This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer File: Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer (raw, json) Hash identifier: B/9Kg4hL8+oJ0e4BjqQ+6Ce7MVFuYgmKprn/uvRLw7w= Subject key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7DA9B533371C6D6229C334503D45A799 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 13 Nov 2025 14:41:05 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 39545 AS: 205917 IP: 5.53.64.0/19 IP: 46.247.0.0/19 IP: 46.247.44.0 -- 46.247.57.255 IP: 46.247.62.0/23 IP: 46.247.110.0 -- 46.247.127.255 IP: 77.89.128.0/18 IP: 89.105.96.0/19 IP: 185.91.84.0/22 IP: 2a00:f18::/32 IP: 2a00:f0c0::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:a9:b5:33:37:1c:6d:62:29:c3:34:50:3d:45:a7:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 13 14:41:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:1a:83:29:43:b3:e3:df:f1:8b:08:1b:0e: ca:26:0f:70:a0:19:e8:fc:3f:a8:f1:de:39:e7:4d: d2:4a:f3:0c:b4:c9:c6:33:4e:8b:11:37:77:2b:73: f4:55:09:ec:b9:8c:2f:68:fb:aa:7a:05:cb:86:a2: a2:72:a8:ca:5b:9e:3f:9c:df:c3:3e:9e:5b:33:1e: 66:77:92:88:46:5d:f1:66:b1:5c:1b:e0:13:05:5f: f2:f1:be:ab:74:6b:dc:00:dc:95:b1:11:e5:5e:e2: 08:93:42:a8:b5:41:7c:a6:3e:59:1d:7e:8c:bc:48: a0:05:f0:ff:81:2f:6c:a5:8a:12:e7:9e:c4:53:1c: 58:b1:37:aa:e7:31:14:5c:e7:5b:ea:e3:29:94:8b: aa:93:8c:a7:cc:d7:26:22:b4:96:3b:df:12:21:87: 06:c0:76:c3:d4:09:1f:99:93:6b:9d:15:29:e0:89: dd:a0:5f:e8:52:fe:2b:64:5d:6e:e8:d5:16:6f:82: dc:20:88:1b:ab:ff:a8:29:69:f4:55:3f:01:83:e1: db:e7:c9:6f:40:2a:8c:78:1d:b9:7e:28:65:a0:8c: e1:ed:a3:c8:62:7c:35:54:19:2f:85:12:82:7b:12: 7a:30:88:35:e1:5f:1d:a2:57:fe:9c:03:84:79:68: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.53.64.0/19 46.247.0.0/19 46.247.44.0-46.247.57.255 46.247.62.0/23 46.247.110.0-46.247.127.255 77.89.128.0/18 89.105.96.0/19 185.91.84.0/22 IPv6: 2a00:f18::/32 2a00:f0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39545 205917 Signature Algorithm: sha256WithRSAEncryption ae:e6:ec:55:75:13:eb:71:39:6e:ad:55:c3:04:26:60:fb:62: af:9c:2e:c4:0f:a8:10:da:d1:76:27:eb:05:4b:ee:08:f7:d3: 7a:75:0c:4d:83:0e:31:62:a6:5e:ea:09:61:c2:cb:b8:6d:53: f0:4d:00:a6:44:59:13:8d:08:6a:39:1a:22:27:8f:1f:7a:c4: 24:46:45:18:56:cb:68:e7:20:c2:11:86:de:6e:92:19:c8:ba: 90:24:08:99:f7:cc:58:e8:b2:5e:b7:2a:85:ee:92:6f:24:09: e9:ea:dd:4f:af:63:e1:82:be:38:d3:28:c9:d8:8e:ad:fc:3f: 74:d4:83:01:d0:53:ea:9b:36:15:32:83:4e:b4:a1:66:00:b1: 16:a9:2e:d2:b1:84:3d:71:3b:a6:eb:31:12:93:34:ee:36:e0: 40:15:4e:69:7d:29:da:59:2a:91:2d:54:d8:5d:25:0f:6f:34: c8:49:92:ca:0a:5d:92:19:bc:de:de:9e:dc:6b:4b:aa:d2:c3: 13:b2:c3:48:02:ae:45:53:ba:7f:ef:76:9e:22:c6:73:24:f2: 40:76:82:11:c1:9c:81:39:8c:c0:82:ff:20:75:48:4e:73:d3: 0d:56:40:0f:b3:88:23:e3:c5:9e:52:fa:01:52:68:70:a8:08: c1:6f:0d:47 -----BEGIN CERTIFICATE----- MIIF6TCCBNGgAwIBAgISAZp9qbUzNxxtYinDNFA9RaeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEzMTQ0MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMzFlNzc4NGY2MGFjOGQ5NjliODFjZjUyMzFjZDlkYzA4N2NlZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSIagylDs+Pf8YsIGw7KJg9woBno /D+o8d45503SSvMMtMnGM06LETd3K3P0VQnsuYwvaPuqegXLhqKicqjKW54/nN/D Pp5bMx5md5KIRl3xZrFcG+ATBV/y8b6rdGvcANyVsRHlXuIIk0KotUF8pj5ZHX6M vEigBfD/gS9spYoS557EUxxYsTeq5zEUXOdb6uMplIuqk4ynzNcmIrSWO98SIYcG wHbD1AkfmZNrnRUp4IndoF/oUv4rZF1u6NUWb4LcIIgbq/+oKWn0VT8Bg+Hb58lv QCqMeB25fihloIzh7aPIYnw1VBkvhRKCexJ6MIg14V8dolf+nAOEeWg4RQIDAQAB o4IC9TCCAvEwHQYDVR0OBBYEFDMed4T2CsjZabgc9SMc2dwIfO0yMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmL2UwOTI1 ZS00N2JmLTQ5MDctYmNiYy1mZDlmMzZhOGJhNmUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvZTA5MjVl LTQ3YmYtNDkwNy1iY2JjLWZkOWYzNmE4YmE2ZS8xL014NTNoUFlLeU5scHVCejFJ eHpaM0FoODdUSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMG8GCCsGAQUF BwEHAQH/BGAwXjBGBAIAATBAAwQFBTVAAwQFLvcAMAwDBAIu9ywDBAEu9zgDBAEu 9z4wDAMEAS73bgMEBy73AAMEBk1ZgAMEBVlpYAMEArlbVDAUBAIAAjAOAwUAKgAP GAMFACoA8MAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAJp5AgMDJF0wDQYJKoZI hvcNAQELBQADggEBAK7m7FV1E+txOW6tVcMEJmD7Yq+cLsQPqBDa0XYn6wVL7gj3 03p1DE2DDjFipl7qCWHCy7htU/BNAKZEWRONCGo5GiInjx96xCRGRRhWy2jnIMIR ht5ukhnIupAkCJn3zFjosl63KoXukm8kCenq3U+vY+GCvjjTKMnYjq38P3TUgwHQ U+qbNhUyg060oWYAsRapLtKxhD1xO6brMRKTNO424EAVTml9KdpZKpEtVNhdJQ9v NMhJksoKXZIZvN7entxrS6rSwxOyw0gCrkVTun/vdp4ixnMk8kB2ghHBnIE5jMCC /yB1SE5z0w1WQA+ziCPjxZ5S+gFSaHCoCMFvDUc= -----END CERTIFICATE-----Generated at Sat Dec 6 09:16:28 2025 by rpki-client