This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer File: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer (raw, json) Hash identifier: ZsH7aURaUBvCUHHQSq/vtRG3mPl0jYTgSevpmoOiwws= Subject key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA5F080412B315ADEEC9FAEA30C644CF2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 10:23:13 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: IP: 45.150.248.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:f0:80:41:2b:31:5a:de:ec:9f:ae:a3:0c:64:4c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 10:23:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=31533690ab184f433f1760f3feaa184c443e70f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:70:aa:ef:19:5d:f5:32:bd:82:e8:d1:f7:c9: 12:f3:20:b9:18:7c:96:02:11:e0:87:59:d7:f0:73: 29:0c:3e:54:62:aa:0d:11:97:9c:73:97:97:f5:98: c6:2a:b0:9f:40:c2:0d:1b:b0:e7:ff:2b:5c:03:e0: 28:ba:a9:ad:89:c4:4f:a1:d5:3a:7c:88:13:e3:9a: 6e:53:ef:98:8a:3d:70:2d:78:32:74:6f:1a:e9:b4: 1f:60:f2:b9:c0:38:dd:03:c0:8c:b0:eb:48:23:b8: 96:0c:67:cc:5b:be:9f:a6:46:8b:4b:8d:b6:fe:d4: aa:77:ea:8c:c9:53:91:7f:79:f4:f6:e9:74:7c:2c: 52:eb:0b:0c:17:b2:9f:a9:e9:8f:20:83:e0:88:5e: af:b8:29:fe:71:cc:7f:41:4c:ef:c4:30:4c:7d:17: f5:42:ab:3a:c0:0f:26:a6:dc:83:ec:6a:da:36:37: 53:2a:6e:35:f0:2e:d5:9e:0d:55:5f:55:f3:b3:0b: 6b:6b:e1:78:18:6f:71:72:9a:98:f9:ff:28:8a:c2: d1:c6:99:01:8f:5a:e7:27:43:e1:7b:57:f9:10:9d: 80:51:90:1c:71:a4:ce:ce:76:60:59:e3:5a:54:b4: 83:1a:fb:7b:78:1f:3f:45:29:75:d1:ac:78:d8:3c: 74:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.248.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:de:93:9e:51:9c:45:1e:fa:2c:e2:be:c9:85:57:f5:eb:ea: 3e:7f:61:fe:b6:e0:92:a6:02:10:3b:57:be:5e:f8:98:44:5a: 0c:01:29:93:dd:9d:9d:26:ad:e1:0d:45:75:1c:bf:8d:df:e3: 04:b5:67:5c:f5:f6:fc:71:78:e6:dd:40:f7:0f:2d:98:5d:d9: a0:42:1c:49:f1:0f:40:68:0b:5b:71:a9:23:fb:e1:03:7f:e4: 1a:af:1f:03:13:c7:7d:11:a0:b3:c5:13:9d:ff:2e:4d:23:ec: 16:8c:05:66:92:03:3b:ea:b2:b4:9b:24:77:f4:fd:20:da:84: 17:b0:99:b9:08:44:ca:8e:74:c3:7d:53:c8:2c:ed:72:f0:2b: 86:c5:7b:f1:3b:57:09:c3:1d:11:4d:94:b0:88:ad:7b:59:3d: 93:8f:4a:d6:ba:1b:7a:11:4f:2d:e1:75:69:13:e8:a5:10:83: 15:46:c6:d4:3b:58:ed:52:d6:9f:3f:53:3d:34:66:09:6b:69: 76:66:df:ff:57:cd:4e:3a:f4:16:a0:16:f2:0f:dc:7e:76:1f: 5b:5b:2f:ad:ec:a5:48:81:b8:11:81:df:ca:a3:54:93:35:ba: 3f:e9:cb:ae:e5:c4:12:6e:0c:f9:46:f5:87:bb:c9:2b:8c:13: f0:d1:45:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZql8IBBKzFa3uyfrqMMZEzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMTAyMzEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTUzMzY5MGFiMTg0ZjQzM2YxNzYwZjNmZWFhMTg0YzQ0M2U3MGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83Cq7xld9TK9gujR98kS8yC5GHyW AhHgh1nX8HMpDD5UYqoNEZecc5eX9ZjGKrCfQMING7Dn/ytcA+AouqmticRPodU6 fIgT45puU++Yij1wLXgydG8a6bQfYPK5wDjdA8CMsOtII7iWDGfMW76fpkaLS422 /tSqd+qMyVORf3n09ul0fCxS6wsMF7KfqemPIIPgiF6vuCn+ccx/QUzvxDBMfRf1 Qqs6wA8mptyD7GraNjdTKm418C7Vng1VX1Xzswtra+F4GG9xcpqY+f8oisLRxpkB j1rnJ0Phe1f5EJ2AUZAccaTOznZgWeNaVLSDGvt7eB8/RSl10ax42Dx0GwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFDFTNpCrGE9DPxdg8/6qGExEPnD5MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyL2I2Mzhh NS1kOTAzLTRhMzEtOTQ4OS1jYjkyYmIzZWQ3NjgvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvYjYzOGE1 LWQ5MDMtNGEzMS05NDg5LWNiOTJiYjNlZDc2OC8xL01WTTJrS3NZVDBNX0YyRHpf cW9ZVEVRLWNQay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCLZb4MA0GCSqGSIb3DQEBCwUAA4IBAQCa3pOe UZxFHvos4r7JhVf16+o+f2H+tuCSpgIQO1e+XviYRFoMASmT3Z2dJq3hDUV1HL+N 3+MEtWdc9fb8cXjm3UD3Dy2YXdmgQhxJ8Q9AaAtbcakj++EDf+Qarx8DE8d9EaCz xROd/y5NI+wWjAVmkgM76rK0myR39P0g2oQXsJm5CETKjnTDfVPILO1y8CuGxXvx O1cJwx0RTZSwiK17WT2Tj0rWuht6EU8t4XVpE+ilEIMVRsbUO1jtUtafP1M9NGYJ a2l2Zt//V81OOvQWoBbyD9x+dh9bWy+t7KVIgbgRgd/Ko1STNbo/6cuu5cQSbgz5 RvWHu8krjBPw0UVq -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:21 2025 by rpki-client