This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer File: AHddlHG4XZY_720oNZDi2ULdXCE.cer (raw, json) Hash identifier: XZvSlnCoYE5lepB5AK9RWv4DlmBu0nzHz7pjKetfiOI= Subject key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A29FAC9A5B0268435379C3906C0C92EC5 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 28 Oct 2025 08:41:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 21341 AS: 211990 IP: 62.220.96.0 -- 62.220.107.255 IP: 62.220.109.0 -- 62.220.127.255 IP: 81.12.0.0/17 IP: 87.107.0.0/16 IP: 185.60.136.0/22 IP: 2a00:1198::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:29:fa:c9:a5:b0:26:84:35:37:9c:39:06:c0:c9:2e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 28 08:41:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:f4:b7:b6:ef:f0:95:c7:d6:58:2d:5c:61: a0:bc:e7:9d:39:da:9d:ad:bd:8d:9a:2b:ff:ee:ad: c7:86:62:90:90:71:ce:7e:1b:bf:a8:44:50:bb:ad: 12:4c:1b:c5:51:d9:14:95:b3:5d:60:c2:13:f4:9e: bb:46:0e:c2:2f:77:63:d4:41:a5:b3:06:47:8d:f7: 07:53:13:b5:80:f8:1d:2f:aa:ce:18:72:64:de:a3: 51:98:fb:8e:0b:21:b6:af:4a:5d:51:01:04:bb:8e: 67:36:d4:b8:ef:1f:3a:9d:13:6d:a0:ec:27:73:16: 30:62:b5:ac:08:24:34:93:58:b8:ee:ff:8f:93:c9: 52:3a:82:78:89:a1:e6:a8:c7:44:67:2a:ce:ff:bc: 8b:fd:d8:b7:63:d6:7d:f1:ae:6d:7f:dc:58:e4:5f: d8:f5:2a:ae:49:60:70:7f:7e:e3:d1:2f:87:b3:3b: ee:ef:c8:88:d2:e8:9e:61:a2:a5:41:e6:4a:81:fe: 62:de:69:64:0c:31:b4:99:ae:e3:a8:a9:5b:f8:a1: 82:f8:f9:a6:b6:1a:06:2e:fa:b3:85:01:9c:ef:8d: 96:0c:82:06:d2:9d:fa:8a:fe:02:cd:ca:1b:c4:cf: 97:2e:98:39:2f:ab:ab:a3:28:3c:56:d9:8c:5a:17: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.96.0-62.220.107.255 62.220.109.0-62.220.127.255 81.12.0.0/17 87.107.0.0/16 185.60.136.0/22 IPv6: 2a00:1198::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21341 211990 Signature Algorithm: sha256WithRSAEncryption 3a:80:a3:22:d1:55:95:5a:37:a3:96:ee:2d:6d:1e:2d:6b:ec: 71:28:63:0e:9c:b6:c0:d8:09:1b:e8:62:b0:33:50:da:92:3e: 86:0d:d6:52:22:50:21:07:42:c1:be:66:0e:10:de:9f:16:8d: 9c:3b:55:db:70:e2:c5:42:d7:8c:d5:c4:7e:e8:1a:2b:c5:6e: 91:a9:d2:27:3d:df:ec:43:7a:9d:f3:d6:a8:f9:28:a8:4e:4d: 0d:e2:a7:12:26:71:e3:10:51:a7:02:da:6f:cd:83:13:c9:d9: 2d:cf:75:df:69:ed:2c:5d:17:78:61:f1:6c:63:9d:36:96:e9: ee:46:32:3a:23:e3:19:b3:1f:08:4b:f8:f6:e5:d9:5c:90:57: e4:50:d3:13:05:d5:0f:f7:b4:42:ba:bd:e3:44:8a:26:dd:19: 5e:2e:85:b6:65:32:c6:a2:57:d4:19:f2:67:4b:73:e0:28:b3: 34:1e:fc:c0:bc:e1:ee:21:a9:82:12:d0:70:aa:2a:24:f0:6d: 37:d0:3d:a2:2a:a1:87:e8:25:e1:29:50:02:62:ce:85:66:1b: c3:9d:62:bd:5e:1f:b4:f3:86:c5:1a:9d:d6:c7:a9:c6:8d:0e: 4a:38:59:e0:be:ee:fc:d9:12:11:83:86:2f:97:85:28:d6:77: 15:04:aa:00 -----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgISAZop+smlsCaENTecOQbAyS7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDI4MDg0MTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDc3NWQ5NDcxYjg1ZDk2M2ZlZjZkMjgzNTkwZTJkOTQyZGQ1YzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yL0t7bv8JXH1lgtXGGgvOedOdqd rb2Nmiv/7q3HhmKQkHHOfhu/qERQu60STBvFUdkUlbNdYMIT9J67Rg7CL3dj1EGl swZHjfcHUxO1gPgdL6rOGHJk3qNRmPuOCyG2r0pdUQEEu45nNtS47x86nRNtoOwn cxYwYrWsCCQ0k1i47v+Pk8lSOoJ4iaHmqMdEZyrO/7yL/di3Y9Z98a5tf9xY5F/Y 9SquSWBwf37j0S+Hszvu78iI0uieYaKlQeZKgf5i3mlkDDG0ma7jqKlb+KGC+Pmm thoGLvqzhQGc742WDIIG0p36iv4CzcobxM+XLpg5L6uroyg8VtmMWhcIYQIDAQAB o4IC2jCCAtYwHQYDVR0OBBYEFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I2LzYzNzYw Yy1lMjFiLTRiYWYtYTlhNC03NmIzM2U0Y2U4MjEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNjM3NjBj LWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgyMS8xL0FIZGRsSEc0WFpZXzcyMG9O WkRpMlVMZFhDRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFUGCCsGAQUF BwEHAQH/BEYwRDAzBAIAATAtMAwDBAU+3GADBAI+3GgwDAMEAD7cbQMEBz7cAAME B1EMAAMDAFdrAwQCuTyIMA0EAgACMAcDBQAqABGYMB4GCCsGAQUFBwEIAQH/BA8w DaALMAkCAlNdAgMDPBYwDQYJKoZIhvcNAQELBQADggEBADqAoyLRVZVaN6OW7i1t Hi1r7HEoYw6ctsDYCRvoYrAzUNqSPoYN1lIiUCEHQsG+Zg4Q3p8WjZw7Vdtw4sVC 14zVxH7oGivFbpGp0ic93+xDep3z1qj5KKhOTQ3ipxImceMQUacC2m/NgxPJ2S3P dd9p7SxdF3hh8WxjnTaW6e5GMjoj4xmzHwhL+Pbl2VyQV+RQ0xMF1Q/3tEK6veNE iibdGV4uhbZlMsaiV9QZ8mdLc+AoszQe/MC84e4hqYIS0HCqKiTwbTfQPaIqoYfo JeEpUAJizoVmG8OdYr1eH7TzhsUandbHqcaNDko4WeC+7vzZEhGDhi+XhSjWdxUE qgA= -----END CERTIFICATE-----Generated at Sat Dec 6 07:37:15 2025 by rpki-client