This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer File: D-v7_W-TfFrjnj446KuDhBB0IaY.cer (raw, json) Hash identifier: oUvDGH7eDrVSMRTa/UFcL41V+8mjYJqvuRr7haTVYsw= Subject key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB65ACF0063CC259F3E65CA9646860378 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 14:53:15 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 8849 AS: 44571 AS: 49287 AS: 50098 AS: 56630 IP: 5.42.206.0/24 IP: 5.44.249.0/24 IP: 5.182.228.0/22 IP: 5.188.172.0/22 IP: 5.188.180.0/22 IP: 31.40.216.0/22 IP: 31.222.226.0/24 IP: 45.135.120.0/22 IP: 45.141.8.0/22 IP: 45.150.232.0/22 IP: 46.21.84.0/22 IP: 62.122.187.0/24 IP: 77.72.16.0/21 IP: 88.210.36.0/22 IP: 88.218.240.0/22 IP: 89.34.238.0/24 IP: 89.36.160.0/22 IP: 89.40.226.0/24 IP: 91.192.80.0/22 IP: 91.201.64.0/22 IP: 91.202.60.0/22 IP: 92.119.88.0/22 IP: 93.189.56.0/21 IP: 95.81.64.0/21 IP: 95.81.80.0/21 IP: 95.81.104.0/21 IP: 95.174.68.0/22 IP: 103.82.100.0/23 IP: 103.97.88.0/22 IP: 103.111.112.0/22 IP: 103.253.36.0/23 IP: 109.122.200.0/21 IP: 146.19.196.0/24 IP: 158.255.76.0/24 IP: 176.97.192.0/24 IP: 185.6.12.0/22 IP: 185.35.220.0/23 IP: 185.110.216.0/23 IP: 185.120.136.0/22 IP: 185.131.64.0/22 IP: 185.135.84.0/22 IP: 185.140.12.0/22 IP: 185.140.208.0/22 IP: 185.147.53.0/24 IP: 185.224.248.0/22 IP: 185.230.245.0/24 IP: 185.234.144.0/22 IP: 185.246.152.0/22 IP: 192.77.240.0/20 IP: 193.35.224.0/24 IP: 194.59.46.0/24 IP: 194.59.59.0/24 IP: 194.59.142.0/24 IP: 194.59.155.0/24 IP: 195.211.220.0/22 IP: 195.238.124.0/22 IP: 212.23.200.0/24 IP: 213.111.128.0/20 IP: 213.173.32.0/22 IP: 213.183.32.0 -- 213.183.53.255 IP: 213.183.58.0 -- 213.183.63.255 IP: 213.226.68.0/22 IP: 217.30.8.0/22 IP: 2a06:f900::/29 IP: 2a0d:8400::/32 IP: 2a0f:c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:5a:cf:00:63:cc:25:9f:3e:65:ca:96:46:86:03:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 14:53:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:1e:5e:6d:82:61:e3:22:c1:0e:c7:b5:d4: 81:80:84:0e:4f:d7:c0:f3:82:7a:d1:bf:40:9e:19: 23:45:1c:27:a1:c9:0a:e8:2c:d1:db:54:f2:60:dd: d7:7c:43:cf:e9:16:61:ac:e2:c9:21:43:9b:84:2b: f2:2b:3e:b8:2a:fd:5b:57:75:fe:37:b7:b6:42:d3: 87:6b:97:20:76:c8:0c:17:97:8e:ba:f5:a3:15:b1: 4a:8b:0a:88:f9:7a:ee:b1:d5:18:82:cd:8f:51:f7: 