This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer File: 52CwD7DMWV_lQtYibj8KPlFl8cw.cer (raw, json) Hash identifier: RP890UoKTjjAyjhJl0p9I5WOKG6jnmuJtH0F8EXFgfc= Subject key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE9C5ACC516DEB5A100F480D99D822E50 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 04 Dec 2025 14:30:37 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 41098 IP: 178.212.8.0/22 IP: 195.114.2.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:c5:ac:c5:16:de:b5:a1:00:f4:80:d9:9d:82:2e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 4 14:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:49:b1:7d:ff:14:9b:e2:2e:7a:b6:96:b0: 3e:43:97:74:21:cf:18:ee:19:af:fd:fa:75:bc:24: 0d:f1:ad:34:dc:20:d4:a7:ee:59:1f:c7:c1:5a:d1: ae:f4:d3:b9:de:f0:d2:c2:8a:43:fa:5a:80:bc:8d: 5e:10:d4:ef:0a:b9:0b:57:8b:9d:d4:d5:0f:f4:39: cf:00:23:c8:2a:5f:7b:0f:3f:50:a9:98:ae:98:b2: cf:61:da:db:34:47:a6:3d:8e:8b:81:d6:ec:b2:75: 35:85:db:00:9b:18:29:6a:1d:91:ac:15:ff:ee:b8: 89:fb:c1:ff:24:da:c7:5b:fe:fc:97:74:d7:46:d4: e8:32:25:30:11:94:1e:e7:b7:e4:79:cf:4d:f2:6b: 8e:76:77:a7:69:0f:7f:9e:37:b0:64:8f:79:46:01: 45:7c:3e:c6:4d:7c:ca:f9:39:48:23:ce:cd:a7:e5: 48:10:44:44:ab:e4:67:2c:50:f6:39:7f:07:a3:4b: 26:00:55:43:aa:ff:d9:7a:59:34:32:e1:cb:6a:06: 90:db:a1:f9:e6:88:fc:47:af:3d:27:72:83:f8:56: e9:c9:a7:f1:5c:04:85:4c:91:06:86:10:d4:1d:f6: 33:d9:0a:27:b7:d0:91:2d:9b:45:03:0b:28:e7:64: 88:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.8.0/22 195.114.2.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 41098 Signature Algorithm: sha256WithRSAEncryption a2:30:63:fd:ad:51:64:aa:06:c7:27:70:59:b4:bc:2c:aa:48: 79:22:cd:d1:02:1d:e5:d7:6b:ce:ac:f9:75:06:71:3a:77:d2: 50:dc:41:0a:d9:0a:fd:78:ed:09:5d:45:28:51:c4:c9:66:eb: a4:3b:05:a8:34:1d:b7:9c:dc:a8:74:78:45:7d:a0:18:42:36: e0:cb:ca:48:84:fb:83:7d:0b:6e:fa:00:9a:02:df:f8:ba:27: 88:bf:28:92:2d:a9:19:67:04:d6:d9:c9:e2:98:03:9b:72:5e: b0:25:fd:4b:9c:75:82:07:38:09:22:8e:31:f2:c9:48:bc:94: 03:91:fc:e2:fc:a2:bb:fd:f9:d7:db:02:c4:50:af:91:bd:45: ee:dd:be:2f:f7:fc:eb:b0:4f:76:63:b8:e9:51:62:4f:45:61: 3f:c4:c3:16:a0:54:bd:04:5e:cf:0d:2c:01:ae:76:c5:58:33: f5:70:70:bd:47:b4:96:cf:f3:d0:7a:d5:eb:cf:ee:d1:89:4d: 15:02:04:0b:c5:b4:39:4f:23:10:88:a1:cc:77:6f:af:0f:8c: 54:be:44:b8:b0:cd:ce:a5:cd:07:93:55:76:d4:73:eb:45:08: aa:38:a4:cf:f4:36:7a:4a:32:f8:da:cc:cb:76:5f:32:65:0c: cb:47:8e:38 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgISAZrpxazFFt61oQD0gNmdgi5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA0MTQzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzYwYjAwZmIwY2M1OTVmZTU0MmQ2MjI2ZTNmMGEzZTUxNjVmMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgFJsX3/FJviLnq2lrA+Q5d0Ic8Y 7hmv/fp1vCQN8a003CDUp+5ZH8fBWtGu9NO53vDSwopD+lqAvI1eENTvCrkLV4ud 1NUP9DnPACPIKl97Dz9QqZiumLLPYdrbNEemPY6LgdbssnU1hdsAmxgpah2RrBX/ 7riJ+8H/JNrHW/78l3TXRtToMiUwEZQe57fkec9N8muOdnenaQ9/njewZI95RgFF fD7GTXzK+TlII87Np+VIEEREq+RnLFD2OX8Ho0smAFVDqv/Zelk0MuHLagaQ26H5 5oj8R689J3KD+FbpyafxXASFTJEGhhDUHfYz2Qont9CRLZtFAwso52SIIQIDAQAB o4ICpjCCAqIwHQYDVR0OBBYEFOdgsA+wzFlf5ULWIm4/Cj5RZfHMMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2JlYTNk MC1kMzNlLTQ0YmMtODI5Ni05NGU0YzlmZDcxOGEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvYmVhM2Qw LWQzM2UtNDRiYy04Mjk2LTk0ZTRjOWZkNzE4YS8xLzUyQ3dEN0RNV1ZfbFF0WWli ajhLUGxGbDhjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF BwEHAQH/BBYwFDASBAIAATAMAwQCstQIAwQBw3ICMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwCgijANBgkqhkiG9w0BAQsFAAOCAQEAojBj/a1RZKoGxydwWbS8LKpI eSLN0QId5ddrzqz5dQZxOnfSUNxBCtkK/XjtCV1FKFHEyWbrpDsFqDQdt5zcqHR4 RX2gGEI24MvKSIT7g30LbvoAmgLf+LoniL8oki2pGWcE1tnJ4pgDm3JesCX9S5x1 ggc4CSKOMfLJSLyUA5H84vyiu/3519sCxFCvkb1F7t2+L/f867BPdmO46VFiT0Vh P8TDFqBUvQRezw0sAa52xVgz9XBwvUe0ls/z0HrV68/u0YlNFQIEC8W0OU8jEIih zHdvrw+MVL5EuLDNzqXNB5NVdtRz60UIqjikz/Q2ekoy+NrMy3ZfMmUMy0eOOA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:18 2025 by rpki-client