This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer File: SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer (raw, json) Hash identifier: UKMcAyNqC7bCLNl8isvcp9SWDXg2sbZ/OoskLw4HfHA= Subject key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A49936E4DB598C747B50D74DE85C6993E Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 03 Nov 2025 11:56:30 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 56867 AS: 201454 AS: 204511 IP: 45.140.0.0/22 IP: 185.3.4.0/22 IP: 185.73.24.0/22 IP: 185.112.24.0/22 IP: 185.197.116.0/22 IP: 188.94.216.0/21 IP: 193.32.40.0/24 IP: 193.32.102.0/24 IP: 193.32.110.0/24 IP: 193.34.194.0/24 IP: 195.26.0.0/23 IP: 2a01:6f80::/32 IP: 2a02:c340::/29 IP: 2a05:3f00::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:49:93:6e:4d:b5:98:c7:47:b5:0d:74:de:85:c6:99:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 3 11:56:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:ea:a7:f7:27:59:6c:e5:6f:e2:37:a1:31: da:58:e8:ef:42:36:6a:7e:4b:68:de:c5:fe:47:0e: b8:89:2e:bb:4f:93:3e:36:f5:41:9e:9e:e0:68:d2: 8b:5b:10:d9:e4:9d:41:c7:25:16:19:c2:34:1d:4a: 11:93:69:2d:ee:6c:69:17:fe:fa:67:ea:a8:cf:6f: 5a:c9:46:5c:49:de:d6:86:fc:79:c8:78:2c:eb:a9: 9e:c1:0d:16:a4:a9:ed:a5:5e:96:12:fb:95:c0:9a: 50:7a:3d:b5:ad:28:2e:56:2c:11:04:87:7c:49:f9: ee:dc:b3:c0:4a:0d:1d:79:23:1b:80:4e:0a:ed:ba: d1:b7:b2:6d:2e:f3:a3:9c:6e:14:4a:07:c2:23:11: 36:71:9b:0a:a7:49:a3:64:59:bf:6e:1b:01:9f:fe: 3b:44:d0:bb:14:fc:c0:ed:39:1a:07:e7:a5:00:b9: fc:cb:c5:5d:fd:04:b4:10:a9:3c:41:d9:46:da:e4: 4d:41:b6:be:89:13:99:01:aa:5b:c1:d1:ac:32:05: 4f:13:25:e1:80:b0:1a:5b:cb:5e:70:bb:90:e7:54: 1f:dd:cc:36:8e:3b:3e:a6:63:d5:19:48:43:23:80: 42:9e:12:f9:be:a4:58:72:68:f5:35:9c:ec:62:6f: de:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.0.0/22 185.3.4.0/22 185.73.24.0/22 185.112.24.0/22 185.197.116.0/22 188.94.216.0/21 193.32.40.0/24 193.32.102.0/24 193.32.110.0/24 193.34.194.0/24 195.26.0.0/23 IPv6: 2a01:6f80::/32 2a02:c340::/29 2a05:3f00::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 56867 201454 204511 Signature Algorithm: sha256WithRSAEncryption aa:96:1e:a9:51:83:4a:44:ac:cd:c6:f1:ad:cf:07:9a:8f:a4: 7a:69:98:0a:2c:56:e0:83:8f:3e:41:7a:87:34:87:aa:88:48: 10:b4:0e:88:86:c2:96:3c:dd:d2:18:cf:7b:3d:a5:a5:6b:66: 