This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer File: JPUbvfAQiNNMa6ru-GvaJanwIZY.cer (raw, json) Hash identifier: Qow60Cxo9yN17pS7FQYodcXZC0d0q9pKf+Sg7EIz/yE= Subject key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A586F2B8AE1BCE692B6A0089D851BD067 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 06 Nov 2025 09:11:11 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 34562 AS: 49471 AS: 49500 AS: 50814 AS: 57518 AS: 61258 IP: 45.89.21.0/24 IP: 85.198.32.0/20 IP: 86.106.24.0/24 IP: 91.123.0.0/20 IP: 91.205.221.0/24 IP: 91.217.235.0/24 IP: 190.106.160.0/19 IP: 190.211.144.0/24 IP: 192.68.136.0/24 IP: 206.195.128.0/20 IP: 2001:678:fe4::/48 IP: 2001:678:fe8::/48 IP: 2a09:c600::/29 IP: 2a11:4000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:6f:2b:8a:e1:bc:e6:92:b6:a0:08:9d:85:1b:d0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 6 09:11:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:6c:1e:71:ee:c7:23:79:42:ef:b8:c3:3d: c4:88:ca:ac:41:33:0b:62:f7:08:ee:d7:b5:e4:5d: 25:b1:1d:e7:a0:79:2e:1b:ad:84:e1:e4:4f:72:31: d8:0f:61:bd:28:6a:75:15:cd:34:11:10:d7:69:5f: e3:f7:59:5f:f9:6e:76:87:b0:88:66:02:8e:eb:b4: eb:db:31:7d:64:65:5c:d7:d9:8d:19:56:a2:f8:6b: 04:84:40:2b:8c:57:b1:e0:6c:9a:cc:42:16:68:98: de:75:58:68:80:6a:88:b8:12:19:78:ec:65:35:2c: 11:4f:7b:a4:1e:23:06:4b:17:12:1f:28:4b:ca:77: ed:7d:ed:e0:19:31:64:1b:6e:09:72:a3:f9:6f:93: aa:36:73:2e:ae:55:e4:36:07:d2:55:24:de:4f:1e: ac:2f:5c:b2:c0:ed:87:1b:1c:f0:28:4e:42:8b:80: 4b:50:40:4b:7e:dc:98:29:5b:b3:9a:97:06:f8:b5: 36:43:60:9e:85:ed:bf:d4:32:98:8c:63:6a:7b:ca: 6d:d6:07:2c:b7:9d:06:d0:cc:2b:11:4a:c5:8a:18: 4d:06:50:48:f0:25:31:54:ef:93:d2:fb:a7:d8:f7: 62:a4:b6:2e:87:08:66:b5:7f:6b:4a:7c:d5:ab:dd: c8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.21.0/24 85.198.32.0/20 86.106.24.0/24 91.123.0.0/20 91.205.221.0/24 91.217.235.0/24 190.106.160.0/19 190.211.144.0/24 192.68.136.0/24 206.195.128.0/20 IPv6: 2001:678:fe4::/48 2001:678:fe8::/48 2a09:c600::/29 2a11:4000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 34562 49471 49500 50814 57518 61258 Signature Algorithm: sha256WithRSAEncryption 2c:cb:30:ec:86:d7:7f:f0:cc:eb:d3:8b:f9:63:68:12:24:51: 44:42:50:fe:9c:ef:5d:5d:41:da:c3:d7:b7:b5:2f:22:ce:c8: 8a:2d:b3:27:a0:89:08:08:2a:19:56:7a:ce:40:39:14:c9:7b: