This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer File: 8C2sYF9GWXGMChXh9zLL1PSKrns.cer (raw, json) Hash identifier: EDnDsxKDn/P94e8awW/8nA7dw3a7/toMRs/Q+bTm1ek= Subject key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA0CA1F562EC31C0342C33247403995A6 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 10:23:12 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 3340 AS: 5483 AS: 6790 AS: 8358 AS: 8579 AS: 35190 AS: 202115 IP: 5.38.128.0/17 IP: 5.187.128.0/17 IP: 31.46.0.0/16 IP: 37.76.0.0/17 IP: 46.107.0.0/16 IP: 46.139.0.0/16 IP: 62.201.64.0/18 IP: 78.92.0.0/16 IP: 79.121.100.0/22 IP: 79.122.0.0/17 IP: 80.249.160.0/20 IP: 81.182.0.0/15 IP: 84.0.0.0/14 IP: 86.59.128.0/17 IP: 87.101.112.0/20 IP: 91.120.0.0/16 IP: 93.89.160.0/20 IP: 94.27.128.0/17 IP: 134.255.0.0/17 IP: 145.236.0.0/16 IP: 149.200.0.0/17 IP: 185.1.24.0/24 IP: 185.55.12.0/22 IP: 185.65.8.0/22 IP: 188.6.0.0/16 IP: 188.36.0.0/16 IP: 188.156.0.0/15 IP: 194.38.96.0/19 IP: 194.88.32.0/19 IP: 194.149.0.0/18 IP: 194.176.224.0/19 IP: 195.56.0.0/16 IP: 195.70.32.0/19 IP: 195.228.0.0/16 IP: 212.51.64.0/18 IP: 213.178.96.0/19 IP: 217.20.128.0/20 IP: 217.65.96.0/19 IP: 217.116.32.0/20 IP: 2001:7f8:85::/48 IP: 2001:4c48::/29 IP: 2a00:10d0::/32 IP: 2a00:1110::/29 IP: 2a02:738::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:ca:1f:56:2e:c3:1c:03:42:c3:32:47:40:39:95:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 10:23:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:c4:1f:95:62:4e:63:aa:7b:a7:e9:6a:75: c1:82:4c:7a:bf:a6:a4:82:14:7d:a1:ef:50:f0:b8: b1:ca:4a:c6:81:c6:3f:4d:04:db:ca:48:e0:88:18: ca:f2:1f:4b:a0:f2:aa:9f:47:c1:e5:57:27:56:59: 13:9d:ec:22:a4:8e:d5:f6:ac:44:53:5b:3a:08:d1: a9:32:cf:08:e3:2a:44:54:5e:42:9a:6a:c9:05:2b: be:e5:bf:96:e1:04:b1:64:41:85:0b:80:04:a6:6d: 8e:50:22:95:20:87:c6:a4:44:63:a5:e3:7d:34:e7: 78:6a:77:c9:91:88:c5:78:a6:21:e9:25:41:df:ce: b4:90:f7:c2:d4:42:4c:bc:c9:d8:a7:67:0b:25:15: 9c:4d:e6:5b:92:1a:3f:74:72:71:99:ce:57:55:68: 44:84:1a:e3:93:27:5b:0d:3a:d1:ed:36:86:f1:e9: af:a7:0d:cd:30:03:f0:42:39:f4:61:14:3e:a2:c4: ab:b0:2f:cc:4f:9e:49:e5:19:54:6d:d9:ca:6a:29: f7:3b:b8:a7:c8:b1:f7:28:62:3a:33:10:d7:69:78: 99:f1:e2:6b:d9:2e:11:df:b6:a2:08:46:fa:72:dd: 63:ba:d9:92:8c:0e:be:c2:32:4d:9f:84:2b:bf:22: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.38.128.0/17 5.187.128.0/17 31.46.0.0/16 37.76.0.0/17 46.107.0.0/16 46.139.0.0/16 62.201.64.0/18 78.92.0.0/16 79.121.100.0/22 79.122.0.0/17 80.249.160.0/20 81.182.0.0/15 84.0.0.0/14 86.59.128.0/17 87.101.112.0/20 91.120.0.0/16 93.89.160.0/20 94.27.128.0/17 134.255.0.0/17 145.236.0.0/16 149.200.0.0/17 185.1.24.0/24 185.55.12.0/22 185.65.8.0/22 188.6.0.0/16 188.36.0.0/16 188.156.0.0/15 194.38.96.0/19 194.88.32.0/19 194.149.0.0/18 194.176.224.0/19 195.56.0.0/16 195.70.32.0/19 195.228.0.0/16 212.51.64.0/18 213.178.96.0/19 217.20.128.0/20 217.65.96.0/19 217.116.32.0/20 IPv6: 2001:7f8:85::/48 