83:37:4a:bf:37:04:23:c5:57:1d:6b:46:ce:bc:f6:fa:32:3f: 05:2b:25:73:c1:ae:1c:50:55:ce:65:ce:a7:9e:61:86:47:af: 5f:d6:44:7e:84:6a:75:16:ae:c4:72:27:69:2d:17:92:22:ef: 10:71:3e:dd:ee:50:de:74:55:5e:4c:c2:2a:07:f1:9f:fe:d5: 5a:e6:f0:a3:91:c6:89:e3:73:78:c2:d8:ff:c5:f1:53:65:db: 2a:be:92:af:75:db:d2:6e:d2:8c:8c:b5:81:f3:8b:1b:f0:cb: 0c:df:61:cd:f4:2d:09:6c:68:7e:3a:5e:01:e4:92:6d:8e:27: af:e2:83:e6:23:4e:19:bf:55:00:a1:6b:78:f8:6e:4d:d7:ff: 01:1a:04:e6:cd:f5:9e:63:78:02:4b:cd:fa:99:c1:2c:e5:bb: 6c:b8:07:75:12:8b:4c:d0:b9:0c:16:77:19:5e:f3:d7:25:77: 3f:47:82:b0:6f:5d:33:cd:19:d1:c4:5f:38:a3:7a:cc:26:c9: 09:7a:9c:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISAZpJk25NtZjHR7UNdN6Fxpk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTAzMTE1NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTljNWU1NmFhY2QwMWZmYjI4MjVhOTMxZWQ1ZWRlNDFjM2Y5MmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RLqp/cnWWzlb+I3oTHaWOjvQjZq fkto3sX+Rw64iS67T5M+NvVBnp7gaNKLWxDZ5J1BxyUWGcI0HUoRk2kt7mxpF/76 Z+qoz29ayUZcSd7Whvx5yHgs66mewQ0WpKntpV6WEvuVwJpQej21rSguViwRBId8 Sfnu3LPASg0deSMbgE4K7brRt7JtLvOjnG4USgfCIxE2cZsKp0mjZFm/bhsBn/47 RNC7FPzA7TkaB+elALn8y8Vd/QS0EKk8QdlG2uRNQba+iROZAapbwdGsMgVPEyXh gLAaW8tecLuQ51Qf3cw2jjs+pmPVGUhDI4BCnhL5vqRYcmj1NZzsYm/enQIDAQAB o4IDAzCCAv8wHQYDVR0OBBYEFEqcXlaqzQH/soJakx7V7eQcP5LmMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAwL2MwMTBk Yy0wOTEwLTQzNDEtOGIzMy0yZTY5NGIzMzk5MzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzAxMGRj LTA5MTAtNDM0MS04YjMzLTJlNjk0YjMzOTkzMy8xL1NweGVWcXJOQWYteWdscVRI dFh0NUJ3X2t1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHgGCCsGAQUF BwEHAQH/BGkwZzBIBAIAATBCAwQCLYwAAwQCuQMEAwQCuUkYAwQCuXAYAwQCucV0 AwQDvF7YAwQAwSAoAwQAwSBmAwQAwSBuAwQAwSLCAwQBwxoAMBsEAgACMBUDBQAq AW+AAwUDKgLDQAMFAyoFPwAwJAYIKwYBBQUHAQgBAf8EFTAToBEwDwIDAN4jAgMD Eu4CAwMe3zANBgkqhkiG9w0BAQsFAAOCAQEAqpYeqVGDSkSszcbxrc8Hmo+kemmY CixW4IOPPkF6hzSHqohIELQOiIbCljzd0hjPez2lpWtmgzdKvzcEI8VXHWtGzrz2 +jI/BSslc8GuHFBVzmXOp55hhkevX9ZEfoRqdRauxHInaS0XkiLvEHE+3e5Q3nRV XkzCKgfxn/7VWubwo5HGieNzeMLY/8XxU2XbKr6Sr3Xb0m7SjIy1gfOLG/DLDN9h zfQtCWxofjpeAeSSbY4nr+KD5iNOGb9VAKFrePhuTdf/ARoE5s31nmN4AkvN+pnB LOW7bLgHdRKLTNC5DBZ3GV7z1yV3P0eCsG9dM80Z0cRfOKN6zCbJCXqc2g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:12 2025 by rpki-client