This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RivLG1KNqZRL2VRLx7OIzuGgE5A.cer File: RivLG1KNqZRL2VRLx7OIzuGgE5A.cer (raw, json) Hash identifier: n+5cI4y4x4PyMyTZs7URjTR7akUYgXnq6iJeAjzS7Mw= Subject key identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AB5965909130114C1A1E56E2D4A14E0ED Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 24 Nov 2025 11:18:40 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 202609 IP: 185.132.190.0/23 IP: 213.134.16.0/24 IP: 2a0f:1880::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:96:59:09:13:01:14:c1:a1:e5:6e:2d:4a:14:e0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 24 11:18:40 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=462bcb1b528da9944bd9544bc7b388cee1a01390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:11:c2:fa:02:fb:82:d1:b0:8b:20:b2:42: 6f:2a:57:e3:29:8f:d5:69:7c:c5:64:02:73:fc:8b: 73:5b:1b:bf:f3:f7:43:06:20:c9:3e:b1:5d:6d:1f: 8c:b7:36:79:bb:7f:57:3d:36:90:96:a1:cd:a9:36: a1:52:5d:c8:98:4d:3b:a9:65:cb:0f:49:d7:27:24: 75:c0:a8:95:67:8f:00:b6:73:3e:8c:ea:87:d9:d0: 4d:cf:c0:9c:c1:31:cb:79:95:a3:8e:6f:f0:a5:ba: 79:55:29:e7:e9:c5:70:0d:e5:b7:0c:52:97:9e:8f: 45:29:78:d8:bc:96:22:1b:fe:c4:cd:5d:c3:8a:7d: 23:07:b0:9a:89:ac:90:2a:99:b0:48:36:7a:a4:08: a7:ac:73:d9:90:f5:c2:da:c4:81:81:17:44:18:fc: 15:aa:bc:86:eb:47:58:8c:7e:fe:4a:9e:4c:a0:67: 67:94:d3:f4:0d:1d:ad:cf:35:e6:3c:61:1a:56:06: 18:da:01:a7:ac:5b:55:7a:03:c2:e6:c8:a6:7f:92: ef:cd:56:c4:1b:57:25:8c:8e:5f:06:91:7e:47:94: 19:b2:88:82:2e:41:c2:cd:09:39:d4:80:a4:f0:91: ef:ab:4e:d8:81:12:27:f2:e4:41:96:21:09:b9:23: 65:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2B:CB:1B:52:8D:A9:94:4B:D9:54:4B:C7:B3:88:CE:E1:A0:13:90 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/7ec1d8-be76-41ed-97c5-aafe8a8c165e/1/RivLG1KNqZRL2VRLx7OIzuGgE5A.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.132.190.0/23 213.134.16.0/24 IPv6: 2a0f:1880::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 202609 Signature Algorithm: sha256WithRSAEncryption 4b:b0:a1:fb:d7:cc:8a:01:56:21:18:3d:f0:88:ad:2e:43:69: a8:05:5c:00:22:4a:e5:14:ea:e1:af:7c:80:b9:fa:7f:21:0b: 3a:47:41:5c:f6:88:bc:79:49:21:34:af:0b:a2:89:18:85:e8: 68:a5:73:ef:8a:43:5c:57:52:4a:7c:4e:4d:f6:cb:75:3f:7d: 44:95:80:18:da:50:15:95:e8:a1:8b:cd:c0:30:d1:92:6a:e8: 0e:af:af:44:7c:cd:9c:46:6c:af:37:f6:5e:7f:a4:60:ad:fc: 01:d8:2f:47:20:0f:57:0f:9a:e0:cb:07:dc:ca:29:88:aa:94: bf:61:12:07:56:d8:83:11:85:41:f3:8b:a7:ee:9a:1a:9c:5f: 90:66:fd:62:dd:a4:a5:77:c2:ed:2b:16:6c:4e:24:d3:c3:80: 62:ee:67:c4:ad:48:5a:f6:f7:89:9b:3e:62:64:c5:f9:f3:2e: 2a:b2:49:c3:77:36:69:7b:ab:f3:fc:e5:2c:b6:ba:bf:bb:06: 65:be:2c:e2:10:62:a1:1d:ae:ae:7e:3c:cb:f8:62:28:ae:80: 44:e5:52:54:74:32:5c:4d:86:3f:a5:f4:4e:94:5b:a7:04:0a: 7c:fb:9c:9e:d8:22:04:43:48:51:c6:45:e8:b2:ce:f3:42:2b: ce:fa:2f:ad -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZq1llkJEwEUwaHlbi1KFODtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI0MTExODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjJiY2IxYjUyOGRhOTk0NGJkOTU0NGJjN2IzODhjZWUxYTAxMzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVQRwvoC+4LRsIsgskJvKlfjKY/V aXzFZAJz/ItzWxu/8/dDBiDJPrFdbR+MtzZ5u39XPTaQlqHNqTahUl3ImE07qWXL D0nXJyR1wKiVZ48AtnM+jOqH2dBNz8CcwTHLeZWjjm/wpbp5VSnn6cVwDeW3DFKX no9FKXjYvJYiG/7EzV3Din0jB7CaiayQKpmwSDZ6pAinrHPZkPXC2sSBgRdEGPwV qryG60dYjH7+Sp5MoGdnlNP0DR2tzzXmPGEaVgYY2gGnrFtVegPC5simf5LvzVbE G1cljI5fBpF+R5QZsoiCLkHCzQk51ICk8JHvq07YgRIn8uRBliEJuSNlBQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFEYryxtSjamUS9lUS8eziM7hoBOQMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU4LzdlYzFk OC1iZTc2LTQxZWQtOTdjNS1hYWZlOGE4YzE2NWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgvN2VjMWQ4 LWJlNzYtNDFlZC05N2M1LWFhZmU4YThjMTY1ZS8xL1JpdkxHMUtOcVpSTDJWUkx4 N09JenVHZ0U1QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQBuYS+AwQA1YYQMA0EAgACMAcDBQMqDxiAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMXcTANBgkqhkiG9w0BAQsFAAOCAQEAS7Ch +9fMigFWIRg98IitLkNpqAVcACJK5RTq4a98gLn6fyELOkdBXPaIvHlJITSvC6KJ GIXoaKVz74pDXFdSSnxOTfbLdT99RJWAGNpQFZXooYvNwDDRkmroDq+vRHzNnEZs rzf2Xn+kYK38AdgvRyAPVw+a4MsH3MopiKqUv2ESB1bYgxGFQfOLp+6aGpxfkGb9 Yt2kpXfC7SsWbE4k08OAYu5nxK1IWvb3iZs+YmTF+fMuKrJJw3c2aXur8/zlLLa6 v7sGZb4s4hBioR2urn48y/hiKK6AROVSVHQyXE2GP6X0TpRbpwQKfPucntgiBENI UcZF6LLO80IrzvovrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:35:57 2025 by rpki-client