This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer File: Rg0xSfxQypeX9Q_engKggxNMUBk.cer (raw, json) Hash identifier: 3/2wbWOpmdcGBMhtozxxDSWG/xr+fj4w7LxeozPqg/0= Subject key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA0D727A1B217A9BDF481F8BDAA7DEBEA Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 20 Nov 2025 10:37:26 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 61229 AS: 213113 AS: 214474 IP: 93.177.80.0/24 IP: 185.1.215.0/24 IP: 185.1.233.0/24 IP: 193.201.148.128/26 IP: 193.228.143.0/24 IP: 2001:7f8:117::/48 IP: 2a0a:d980::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:d7:27:a1:b2:17:a9:bd:f4:81:f8:bd:aa:7d:eb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 20 10:37:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=460d3149fc50ca9797f50fde9e02a083134c5019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:77:79:6e:45:71:18:0e:3c:a3:5a:87:7b: 27:5f:54:cf:d6:0d:a2:39:cb:2f:d8:43:87:3c:45: 45:1a:81:ba:01:b9:1f:c2:74:b4:68:65:76:a2:58: e3:9d:53:c2:e3:23:ad:84:87:07:1d:d5:9c:9b:c8: c1:ee:61:64:13:65:59:33:6b:6c:df:1d:ce:fa:83: 8c:b3:b2:66:4c:4a:72:d2:36:c1:ff:62:11:0d:42: 0c:e1:bc:47:e4:af:eb:20:a0:de:4a:63:2f:56:29: 4c:66:4c:ca:e5:da:e6:42:34:f6:bb:e0:ad:48:76: 9f:e8:b3:44:70:a9:72:6e:7d:f5:c2:bb:40:3a:f7: 31:1e:d3:5a:86:ef:0b:da:f7:d2:c0:28:9d:61:7c: 4a:d1:ff:ca:1d:d1:c7:e3:48:69:e7:ab:21:d0:47: f5:4f:47:2d:44:d9:2b:59:46:a4:b3:62:71:87:d5: 6a:c2:0a:d9:7e:7b:77:6b:84:37:50:7e:50:3b:35: ac:d1:0a:de:54:c5:eb:db:72:96:e3:52:8e:f3:b4: 08:e6:af:bd:66:e4:5f:83:a4:9c:2a:bd:ef:be:c9: 71:75:c6:83:03:9f:02:ee:d0:c7:4b:bb:7e:89:a1: af:7e:8b:1a:9b:dc:fd:a5:49:28:b2:2e:a4:11:f6: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.177.80.0/24 185.1.215.0/24 185.1.233.0/24 193.201.148.128/26 193.228.143.0/24 IPv6: 2001:7f8:117::/48 2a0a:d980::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 61229 213113 214474 Signature Algorithm: sha256WithRSAEncryption 3a:9e:d6:18:26:a4:3d:14:2b:06:2d:dd:c6:8e:f6:4d:e8:c9: d1:c9:06:4b:df:3e:0f:45:17:74:c0:52:f6:78:89:4e:4c:a0: e5:52:f9:ac:b3:5c:d3:54:e8:0d:11:85:c1:c0:c9:58:87:30: f8:f0:51:68:c9:58:7a:08:37:30:9f:11:52:a0:c2:f4:ba:84: f9:24:45:2c:cf:14:df:39:9a:99:74:08:d8:92:54:52:dd:da: 10:1c:2e:51:21:ca:98:76:6e:a3:a6:f0:0a:dc:34:2b:ba:04: cd:f8:ef:ab:3e:05:67:06:28:bd:39:98:64:02:93:50:04:92: 64:44:53:b1:81:1c:cb:46:63:b8:68:46:20:5d:ef:33:46:93: fd:f9:30:19:d7:47:48:60:64:61:e7:a6:c4:5f:0b:ef:08:ed: 45:69:1d:82:8e:05:1a:a5:67:9b:96:a5:0d:73:1c:6c:6d:f8: ae:ea:34:4d:58:8a:6e:2f:af:23:69:53:94:79:3c:72:f9:3f: 7c:9c:d6:b6:69:8e:a1:b6:a9:4d:88:c5:0b:b9:9b:3e:fc:ea: c9:a1:32:72:ec:d8:fc:19:e0:cc:d8:f4:4f:78:52:89:90:2b: 03:45:d2:be:01:40:f3:e5:eb:9a:d1:d2:e9:5e:88:ef:5f:d9: 28:aa:0a:21 -----BEGIN CERTIFICATE----- MIIFzzCCBLegAwIBAgISAZqg1yehshepvfSB+L2qfevqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIwMTAzNzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjBkMzE0OWZjNTBjYTk3OTdmNTBmZGU5ZTAyYTA4MzEzNGM1MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTt3eW5FcRgOPKNah3snX1TP1g2i Ocsv2EOHPEVFGoG6AbkfwnS0aGV2oljjnVPC4yOthIcHHdWcm8jB7mFkE2VZM2ts 3x3O+oOMs7JmTEpy0jbB/2IRDUIM4bxH5K/rIKDeSmMvVilMZkzK5drmQjT2u+Ct SHaf6LNEcKlybn31wrtAOvcxHtNahu8L2vfSwCidYXxK0f/KHdHH40hp56sh0Ef1 T0ctRNkrWUaks2Jxh9VqwgrZfnt3a4Q3UH5QOzWs0QreVMXr23KW41KO87QI5q+9 ZuRfg6ScKr3vvslxdcaDA58C7tDHS7t+iaGvfosam9z9pUkosi6kEfZXeQIDAQAB o4IC2zCCAtcwHQYDVR0OBBYEFEYNMUn8UMqXl/UP3p4CoIMTTFAZMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzAxNjI0 Ni0zNzZjLTQ3MjUtODBhZS03NWJkOTQ2YTczNTUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvMDE2MjQ2 LTM3NmMtNDcyNS04MGFlLTc1YmQ5NDZhNzM1NS8xL1JnMHhTZnhReXBlWDlRX2Vu Z0tnZ3hOTVVCay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFAGCCsGAQUF BwEHAQH/BEEwPzAlBAIAATAfAwQAXbFQAwQAuQHXAwQAuQHpAwUGwcmUgAMEAMHk jzAWBAIAAjAQAwcAIAEH+AEXAwUDKgrZgDAkBggrBgEFBQcBCAEB/wQVMBOgETAP AgMA7y0CAwNAeQIDA0XKMA0GCSqGSIb3DQEBCwUAA4IBAQA6ntYYJqQ9FCsGLd3G jvZN6MnRyQZL3z4PRRd0wFL2eIlOTKDlUvmss1zTVOgNEYXBwMlYhzD48FFoyVh6 CDcwnxFSoML0uoT5JEUszxTfOZqZdAjYklRS3doQHC5RIcqYdm6jpvAK3DQrugTN +O+rPgVnBii9OZhkApNQBJJkRFOxgRzLRmO4aEYgXe8zRpP9+TAZ10dIYGRh56bE XwvvCO1FaR2CjgUapWeblqUNcxxsbfiu6jRNWIpuL68jaVOUeTxy+T98nNa2aY6h tqlNiMULuZs+/OrJoTJy7Nj8GeDM2PRPeFKJkCsDRdK+AUDz5eua0dLpXojvX9ko qgoh -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:49 2025 by rpki-client