This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer File: F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer (raw, json) Hash identifier: UbNK8vta1ZBPYjsH1aISo70M+Q8Vas3mV/CKsTmyuZ0= Subject key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB5ECE8E67B473876C6B9F10D3DE06B07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 12:53:13 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 1101 -- 1103 AS: 1105 -- 1108 AS: 1125 AS: 1127 -- 1133 AS: 1138 -- 1139 AS: 1141 -- 1196 AS: 1198 -- 1199 AS: 196613 IP: 145.0.0.0/16 IP: 145.2.0.0 -- 145.4.255.255 IP: 145.6.0.0/16 IP: 145.9.0.0 -- 145.10.255.255 IP: 145.15.0.0 -- 145.16.255.255 IP: 145.18.0.0 -- 145.21.255.255 IP: 145.23.0.0 -- 145.26.255.255 IP: 145.28.0.0 -- 145.30.255.255 IP: 145.33.0.0/16 IP: 145.37.0.0 -- 145.39.255.255 IP: 145.41.0.0 -- 145.42.255.255 IP: 145.44.0.0/16 IP: 145.47.0.0 -- 145.49.255.255 IP: 145.51.0.0 -- 145.52.255.255 IP: 145.56.0.0/14 IP: 145.61.0.0 -- 145.62.255.255 IP: 145.65.0.0/16 IP: 145.67.0.0/16 IP: 145.71.0.0/16 IP: 145.73.0.0 -- 145.76.255.255 IP: 145.78.0.0/16 IP: 145.81.0.0/16 IP: 145.85.0.0/16 IP: 145.88.0.0 -- 145.118.255.255 IP: 145.120.0.0/13 IP: 145.134.0.0 -- 145.175.255.255 IP: 145.192.0.0 -- 145.217.255.255 IP: 145.220.0.0/16 IP: 192.87.0.0/16 IP: 194.104.0.0/24 IP: 194.171.0.0/16 IP: 195.169.0.0/16 IP: 2001:610::/29 IP: 2001:678:230::/48 IP: 2001:67c:6ec::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:ec:e8:e6:7b:47:38:76:c6:b9:f1:0d:3d:e0:6b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 12:53:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:a6:ca:73:9b:f1:b6:60:3f:59:c0:63:ee: 27:82:e1:b5:e1:71:4b:0e:72:16:91:47:0a:50:8d: 75:24:a3:1f:cd:3f:fc:a1:54:70:dc:08:20:fa:ad: ed:ac:eb:b1:19:56:01:e6:1b:a8:1a:01:6d:8d:07: ed:5d:c0:27:bf:ec:a6:47:64:b8:20:38:12:97:54: 88:9a:d9:1a:98:00:47:93:65:2f:b5:55:e9:9b:18: 75:e3:4a:0b:3d:f2:10:07:cf:6d:3c:74:18:a5:66: b4:1d:8c:06:e3:9b:c5:cf:60:1d:a7:6f:8a:6a:ac: 5c:44:1c:eb:b2:81:b8:79:4e:15:b7:5e:03:72:e4: 27:9c:05:5e:20:c6:58:ac:6a:3d:41:ff:82:43:03: cb:79:7a:98:29:4b:34:0b:8a:be:74:41:89:19:8e: df:6f:fa:3b:dd:59:56:41:ea:c8:4c:86:07:fc:1b: dd:db:c7:c3:39:23:d9:38:15:56:20:21:80:2a:f1: 82:01:42:00:f0:4f:b8:6f:3d:82:20:60:cc:e4:a8: 85:51:d3:1b:a4:f2:e9:ff:90:18:65:ee:6c:32:ca: d8:3a:18:62:a5:88:bc:c6:bc:6e:8e:1c:9a:25:69: 3d:87:a6:c4:c9:3f:0d:41:b5:67:a9:5b:7b:e9:84: db:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.0.0.0/16 145.2.0.0-145.4.255.255 145.6.0.0/16 145.9.0.0-145.10.255.255 145.15.0.0-145.16.255.255 145.18.0.0-145.21.255.255 145.23.0.0-145.26.255.255 145.28.0.0-145.30.255.255 145.33.0.0/16 145.37.0.0-145.39.255.255 145.41.0.0-145.42.255.255 145.44.0.0/16 145.47.0.0-145.49.255.255 145.51.0.0-145.52.255.255 145.56.0.0/14 145.61.0.0-145.62.255.255 145.65.0.0/16 145.67.0.0/16 145.71.0.0/16 145.73.0.0-145.76.255.255 145.78.0.0/16 145.81.0.0/16 145.85.0.0/16 145.88.0.0-145.118.255.255 145.120.0.0/13 145.134.0.0-145.175.255.255 145.192.0.0-145.217.255.255 145.220.0.0/16 192.87.0.0/16 194.104.0.0/24 194.171.0.0/16 