This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer File: 90fq0fqaE1xlBXykEtiTu4LpFCk.cer (raw, json) Hash identifier: WmDq3rL73tlfVi/jqs5NhP/10oqB7fLe3i2xRKX+NBg= Subject key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ABAA868417F8BBB5C2A8E6E59C26E368F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 25 Nov 2025 10:56:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 288 AS: 8519 IP: 131.176.0.0/16 IP: 185.207.220.0/22 IP: 192.147.251.0/24 IP: 192.171.1.0 -- 192.171.5.255 IP: 195.74.160.0/19 IP: 2a03:62e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:a8:68:41:7f:8b:bb:5c:2a:8e:6e:59:c2:6e:36:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 25 10:56:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f747ead1fa9a135c65057ca412d893bb82e91429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c8:72:90:c3:5e:61:89:1b:ec:2c:d5:0e:6b: e3:37:86:d2:02:4d:dc:b2:55:b2:99:fd:2f:f9:13: 14:39:7a:b1:f8:d1:e2:01:93:28:05:f9:f7:c8:b1: f2:28:2a:3a:8f:96:9d:7f:22:a8:69:ce:cf:fb:d7: df:4b:a1:c0:88:97:93:22:f3:50:31:05:00:1d:ae: 58:76:f3:ba:29:cc:5e:eb:62:c5:17:52:90:fe:8e: 79:62:14:7a:1f:6a:c3:e5:91:3b:31:15:34:48:cd: 37:cc:0b:e1:37:f7:4b:0f:6f:17:05:79:52:78:b6: 59:8b:c6:5a:43:eb:aa:e3:27:0c:10:7e:2e:00:70: a3:3f:72:c3:20:5a:56:66:63:ca:d2:92:70:84:aa: fb:69:75:29:0d:0e:42:4e:6f:27:8a:5c:f6:3c:e2: 97:00:42:33:9f:9c:ef:55:89:44:cb:b8:b5:cd:f5: 51:4e:c7:e8:2d:f1:53:05:e2:df:ba:57:af:0a:50: 81:b8:fe:7e:11:3f:3b:d4:4d:a4:dc:4f:ff:ec:b9: 46:09:af:9a:ba:af:fb:a7:1a:3c:f3:4b:28:8a:5d: 00:d0:29:31:c4:30:27:1e:f8:0e:7b:a1:e0:da:d9: 01:64:2b:82:44:0a:3b:b9:ca:3f:67:c5:f8:91:d9: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.176.0.0/16 185.207.220.0/22 192.147.251.0/24 192.171.1.0-192.171.5.255 195.74.160.0/19 IPv6: 2a03:62e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 288 8519 Signature Algorithm: sha256WithRSAEncryption 08:b7:70:f7:8d:b7:56:53:9a:d5:05:d1:30:22:4a:83:4f:b5: 81:63:52:44:59:76:8e:dc:0d:7c:84:ad:96:ab:5a:83:fe:20: 39:2c:27:5b:0d:64:5e:5d:89:1d:08:8a:60:a0:2b:bb:04:7d: 7b:9d:93:12:ad:c9:9d:c1:f1:7c:e4:34:c5:66:80:fb:bc:57: 2f:b7:9c:96:5c:92:77:1e:26:ad:00:83:25:30:7e:8a:72:ec: f5:ea:1b:01:58:3a:6e:8f:5a:f3:35:44:53:55:48:00:c2:99: 9f:a1:bc:0a:06:84:94:f1:c9:ba:f4:53:64:79:bf:90:cc:ae: 4c:34:68:32:49:50:11:a4:c0:9b:ed:37:b0:5f:11:34:a3:67: c3:31:fb:2c:5e:49:6b:a3:1c:33:c6:12:7c:f0:ab:e0:39:aa: 38:3d:b6:94:40:0b:c6:1e:b2:dd:7e:c6:98:c7:ed:c9:59:ba: e8:a9:80:d3:2f:e3:8f:43:4f:5c:14:99:23:e6:bb:23:76:32: 6c:a4:55:79:1c:84:8a:d6:7c:a2:cb:02:10:50:a8:15:92:74: 11:b9:6a:a5:dc:4b:98:bb:c5:7b:b7:9a:df:cd:a5:23:1f:38: 9d:9b:6c:8b:ee:e0:56:29:a2:e9:86:2a:08:f0:bf:59:17:e7: 1f:8c:0a:da -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgISAZq6qGhBf4u7XCqOblnCbjaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI1MTA1NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzQ3ZWFkMWZhOWExMzVjNjUwNTdjYTQxMmQ4OTNiYjgyZTkxNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MhykMNeYYkb7CzVDmvjN4bSAk3c slWymf0v+RMUOXqx+NHiAZMoBfn3yLHyKCo6j5adfyKoac7P+9ffS6HAiJeTIvNQ MQUAHa5YdvO6Kcxe62LFF1KQ/o55YhR6H2rD5ZE7MRU0SM03zAvhN/dLD28XBXlS eLZZi8ZaQ+uq4ycMEH4uAHCjP3LDIFpWZmPK0pJwhKr7aXUpDQ5CTm8nilz2POKX AEIzn5zvVYlEy7i1zfVRTsfoLfFTBeLfulevClCBuP5+ET871E2k3E//7LlGCa+a uq/7pxo880soil0A0CkxxDAnHvgOe6Hg2tkBZCuCRAo7uco/Z8X4kdnozwIDAQAB o4IC0TCCAs0wHQYDVR0OBBYEFPdH6tH6mhNcZQV8pBLYk7uC6RQpMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzA0Nzg5 Yy1hZTA0LTRiOTgtOTA5Yy1iOTE3ZjgzZjFlOGMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMDQ3ODlj LWFlMDQtNGI5OC05MDljLWI5MTdmODNmMWU4Yy8xLzkwZnEwZnFhRTF4bEJYeWtF dGlUdTRMcEZDay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME0GCCsGAQUF BwEHAQH/BD4wPDArBAIAATAlAwMAg7ADBAK5z9wDBADAk/swDAMEAMCrAQMEAcCr BAMEBcNKoDANBAIAAjAHAwUAKgNi4DAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIB IAICIUcwDQYJKoZIhvcNAQELBQADggEBAAi3cPeNt1ZTmtUF0TAiSoNPtYFjUkRZ do7cDXyErZarWoP+IDksJ1sNZF5diR0IimCgK7sEfXudkxKtyZ3B8XzkNMVmgPu8 Vy+3nJZcknceJq0AgyUwfopy7PXqGwFYOm6PWvM1RFNVSADCmZ+hvAoGhJTxybr0 U2R5v5DMrkw0aDJJUBGkwJvtN7BfETSjZ8Mx+yxeSWujHDPGEnzwq+A5qjg9tpRA C8Yest1+xpjH7clZuuipgNMv449DT1wUmSPmuyN2MmykVXkchIrWfKLLAhBQqBWS dBG5aqXcS5i7xXu3mt/NpSMfOJ2bbIvu4FYpoumGKgjwv1kX5x+MCto= -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:09 2025 by rpki-client