This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer File: IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer (raw, json) Hash identifier: g6tvVSMd6wfWVoaiI/z/hC81dDxJN8IeStPZwUepTog= Subject key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA5D4FDFCAB5B01A9D9F4CF9614FF9223 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 09:53:10 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 16030 IP: 77.75.176.0/21 IP: 91.209.234.0/24 IP: 91.219.21.0/24 IP: 185.154.8.0/22 IP: 185.184.148.0/22 IP: 185.193.68.0/22 IP: 185.251.13.0/24 IP: 194.116.152.0/23 IP: 212.121.224.0/19 IP: 213.148.192.0/19 IP: 2001:4d10::/32 IP: 2a07:8b00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:d4:fd:fc:ab:5b:01:a9:d9:f4:cf:96:14:ff:92:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 09:53:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:75:08:f5:63:72:1c:af:80:1e:92:6d:1d:c8: 2a:e0:6f:a0:3a:86:90:dc:3a:24:21:08:85:df:e2: d2:3e:12:14:d8:b0:9b:2f:49:7d:d4:7f:75:10:70: a0:26:50:1f:98:56:04:08:58:ac:ee:36:0f:59:af: 0f:86:c5:f7:21:9c:ed:54:86:76:61:04:5f:ad:d0: a0:60:82:f8:53:04:49:9b:74:cf:23:e2:b9:c9:e2: 5d:38:cf:d1:79:3c:ae:aa:08:dd:1a:b3:09:9d:54: 60:4e:8b:dd:27:f2:80:33:07:ec:02:ad:9e:20:d1: 82:b9:06:91:92:d1:a5:c0:7e:ef:ba:cd:9b:57:06: d3:79:8d:13:f7:1d:64:e3:2a:b7:9a:a2:61:03:8d: a5:33:bc:8b:a4:f3:48:eb:e8:53:10:7d:25:ce:93: aa:cf:1d:5a:b6:93:f0:1b:4e:16:17:d7:45:39:8a: 37:5a:98:52:f6:a2:a9:ca:89:6b:75:2e:ec:0e:d6: e3:d2:fb:6c:d7:09:35:44:6d:3b:db:8c:08:50:56: 4c:c5:e7:80:a8:c4:a4:16:ab:aa:db:1b:84:6d:d4: d9:58:3d:d9:f4:59:fd:77:25:23:a5:a1:b1:8b:25: 0a:48:aa:32:7b:8d:02:ff:61:4a:07:68:ff:0c:a4: 0b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.75.176.0/21 91.209.234.0/24 91.219.21.0/24 185.154.8.0/22 185.184.148.0/22 185.193.68.0/22 185.251.13.0/24 194.116.152.0/23 212.121.224.0/19 213.148.192.0/19 IPv6: 2001:4d10::/32 2a07:8b00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16030 Signature Algorithm: sha256WithRSAEncryption 6f:50:47:65:63:e3:71:b8:b1:5f:7e:63:b0:96:d4:90:74:ff: f4:c1:fe:c7:83:32:81:d9:8b:23:55:ef:5e:a9:4c:38:7f:6d: a2:fa:1f:c4:70:ee:a3:d6:6c:ca:15:7f:2a:d2:2b:31:5b:f0: 78:a4:da:a1:2b:27:e3:ad:6a:ba:0c:95:28:b6:b9:ce:3f:a3: 55:6b:73:6c:55:40:b9:06:87:8c:ae:ba:09:37:45:8c:fa:4b: b8:02:29:83:d2:5a:6f:33:b6:50:2b:bf:ca:6a:27:86:62:4d: 9e:55:2a:27:c5:fd:e3:92:b3:25:c6:d8:55:0f:30:c1:5e:a2: 80:79:da:12:53:cc:2a:bc:06:8d:8f:3a:ca:50:9f:c9:f0:bf: c9:18:49:df:df:8b:cd:65:36:68:c8:db:41:0a:bb:db:75:5a: 2c:2d:b2:cf:fc:72:82:f4:e6:6e:61:cd:f4:14:f9:86:ae:f2: 3c:9c:eb:b0:75:df:35:f8:c5:9b:12:93:4a:22:5f:f8:d0:18: 93:2f:ea:81:3a:2d:61:5b:ca:09:ad:7d:79:ba:ff:d6:1f:96: 23:73:06:2f:01:24:c8:50:12:d2:7a:2e:2f:6b:46:7f:af:b7: e2:36:a5:2b:ae:dc:0f:63:bf:28:51:e7:67:92:af:a4:0d:ce: e4:1c:e9:66 -----BEGIN CERTIFICATE----- MIIF3zCCBMegAwIBAgISAZql1P38q1sBqdn0z5YU/5IjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMDk1MzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM3Y2RhNzVmNGUxNWU0ODZkZWU1YTY1MDFjYmUyMDE4YmMwZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nUI9WNyHK+AHpJtHcgq4G+gOoaQ 3DokIQiF3+LSPhIU2LCbL0l91H91EHCgJlAfmFYECFis7jYPWa8PhsX3IZztVIZ2 YQRfrdCgYIL4UwRJm3TPI+K5yeJdOM/ReTyuqgjdGrMJnVRgTovdJ/KAMwfsAq2e INGCuQaRktGlwH7vus2bVwbTeY0T9x1k4yq3mqJhA42lM7yLpPNI6+hTEH0lzpOq zx1atpPwG04WF9dFOYo3WphS9qKpyolrdS7sDtbj0vts1wk1RG0724wIUFZMxeeA qMSkFquq2xuEbdTZWD3Z9Fn9dyUjpaGxiyUKSKoye40C/2FKB2j/DKQL1wIDAQAB o4IC6zCCAucwHQYDVR0OBBYEFCLHzadfThXkht7lplAcviAYvA4PMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNjL2I5MjMz MS0yYmI0LTRhNTktOTk3OC03NTFiMTdkMWM0MzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvYjkyMzMx LTJiYjQtNGE1OS05OTc4LTc1MWIxN2QxYzQzNy8xL0lzZk5wMTlPRmVTRzN1V21V QnktSUJpOERnOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGsGCCsGAQUF BwEHAQH/BFwwWjBCBAIAATA8AwQDTUuwAwQAW9HqAwQAW9sVAwQCuZoIAwQCubiU AwQCucFEAwQAufsNAwQBwnSYAwQF1HngAwQF1ZTAMBQEAgACMA4DBQAgAU0QAwUD KgeLADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI+njANBgkqhkiG9w0BAQsFAAOC AQEAb1BHZWPjcbixX35jsJbUkHT/9MH+x4MygdmLI1XvXqlMOH9tovofxHDuo9Zs yhV/KtIrMVvweKTaoSsn461qugyVKLa5zj+jVWtzbFVAuQaHjK66CTdFjPpLuAIp g9JabzO2UCu/ymonhmJNnlUqJ8X945KzJcbYVQ8wwV6igHnaElPMKrwGjY86ylCf yfC/yRhJ39+LzWU2aMjbQQq723VaLC2yz/xygvTmbmHN9BT5hq7yPJzrsHXfNfjF mxKTSiJf+NAYky/qgTotYVvKCa19ebr/1h+WI3MGLwEkyFAS0nouL2tGf6+34jal K67cD2O/KFHnZ5KvpA3O5BzpZg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:32 2025 by rpki-client