195.169.0.0/16 IPv6: 2001:610::/29 2001:678:230::/48 2001:67c:6ec::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1101-1103 1105-1108 1125 1127-1133 1138-1139 1141-1196 1198-1199 196613 Signature Algorithm: sha256WithRSAEncryption 06:7c:16:5c:1c:d5:be:d2:47:b6:45:eb:e7:46:81:a6:08:08: d9:b2:f0:61:fe:39:6e:91:9f:23:60:a1:7e:92:c6:07:09:be: 9d:25:5d:7a:54:0b:dd:47:03:1e:19:f1:f5:41:21:d0:20:be: c8:56:9c:b0:22:e9:92:92:97:9b:e6:3f:a7:3d:40:4e:df:8d: 1c:11:80:e6:cd:5f:31:d0:be:7d:3b:ed:3c:26:5c:a5:f5:73: c9:fe:b7:99:ae:0e:07:7f:d5:12:43:db:3c:0e:be:83:a2:7a: a0:8e:5d:59:a6:23:6d:89:54:ee:99:66:fc:d8:6a:74:16:85: 3a:24:cd:05:5e:73:4a:f0:19:23:04:b5:60:0a:09:f5:cd:72: e0:75:0a:0a:c3:94:4d:2c:47:14:9f:fe:3c:ce:92:63:7b:c9: c9:dd:44:b5:ef:32:4e:63:76:15:c9:25:8c:c6:37:46:4a:3b: 7e:a9:3b:ed:0e:b6:c9:e8:e0:11:0e:2f:bf:55:c3:50:e7:c5: f0:d7:63:c9:30:35:84:dc:aa:19:d3:55:be:b7:a5:06:85:f8: 53:9c:67:86:bf:a2:64:72:55:7a:3b:b7:9f:f4:3a:a1:95:2c: 3b:6e:38:d3:a9:80:6f:83:ad:b7:25:4f:8e:6a:66:e9:6d:32: 71:df:dd:85 -----BEGIN CERTIFICATE----- MIIHAzCCBeugAwIBAgISAZq17Ojme0c4dsa58Q094GsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MTI1MzEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzczZGIxNzc5NWQyYmYxYjRiNTM0NWM1YjI5MzkwZGJhZjQ1MjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOOmynOb8bZgP1nAY+4nguG14XFL DnIWkUcKUI11JKMfzT/8oVRw3Agg+q3trOuxGVYB5huoGgFtjQftXcAnv+ymR2S4 IDgSl1SImtkamABHk2UvtVXpmxh140oLPfIQB89tPHQYpWa0HYwG45vFz2Adp2+K aqxcRBzrsoG4eU4Vt14DcuQnnAVeIMZYrGo9Qf+CQwPLeXqYKUs0C4q+dEGJGY7f b/o73VlWQerITIYH/Bvd28fDOSPZOBVWICGAKvGCAUIA8E+4bz2CIGDM5KiFUdMb pPLp/5AYZe5sMsrYOhhipYi8xrxujhyaJWk9h6bEyT8NQbVnqVt76YTb/QIDAQAB o4IEDzCCBAswHQYDVR0OBBYEFBdz2xd5XSvxtLU0XFspOQ269FI+MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2Y3N2Ni ZC04OTNiLTQ2MTYtOWQ3Ni01NDg2MWYyMzI0OWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZjc3Y2Jk LTg5M2ItNDYxNi05ZDc2LTU0ODYxZjIzMjQ5ZC8xL0YzUGJGM2xkS19HMHRUUmNX eWs1RGJyMFVqNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBTAYIKwYB BQUHAQcBAf8EggE7MIIBNzCCARIEAgABMIIBCgMDAJEAMAoDAwGRAgMDAJEEAwMA kQYwCgMDAJEJAwMAkQowCgMDAJEPAwMAkRAwCgMDAZESAwMBkRQwCgMDAJEXAwMA kRowCgMDApEcAwMAkR4DAwCRITAKAwMAkSUDAwORIDAKAwMAkSkDAwCRKgMDAJEs MAoDAwCRLwMDAZEwMAoDAwCRMwMDAJE0AwMCkTgwCgMDAJE9AwMAkT4DAwCRQQMD AJFDAwMAkUcwCgMDAJFJAwMAkUwDAwCRTgMDAJFRAwMAkVUwCgMDA5FYAwMAkXYD AwOReDAKAwMBkYYDAwSRoDAKAwMGkcADAwGR2AMDAJHcAwMAwFcDBADCaAADAwDC qwMDAMOpMB8EAgACMBkDBQMgAQYQAwcAIAEGeAIwAwcAIAEGfAbsMFoGCCsGAQUF BwEIAQH/BEswSaBHMEUwCAICBE0CAgRPMAgCAgRRAgIEVAICBGUwCAICBGcCAgRt MAgCAgRyAgIEczAIAgIEdQICBKwwCAICBK4CAgSvAgMDAAUwDQYJKoZIhvcNAQEL BQADggEBAAZ8Flwc1b7SR7ZF6+dGgaYICNmy8GH+OW6RnyNgoX6SxgcJvp0lXXpU C91HAx4Z8fVBIdAgvshWnLAi6ZKSl5vmP6c9QE7fjRwRgObNXzHQvn077TwmXKX1 c8n+t5muDgd/1RJD2zwOvoOieqCOXVmmI22JVO6ZZvzYanQWhTokzQVec0rwGSME tWAKCfXNcuB1CgrDlE0sRxSf/jzOkmN7ycndRLXvMk5jdhXJJYzGN0ZKO36pO+0O tsno4BEOL79Vw1DnxfDXY8kwNYTcqhnTVb63pQaF+FOcZ4a/omRyVXo7t5/0OqGV LDtuONOpgG+DrbclT45qZultMnHf3YU= -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:10 2025 by rpki-client