This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RGFYx1seMgOyK1g8wYTD9UiLJdY.cer File: RGFYx1seMgOyK1g8wYTD9UiLJdY.cer (raw, json) Hash identifier: NPXmXtSUcGhIR8/ZDIIJm4jPDBxKkYmv0hjmXkYYZv4= Subject key identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AD9F5F52E380FD19E51B9FE9D1C52D0E0 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 01 Dec 2025 12:49:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 208543 IP: 45.150.36.0/22 IP: 2a0f:3300::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:f5:f5:2e:38:0f:d1:9e:51:b9:fe:9d:1c:52:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 1 12:49:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=446158c75b1e3203b22b583cc184c3f5488b25d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:0c:90:19:9d:4a:4c:73:9d:45:99:69:e0: a8:a4:26:df:7b:fc:0c:5b:6b:a3:87:89:55:ce:92: 9d:b9:db:9b:f0:bb:f1:9c:aa:7b:7f:84:81:78:73: 10:1f:1b:c6:69:12:58:ee:82:0b:ec:b7:d1:d8:18: f1:03:d1:be:90:48:1f:be:8f:1b:f7:ae:a6:fe:f3: b1:f4:c8:35:2d:37:f0:c1:92:da:26:6f:0b:b5:ea: b2:a4:c0:52:5c:29:80:f9:8f:89:53:e5:c4:92:bf: 4e:30:3b:93:35:83:34:e7:8b:c8:6e:f8:a6:f9:78: b7:40:19:d9:a4:dc:67:72:38:16:aa:08:dc:ef:68: 9d:65:76:8b:ba:ce:93:d4:5f:f7:89:e3:ef:53:92: 7e:a4:4a:52:e0:ff:24:0f:64:4a:1a:cf:7b:2d:66: da:cd:33:6d:9a:7b:b8:c4:25:c7:3e:3a:1d:4c:f8: 6f:84:da:40:55:25:2c:e3:d7:04:21:9f:cd:20:5e: 2e:41:0b:29:ec:09:84:88:1f:10:f9:25:d5:ef:d2: a6:22:00:60:65:eb:ba:78:a6:2a:40:f2:74:42:b3: 7c:c2:4f:5c:6c:16:a3:9d:a7:da:da:02:6d:31:f9: c1:71:1d:8d:e0:f9:43:a9:57:48:47:da:d3:c1:10: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:61:58:C7:5B:1E:32:03:B2:2B:58:3C:C1:84:C3:F5:48:8B:25:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cd703a-06f9-4106-8c8d-b7289b370b6d/1/RGFYx1seMgOyK1g8wYTD9UiLJdY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.36.0/22 IPv6: 2a0f:3300::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208543 Signature Algorithm: sha256WithRSAEncryption 5e:28:b4:50:04:8a:36:88:81:e1:ab:9d:3b:e6:4e:55:7c:89: 2a:f3:e6:f9:49:1e:2d:41:66:8b:62:c0:6d:63:26:2b:84:a1: 53:fb:51:e7:cd:b5:7d:c3:96:dd:3c:71:34:6f:6c:a7:14:9e: 8a:0a:37:24:c5:c2:9f:87:fa:1c:e2:1b:9d:a8:35:4b:f4:f3: db:d7:4e:27:e5:91:28:80:46:f9:76:e6:63:4a:b0:d1:ab:12: ec:9a:12:41:59:f0:c6:36:e2:b4:e0:1e:e9:11:6c:0f:23:df: 10:24:f3:14:77:ad:3a:24:cb:eb:5c:18:6a:c7:72:27:99:73: 30:18:39:7b:da:6a:35:40:8e:fa:93:9b:33:58:7d:fe:20:4b: 56:22:82:45:06:97:7a:3d:6a:3b:d6:8f:51:ff:43:2a:28:39: 70:39:12:52:d8:c9:f2:36:1c:00:30:fc:e9:94:c0:4b:f6:3d: 1a:16:dd:f7:f3:df:ad:76:09:76:52:29:46:ef:69:fb:a0:6b: 75:e3:6d:f9:07:ca:0e:a4:f6:1c:48:20:63:34:52:48:ee:3b: d2:f6:e9:4d:58:49:f2:23:f7:23:39:af:58:88:46:17:bd:63: e8:16:57:ff:e8:2d:b4:d3:44:0f:59:ec:94:12:67:b7:6f:20: af:e5:76:a2 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZrZ9fUuOA/RnlG5/p0cUtDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAxMTI0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDYxNThjNzViMWUzMjAzYjIyYjU4M2NjMTg0YzNmNTQ4OGIyNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCEMkBmdSkxznUWZaeCopCbfe/wM W2ujh4lVzpKdudub8LvxnKp7f4SBeHMQHxvGaRJY7oIL7LfR2BjxA9G+kEgfvo8b 966m/vOx9Mg1LTfwwZLaJm8LteqypMBSXCmA+Y+JU+XEkr9OMDuTNYM054vIbvim +Xi3QBnZpNxncjgWqgjc72idZXaLus6T1F/3iePvU5J+pEpS4P8kD2RKGs97LWba zTNtmnu4xCXHPjodTPhvhNpAVSUs49cEIZ/NIF4uQQsp7AmEiB8Q+SXV79KmIgBg Zeu6eKYqQPJ0QrN8wk9cbBajnafa2gJtMfnBcR2N4PlDqVdIR9rTwRAtiwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFERhWMdbHjIDsitYPMGEw/VIiyXWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2L2NkNzAz YS0wNmY5LTQxMDYtOGM4ZC1iNzI4OWIzNzBiNmQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvY2Q3MDNh LTA2ZjktNDEwNi04YzhkLWI3Mjg5YjM3MGI2ZC8xL1JHRll4MXNlTWdPeUsxZzh3 WVREOVVpTEpkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCLZYkMA0EAgACMAcDBQMqDzMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMunzANBgkqhkiG9w0BAQsFAAOCAQEAXii0UASKNoiB 4audO+ZOVXyJKvPm+UkeLUFmi2LAbWMmK4ShU/tR5821fcOW3TxxNG9spxSeigo3 JMXCn4f6HOIbnag1S/Tz29dOJ+WRKIBG+XbmY0qw0asS7JoSQVnwxjbitOAe6RFs DyPfECTzFHetOiTL61wYasdyJ5lzMBg5e9pqNUCO+pObM1h9/iBLViKCRQaXej1q O9aPUf9DKig5cDkSUtjJ8jYcADD86ZTAS/Y9Ghbd9/PfrXYJdlIpRu9p+6BrdeNt +QfKDqT2HEggYzRSSO470vbpTVhJ8iP3IzmvWIhGF71j6BZX/+gttNNED1nslBJn t28gr+V2og== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:18 2025 by rpki-client