This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer File: Tk9mXUbWoqvwUh5csffEUcozeoc.cer (raw, json) Hash identifier: fyWhksJllVFM7VGPWjyr4t4qVXS6AerHDfou6PYv9nU= Subject key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019A0B30141F2A01F6AE34D4ADF79F7DD383 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 22 Oct 2025 09:11:31 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 48952 AS: 202047 AS: 209791 IP: 85.208.140.0/22 IP: 93.175.240.0/22 IP: 185.161.40.0/22 IP: 194.169.184.0/22 IP: 2a07:c340::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:0b:30:14:1f:2a:01:f6:ae:34:d4:ad:f7:9f:7d:d3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Oct 22 09:11:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:5b:61:32:9e:58:6b:48:f6:7e:e1:ae:80: d6:69:e6:ae:54:f2:a1:90:aa:ca:e0:0b:42:83:a5: 84:ce:b4:52:aa:bd:4b:2f:54:bd:87:dd:b5:f1:b8: ff:31:76:72:11:dd:ea:46:1a:1f:01:da:ca:f2:d4: dd:0f:69:cb:83:30:7e:c2:5d:d4:f5:ee:10:5b:99: 04:a4:8c:ec:79:e0:99:f7:bb:dd:d0:f3:d1:47:10: 15:c4:1d:74:ff:cf:07:70:0c:cc:f0:02:2e:2d:54: ae:b8:f8:8d:42:cc:52:97:ac:5c:bd:17:4e:de:7f: 49:2a:70:4e:4a:da:cf:37:df:5b:53:8b:b4:e7:14: 87:b1:b9:68:ad:1f:f6:3d:a5:da:ec:65:18:d9:b3: 57:35:ca:b2:e6:eb:fb:14:1a:8f:aa:45:1b:59:1b: 10:0e:cb:65:a2:28:76:19:8d:49:cc:47:bc:f8:96: 4e:b4:29:2f:a5:60:09:35:81:19:eb:47:05:e3:ba: 45:cc:fb:46:39:f1:53:47:fd:ad:93:b9:bb:ad:aa: 3f:50:52:ad:31:e0:42:30:ee:c7:86:02:6c:7d:d4: 26:a3:63:c6:63:31:b1:79:14:0c:63:05:ab:09:fd: df:83:59:5b:ef:bf:37:14:a5:d6:6c:b0:25:c2:0d: 36:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.140.0/22 93.175.240.0/22 185.161.40.0/22 194.169.184.0/22 IPv6: 2a07:c340::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48952 202047 209791 Signature Algorithm: sha256WithRSAEncryption 29:d5:ee:e3:49:03:72:5a:bb:66:12:1c:03:e7:47:f0:33:ff: 9f:ef:d5:a7:b6:4d:8d:a6:e6:1c:fd:68:ad:26:2a:10:b3:b5: 79:05:20:b2:ab:4b:ee:4e:a1:05:6c:9b:9b:74:b1:cc:51:bc: 88:30:8b:54:5a:67:c8:40:b9:5a:73:dc:c5:bf:de:33:2c:e4: e3:44:2e:23:5f:de:e4:b7:7a:8c:06:a3:c5:bc:2a:90:75:30: 94:19:7a:11:36:6b:ce:74:1c:d7:46:de:a4:e3:7a:07:58:0d: fd:b4:6c:3c:da:0b:29:93:a6:bb:bb:45:0b:ed:82:cc:b4:60: 9d:01:fa:36:50:d3:cf:85:ae:69:c0:a9:b8:70:7c:fc:e8:b4: 92:fb:c0:c3:68:51:be:9d:b0:d4:7e:38:5c:72:1d:4f:7d:a4: 1a:63:64:44:c7:61:d5:aa:47:af:67:40:80:ca:f4:c8:e8:08: 72:8b:40:81:f5:a0:0c:c9:09:93:67:74:9b:8f:d4:e9:93:04: 6f:96:e4:bd:73:70:7e:00:69:c8:41:d3:d2:b4:e5:c9:59:fa: 4a:18:10:3a:6e:06:33:8c:96:69:43:b8:e3:f4:8d:8a:5a:1b: 7a:02:a5:7f:f5:52:7f:01:78:5c:1a:ae:2d:b2:ca:a3:96:88: 16:a9:9a:28 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgISAZoLMBQfKgH2rjTUrfeffdODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMDIyMDkxMTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTRmNjY1ZDQ2ZDZhMmFiZjA1MjFlNWNiMWY3YzQ1MWNhMzM3YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswZbYTKeWGtI9n7hroDWaeauVPKh kKrK4AtCg6WEzrRSqr1LL1S9h9218bj/MXZyEd3qRhofAdrK8tTdD2nLgzB+wl3U 9e4QW5kEpIzseeCZ97vd0PPRRxAVxB10/88HcAzM8AIuLVSuuPiNQsxSl6xcvRdO 3n9JKnBOStrPN99bU4u05xSHsblorR/2PaXa7GUY2bNXNcqy5uv7FBqPqkUbWRsQ Dstloih2GY1JzEe8+JZOtCkvpWAJNYEZ60cF47pFzPtGOfFTR/2tk7m7rao/UFKt MeBCMO7HhgJsfdQmo2PGYzGxeRQMYwWrCf3fg1lb7783FKXWbLAlwg02GQIDAQAB o4ICyzCCAscwHQYDVR0OBBYEFE5PZl1G1qKr8FIeXLH3xFHKM3qHMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzI3MGI4 OS03YzQ3LTQyNjMtODZhMC0wMDczYzJiN2E3ZWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvMjcwYjg5 LTdjNDctNDI2My04NmEwLTAwNzNjMmI3YTdlZS8xL1RrOW1YVWJXb3F2d1VoNWNz ZmZFVWNvemVvYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQCVdCMAwQCXa/wAwQCuaEoAwQCwqm4MA0EAgAC MAcDBQMqB8NAMCQGCCsGAQUFBwEIAQH/BBUwE6ARMA8CAwC/OAIDAxU/AgMDM38w DQYJKoZIhvcNAQELBQADggEBACnV7uNJA3Jau2YSHAPnR/Az/5/v1ae2TY2m5hz9 aK0mKhCztXkFILKrS+5OoQVsm5t0scxRvIgwi1RaZ8hAuVpz3MW/3jMs5ONELiNf 3uS3eowGo8W8KpB1MJQZehE2a850HNdG3qTjegdYDf20bDzaCymTpru7RQvtgsy0 YJ0B+jZQ08+FrmnAqbhwfPzotJL7wMNoUb6dsNR+OFxyHU99pBpjZETHYdWqR69n QIDK9MjoCHKLQIH1oAzJCZNndJuP1OmTBG+W5L1zcH4AachB09K05clZ+koYEDpu BjOMlmlDuOP0jYpaG3oCpX/1Un8BeFwari2yyqOWiBapmig= -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:44 2025 by rpki-client