This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer File: IqXYQFPisMMTrx47pRAkZqX3lng.cer (raw, json) Hash identifier: OqYKwWUU0gmCf4yR2EhSpJdOBqwWIUQdAF6s6hAnkRo= Subject key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3A1CFBC77C2ED396DC130E67F084A6F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 09:53:43 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 137.174.0.0/16 IP: 141.137.0.0/16 IP: 147.123.0.0/16 IP: 155.115.0.0/16 IP: 155.204.0.0/16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a1:cf:bc:77:c2:ed:39:6d:c1:30:e6:7f:08:4a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 09:53:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:ff:17:c0:4d:00:e9:82:a1:2d:fd:a1:bd: 40:64:e4:3a:67:8e:b4:d9:2a:25:4f:2c:20:6c:bc: 46:a0:46:c2:40:63:bc:76:44:db:92:dd:2a:72:43: 1f:f2:39:f1:30:4e:3f:b5:f2:34:27:23:77:80:53: 42:5c:b7:ad:bc:02:f4:2d:7b:a0:98:62:ae:e3:6d: e2:af:18:50:62:11:0a:fb:24:57:30:83:5e:47:94: 2b:79:b1:bc:8a:4e:41:0f:f3:08:00:1c:67:97:5a: 15:b5:90:89:a3:9f:29:89:8b:18:b7:90:3d:e9:62: 17:0e:f8:1a:a6:99:2a:9b:3e:62:9d:6b:a7:b7:a3: e1:48:ef:88:16:81:17:4f:e2:fa:da:b2:96:bc:ad: 96:9a:a7:07:71:85:bc:ae:f5:8c:a5:fd:c9:d6:60: 2d:ec:2c:0a:9b:ee:08:b5:3f:da:87:0f:7f:28:53: 0a:d0:3f:c4:32:18:e1:9b:3c:9b:25:a4:f0:49:cc: bc:d3:63:86:d5:20:b5:1b:3b:27:67:e2:64:8d:24: b4:6f:d2:e6:c4:4c:e1:64:7a:b2:5c:dc:52:93:72: 95:34:fb:c5:b8:99:b0:39:6a:e6:b6:81:3a:d2:8a: a6:dc:f7:cf:6d:6f:c5:0f:04:11:ac:dc:36:71:28: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 137.174.0.0/16 141.137.0.0/16 147.123.0.0/16 155.115.0.0/16 155.204.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:c5:c3:4e:72:52:cb:98:22:9c:4c:3b:96:b8:d4:81:f9:20: 41:ce:08:5a:85:31:89:21:ef:b5:67:34:48:0c:8b:06:e4:d9: e2:c8:ab:f4:33:2b:e1:bb:ff:98:40:de:59:1c:2a:92:e7:e5: 02:bc:bd:2e:c3:79:34:c6:48:6a:55:53:b8:ea:c7:3a:74:63: 12:b5:28:23:ee:f8:0e:7a:78:5a:8b:31:e7:d3:34:fd:46:85: 98:19:9e:14:ab:68:99:da:1c:fe:62:4e:12:bb:bc:c8:21:8e: 1d:7e:22:bb:b7:be:12:ba:00:0c:3f:ed:0d:b5:8d:09:1b:5f: 6a:0a:7a:ff:73:4b:24:53:42:08:12:ee:d4:1a:09:87:27:34: e5:9e:c1:79:41:8a:11:6b:d2:54:75:62:cf:46:18:80:3b:e3: 84:ba:79:de:12:93:9e:af:21:0d:d2:7b:ea:cc:ec:06:9a:e5: cf:c0:f8:e6:e5:ff:56:3b:16:00:bf:28:d9:36:85:1b:b1:98: d2:7c:8e:09:bf:53:7c:96:b2:af:6d:51:48:bb:85:19:52:e5: df:4c:39:1f:ce:d2:84:0f:db:5e:96:46:b3:20:75:07:45:4f: 43:dc:38:1f:b1:5b:87:ab:e1:12:f5:b9:07:6e:b9:2e:86:b7: 7d:e3:15:4d -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISAZrjoc+8d8LtOW3BMOZ/CEpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMDk1MzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmE1ZDg0MDUzZTJiMGMzMTNhZjFlM2JhNTEwMjQ2NmE1Zjc5Njc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp7/F8BNAOmCoS39ob1AZOQ6Z460 2SolTywgbLxGoEbCQGO8dkTbkt0qckMf8jnxME4/tfI0JyN3gFNCXLetvAL0LXug mGKu423irxhQYhEK+yRXMINeR5QrebG8ik5BD/MIABxnl1oVtZCJo58piYsYt5A9 6WIXDvgappkqmz5inWunt6PhSO+IFoEXT+L62rKWvK2WmqcHcYW8rvWMpf3J1mAt 7CwKm+4ItT/ahw9/KFMK0D/EMhjhmzybJaTwScy802OG1SC1GzsnZ+JkjSS0b9Lm xEzhZHqyXNxSk3KVNPvFuJmwOWrmtoE60oqm3PfPbW/FDwQRrNw2cSg3gwIDAQAB o4IClzCCApMwHQYDVR0OBBYEFCKl2EBT4rDDE68eO6UQJGal95Z4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2UzZmI3 ZC1kZDRiLTRkODUtYjA4ZS01OTFjYWY1MzZlY2MvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvZTNmYjdk LWRkNGItNGQ4NS1iMDhlLTU5MWNhZjUzNmVjYy8xL0lxWFlRRlBpc01NVHJ4NDdw UkFrWnFYM2xuZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDIGCCsGAQUF BwEHAQH/BCMwITAfBAIAATAZAwMAia4DAwCNiQMDAJN7AwMAm3MDAwCbzDANBgkq hkiG9w0BAQsFAAOCAQEAgsXDTnJSy5ginEw7lrjUgfkgQc4IWoUxiSHvtWc0SAyL BuTZ4sir9DMr4bv/mEDeWRwqkuflAry9LsN5NMZIalVTuOrHOnRjErUoI+74Dnp4 Wosx59M0/UaFmBmeFKtomdoc/mJOEru8yCGOHX4iu7e+EroADD/tDbWNCRtfagp6 /3NLJFNCCBLu1BoJhyc05Z7BeUGKEWvSVHViz0YYgDvjhLp53hKTnq8hDdJ76szs Bprlz8D45uX/VjsWAL8o2TaFG7GY0nyOCb9TfJayr21RSLuFGVLl30w5H87ShA/b XpZGsyB1B0VPQ9w4H7Fbh6vhEvW5B265Loa3feMVTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:56:20 2025 by rpki-client