This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer File: KgedPD3CTph79wxKn6u6QFsIOkU.cer (raw, json) Hash identifier: z8ZyPtkb1XdNra4Fi5q/vnelBHmp2hzmRGWGkXbQ+JY= Subject key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A6E5FE60F1EC0523025D8448E4763E96C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 10 Nov 2025 15:26:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 49610 AS: 198795 AS: 209342 AS: 215861 IP: 46.31.69.0/24 IP: 66.9.112.0 -- 66.9.159.255 IP: 77.236.120.0/21 IP: 91.217.212.0/24 IP: 103.73.32.0/24 IP: 103.148.172.0/23 IP: 195.14.19.0/24 IP: 2a07:1f80::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:5f:e6:0f:1e:c0:52:30:25:d8:44:8e:47:63:e9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 10 15:26:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b6:e0:17:08:57:28:f1:99:e5:80:fc:38:4f: 3f:eb:8e:9b:42:51:3a:52:a3:95:f2:20:4e:f8:83: 52:c3:6b:af:23:70:c3:aa:21:50:74:b4:b2:f9:26: b3:aa:26:47:af:5d:c4:ba:69:07:ad:53:22:c5:92: 17:d6:65:3b:87:73:ee:30:7e:da:15:fc:80:79:9e: 6d:fa:af:98:08:d7:bf:ad:35:a4:1f:47:42:2c:28: 60:b1:e0:05:7e:39:15:8e:87:71:bc:7b:6a:be:6e: 6b:69:46:4d:c3:15:37:f3:cb:ec:fb:a7:32:21:64: d1:5a:77:91:80:a1:83:f3:e9:83:66:69:04:8f:93: ef:ad:da:50:77:64:05:15:05:e6:1f:61:e9:ca:01: da:c8:a4:bb:c5:d9:2c:29:e9:b6:59:5c:9a:37:b6: 8b:f3:f0:69:9a:c9:ab:1a:32:d0:d9:09:f9:17:02: 32:a8:c4:1c:c8:9f:1b:da:1f:25:8b:09:01:e0:ad: c2:be:b7:4a:e5:15:09:18:7f:8f:6a:0f:73:90:44: db:01:07:12:61:af:78:c5:61:c0:40:48:0a:f1:24: e3:c4:a6:3e:d1:57:af:4d:63:d7:64:aa:ab:ec:ff: 5f:6a:ac:f6:65:92:84:88:42:b7:21:bf:67:28:1b: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.69.0/24 66.9.112.0-66.9.159.255 77.236.120.0/21 91.217.212.0/24 103.73.32.0/24 103.148.172.0/23 195.14.19.0/24 IPv6: 2a07:1f80::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 49610 198795 209342 215861 Signature Algorithm: sha256WithRSAEncryption 1f:ce:da:34:75:20:76:55:a1:a0:30:5e:43:50:b5:7b:f1:16: c5:e2:1c:50:16:bb:94:a2:5a:79:f5:c2:26:7b:ba:b0:2c:ad: 36:3a:0a:44:c7:29:bc:03:72:30:93:fc:0a:7c:48:5e:cc:8a: 42:76:9f:55:6e:2c:b1:ac:90:78:b9:55:aa:a7:12:c9:c3:0c: b7:fd:4a:84:45:0e:11:57:ac:22:5f:ef:07:19:a1:03:43:5c: 10:22:4e:d1:f6:61:d8:44:69:6d:af:4c:35:5c:00:54:cd:de: cc:85:b2:b4:13:1d:a6:2c:cb:ab:0a:7e:1c:40:93:8f:f1:7b: bb:92:09:98:1b:68:7d:1f:37:80:ce:a4:dc:0a:2b:15:dd:bc: 8b:76:bc:91:ca:21:f6:d7:3d:db:bf:5f:9a:af:98:ed:00:8c: a8:82:84:49:39:fc:89:9b:6c:a5:a2:1c:8b:e1:cd:45:44:d7: a4:54:11:52:75:84:bb:d1:1c:c0:aa:35:04:88:99:9e:0d:c6: 4e:97:4e:a6:e7:1e:29:21:f1:1d:d8:89:32:1e:4b:f7:85:a0: 70:06:5b:4a:bd:10:9a:b9:08:9a:bb:35:b3:e5:13:a0:83:21: 93:4d:c3:64:ce:f3:5a:9f:d1:db:43:b6:b1:eb:06:02:b8:fd: ab:e7:e9:a0 -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgISAZpuX+YPHsBSMCXYRI5HY+lsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEwMTUyNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYTA3OWQzYzNkYzI0ZTk4N2JmNzBjNGE5ZmFiYmE0MDViMDgzYTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbbgFwhXKPGZ5YD8OE8/646bQlE6 UqOV8iBO+INSw2uvI3DDqiFQdLSy+SazqiZHr13EumkHrVMixZIX1mU7h3PuMH7a FfyAeZ5t+q+YCNe/rTWkH0dCLChgseAFfjkVjodxvHtqvm5raUZNwxU388vs+6cy IWTRWneRgKGD8+mDZmkEj5PvrdpQd2QFFQXmH2HpygHayKS7xdksKem2WVyaN7aL 8/BpmsmrGjLQ2Qn5FwIyqMQcyJ8b2h8liwkB4K3CvrdK5RUJGH+Pag9zkETbAQcS Ya94xWHAQEgK8STjxKY+0VevTWPXZKqr7P9faqz2ZZKEiEK3Ib9nKBuS+wIDAQAB o4IC6jCCAuYwHQYDVR0OBBYEFCoHnTw9wk6Ye/cMSp+rukBbCDpFMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwLzBiYjhh MC0zZmIzLTQxZWUtOWY2NS0xYzhkOWU2ZWQxMjQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMGJiOGEw LTNmYjMtNDFlZS05ZjY1LTFjOGQ5ZTZlZDEyNC8xL0tnZWRQRDNDVHBoNzl3eEtu NnU2UUZzSU9rVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFoGCCsGAQUF BwEHAQH/BEswSTA4BAIAATAyAwQALh9FMAwDBARCCXADBAVCCYADBANN7HgDBABb 2dQDBABnSSADBAFnlKwDBADDDhMwDQQCAAIwBwMFAyoHH4AwKQYIKwYBBQUHAQgB Af8EGjAYoBYwFAIDAMHKAgMDCIsCAwMxvgIDA0s1MA0GCSqGSIb3DQEBCwUAA4IB AQAfzto0dSB2VaGgMF5DULV78RbF4hxQFruUolp59cIme7qwLK02OgpExym8A3Iw k/wKfEhezIpCdp9VbiyxrJB4uVWqpxLJwwy3/UqERQ4RV6wiX+8HGaEDQ1wQIk7R 9mHYRGltr0w1XABUzd7MhbK0Ex2mLMurCn4cQJOP8Xu7kgmYG2h9HzeAzqTcCisV 3byLdryRyiH21z3bv1+ar5jtAIyogoRJOfyJm2ylohyL4c1FRNekVBFSdYS70RzA qjUEiJmeDcZOl06m5x4pIfEd2IkyHkv3haBwBltKvRCauQiauzWz5ROggyGTTcNk zvNan9HbQ7ax6wYCuP2r5+mg -----END CERTIFICATE-----Generated at Sat Dec 6 06:00:05 2025 by rpki-client