0a:11:e1:79:04:8a:ef:9c: 9e:21:e8:a5:f2:23:64:ec:43:84:cd:87:15:e8:c2: b0:01:30:fb:95:e4:03:b5:d7:97:dc:a6:96:8a:e8: f5:d8:54:8f:3d:b4:d8:3b:60:ff:e4:86:e2:1e:db: ee:cc:42:81:b7:42:87:25:0b:8e:5e:d6:ee:97:5f: d8:2b:e7:39:55:2c:ba:8b:72:43:6a:2d:6c:7f:a4: 53:0e:5d:54:a1:6f:68:79:5f:7a:59:0b:fa:f4:15: 1e:3e:3d:ef:3c:01:93:1f:74:92:02:7f:af:44:17: fc:cf:6c:d7:cb:c2:8d:2f:8a:d2:1d:87:bf:f3:83: 29:4a:25:5c:5a:38:3a:41:be:ee:35:85:d9:8b:58: 3f:d5:b6:fc:48:86:ff:96:81:74:10:cf:7e:1b:e4: 67:0f:34:2f:12:a7:c3:56:b3:e3:fe:68:a1:ac:df: 08:9e:ce:62:e3:34:95:ea:36:f9:b5:87:26:78:07: 32:db:3c:35:0a:7c:da:c7:c3:8f:0f:aa:de:3b:8e: 3f:d0:63:88:0b:7b:d3:2b:88:c1:34:07:6e:05:1f: cc:f9:13:c2:64:93:6d:4c:53:65:8a:6b:2d:e0:47: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.185.0-93.190.189.255 93.190.191.0/24 IPv6: 2a04:4200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47339 Signature Algorithm: sha256WithRSAEncryption 59:15:5a:0e:3f:cf:5f:6e:af:0e:a5:58:cb:67:3c:5d:ac:d8: fa:00:8b:36:dd:dc:a6:de:74:8b:1b:6d:24:f9:cd:fe:17:ab: bd:e9:f6:2b:f8:16:bb:92:09:f8:5c:ac:94:95:e5:6b:ce:ec: d6:79:4a:60:5c:75:a3:6a:70:8c:c3:28:bb:61:2a:22:9e:06: 6f:33:79:de:f4:a8:a2:47:11:db:86:1f:87:81:97:10:df:71: d7:ff:1c:67:36:29:c2:7c:b1:c6:1d:13:82:5c:ff:17:b7:6c: a1:fb:07:29:ee:51:9b:f0:39:68:48:b3:0c:d3:3b:37:a5:36: eb:e6:61:d0:ef:00:83:9b:76:de:51:e4:c5:5c:57:b2:18:0a: 49:74:de:b6:ab:8e:d7:c7:61:d7:2d:a3:4b:71:86:d0:40:3c: 3d:7c:8d:ef:e9:10:3c:01:84:c1:07:d3:13:f0:8e:56:1b:3b: f1:36:40:1c:54:04:db:78:08:63:b7:8c:42:24:ef:88:1d:99: eb:36:63:64:a8:07:0a:28:31:02:87:f0:c6:53:48:28:d4:44: 8f:89:1c:8c:79:b2:5e:7f:1a:d3:0c:d3:be:12:77:4d:18:ca: a5:55:b3:49:ee:64:e4:a6:a3:c7:b6:3b:ca:4f:38:a8:f3:99: f8:f3:cf:cd -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZqmGcH/Ed4mPhhxp/N7RYCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMTEwODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGYxZmJkYmNlMjE0NWEwZGI2OTAwNjA5ZjdjNTQ3MzJkZmIwY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7szNQkfJ1g/TRFjuJ1sxCoq1OM4 ChHheQSK75yeIeil8iNk7EOEzYcV6MKwATD7leQDtdeX3KaWiuj12FSPPbTYO2D/ 5IbiHtvuzEKBt0KHJQuOXtbul1/YK+c5VSy6i3JDai1sf6RTDl1UoW9oeV96WQv6 9BUePj3vPAGTH3SSAn+vRBf8z2zXy8KNL4rSHYe/84MpSiVcWjg6Qb7uNYXZi1g/ 1bb8SIb/loF0EM9+G+RnDzQvEqfDVrPj/mihrN8Ins5i4zSV6jb5tYcmeAcy2zw1 Cnzax8OPD6reO44/0GOIC3vTK4jBNAduBR/M+RPCZJNtTFNlimst4EdmSwIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFNjx+9vOIUWg22kAYJ98VHMt+wzYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzMxNDMx ZS01YTdkLTRmYzMtYTg4ZC00N2YwNDNmYmExM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvMzE0MzFl LTVhN2QtNGZjMy1hODhkLTQ3ZjA0M2ZiYTEzYi8xLzJQSDcyODRoUmFEYmFRQmdu M3hVY3kzN0ROZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBABdvrkDBAFdvrwDBABdvr8wDQQCAAIwBwMF AyoEQgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALjrMA0GCSqGSIb3DQEBCwUA A4IBAQBZFVoOP89fbq8OpVjLZzxdrNj6AIs23dym3nSLG20k+c3+F6u96fYr+Ba7 kgn4XKyUleVrzuzWeUpgXHWjanCMwyi7YSoingZvM3ne9KiiRxHbhh+HgZcQ33HX /xxnNinCfLHGHROCXP8Xt2yh+wcp7lGb8DloSLMM0zs3pTbr5mHQ7wCDm3beUeTF XFeyGApJdN62q47Xx2HXLaNLcYbQQDw9fI3v6RA8AYTBB9MT8I5WGzvxNkAcVATb eAhjt4xCJO+IHZnrNmNkqAcKKDECh/DGU0go1ESPiRyMebJefxrTDNO+EndNGMql VbNJ7mTkpqPHtjvKTzio85n488/N -----END CERTIFICATE-----Generated at Sat Dec 6 07:05:08 2025 by rpki-client