This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2PH7284hRaDbaQBgn3xUcy37DNg.cer File: 2PH7284hRaDbaQBgn3xUcy37DNg.cer (raw, json) Hash identifier: 56iCJrlwiILu20kd+bN3Vcga+fMRh9pROMEc2LEhFQs= Subject key identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B3170B273B4A5AF9682397DBBC62CD2E2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 18 Dec 2025 12:30:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 47339 IP: 93.190.186.0 -- 93.190.189.255 IP: 93.190.191.0/24 IP: 2a04:4200::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:70:b2:73:b4:a5:af:96:82:39:7d:bb:c6:2c:d2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 18 12:30:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d8f1fbdbce2145a0db6900609f7c54732dfb0cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:33:35:09:1f:27:58:3f:4d:11:63:b8:9d: 6c:c4:2a:2a:d4:e3:38:0a:11:e1:79:04:8a:ef:9c: 9e:21:e8:a5:f2:23:64:ec:43:84:cd:87:15:e8:c2: b0:01:30:fb:95:e4:03:b5:d7:97:dc:a6:96:8a:e8: f5:d8:54:8f:3d:b4:d8:3b:60:ff:e4:86:e2:1e:db: ee:cc:42:81:b7:42:87:25:0b:8e:5e:d6:ee:97:5f: d8:2b:e7:39:55:2c:ba:8b:72:43:6a:2d:6c:7f:a4: 53:0e:5d:54:a1:6f:68:79:5f:7a:59:0b:fa:f4:15: 1e:3e:3d:ef:3c:01:93:1f:74:92:02:7f:af:44:17: fc:cf:6c:d7:cb:c2:8d:2f:8a:d2:1d:87:bf:f3:83: 29:4a:25:5c:5a:38:3a:41:be:ee:35:85:d9:8b:58: 3f:d5:b6:fc:48:86:ff:96:81:74:10:cf:7e:1b:e4: 67:0f:34:2f:12:a7:c3:56:b3:e3:fe:68:a1:ac:df: 08:9e:ce:62:e3:34:95:ea:36:f9:b5:87:26:78:07: 32:db:3c:35:0a:7c:da:c7:c3:8f:0f:aa:de:3b:8e: 3f:d0:63:88:0b:7b:d3:2b:88:c1:34:07:6e:05:1f: cc:f9:13:c2:64:93:6d:4c:53:65:8a:6b:2d:e0:47: 66:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F1:FB:DB:CE:21:45:A0:DB:69:00:60:9F:7C:54:73:2D:FB:0C:D8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/31431e-5a7d-4fc3-a88d-47f043fba13b/1/2PH7284hRaDbaQBgn3xUcy37DNg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.190.186.0-93.190.189.255 93.190.191.0/24 IPv6: 2a04:4200::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47339 Signature Algorithm: sha256WithRSAEncryption 4b:6c:91:90:1f:00:5c:f5:56:2b:4b:fa:ed:c6:83:aa:02:62: 17:23:14:da:64:8f:5d:90:39:82:93:43:5b:b6:93:d3:ad:75: ec:68:ec:85:6d:9a:c5:a6:7f:34:56:47:f1:7d:1d:9c:4e:eb: 6e:0d:ad:b6:0d:3b:11:8d:a8:44:11:95:95:cf:0f:fa:f4:fb: 08:5a:89:7d:c2:8c:18:92:aa:94:d8:e9:a0:e0:20:6a:58:61: 66:7e:a2:b8:cc:d1:90:5d:e4:17:b8:71:9c:18:e1:29:72:55: 30:8a:4f:f5:f7:de:20:0e:c7:71:82:30:23:72:54:f6:89:15: b3:f9:90:f8:d5:3c:7b:65:27:36:2b:dd:8b:1e:1b:1d:38:97: 9e:8a:9b:a2:2f:18:e2:35:25:b0:42:9a:9e:7f:b1:92:fa:d9: 48:d7:5c:4f:dd:f7:fa:bb:e5:6a:3b:fe:11:91:67:ef:6a:72: 4b:84:4c:f8:02:cb:3a:c0:02:d0:9c:db:a0:1d:c2:c1:72:cd: 49:58:ac:53:51:7f:41:15:ca:57:b2:4b:3d:08:44:d0:df:ee: 72:7b:12:87:6d:0c:0e:62:fd:89:82:57:7e:5d:a6:dc:b0:8a: 96:d8:7d:05:bd:82:bf:55:93:e7:fd:cc:b7:b3:b0:de:26:b7: ec:f5:d7:0f -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgISAZsxcLJztKWvloI5fbvGLNLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE4MTIzMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGYxZmJkYmNlMjE0NWEwZGI2OTAwNjA5ZjdjNTQ3MzJkZmIwY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7szNQkfJ1g/TRFjuJ1sxCoq1OM4 ChHheQSK75yeIeil8iNk7EOEzYcV6MKwATD7leQDtdeX3KaWiuj12FSPPbTYO2D/ 5IbiHtvuzEKBt0KHJQuOXtbul1/YK+c5VSy6i3JDai1sf6RTDl1UoW9oeV96WQv6 9BUePj3vPAGTH3SSAn+vRBf8z2zXy8KNL4rSHYe/84MpSiVcWjg6Qb7uNYXZi1g/ 1bb8SIb/loF0EM9+G+RnDzQvEqfDVrPj/mihrN8Ins5i4zSV6jb5tYcmeAcy2zw1 Cnzax8OPD6reO44/0GOIC3vTK4jBNAduBR/M+RPCZJNtTFNlimst4EdmSwIDAQAB o4ICvTCCArkwHQYDVR0OBBYEFNjx+9vOIUWg22kAYJ98VHMt+wzYMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZhLzMxNDMx ZS01YTdkLTRmYzMtYTg4ZC00N2YwNDNmYmExM2IvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvMzE0MzFl LTVhN2QtNGZjMy1hODhkLTQ3ZjA0M2ZiYTEzYi8xLzJQSDcyODRoUmFEYmFRQmdu M3hVY3kzN0ROZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDwGCCsGAQUF BwEHAQH/BC0wKzAaBAIAATAUMAwDBAFdvroDBAFdvrwDBABdvr8wDQQCAAIwBwMF AyoEQgAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALjrMA0GCSqGSIb3DQEBCwUA A4IBAQBLbJGQHwBc9VYrS/rtxoOqAmIXIxTaZI9dkDmCk0NbtpPTrXXsaOyFbZrF pn80VkfxfR2cTutuDa22DTsRjahEEZWVzw/69PsIWol9wowYkqqU2Omg4CBqWGFm fqK4zNGQXeQXuHGcGOEpclUwik/1994gDsdxgjAjclT2iRWz+ZD41Tx7ZSc2K92L HhsdOJeeipuiLxjiNSWwQpqef7GS+tlI11xP3ff6u+VqO/4RkWfvanJLhEz4Ass6 wALQnNugHcLBcs1JWKxTUX9BFcpXsks9CETQ3+5yexKHbQwOYv2Jgld+XabcsIqW 2H0FvYK/VZPn/cy3s7DeJrfs9dcP -----END CERTIFICATE-----Generated at Sat Dec 20 18:58:49 2025 by rpki-client