1c:d4:91:2e:10:5e:45:9f:c2:20:8f:66:99:a7:65: 67:fa:02:5c:83:22:ba:ff:fc:6c:fc:5e:41:e5:95: a4:a3:14:44:fd:b9:81:6c:04:fa:61:29:b4:fc:84: e7:5e:fc:3d:55:49:97:69:50:80:15:22:5a:a6:fe: 31:a1:a0:d9:83:10:95:11:d0:fc:1a:85:f9:54:05: 01:84:ab:6a:31:ef:bb:75:a8:b0:cf:3c:e3:f7:2a: 0f:c7:28:57:16:b1:7e:d3:e6:31:a8:b1:7a:c6:c6: ae:2f:1f:4e:cf:67:62:c6:d1:00:94:14:f3:14:bc: ce:ff:c8:8c:27:b1:9c:b3:ba:b5:a4:af:48:8d:0a: 1d:0d:03:c9:3c:d8:44:f9:c4:5a:f1:fe:b8:1b:ec: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.206.0/24 5.44.249.0/24 5.182.228.0/22 5.188.172.0/22 5.188.180.0/22 31.40.216.0/22 31.222.226.0/24 45.135.120.0/22 45.141.8.0/22 45.150.232.0/22 46.21.84.0/22 62.122.187.0/24 77.72.16.0/21 88.210.36.0/22 88.218.240.0/22 89.34.238.0/24 89.36.160.0/22 89.40.226.0/24 91.192.80.0/22 91.201.64.0/22 91.202.60.0/22 92.119.88.0/22 93.189.56.0/21 95.81.64.0/21 95.81.80.0/21 95.81.104.0/21 95.174.68.0/22 103.82.100.0/23 103.97.88.0/22 103.111.112.0/22 103.253.36.0/23 109.122.200.0/21 146.19.196.0/24 158.255.76.0/24 176.97.192.0/24 185.6.12.0/22 185.35.220.0/23 185.110.216.0/23 185.120.136.0/22 185.131.64.0/22 185.135.84.0/22 185.140.12.0/22 185.140.208.0/22 185.147.53.0/24 185.224.248.0/22 185.230.245.0/24 185.234.144.0/22 185.246.152.0/22 192.77.240.0/20 193.35.224.0/24 194.59.46.0/24 194.59.59.0/24 194.59.142.0/24 194.59.155.0/24 195.211.220.0/22 195.238.124.0/22 212.23.200.0/24 213.111.128.0/20 213.173.32.0/22 213.183.32.0-213.183.53.255 213.183.58.0-213.183.63.255 213.226.68.0/22 217.30.8.0/22 IPv6: 2a06:f900::/29 2a0d:8400::/32 2a0f:c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8849 44571 49287 50098 56630 Signature Algorithm: sha256WithRSAEncryption 36:38:2d:b9:bf:25:8f:8c:6f:f6:36:e2:bb:8e:7e:c0:ed:ab: b5:16:ce:ea:bd:f1:d5:ff:5e:de:4d:ad:51:d5:ca:37:a4:44: e2:ac:8c:b9:aa:59:14:08:8c:01:56:92:b7:aa:ca:30:0f:c8: e7:ea:5b:b4:20:7f:38:5c:a0:aa:ce:20:2d:2f:5a:be:d6:96: 00:d6:6d:c0:53:bd:fe:ce:76:2a:ef:3e:22:75:a2:6c:8e:7a: df:c4:8b:ec:4e:ac:80:93:00:d6:2a:4b:09:1b:2b:ec:65:95: 98:7e:b4:b0:cc:9a:d2:13:05:48:33:46:27:94:89:28:ed:f0: bc:41:62:f0:e9:aa:92:b3:f5:e0:e7:ae:c0:b7:be:a2:48:0e: 4f:37:75:c0:3b:52:d5:11:58:d9:cf:f8:70:bf:56:56:fe:98: 1a:a9:21:a0:96:4b:66:4a:5a:a8:21:ed:c1:47:c9:60:4c:ad: ea:fe:b6:e6:e5:26:a1:f9:67:0a:84:5e:d5:32:76:af:9a:08: