This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer File: 4gXr8GX8SSnxgCZirmLX-XYmAOY.cer (raw, json) Hash identifier: Io8Lsbk+HLTB2zKeEShnIuGgwbJOSFffrzZpqumhf+k= Subject key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A582ACA29DD0F1E610E1662D5079822B3 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Thu 06 Nov 2025 07:56:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 205036 IP: 91.209.40.0/24 IP: 91.209.48.0/24 IP: 91.209.50.0/24 IP: 91.209.58.0/24 IP: 2a0f:5fc0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:2a:ca:29:dd:0f:1e:61:0e:16:62:d5:07:98:22:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 6 07:56:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:f1:2f:ae:76:9d:f3:c4:9e:2c:cd:62:d5: da:08:81:45:69:43:cd:2d:d2:3c:87:48:5f:47:67: 6b:43:20:29:e3:45:e7:57:5b:7d:ab:62:50:63:18: c7:ce:2a:f2:18:72:ba:cc:a3:29:0d:11:99:b9:7c: 79:71:7a:bb:a5:d2:b0:4e:2d:93:9a:a2:8c:cf:dc: 1f:b9:0c:89:4a:52:1a:6b:fe:0f:02:7c:07:cf:61: 06:15:c1:2f:c8:f0:11:73:5d:55:d6:78:a0:a9:9a: ca:63:ca:77:75:51:aa:76:06:45:c0:4e:d3:c7:32: bb:80:8b:9d:05:26:50:c9:da:6e:57:92:5f:02:fb: 0f:87:59:f7:50:54:d0:2c:21:65:c1:cf:86:18:a9: 1a:83:a5:27:ac:2b:60:52:e1:6e:65:51:8f:4a:92: 9d:c2:41:84:78:6b:df:9f:67:86:01:f2:c0:f9:1a: 30:87:33:41:f6:3b:e1:ba:53:e7:17:ec:90:3a:43: f5:17:23:62:79:fb:28:ae:2e:ef:53:a3:40:95:ab: c9:21:db:ae:d6:7b:d9:04:ef:63:da:7b:b0:0a:12: c5:54:56:e2:b0:50:80:33:8e:ab:8e:99:05:8f:bc: 78:92:55:19:43:f6:4e:25:47:0e:8a:90:bd:43:e4: 97:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.40.0/24 91.209.48.0/24 91.209.50.0/24 91.209.58.0/24 IPv6: 2a0f:5fc0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205036 Signature Algorithm: sha256WithRSAEncryption 85:84:67:09:11:72:4a:17:75:32:5c:7a:e5:a0:8d:8c:12:30: c1:82:3e:4a:0f:0f:92:17:dc:f8:79:22:0c:60:6d:9f:ad:d6: b1:53:c0:2c:41:f4:63:2b:1a:81:0a:9e:70:14:ec:bc:95:40: 04:3b:06:16:52:25:47:af:91:31:ba:6d:0a:95:be:ab:50:09: f5:b5:db:a2:5d:7d:3f:e7:e0:0a:30:06:db:34:60:11:c6:e3: d1:e2:fa:29:fd:d6:1e:2e:1b:eb:f3:bc:ba:44:13:75:cc:41: 84:2e:d2:f2:c4:0a:15:66:db:b1:f8:4f:a2:1d:d2:71:fc:76: 5d:dc:b2:b4:f6:71:1d:81:e9:57:7a:21:3a:3f:cf:13:c1:9a: 50:c9:ac:0d:b3:3e:0b:8a:e1:8d:ff:14:9f:f0:72:d2:9c:55: 5d:61:ce:78:f0:7e:55:4f:79:24:50:fd:88:cd:5f:81:86:93: 05:bd:43:d2:dc:09:8c:fb:cc:cb:91:fc:4e:ba:3c:7b:85:24: 3f:7e:66:37:33:e2:b0:ea:f4:87:be:e2:8e:53:79:23:31:bc: dc:c7:d9:e1:8f:6f:54:10:9f:ad:f4:04:2b:ec:04:90:ee:a1: d6:a2:bf:e6:34:12:c8:32:9c:3b:09:57:47:00:ff:01:2d:93: d5:cf:83:dd -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISAZpYKsop3Q8eYQ4WYtUHmCKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA2MDc1NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjA1ZWJmMDY1ZmM0OTI5ZjE4MDI2NjJhZTYyZDdmOTc2MjYwMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8TxL652nfPEnizNYtXaCIFFaUPN LdI8h0hfR2drQyAp40XnV1t9q2JQYxjHziryGHK6zKMpDRGZuXx5cXq7pdKwTi2T mqKMz9wfuQyJSlIaa/4PAnwHz2EGFcEvyPARc11V1nigqZrKY8p3dVGqdgZFwE7T xzK7gIudBSZQydpuV5JfAvsPh1n3UFTQLCFlwc+GGKkag6UnrCtgUuFuZVGPSpKd wkGEeGvfn2eGAfLA+RowhzNB9jvhulPnF+yQOkP1FyNiefsori7vU6NAlavJIduu 1nvZBO9j2nuwChLFVFbisFCAM46rjpkFj7x4klUZQ/ZOJUcOipC9Q+SX6wIDAQAB o4IC3TCCAtkwHQYDVR0OBBYEFOIF6/Bl/Ekp8YAmYq5i1/l2JgDmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2JmMGJl M2UxLTg1NGUtNDY2Mi05MmU4LTAyODk1MGZmNTdmZS8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYw YmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvRTIwNUVCRjA2NUZD NDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAME AFvRKAMEAFvRMAMEAFvRMgMEAFvROjANBAIAAjAHAwUDKg9fwDAaBggrBgEFBQcB CAEB/wQLMAmgBzAFAgMDIOwwDQYJKoZIhvcNAQELBQADggEBAIWEZwkRckoXdTJc euWgjYwSMMGCPkoPD5IX3Ph5IgxgbZ+t1rFTwCxB9GMrGoEKnnAU7LyVQAQ7BhZS JUevkTG6bQqVvqtQCfW126JdfT/n4AowBts0YBHG49Hi+in91h4uG+vzvLpEE3XM QYQu0vLEChVm27H4T6Id0nH8dl3csrT2cR2B6Vd6ITo/zxPBmlDJrA2zPguK4Y3/ FJ/wctKcVV1hznjwflVPeSRQ/YjNX4GGkwW9Q9LcCYz7zMuR/E66PHuFJD9+Zjcz 4rDq9Ie+4o5TeSMxvNzH2eGPb1QQn630BCvsBJDuodaiv+Y0EsgynDsJV0cA/wEt k9XPg90= -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:52 2025 by rpki-client