This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer File: F1pykOwpjBtk2YYwbxsk09M2aYY.cer (raw, json) Hash identifier: MMV+q2E/jUTeYcSwEc3qE0zvDyrXxoQN7xOHytzMUdk= Subject key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE534278F4D20D33F83CAAE51C80C1FE9 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 17:13:11 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 136.172.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:34:27:8f:4d:20:d3:3f:83:ca:ae:51:c8:0c:1f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 17:13:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=175a7290ec298c1b64d986306f1b24d3d3366986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:b5:45:b7:9d:a4:3f:71:ba:6c:28:f3:36: d7:4c:99:de:84:db:f1:cc:d2:8b:f9:67:ed:6c:26: f2:c6:50:40:5d:ae:19:93:1f:c8:f3:92:8a:0d:bf: 7c:96:8a:6f:0a:85:80:85:ad:a6:61:96:bf:8b:14: f2:b5:7f:83:93:c1:dc:f0:86:c4:15:1a:2b:54:bb: 92:2b:d7:c4:d1:e0:9f:18:df:3c:84:67:b1:26:df: 32:2c:d3:f2:53:a5:79:d5:d7:62:2d:65:e5:ef:b8: 78:4a:aa:07:ad:60:8e:5a:21:47:c0:61:f2:82:89: 4f:d5:53:8c:dd:f4:28:43:c8:81:35:6c:15:35:32: 03:bf:12:48:ae:4d:11:19:82:7b:9b:76:de:7d:be: 79:da:aa:7d:fe:08:db:ef:95:24:61:71:b5:78:e5: da:05:2f:ad:cb:05:aa:fc:5e:5b:2e:f3:b4:1c:00: 7c:e0:bc:2e:3f:f1:d0:68:a9:b1:e5:f4:bb:40:15: 43:d4:e3:bb:b3:a7:b0:5c:e7:2b:0f:e6:3e:ae:d3: 67:bf:60:d2:22:00:e7:60:4e:70:3b:de:3b:77:32: 2e:66:f6:11:1b:f0:65:6b:9a:8c:58:da:c4:61:12: c5:25:d8:3e:1f:60:0e:44:af:c0:27:d0:11:20:13: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.172.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0c:ed:13:b1:a5:9c:5d:7f:50:7e:f4:72:ea:b3:13:af:1b:c1: b7:e2:24:b1:74:32:c9:11:18:cc:18:bb:1e:ac:7c:be:eb:ee: 45:bf:ec:f1:57:e1:77:d8:22:3b:3e:fa:82:e0:b0:a8:bf:0f: 2d:1c:05:a6:2f:97:8b:85:5c:e8:d6:a3:b9:02:09:26:77:e4: ff:2b:14:7f:ce:8c:2f:25:5a:d3:f7:2a:b7:d3:5a:56:fb:22: 38:74:77:10:fd:da:39:80:ff:99:81:92:60:e1:c1:d5:9a:0e: 19:1d:d6:11:48:16:e8:f5:4d:8b:ab:77:75:c8:c9:22:50:bf: cd:90:09:84:b4:4f:cc:a4:10:6e:44:56:e4:7e:ea:53:f8:b4: 54:6d:12:d9:b7:be:50:03:e3:1a:64:d9:79:60:ce:35:05:3b: 36:bc:51:95:d3:39:91:58:64:e2:77:81:60:d9:cd:bd:1e:ca: 7a:ac:78:54:74:bc:91:34:0f:24:f4:7e:86:7c:ef:3e:27:64: 5c:b2:5a:eb:ca:6c:af:61:bd:a4:e4:a3:09:8f:eb:1b:48:0e: 39:0b:a8:e2:fd:99:3b:e1:36:84:ef:ad:36:57:96:0b:cd:62: 89:06:85:9e:21:99:79:38:8d:75:32:01:f8:b0:f7:05:5b:f5: 0e:cb:ab:d1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgISAZrlNCePTSDTP4PKrlHIDB/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTcxMzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzVhNzI5MGVjMjk4YzFiNjRkOTg2MzA2ZjFiMjRkM2QzMzY2OTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJK1RbedpD9xumwo8zbXTJnehNvx zNKL+WftbCbyxlBAXa4Zkx/I85KKDb98lopvCoWAha2mYZa/ixTytX+Dk8Hc8IbE FRorVLuSK9fE0eCfGN88hGexJt8yLNPyU6V51ddiLWXl77h4SqoHrWCOWiFHwGHy golP1VOM3fQoQ8iBNWwVNTIDvxJIrk0RGYJ7m3befb552qp9/gjb75UkYXG1eOXa BS+tywWq/F5bLvO0HAB84LwuP/HQaKmx5fS7QBVD1OO7s6ewXOcrD+Y+rtNnv2DS IgDnYE5wO947dzIuZvYRG/Bla5qMWNrEYRLFJdg+H2AORK/AJ9ARIBM2cQIDAQAB o4ICgzCCAn8wHQYDVR0OBBYEFBdacpDsKYwbZNmGMG8bJNPTNmmGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2JkN2Yz MC0wN2NhLTQ5YWMtODBjOS03ZWFmZjZiMGY4Y2QvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvYmQ3ZjMw LTA3Y2EtNDlhYy04MGM5LTdlYWZmNmIwZjhjZC8xL0YxcHlrT3dwakJ0azJZWXdi eHNrMDlNMmFZWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF BwEHAQH/BA8wDTALBAIAATAFAwMAiKwwDQYJKoZIhvcNAQELBQADggEBAAztE7Gl nF1/UH70cuqzE68bwbfiJLF0MskRGMwYux6sfL7r7kW/7PFX4XfYIjs++oLgsKi/ Dy0cBaYvl4uFXOjWo7kCCSZ35P8rFH/OjC8lWtP3KrfTWlb7Ijh0dxD92jmA/5mB kmDhwdWaDhkd1hFIFuj1TYurd3XIySJQv82QCYS0T8ykEG5EVuR+6lP4tFRtEtm3 vlAD4xpk2XlgzjUFOza8UZXTOZFYZOJ3gWDZzb0eynqseFR0vJE0DyT0foZ87z4n ZFyyWuvKbK9hvaTkowmP6xtIDjkLqOL9mTvhNoTvrTZXlgvNYokGhZ4hmXk4jXUy Afiw9wVb9Q7Lq9E= -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:28 2025 by rpki-client