This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer File: IbrXTn9sCUmic2pXR4SW19i0UOY.cer (raw, json) Hash identifier: qFq5OCNU0ObmgeXmR8iNo4nF5GKBfR2Pm9jXPmVnrOc= Subject key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3A28C9A51E92A0AADC30097BD486CD2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 09:54:32 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 13264 IP: 37.26.144.0/21 IP: 46.116.0.0/15 IP: 46.210.0.0/16 IP: 62.0.0.0/16 IP: 62.90.0.0/16 IP: 80.250.144.0/20 IP: 82.166.0.0/16 IP: 85.64.0.0/15 IP: 85.250.0.0/16 IP: 89.138.0.0/15 IP: 93.172.0.0/15 IP: 95.35.0.0/16 IP: 109.186.0.0/16 IP: 109.253.0.0/16 IP: 141.226.132.0/24 IP: 141.226.134.0/24 IP: 147.161.8.0/21 IP: 147.234.2.0 -- 147.234.22.255 IP: 147.234.24.0/23 IP: 147.234.27.0 -- 147.234.34.255 IP: 147.234.41.0 -- 147.234.43.255 IP: 147.234.52.0/23 IP: 147.234.74.0 -- 147.234.90.255 IP: 176.12.128.0 -- 176.13.255.255 IP: 192.115.84.0/22 IP: 192.115.112.0/20 IP: 192.115.140.0/22 IP: 192.115.152.0 -- 192.115.163.255 IP: 192.115.200.0/21 IP: 192.116.32.0/19 IP: 192.118.28.0/22 IP: 192.118.84.0/22 IP: 194.90.0.0/16 IP: 199.203.0.0/16 IP: 207.232.0.0/18 IP: 212.29.192.0/18 IP: 212.143.0.0/16 IP: 212.150.0.0/16 IP: 212.235.0.0/17 IP: 217.132.0.0/16 IP: 2001:4df0::/29 IP: 2a02:148::/29 IP: 2a03:c5c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a2:8c:9a:51:e9:2a:0a:ad:c3:00:97:bd:48:6c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 09:54:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:77:55:05:e9:62:3b:5b:16:12:da:be:f2: 9b:8d:11:6d:6d:85:c7:b2:2e:86:be:f5:05:4f:82: 1e:6c:33:d3:5e:19:4d:74:a2:44:d1:9b:5f:da:21: f2:0e:d8:b4:b2:97:84:2c:a0:eb:81:60:12:40:71: f4:a1:40:75:e9:8e:e3:9c:55:bc:a6:2b:bf:2a:92: 7f:06:2a:57:c6:b1:13:c8:77:3a:d1:c3:50:c2:bf: 9f:a7:4f:94:a3:a0:20:31:92:38:c5:38:07:70:75: 40:77:09:23:2e:89:75:2c:2e:b2:4e:16:2e:9c:e9: 73:e7:f4:a8:54:ee:d1:6c:1c:ef:10:ea:b0:30:ed: 82:3f:c1:74:61:2d:4a:6c:7b:36:1f:8b:a6:03:37: 59:37:3c:aa:8b:d6:24:0f:a3:12:a1:4e:a6:30:0e: 83:d9:90:e6:41:50:53:dd:e5:36:a2:ac:3e:41:32: 88:a6:08:fc:5f:ee:a1:45:1d:04:d8:e1:1c:c6:1d: f7:d3:f5:ad:5f:57:b3:d1:da:e8:46:6c:64:b3:05: ac:3f:e6:90:3b:cb:de:96:3d:4b:fd:c4:11:8e:85: 3f:59:7f:57:2b:35:da:1d:63:12:dd:2f:3c:95:bd: 8b:32:bd:6c:b9:e5:52:2d:dd:2c:73:f2:26:0f:6b: df:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.144.0/21 46.116.0.0/15 46.210.0.0/16 62.0.0.0/16 62.90.0.0/16 80.250.144.0/20 82.166.0.0/16 85.64.0.0/15 85.250.0.0/16 89.138.0.0/15 93.172.0.0/15 95.35.0.0/16 109.186.0.0/16 109.253.0.0/16 141.226.132.0/24 141.226.134.0/24 147.161.8.0/21 147.234.2.0-147.234.22.255 147.234.24.0/23 147.234.27.0-147.234.34.255 147.234.41.0-147.234.43.255 147.234.52.0/23 147.234.74.0-147.234.90.255 176.12.128.0-176.13.255.255 192.115.84.0/22 192.115.112.0/20 192.115.140.0/22 192.115.152.0-192.115.163.255 192.115.200.0/21 192.116.32.0/19 192.118.28.0/22 192.118.84.0/22 194.90.0.0/16 199.203.0.0/16 207.232.0.0/18 212.29.192.0/18 