This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Sr9C0dMjaItaMnFsIpBIz5tKKco.cer File: Sr9C0dMjaItaMnFsIpBIz5tKKco.cer (raw, json) Hash identifier: b+WZ3eOYL+uSOu5rzQFk0a5erCj2AEISUz8+IPDyUz0= Subject key identifier: 4A:BF:42:D1:D3:23:68:8B:5A:32:71:6C:22:90:48:CF:9B:4A:29:CA Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AEE358D22EE45DF3DB339C92567F2BCAC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 05 Dec 2025 11:11:18 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 203284 IP: 91.194.135.0/24 IP: 91.202.6.0/24 IP: 176.111.40.0/24 IP: 193.105.135.0/24 IP: 195.93.172.0/24 IP: 195.242.218.0/23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:35:8d:22:ee:45:df:3d:b3:39:c9:25:67:f2:bc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 5 11:11:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4abf42d1d323688b5a32716c229048cf9b4a29ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:de:bf:27:71:39:de:39:51:52:49:dd:1a:ba: c0:d9:c8:c1:5c:6d:66:55:cf:44:75:b6:ba:55:53: f8:1a:eb:15:85:df:bc:7f:1e:7c:cf:9b:4a:e5:aa: ee:f5:35:59:de:59:02:c0:8f:0a:01:06:e7:e0:24: ea:6d:c9:b0:d6:57:c8:31:7b:1b:f8:aa:d9:da:80: 33:79:09:56:3a:c9:67:5c:b3:16:a3:02:74:0b:0c: b2:07:35:46:07:b8:c4:f3:48:eb:d4:fb:ee:20:8a: 97:fa:3f:79:e9:08:af:51:24:70:f9:37:77:45:24: 03:61:27:02:1b:eb:40:81:3b:bb:cb:e7:47:63:3b: 0e:10:0a:50:2f:cc:14:eb:88:ec:ad:a2:88:91:5e: 55:50:46:24:16:2d:1f:65:f6:e0:50:4d:64:fe:29: f1:57:44:7a:50:5a:8b:17:a8:09:47:00:46:f9:17: 1b:6a:69:bd:6e:00:52:03:0a:80:c3:78:cf:e0:99: a9:a9:29:b8:41:e3:c5:21:64:a6:00:de:08:81:e2: 1f:bf:fc:36:d4:ce:26:1a:31:e0:7d:3a:10:5e:e5: 13:e7:a0:2f:23:d6:c9:7e:4f:34:14:93:db:20:0f: 75:02:91:f2:0a:ad:77:dd:4e:10:c9:46:c3:07:ec: bc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BF:42:D1:D3:23:68:8B:5A:32:71:6C:22:90:48:CF:9B:4A:29:CA X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c33da4-c15d-4f2c-9dba-ea890a6d461d/1/Sr9C0dMjaItaMnFsIpBIz5tKKco.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.135.0/24 91.202.6.0/24 176.111.40.0/24 193.105.135.0/24 195.93.172.0/24 195.242.218.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 203284 Signature Algorithm: sha256WithRSAEncryption 8e:8a:be:4c:da:82:54:38:7f:7d:dc:10:90:70:fc:29:77:9c: 29:8e:a7:35:08:0a:06:07:1b:5b:1a:33:e4:2f:dd:9b:cb:c0: 59:57:97:e0:30:77:5c:17:ff:2e:3b:ac:d4:4c:ef:b8:e8:5a: 88:16:56:ac:90:3d:60:0f:0d:d3:f1:05:b1:96:76:5d:02:79: b0:ec:56:0e:f4:0b:eb:17:08:93:ce:e7:ea:fc:19:18:d6:88: 83:5a:25:4d:f9:0d:e5:9c:d5:c4:35:dc:65:1d:99:10:6d:be: bc:c4:32:7c:7f:ca:c8:59:b4:f9:05:58:24:87:a1:a8:09:5b: 74:d2:00:f6:d7:60:1f:ae:86:c9:49:78:39:60:58:ea:77:52: dd:3d:6b:65:e3:32:14:c3:58:4a:fb:73:b3:99:43:8a:6a:97: f5:c2:37:3c:e3:a3:53:dd:ea:5f:65:9c:3b:79:3e:66:ce:3e: 63:72:13:9a:08:cc:74:c3:55:78:50:e3:8f:f5:4b:a8:e9:7e: 50:c1:5f:be:fc:50:1b:2e:f4:fd:46:55:24:ca:38:4d:4e:37: b7:da:d7:f0:72:b4:f4:9a:74:7c:f6:66:bc:a9:01:11:af:16: 18:29:e8:ae:0c:8c:33:59:af:83:70:9a:36:c8:ac:65:7d:33: 43:6b:42:5d -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZruNY0i7kXfPbM5ySVn8rysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA1MTExMTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWJmNDJkMWQzMjM2ODhiNWEzMjcxNmMyMjkwNDhjZjliNGEyOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA896/J3E53jlRUkndGrrA2cjBXG1m Vc9Edba6VVP4GusVhd+8fx58z5tK5aru9TVZ3lkCwI8KAQbn4CTqbcmw1lfIMXsb +KrZ2oAzeQlWOslnXLMWowJ0CwyyBzVGB7jE80jr1PvuIIqX+j956QivUSRw+Td3 RSQDYScCG+tAgTu7y+dHYzsOEApQL8wU64jsraKIkV5VUEYkFi0fZfbgUE1k/inx V0R6UFqLF6gJRwBG+Rcbamm9bgBSAwqAw3jP4JmpqSm4QePFIWSmAN4IgeIfv/w2 1M4mGjHgfToQXuUT56AvI9bJfk80FJPbIA91ApHyCq133U4QyUbDB+y80wIDAQAB o4ICvjCCArowHQYDVR0OBBYEFEq/QtHTI2iLWjJxbCKQSM+bSinKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJjL2MzM2Rh NC1jMTVkLTRmMmMtOWRiYS1lYTg5MGE2ZDQ2MWQvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvYzMzZGE0 LWMxNWQtNGYyYy05ZGJhLWVhODkwYTZkNDYxZC8xL1NyOUMwZE1qYUl0YU1uRnNJ cEJJejV0S0tjby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF BwEHAQH/BC4wLDAqBAIAATAkAwQAW8KHAwQAW8oGAwQAsG8oAwQAwWmHAwQAw12s AwQBw/LaMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMaFDANBgkqhkiG9w0BAQsF AAOCAQEAjoq+TNqCVDh/fdwQkHD8KXecKY6nNQgKBgcbWxoz5C/dm8vAWVeX4DB3 XBf/Ljus1EzvuOhaiBZWrJA9YA8N0/EFsZZ2XQJ5sOxWDvQL6xcIk87n6vwZGNaI g1olTfkN5ZzVxDXcZR2ZEG2+vMQyfH/KyFm0+QVYJIehqAlbdNIA9tdgH66GyUl4 OWBY6ndS3T1rZeMyFMNYSvtzs5lDimqX9cI3POOjU93qX2WcO3k+Zs4+Y3ITmgjM dMNVeFDjj/VLqOl+UMFfvvxQGy70/UZVJMo4TU43t9rX8HK09Jp0fPZmvKkBEa8W GCnorgyMM1mvg3CaNsisZX0zQ2tCXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:36:15 2025 by rpki-client