bc:c6:ab:06:79:ca:d7:61:23:fa:0b:e5:7b:1b:52:84:95:c7: bd:17:1e:28:0c:94:1e:12:87:52:bb:50:4f:86:56:30:8f:ca: e8:12:55:35:73:f5:54:19:03:de:5d:66:17:18:6d:aa:00:3d: c1:9a:4f:12:ab:cb:79:ba:de:1a:de:83:c7:52:7e:65:63:ff: 48:64:1e:90:37:71:7c:b1:e1:66:cb:54:47:53:66:64:81:b3: e1:ab:47:b8:b2:ca:47:7f:f9:a3:ea:a1:34:32:00:73:5d:43: 8f:ca:9c:64:b0:9f:ab:b1:e7:0c:39:25:0d:68:4c:42:67:f0: fe:3a:f3:53:e3:59:76:b4:66:4d:ac:ed:70:19:ce:0b:46:b5: a2:e0:41:ad:a3:61:75:84:b8:15:21:79:40:5f:19:cf:6b:a7: 57:64:82:1d:1f:eb:d3:8d:f5:dc:14:f8:59:72:2e:88:d4:bd: 66:ed:b8:88:bd:43:6f:fd:b8:e2:9b:56:ce:31:db:b4:ca:92: c2:6f:cd:da -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISAZpYbyuK4bzmkragCJ2FG9BnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTA2MDkxMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGY1MWJiZGYwMTA4OGQzNGM2YmFhZWVmODZiZGEyNWE5ZjAyMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jFsHnHuxyN5Qu+4wz3EiMqsQTML YvcI7te15F0lsR3noHkuG62E4eRPcjHYD2G9KGp1Fc00ERDXaV/j91lf+W52h7CI ZgKO67Tr2zF9ZGVc19mNGVai+GsEhEArjFex4GyazEIWaJjedVhogGqIuBIZeOxl NSwRT3ukHiMGSxcSHyhLynftfe3gGTFkG24JcqP5b5OqNnMurlXkNgfSVSTeTx6s L1yywO2HGxzwKE5Ci4BLUEBLftyYKVuzmpcG+LU2Q2Cehe2/1DKYjGNqe8pt1gcs t50G0MwrEUrFihhNBlBI8CUxVO+T0vun2PdipLYuhwhmtX9rSnzVq93IHwIDAQAB o4IDFzCCAxMwHQYDVR0OBBYEFCT1G73wEIjTTGuq7vhr2iWp8CGWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmL2U4ZWJk Ni01NjFkLTQyYWYtYmIzNi01MjAxYTIzZDdhNDkvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvZThlYmQ2 LTU2MWQtNDJhZi1iYjM2LTUyMDFhMjNkN2E0OS8xL0pQVWJ2ZkFRaU5OTWE2cnUt R3ZhSmFud0laWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMH0GCCsGAQUF BwEHAQH/BG4wbDBCBAIAATA8AwQALVkVAwQEVcYgAwQAVmoYAwQEW3sAAwQAW83d AwQAW9nrAwQFvmqgAwQAvtOQAwQAwESIAwQEzsOAMCYEAgACMCADBwAgAQZ4D+QD BwAgAQZ4D+gDBQMqCcYAAwUDKhFAADAzBggrBgEFBQcBCAEB/wQkMCKgIDAeAgMA hwICAwDBPwIDAMFcAgMAxn4CAwDgrgIDAO9KMA0GCSqGSIb3DQEBCwUAA4IBAQAs yzDshtd/8Mzr04v5Y2gSJFFEQlD+nO9dXUHaw9e3tS8izsiKLbMnoIkICCoZVnrO QDkUyXu8xqsGecrXYSP6C+V7G1KElce9Fx4oDJQeEodSu1BPhlYwj8roElU1c/VU GQPeXWYXGG2qAD3Bmk8Sq8t5ut4a3oPHUn5lY/9IZB6QN3F8seFmy1RHU2ZkgbPh q0e4sspHf/mj6qE0MgBzXUOPypxksJ+rsecMOSUNaExCZ/D+OvNT41l2tGZNrO1w Gc4LRrWi4EGto2F1hLgVIXlAXxnPa6dXZIIdH+vTjfXcFPhZci6I1L1m7biIvUNv /bjim1bOMdu0ypLCb83a -----END CERTIFICATE-----Generated at Sat Dec 6 06:11:16 2025 by rpki-client