This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2RFVkMpva1RAxuJTQ82EAYaOOhw.cer File: 2RFVkMpva1RAxuJTQ82EAYaOOhw.cer (raw, json) Hash identifier: EKMHz0Ekr/0F47tR2orlajlKwLK5W7iiZoJeOcqItYg= Subject key identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ACA9569440117EA09C885A0CBA48479ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 28 Nov 2025 13:09:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 193.178.130.0/24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:95:69:44:01:17:ea:09:c8:85:a0:cb:a4:84:79:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 28 13:09:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d9115590ca6f6b5440c6e25343cd8401868e3a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:a8:8e:3b:07:79:8f:bb:2c:c7:f0:f1:fc: 7f:6b:56:82:40:b4:87:8d:4d:fe:46:52:9f:2a:7a: c3:c9:4f:ff:a4:0d:af:14:a8:86:c2:f2:b8:e0:0f: dd:68:5e:6f:e7:81:a7:d1:14:1b:0a:6c:37:09:9b: 5a:9d:89:cd:18:af:65:df:29:a2:14:45:66:a9:26: e5:46:8b:a3:11:ba:ee:c1:c7:76:64:4b:66:5a:d6: da:1f:be:62:70:5a:fd:ca:31:8c:12:fa:ce:dc:9e: 7b:06:9a:74:23:ae:f2:e6:75:2c:a8:a6:04:89:1b: 57:f8:8b:b1:7c:2e:a0:95:b3:a8:5b:9d:93:06:ac: 8c:19:60:71:2a:c4:ad:32:de:d9:fb:f9:40:2e:37: f8:28:27:0c:90:82:be:c4:b9:81:b2:3f:22:ea:b2: 98:da:f7:f0:52:48:dc:5a:eb:fd:40:82:35:91:2f: e9:ad:61:01:94:05:96:61:09:9c:8d:c7:3e:0a:01: 73:bd:ed:b8:63:fd:25:d3:0a:68:82:9d:b3:b9:0d: c9:51:d2:9e:c6:8e:d9:1d:41:78:1a:2a:2f:bd:7b: 93:c2:46:15:7f:0d:bd:00:69:6d:63:c7:8b:b0:f9: b5:02:21:e9:b4:5f:1c:38:e3:9e:f2:88:e6:ff:ce: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:11:55:90:CA:6F:6B:54:40:C6:E2:53:43:CD:84:01:86:8E:3A:1C X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a45520-d9cc-45f2-8645-3ffa39b4dc0b/1/2RFVkMpva1RAxuJTQ82EAYaOOhw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.178.130.0/24 Signature Algorithm: sha256WithRSAEncryption 30:3a:47:2b:cf:d1:2d:c0:56:36:a8:61:bc:63:3d:22:de:ef: 21:09:ff:98:75:c5:b3:2b:60:4c:3c:a7:d2:e9:c4:72:12:4d: 62:3f:6e:a3:b5:2d:dd:eb:15:d1:49:3e:33:e0:de:fe:25:67: ff:36:18:4f:da:dc:b6:7c:45:35:7a:8c:dc:38:4a:3f:d1:77: ca:ee:59:00:58:41:20:2b:d3:54:5f:c2:05:0d:af:f2:1a:67: 6f:c7:5d:a0:e0:35:25:74:fe:cb:9e:1c:b1:1b:81:5e:cc:89: 12:5c:51:8c:40:23:ec:6d:0e:6b:a0:11:e4:9c:20:6f:84:28: 1c:2a:48:5a:4a:a7:5d:8f:04:3e:d9:6e:85:32:de:f6:38:c1: 65:d5:c9:df:6f:bf:b1:a2:d4:b3:ce:02:36:02:19:a7:e6:88: e0:ee:ef:25:b5:18:dc:58:c6:20:e4:c8:2f:34:e3:06:1c:52: 81:cc:26:2c:3e:00:ec:3f:e8:3c:57:8f:cd:87:cc:69:f6:8f: 76:12:cf:ca:89:45:58:75:6d:0a:1c:1a:7a:9d:74:ef:76:32: 06:30:e3:9d:00:61:ba:6d:29:6c:48:9d:34:d1:be:63:3b:b5: b1:ba:e5:93:30:a2:2b:d1:eb:2f:d1:d9:62:bc:32:7d:43:64: fd:5c:04:bd -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZrKlWlEARfqCciFoMukhHntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI4MTMwOTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTExNTU5MGNhNmY2YjU0NDBjNmUyNTM0M2NkODQwMTg2OGUzYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT+ojjsHeY+7LMfw8fx/a1aCQLSH jU3+RlKfKnrDyU//pA2vFKiGwvK44A/daF5v54Gn0RQbCmw3CZtanYnNGK9l3ymi FEVmqSblRoujEbruwcd2ZEtmWtbaH75icFr9yjGMEvrO3J57Bpp0I67y5nUsqKYE iRtX+IuxfC6glbOoW52TBqyMGWBxKsStMt7Z+/lALjf4KCcMkIK+xLmBsj8i6rKY 2vfwUkjcWuv9QII1kS/prWEBlAWWYQmcjcc+CgFzve24Y/0l0wpogp2zuQ3JUdKe xo7ZHUF4GiovvXuTwkYVfw29AGltY8eLsPm1AiHptF8cOOOe8ojm/84iMwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFNkRVZDKb2tUQMbiU0PNhAGGjjocMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzllL2E0NTUy MC1kOWNjLTQ1ZjItODY0NS0zZmZhMzliNGRjMGIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvYTQ1NTIw LWQ5Y2MtNDVmMi04NjQ1LTNmZmEzOWI0ZGMwYi8xLzJSRlZrTXB2YTFSQXh1SlRR ODJFQVlhT09ody5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQAwbKCMA0GCSqGSIb3DQEBCwUAA4IBAQAwOkcr z9EtwFY2qGG8Yz0i3u8hCf+YdcWzK2BMPKfS6cRyEk1iP26jtS3d6xXRST4z4N7+ JWf/NhhP2ty2fEU1eozcOEo/0XfK7lkAWEEgK9NUX8IFDa/yGmdvx12g4DUldP7L nhyxG4FezIkSXFGMQCPsbQ5roBHknCBvhCgcKkhaSqddjwQ+2W6FMt72OMFl1cnf b7+xotSzzgI2Ahmn5ojg7u8ltRjcWMYg5MgvNOMGHFKBzCYsPgDsP+g8V4/Nh8xp 9o92Es/KiUVYdW0KHBp6nXTvdjIGMOOdAGG6bSlsSJ000b5jO7WxuuWTMKIr0esv 0dlivDJ9Q2T9XAS9 -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:13 2025 by rpki-client