212.143.0.0/16 212.150.0.0/16 212.235.0.0/17 217.132.0.0/16 IPv6: 2001:4df0::/29 2a02:148::/29 2a03:c5c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13264 Signature Algorithm: sha256WithRSAEncryption 6c:48:fd:71:de:51:2d:c1:8f:31:13:de:73:b0:47:88:50:6d: d2:d9:d2:10:7d:6c:93:e9:34:63:1a:fb:f7:e5:1c:1d:aa:9c: 35:c8:23:3d:0f:56:d3:57:45:2c:eb:ba:b5:b8:68:44:68:83: cf:67:ce:46:ed:7e:b8:a6:05:03:68:70:aa:47:1a:f1:0d:e7: 3d:cf:da:c1:63:b6:21:cc:48:b4:c8:44:66:47:4e:d1:33:b8: 72:50:88:d6:52:7a:84:32:f7:77:2b:b2:c2:27:f7:ea:c2:be: c2:b2:bc:cc:c8:3b:ec:1a:8d:02:4c:25:9d:8c:ae:37:eb:ba: 5b:19:3d:0e:84:44:b6:a8:ad:0e:df:d8:5b:59:25:8a:8b:ae: 2e:ce:9f:4d:3b:e1:09:d9:35:29:20:98:f6:3d:15:3a:a5:14: 9e:ac:7c:01:16:11:4b:f1:aa:fd:b9:90:05:7a:dd:49:48:c4: e0:49:c3:e1:37:bf:3c:07:53:77:94:23:0b:9a:66:ec:36:ca: b6:9e:24:11:db:d3:ea:f2:f7:68:f3:e9:7e:22:ac:7d:db:f8: d5:17:0c:4d:5c:82:2d:bf:ed:a1:e9:d7:6b:92:8e:bc:4b:10: 1f:bc:e7:27:da:3f:26:d3:80:7e:4f:ec:34:66:e8:1c:22:cf: 3c:06:7e:da -----BEGIN CERTIFICATE----- MIIGwjCCBaqgAwIBAgISAZrjooyaUekqCq3DAJe9SGzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMDk1NDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWJhZDc0ZTdmNmMwOTQ5YTI3MzZhNTc0Nzg0OTZkN2Q4YjQ1MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zd3VQXpYjtbFhLavvKbjRFtbYXH si6GvvUFT4IebDPTXhlNdKJE0Ztf2iHyDti0speELKDrgWASQHH0oUB16Y7jnFW8 piu/KpJ/BipXxrETyHc60cNQwr+fp0+Uo6AgMZI4xTgHcHVAdwkjLol1LC6yThYu nOlz5/SoVO7RbBzvEOqwMO2CP8F0YS1KbHs2H4umAzdZNzyqi9YkD6MSoU6mMA6D 2ZDmQVBT3eU2oqw+QTKIpgj8X+6hRR0E2OEcxh330/WtX1ez0droRmxkswWsP+aQ O8velj1L/cQRjoU/WX9XKzXaHWMS3S88lb2LMr1sueVSLd0sc/ImD2vfDwIDAQAB o4IDzjCCA8owHQYDVR0OBBYEFCG6105/bAlJonNqV0eEltfYtFDmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYwLzhkZGMz OC03YTFhLTQ5MDYtYThlZC00NDMzMjI5YTg0NzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjAvOGRkYzM4 LTdhMWEtNDkwNi1hOGVkLTQ0MzMyMjlhODQ3My8xL0liclhUbjlzQ1VtaWMycFhS NFNXMTlpMFVPWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIIBTAYIKwYB BQUHAQcBAf8EggE7MIIBNzCCARYEAgABMIIBDgMEAyUakAMDAS50AwMALtIDAwA+ AAMDAD5aAwQEUPqQAwMAUqYDAwFVQAMDAFX6AwMBWYoDAwFdrAMDAF8jAwMAbboD AwBt/QMEAI3ihAMEAI3ihgMEA5OhCDAMAwQBk+oCAwQAk+oWAwQBk+oYMAwDBACT 6hsDBACT6iIwDAMEAJPqKQMEApPqKAMEAZPqNDAMAwQBk+pKAwQAk+paMAsDBAew DIADAwGwDAMEAsBzVAMEBMBzcAMEAsBzjDAMAwQDwHOYAwQCwHOgAwQDwHPIAwQF wHQgAwQCwHYcAwQCwHZUAwMAwloDAwDHywMEBs/oAAMEBtQdwAMDANSPAwMA1JYD BAfU6wADAwDZhDAbBAIAAjAVAwUDIAFN8AMFAyoCAUgDBQAqA8XAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjPQMA0GCSqGSIb3DQEBCwUAA4IBAQBsSP1x3lEtwY8x E95zsEeIUG3S2dIQfWyT6TRjGvv35Rwdqpw1yCM9D1bTV0Us67q1uGhEaIPPZ85G 7X64pgUDaHCqRxrxDec9z9rBY7YhzEi0yERmR07RM7hyUIjWUnqEMvd3K7LCJ/fq wr7CsrzMyDvsGo0CTCWdjK4367pbGT0OhES2qK0O39hbWSWKi64uzp9NO+EJ2TUp IJj2PRU6pRSerHwBFhFL8ar9uZAFet1JSMTgScPhN788B1N3lCMLmmbsNsq2niQR 29Pq8vdo8+l+Iqx92/jVFwxNXIItv+2h6ddrko68SxAfvOcn2j8m04B+T+w0Zugc Is88Bn7a -----END CERTIFICATE-----Generated at Sat Dec 6 06:38:52 2025 by rpki-client