This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer File: SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer (raw, json) Hash identifier: 4pZ7xOau6lv+n/wvhjEfIMH+FQ0njjaiteyYcSCL8A0= Subject key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A7897DCE919B9DC30A3453AB9280B5396 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft caRepository: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/ Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml Certificate not before: Wed 12 Nov 2025 15:03:29 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 47622 AS: 49438 IP: 5.199.0.0/17 IP: 91.246.26.0/23 IP: 185.169.120.0/22 IP: 212.74.32.0/19 IP: 2a00:17f8::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:97:dc:e9:19:b9:dc:30:a3:45:3a:b9:28:0b:53:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 12 15:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:e9:56:3b:72:44:c8:85:d2:82:72:fa:d4: 6e:c7:cf:02:65:90:f8:c3:fd:87:75:3b:d7:58:00: ee:9f:76:b8:d2:8b:cd:0c:cd:be:c5:cb:3f:19:9b: 81:73:19:a7:a9:ab:77:64:52:c1:a9:24:7d:8c:b1: f4:dd:2d:c0:b3:a8:04:67:37:25:4a:b9:02:b7:4a: 3e:ce:4f:e1:69:90:f3:18:4f:8c:dd:df:ac:2a:21: 8b:7e:32:75:24:bb:9f:8d:c3:cc:7c:fe:bf:fb:2e: 4a:7c:d1:7d:0a:e6:68:99:0b:fd:06:0e:7b:7d:4e: 9f:66:29:3f:88:93:d3:8f:65:13:83:1e:86:8d:53: 77:58:31:51:e8:c2:3f:e2:81:dd:92:6f:68:2a:89: 8b:ba:7f:f9:e2:32:b4:df:2a:62:fa:c7:60:e4:6a: 49:2d:91:b0:b6:74:59:15:7d:5d:45:b0:b3:b6:ca: 65:8c:67:ee:75:2f:ee:87:b1:da:8e:a2:69:4e:02: cc:0d:c4:cb:63:6c:64:c1:fa:52:52:82:86:08:d6: 0f:6e:51:59:a0:ea:ab:a1:6a:6b:ee:c9:91:f8:11: 72:e2:36:ff:5a:ee:1c:e8:30:46:6c:99:e8:59:be: 23:73:97:fe:04:7b:03:8a:fc:ac:9d:f5:f4:c4:c0: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/ RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.0.0/17 91.246.26.0/23 185.169.120.0/22 212.74.32.0/19 IPv6: 2a00:17f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 47622 49438 Signature Algorithm: sha256WithRSAEncryption 9f:36:79:e0:d9:c4:25:73:2f:6b:d1:17:18:80:b3:15:32:d6: a0:75:a3:f2:3a:90:b5:e9:b9:04:28:98:f5:7e:e7:a6:c1:65: 10:ad:11:b4:a8:3a:35:26:42:3f:c7:c4:a4:b7:20:08:8b:54: ca:0e:b4:9e:0c:e4:f0:b0:ea:87:bc:4c:22:c3:64:96:a4:7c: b6:75:de:13:16:a1:24:1b:73:90:22:5c:fc:d2:dc:30:fd:52: 5c:3a:01:a3:a8:0a:73:dd:c7:9a:c5:bb:38:98:ec:20:d4:fa: 42:95:0c:89:5f:04:b8:3b:cf:0f:81:e2:de:29:3a:1e:07:f3: c9:2f:aa:9c:e6:aa:d3:20:79:aa:36:72:e3:32:67:c6:f4:3d: 01:74:5c:03:a4:cd:d8:35:90:28:40:1b:50:cb:a6:86:65:05: 42:7b:aa:c5:d9:41:6b:e2:a7:d3:30:24:8b:58:2c:0d:b4:41: 08:97:fb:52:24:de:94:92:a7:44:53:97:d6:f2:a7:1a:29:8f: 98:90:e9:f0:e8:2d:a3:b0:13:92:e0:dc:27:24:b2:14:94:d6: 8e:93:46:5a:04:e1:8c:a1:2a:b9:ab:49:db:ff:c4:91:a3:16: 9b:e6:be:2b:8b:85:8e:31:8a:5e:2c:5d:ff:f8:90:ae:83:ee: f3:6d:8f:b9 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgISAZp4l9zpGbncMKNFOrkoC1OWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTEyMTUwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjNhY2EzYTdjNjUyYTlmYWY4ZTRlMTE5YmQyZjdiZjU0YWZkZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fzpVjtyRMiF0oJy+tRux88CZZD4 w/2HdTvXWADun3a40ovNDM2+xcs/GZuBcxmnqat3ZFLBqSR9jLH03S3As6gEZzcl SrkCt0o+zk/haZDzGE+M3d+sKiGLfjJ1JLufjcPMfP6/+y5KfNF9CuZomQv9Bg57 fU6fZik/iJPTj2UTgx6GjVN3WDFR6MI/4oHdkm9oKomLun/54jK03ypi+sdg5GpJ LZGwtnRZFX1dRbCztspljGfudS/uh7HajqJpTgLMDcTLY2xkwfpSUoKGCNYPblFZ oOqroWpr7smR+BFy4jb/Wu4c6DBGbJnoWb4jc5f+BHsDivysnfX0xMAAvwIDAQAB o4IC4jCCAt4wHQYDVR0OBBYEFEs6yjp8ZSqfr45OEZvS979Ur952MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBkODU0 Yzc3LWZkOGItNDI1YS1iZDU1LTgyZTFkN2ZhYTc4Mi8wLzCBiwYIKwYBBQUHMAqG f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4 NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvNEIzQUNBM0E3QzY1 MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5tZnQwPAYIKwYBBQUHMA2GMGh0 dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAME BwXHAAMEAVv2GgMEArmpeAMEBdRKIDANBAIAAjAHAwUAKgAX+DAfBggrBgEFBQcB CAEB/wQQMA6gDDAKAgMAugYCAwDBHjANBgkqhkiG9w0BAQsFAAOCAQEAnzZ54NnE JXMva9EXGICzFTLWoHWj8jqQtem5BCiY9X7npsFlEK0RtKg6NSZCP8fEpLcgCItU yg60ngzk8LDqh7xMIsNklqR8tnXeExahJBtzkCJc/NLcMP1SXDoBo6gKc93HmsW7 OJjsINT6QpUMiV8EuDvPD4Hi3ik6HgfzyS+qnOaq0yB5qjZy4zJnxvQ9AXRcA6TN 2DWQKEAbUMumhmUFQnuqxdlBa+Kn0zAki1gsDbRBCJf7UiTelJKnRFOX1vKnGimP mJDp8Ogto7ATkuDcJySyFJTWjpNGWgThjKEquatJ2//EkaMWm+a+K4uFjjGKXixd //iQroPu822PuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:20 2025 by rpki-client