This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer (raw, json) Hash identifier: Q4leQ8HCvmW9FJmFT36JDSY/u8nB1oIOf742bb+VlYs= Subject key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ABFA2B41DF8B34BB2C40443354EEBDB73 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 26 Nov 2025 10:08:22 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 60821 IP: 81.85.63.0/24 IP: 185.22.168.0/22 IP: 194.46.38.0/24 IP: 2a00:63e0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:a2:b4:1d:f8:b3:4b:b2:c4:04:43:35:4e:eb:db:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 26 10:08:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08fe040242651353d556b8c4240082190f271d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d4:37:8d:9a:ea:a9:d7:fe:8d:f7:96:f8:4a: 1e:32:8e:47:5d:1d:08:cb:60:00:11:87:4d:ac:e9: f6:10:f5:9f:2d:a8:c8:0a:ab:ef:63:d2:c1:f4:10: d1:c1:bd:fe:aa:9d:42:c3:21:11:ee:dc:85:4e:25: a8:24:c6:c8:aa:77:17:1f:27:e0:35:9e:d4:68:6f: fd:81:68:12:f9:fd:69:a6:c0:77:04:ae:43:ce:c3: a5:19:ff:e9:22:db:ea:55:c1:43:58:42:e0:fd:ca: 4d:dd:e3:69:d1:cb:90:72:43:3e:67:bc:75:08:31: c8:21:0a:49:62:92:b2:5c:4e:e0:4c:42:06:23:51: bf:03:a2:3e:bd:4d:e5:9c:b5:29:c7:b8:e8:bd:05: 4e:69:a3:43:fa:84:d0:a4:5f:b8:67:21:a2:25:e0: 52:e6:d0:70:9a:c0:00:2b:82:65:28:d4:93:2d:05: f2:af:ec:40:ee:5d:98:d6:18:4b:ea:8d:b9:ac:8d: f9:aa:dc:94:3a:a3:78:41:fb:7a:51:35:f1:41:e6: 14:d4:18:ea:da:d3:52:67:c4:b3:15:17:98:4e:d6: 51:66:71:68:ad:e5:de:94:bf:e5:b1:a6:45:91:36: 18:55:19:a8:bf:dd:7f:f3:05:ec:31:a3:43:56:32: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.63.0/24 185.22.168.0/22 194.46.38.0/24 IPv6: 2a00:63e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 60821 Signature Algorithm: sha256WithRSAEncryption 7a:e3:7a:ed:47:cc:30:86:17:b7:69:5f:7d:79:27:0d:45:84: 19:f9:68:b9:f4:ff:35:4e:37:02:b6:5a:07:df:51:13:d4:73: 80:e8:9f:79:d3:c3:ca:0c:50:21:c4:81:62:4b:26:97:50:e4: af:2e:2b:3b:0f:1b:50:c3:a4:e2:1e:1f:7f:71:1a:74:2e:e7: 35:72:01:f5:f9:c7:0c:7d:91:97:b1:8e:4e:49:7c:bc:74:17: 7e:dd:8c:3c:f9:9a:6a:f2:30:46:20:45:09:eb:cb:74:a1:cb: f5:d5:97:a8:96:31:c4:23:8e:63:d4:38:a0:43:b7:b9:66:9b: c0:9c:a0:d9:b6:0d:d8:82:e5:4e:66:99:5e:9a:4b:48:27:40: a8:b8:ef:96:ee:00:2c:0e:e8:2c:67:3e:98:5b:91:1d:9a:fd: 01:ee:ce:0c:c8:c0:38:c1:85:c7:42:1d:ab:0c:b6:32:9c:4b: 37:c7:3a:1a:9d:72:51:c3:d1:1d:c1:18:91:06:4f:6a:04:50: 5e:85:21:4a:86:bf:d5:8f:96:b7:d9:1e:da:2d:a8:fa:56:ef: 22:d8:6f:0e:89:81:ab:50:9e:2e:4e:f1:b3:8c:24:bf:3f:50: 94:fb:64:4b:03:b2:db:d0:bc:71:3c:4d:c1:27:1f:82:d4:18: ba:45:86:ed -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZq/orQd+LNLssQEQzVO69tzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI2MTAwODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGZlMDQwMjQyNjUxMzUzZDU1NmI4YzQyNDAwODIxOTBmMjcxZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptQ3jZrqqdf+jfeW+EoeMo5HXR0I y2AAEYdNrOn2EPWfLajICqvvY9LB9BDRwb3+qp1CwyER7tyFTiWoJMbIqncXHyfg NZ7UaG/9gWgS+f1ppsB3BK5DzsOlGf/pItvqVcFDWELg/cpN3eNp0cuQckM+Z7x1 CDHIIQpJYpKyXE7gTEIGI1G/A6I+vU3lnLUpx7jovQVOaaND+oTQpF+4ZyGiJeBS 5tBwmsAAK4JlKNSTLQXyr+xA7l2Y1hhL6o25rI35qtyUOqN4Qft6UTXxQeYU1Bjq 2tNSZ8SzFReYTtZRZnForeXelL/lsaZFkTYYVRmov91/8wXsMaNDVjJnEwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFAj+BAJCZRNT1Va4xCQAghkPJx0TMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzRlYmMz My1lZTU0LTQzN2MtOGExYi1kZWM0ODA3Y2Q3ZTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvNGViYzMz LWVlNTQtNDM3Yy04YTFiLWRlYzQ4MDdjZDdlNi8xL0NQNEVBa0psRTFQVlZyakVK QUNDR1E4bkhSTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQAUVU/AwQCuRaoAwQAwi4mMA0EAgACMAcDBQAq AGPgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtlTANBgkqhkiG9w0BAQsFAAOC AQEAeuN67UfMMIYXt2lffXknDUWEGfloufT/NU43ArZaB99RE9RzgOifedPDygxQ IcSBYksml1Dkry4rOw8bUMOk4h4ff3EadC7nNXIB9fnHDH2Rl7GOTkl8vHQXft2M PPmaavIwRiBFCevLdKHL9dWXqJYxxCOOY9Q4oEO3uWabwJyg2bYN2ILlTmaZXppL SCdAqLjvlu4ALA7oLGc+mFuRHZr9Ae7ODMjAOMGFx0Idqwy2MpxLN8c6Gp1yUcPR HcEYkQZPagRQXoUhSoa/1Y+Wt9ke2i2o+lbvIthvDomBq1CeLk7xs4wkvz9QlPtk SwOy29C8cTxNwScfgtQYukWG7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:05 2025 by rpki-client