This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer File: 8jgjdZZpSOIWiOi6E4OkowngVi8.cer (raw, json) Hash identifier: a09nrABMIy4M1T+RSM4Lstq49hQEoN6aHgwnHefudIY= Subject key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE46F3C5E1877FFB2E1E06A5378F0227C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 13:38:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 206261 IP: 185.190.244.0/22 IP: 2a06:24c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:6f:3c:5e:18:77:ff:b2:e1:e0:6a:53:78:f0:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 13:38:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f2382375966948e21688e8ba1383a4a309e0562f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:72:ed:df:e0:35:c5:b5:df:40:9c:de:5a: dd:2b:8d:aa:6a:3d:fd:09:34:6a:9e:ca:f0:55:0e: 6c:df:c8:51:a7:f0:e7:0d:0e:77:f9:e3:af:c4:a3: 31:e7:19:02:ef:12:30:69:67:36:1a:ac:80:83:09: 1b:65:d2:2f:fa:17:fe:24:f9:c8:53:5f:d4:b0:be: 9a:60:8b:0f:ac:fb:2b:0c:f5:7d:e9:dd:35:d5:44: 4d:fb:05:f4:63:19:8a:e9:13:e5:0e:ae:76:2e:f2: 9a:e8:4d:7a:a9:a0:06:5f:c6:3d:10:aa:a7:a2:43: 0a:90:47:f0:bd:a2:75:55:5c:c0:49:37:18:62:0a: 82:9e:af:06:91:d9:7c:3d:07:a6:1c:ed:a6:b1:0e: 9a:97:b9:ce:d7:bc:b3:c0:e4:b8:6f:bc:87:2e:55: 27:8f:a8:c2:ad:4c:3a:ac:ac:d2:fa:72:12:47:ff: c9:e1:8e:b0:bb:7b:75:0b:a1:ec:51:d7:27:23:28: f1:25:7d:57:bb:cc:65:47:4a:27:db:c2:f5:ac:2f: 81:d5:5d:23:1a:bf:36:6d:24:29:7e:ba:a0:8e:32: 2f:6d:3c:79:cc:82:e5:c8:d9:7a:68:a3:d2:8d:1e: 8e:9e:fc:82:49:50:89:a1:4f:da:e3:76:96:ab:5c: 26:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.244.0/22 IPv6: 2a06:24c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 206261 Signature Algorithm: sha256WithRSAEncryption a3:d7:05:18:53:02:e3:eb:8b:19:63:0b:91:b8:fc:ac:91:63: 7d:3b:55:dd:8e:f0:22:19:f6:b1:1c:c2:8b:a4:b2:a0:68:9f: b3:c0:d6:a8:af:50:d2:96:81:09:c3:62:b6:3e:73:28:93:34: 04:6f:49:cd:99:30:a6:9b:83:46:40:21:81:74:c2:59:59:95: 43:75:9d:91:b9:2b:d9:87:c7:03:33:83:a4:15:69:6d:24:c2: 70:25:bf:8e:ee:0c:51:e0:83:f9:19:7d:bb:df:7e:4a:66:ed: d3:65:e6:2b:5d:64:b6:d3:a5:d2:d5:58:2a:3c:6c:5e:ba:60: ca:25:d5:5b:d1:de:04:22:03:e5:c6:35:ed:a2:29:9e:82:6a: 37:5f:78:1e:73:c7:c6:1c:28:2f:c4:d5:91:72:a1:55:1a:d5: 6a:6d:9b:f1:c9:07:62:fc:98:27:ad:04:bd:bd:e7:3c:1c:34: 81:28:71:cd:3f:c0:3e:ac:72:a5:ce:22:ae:d8:0c:8f:36:eb: 74:64:b9:20:d5:e1:19:76:95:80:be:38:39:33:32:4d:02:0c: 6e:5c:78:1b:fd:3d:67:5a:9e:e0:32:b2:71:b9:50:bd:c9:e5: 22:83:d2:51:f2:7d:70:55:fc:83:a5:b4:cc:27:ca:a9:f1:0a: 19:f9:3d:f9 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZrkbzxeGHf/suHgalN48CJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTMzODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjM4MjM3NTk2Njk0OGUyMTY4OGU4YmExMzgzYTRhMzA5ZTA1NjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozZy7d/gNcW130Cc3lrdK42qaj39 CTRqnsrwVQ5s38hRp/DnDQ53+eOvxKMx5xkC7xIwaWc2GqyAgwkbZdIv+hf+JPnI U1/UsL6aYIsPrPsrDPV96d011URN+wX0YxmK6RPlDq52LvKa6E16qaAGX8Y9EKqn okMKkEfwvaJ1VVzASTcYYgqCnq8Gkdl8PQemHO2msQ6al7nO17yzwOS4b7yHLlUn j6jCrUw6rKzS+nISR//J4Y6wu3t1C6HsUdcnIyjxJX1Xu8xlR0on28L1rC+B1V0j Gr82bSQpfrqgjjIvbTx5zILlyNl6aKPSjR6OnvyCSVCJoU/a43aWq1wmZwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFPI4I3WWaUjiFojouhODpKMJ4FYvMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2L2FkMGYx YS02Yjk0LTRlMGQtOGE0YS1kMmZkOWZmYzMxYmYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvYWQwZjFh LTZiOTQtNGUwZC04YTRhLWQyZmQ5ZmZjMzFiZi8xLzhqZ2pkWlpwU09JV2lPaTZF NE9rb3duZ1ZpOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCub70MA0EAgACMAcDBQMqBiTAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMltTANBgkqhkiG9w0BAQsFAAOCAQEAo9cFGFMC4+uL GWMLkbj8rJFjfTtV3Y7wIhn2sRzCi6SyoGifs8DWqK9Q0paBCcNitj5zKJM0BG9J zZkwppuDRkAhgXTCWVmVQ3Wdkbkr2YfHAzODpBVpbSTCcCW/ju4MUeCD+Rl9u99+ Smbt02XmK11kttOl0tVYKjxsXrpgyiXVW9HeBCID5cY17aIpnoJqN194HnPHxhwo L8TVkXKhVRrVam2b8ckHYvyYJ60Evb3nPBw0gShxzT/APqxypc4irtgMjzbrdGS5 INXhGXaVgL44OTMyTQIMblx4G/09Z1qe4DKycblQvcnlIoPSUfJ9cFX8g6W0zCfK qfEKGfk9+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:12:16 2025 by rpki-client