2001:4c48::/29 2a00:10d0::/32 2a00:1110::/29 2a02:738::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3340 5483 6790 8358 8579 35190 202115 Signature Algorithm: sha256WithRSAEncryption 60:6e:7c:88:90:b3:f9:71:2e:cb:b7:f8:21:eb:ed:06:d7:2c: fe:87:8e:6e:2c:fa:3c:be:50:fa:f8:e6:b4:5e:7f:5b:36:4d: 0b:85:db:04:ae:07:36:36:3c:48:a9:70:30:a6:7a:0d:ef:11: 17:2d:b2:88:b4:20:fc:45:4d:e1:ab:ce:e1:6f:80:30:c1:e8: 07:01:2f:6d:e3:cb:bc:63:98:f7:ec:a0:15:fa:4b:1e:18:7f: 7f:78:ea:7c:fa:d3:74:8b:c9:27:4f:fb:9f:9a:c7:f4:90:95: 5a:87:f9:07:ee:4e:50:54:d3:1e:8b:a2:d8:59:e2:5f:de:18: 67:d0:27:f3:1d:47:57:d0:6f:4e:e0:a6:15:30:73:52:6e:f6: 72:5a:50:84:df:84:76:0f:8e:5e:7b:a1:b4:12:46:84:b2:d5: 01:0b:ea:23:03:39:c8:af:a9:d1:10:f9:4f:17:58:b7:5f:9f: 9d:ed:65:4c:dc:3f:5a:e6:a3:15:95:e5:ed:17:21:d9:90:9e: 99:54:cd:91:ab:6b:d6:7e:9f:72:08:d3:3f:98:3d:22:e3:00: 1d:d7:de:75:94:c1:70:a4:86:80:58:f1:ce:8d:51:0c:8b:eb: 55:f2:4f:48:35:1e:d7:72:fb:58:bc:5f:3b:a7:dc:67:fd:b5: 6e:4a:b2:41 -----BEGIN CERTIFICATE----- MIIGuTCCBaGgAwIBAgISAZqgyh9WLsMcA0LDMkdAOZWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTAyMzEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDJkYWM2MDVmNDY1OTcxOGMwYTE1ZTFmNzMyY2JkNGY0OGFhZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbfEH5ViTmOqe6fpanXBgkx6v6ak ghR9oe9Q8LixykrGgcY/TQTbykjgiBjK8h9LoPKqn0fB5VcnVlkTnewipI7V9qxE U1s6CNGpMs8I4ypEVF5CmmrJBSu+5b+W4QSxZEGFC4AEpm2OUCKVIIfGpERjpeN9 NOd4anfJkYjFeKYh6SVB3860kPfC1EJMvMnYp2cLJRWcTeZbkho/dHJxmc5XVWhE hBrjkydbDTrR7TaG8emvpw3NMAPwQjn0YRQ+osSrsC/MT55J5RlUbdnKain3O7in yLH3KGI6MxDXaXiZ8eJr2S4R37aiCEb6ct1jutmSjA6+wjJNn4QrvyKzcQIDAQAB o4IDxTCCA8EwHQYDVR0OBBYEFPAtrGBfRllxjAoV4fcyy9T0iq57MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkL2U5MDk3 Ni0zZGQxLTQ3MTYtYmJmNi0yOTJhZTQ2ZTYzMDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvZTkwOTc2 LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8xLzhDMnNZRjlHV1hHTUNoWGg5 ekxMMVBTS3Jucy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBKQYIKwYB BQUHAQcBAf8EggEYMIIBFDCB5AQCAAEwgd0DBAcFJoADBAcFu4ADAwAfLgMEByVM AAMDAC5rAwMALosDBAY+yUADAwBOXAMEAk95ZAMEB096AAMEBFD5oAMDAVG2AwMC VAADBAdWO4ADBARXZXADAwBbeAMEBF1ZoAMEB14bgAMEB4b/AAMDAJHsAwQHlcgA AwQAuQEYAwQCuTcMAwQCuUEIAwMAvAYDAwC8JAMDAbycAwQFwiZgAwQFwlggAwQG wpUAAwQFwrDgAwMAwzgDBAXDRiADAwDD5AMEBtQzQAMEBdWyYAMEBNkUgAMEBdlB YAMEBNl0IDArBAIAAjAlAwcAIAEH+ACFAwUDIAFMSAMFACoAENADBQMqABEQAwUA KgIHODAzBggrBgEFBQcBCAEB/wQkMCKgIDAeAgINDAICFWsCAhqGAgIgpgICIYMC AwCJdgIDAxWDMA0GCSqGSIb3DQEBCwUAA4IBAQBgbnyIkLP5cS7Lt/gh6+0G1yz+ h45uLPo8vlD6+Oa0Xn9bNk0LhdsErgc2NjxIqXAwpnoN7xEXLbKItCD8RU3hq87h b4AwwegHAS9t48u8Y5j37KAV+kseGH9/eOp8+tN0i8knT/ufmsf0kJVah/kH7k5Q VNMei6LYWeJf3hhn0CfzHUdX0G9O4KYVMHNSbvZyWlCE34R2D45ee6G0EkaEstUB C+ojAznIr6nREPlPF1i3X5+d7WVM3D9a5qMVleXtFyHZkJ6ZVM2Rq2vWfp9yCNM/ mD0i4wAd1951lMFwpIaAWPHOjVEMi+tV8k9INR7XcvtYvF87p9xn/bVuSrJB -----END CERTIFICATE-----Generated at Sat Dec 6 19:06:15 2025 by rpki-client