ac:20:e2:5b:f5:cd:69:fe:9f:cf:50:b9:bf:de:2c:b3:bf:d8: 10:18:cb:4a:99:9a:55:e4:37:87:d9:2f:4a:84:ab:bd:e9:97: 0d:18:8a:63:2c:dd:b9:be:95:35:4b:82:fe:82:4f:1a:ec:05: e6:8c:61:66 -----BEGIN CERTIFICATE----- MIIHUjCCBjqgAwIBAgISAZq2Ws8AY8wlnz5lypZGhgN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MTQ1MzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmViZmJmZDZmOTM3YzVhZTM5ZTNlMzhlOGFiODM4NDEwNzQyMWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b8eXm2CYeMiwQ7HtdSBgIQOT9fA 84J60b9AnhkjRRwnockK6CzR21TyYN3XfEPP6RZhrOLJIUObhCvyKz64Kv1bV3X+ N7e2QtOHa5cgdsgMF5eOuvWjFbFKiwqI+XrusdUYgs2PUfcc1JEuEF5Fn8Igj2aZ p2Vn+gJcgyK6//xs/F5B5ZWkoxRE/bmBbAT6YSm0/ITnXvw9VUmXaVCAFSJapv4x oaDZgxCVEdD8GoX5VAUBhKtqMe+7daiwzzzj9yoPxyhXFrF+0+YxqLF6xsauLx9O z2dixtEAlBTzFLzO/8iMJ7Gcs7q1pK9IjQodDQPJPNhE+cRa8f64G+z0gwIDAQAB o4IEXjCCBFowHQYDVR0OBBYEFA/r+/1vk3xa454+OOirg4QQdCGmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlLzY3ZDgz NC0yNjEyLTQ3MzktOWY0Yi03ZDcwMzc0ZDc2ZDIvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvNjdkODM0 LTI2MTItNDczOS05ZjRiLTdkNzAzNzRkNzZkMi8xL0QtdjdfVy1UZkZyam5qNDQ2 S3VEaEJCMElhWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIByAYIKwYB BQUHAQcBAf8EggG3MIIBszCCAZIEAgABMIIBigMEAAUqzgMEAAUs+QMEAgW25AME AgW8rAMEAgW8tAMEAh8o2AMEAB/e4gMEAi2HeAMEAi2NCAMEAi2W6AMEAi4VVAME AD56uwMEA01IEAMEAljSJAMEAlja8AMEAFki7gMEAlkkoAMEAFko4gMEAlvAUAME AlvJQAMEAlvKPAMEAlx3WAMEA129OAMEA19RQAMEA19RUAMEA19RaAMEAl+uRAME AWdSZAMEAmdhWAMEAmdvcAMEAWf9JAMEA216yAMEAJITxAMEAJ7/TAMEALBhwAME ArkGDAMEAbkj3AMEAblu2AMEArl4iAMEArmDQAMEArmHVAMEArmMDAMEArmM0AME ALmTNQMEArng+AMEALnm9QMEArnqkAMEArn2mAMEBMBN8AMEAMEj4AMEAMI7LgME AMI7OwMEAMI7jgMEAMI7mwMEAsPT3AMEAsPufAMEANQXyAMEBNVvgAMEAtWtIDAM AwQF1bcgAwQB1bc0MAwDBAHVtzoDBAbVtwADBALV4kQDBALZHggwGwQCAAIwFQMF AyoG+QADBQAqDYQAAwUDKg8AwDAtBggrBgEFBQcBCAEB/wQeMBygGjAYAgIikQID AK4bAgMAwIcCAwDDsgIDAN02MA0GCSqGSIb3DQEBCwUAA4IBAQA2OC25vyWPjG/2 NuK7jn7A7au1Fs7qvfHV/17eTa1R1co3pETirIy5qlkUCIwBVpK3qsowD8jn6lu0 IH84XKCqziAtL1q+1pYA1m3AU73+znYq7z4idaJsjnrfxIvsTqyAkwDWKksJGyvs ZZWYfrSwzJrSEwVIM0YnlIko7fC8QWLw6aqSs/Xg567At76iSA5PN3XAO1LVEVjZ z/hwv1ZW/pgaqSGglktmSlqoIe3BR8lgTK3q/rbm5Sah+WcKhF7VMnavmgisIOJb 9c1p/p/PULm/3iyzv9gQGMtKmZpV5DeH2S9KhKu96ZcNGIpjLN25vpU1S4L+gk8a 7AXmjGFm -----END CERTIFICATE-----Generated at Sat Dec 6 06:11:35 2025 by rpki-client