This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer File: Iss2-FBsEYv8QfXa42ImSpaBSZA.cer (raw, json) Hash identifier: Tw51OHeMGLsw8gcpl6gr0u5OGrgXqj0ReHspnqau+zw= Subject key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ADF1D69C6D49E117E4BF614BB81E139DE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 02 Dec 2025 12:50:38 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 209025 IP: 185.75.22.0/23 IP: 2a10:cd40::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:1d:69:c6:d4:9e:11:7e:4b:f6:14:bb:81:e1:39:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 2 12:50:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=22cb36f8506c118bfc41f5dae362264a96814990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fb:01:14:3d:a1:9e:25:25:02:7c:de:16:bd: ac:50:69:6d:ff:b4:cc:67:77:5f:1c:97:ba:86:19: d7:18:1e:a1:1b:b3:62:96:5c:d8:cd:2c:de:54:0f: 26:85:05:b6:c9:93:39:29:80:98:4d:27:75:71:94: 09:d2:41:30:0e:60:0a:a8:0b:86:b0:a2:b3:86:f0: 4c:93:44:a2:95:55:d1:bb:9e:70:a0:66:4c:f7:a6: 0a:b8:08:37:2e:57:26:1d:f4:20:2b:2d:0b:6e:85: 00:c0:c7:02:0e:a8:84:c6:04:8b:fb:ec:03:da:e2: 6a:aa:22:ad:50:e0:16:2e:be:bf:89:e4:11:32:c7: 20:1c:1b:9a:83:65:a6:54:77:1b:0e:45:00:80:ef: f7:f7:9f:bc:5d:56:f2:eb:97:a4:a5:c5:b6:38:cf: 21:b9:ef:93:31:f0:88:a1:be:ab:cc:cd:d0:db:76: 6f:78:9b:b5:8d:ab:6e:b8:76:79:34:c7:80:de:62: 11:88:2c:2f:99:12:49:90:33:35:fd:f5:fd:fa:ee: 9c:98:a3:d6:20:c4:b4:f6:c6:97:58:68:e4:b1:86: 10:ad:5a:26:fd:70:b3:cf:c9:d1:de:40:a9:62:eb: 16:1f:c5:a9:a3:d7:ee:3e:54:d3:c3:b2:7f:81:3b: 09:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.22.0/23 IPv6: 2a10:cd40::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 209025 Signature Algorithm: sha256WithRSAEncryption 57:a6:9b:31:ad:f3:9d:77:75:0d:37:85:31:e0:d0:84:66:3a: be:a1:ec:83:ac:8f:08:a6:3e:41:8e:25:11:db:6f:84:f4:ad: e4:81:d0:f0:59:39:d5:f8:9f:c2:ec:a8:55:c1:77:68:7e:79: 36:c4:b9:97:d0:41:7d:a4:3f:44:23:b1:cf:34:e3:6d:9c:a4: ba:2f:33:15:b7:0e:a1:b1:39:ce:46:32:ed:71:e3:46:9f:50: ab:2a:29:11:78:79:06:95:be:75:55:53:1c:61:24:92:20:c8: 0b:dd:5e:f3:b9:10:ce:d3:55:51:7d:54:15:4c:ba:84:5c:87: 82:db:02:7e:c2:ac:5c:3d:12:9b:8d:8f:f1:e0:bf:e8:8e:39: 34:0e:cc:34:b3:53:99:ea:1e:d9:6e:b1:a5:22:ac:f2:92:2c: a0:5a:1d:a3:a0:a8:3d:05:79:48:d0:77:f4:dd:c7:82:aa:a9: a1:a6:5a:c7:2d:73:65:26:25:09:0d:4a:a9:96:b5:61:8b:29: 85:e4:9c:ff:d5:af:b4:66:0f:f9:1b:6a:d1:e1:92:5f:08:7c: eb:d1:24:d3:81:dc:d1:75:17:a1:70:a8:b0:c2:43:1d:10:8c: c8:5d:a5:59:ac:ec:97:d5:8a:b6:ba:86:e4:51:d7:0b:79:bc: de:ea:30:1c -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZrfHWnG1J4Rfkv2FLuB4TneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAyMTI1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmNiMzZmODUwNmMxMThiZmM0MWY1ZGFlMzYyMjY0YTk2ODE0OTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/sBFD2hniUlAnzeFr2sUGlt/7TM Z3dfHJe6hhnXGB6hG7NillzYzSzeVA8mhQW2yZM5KYCYTSd1cZQJ0kEwDmAKqAuG sKKzhvBMk0SilVXRu55woGZM96YKuAg3LlcmHfQgKy0LboUAwMcCDqiExgSL++wD 2uJqqiKtUOAWLr6/ieQRMscgHBuag2WmVHcbDkUAgO/395+8XVby65ekpcW2OM8h ue+TMfCIob6rzM3Q23ZveJu1jatuuHZ5NMeA3mIRiCwvmRJJkDM1/fX9+u6cmKPW IMS09saXWGjksYYQrVom/XCzz8nR3kCpYusWH8Wpo9fuPlTTw7J/gTsJ+QIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFCLLNvhQbBGL/EH12uNiJkqWgUmQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzUwY2Ez NS1iZGU2LTQ1MDgtYjgwZi0yMzY3ODk1ODc5OTcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvNTBjYTM1 LWJkZTYtNDUwOC1iODBmLTIzNjc4OTU4Nzk5Ny8xL0lzczItRkJzRVl2OFFmWGE0 MkltU3BhQlNaQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQBuUsWMA0EAgACMAcDBQMqEM1AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMwgTANBgkqhkiG9w0BAQsFAAOCAQEAV6abMa3znXd1 DTeFMeDQhGY6vqHsg6yPCKY+QY4lEdtvhPSt5IHQ8Fk51fifwuyoVcF3aH55NsS5 l9BBfaQ/RCOxzzTjbZykui8zFbcOobE5zkYy7XHjRp9QqyopEXh5BpW+dVVTHGEk kiDIC91e87kQztNVUX1UFUy6hFyHgtsCfsKsXD0Sm42P8eC/6I45NA7MNLNTmeoe 2W6xpSKs8pIsoFodo6CoPQV5SNB39N3HgqqpoaZaxy1zZSYlCQ1KqZa1YYspheSc /9WvtGYP+Rtq0eGSXwh869Ek04Hc0XUXoXCosMJDHRCMyF2lWazsl9WKtrqG5FHX C3m83uowHA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:46 2025 by rpki-client