This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V1TRlSf9hdDURKyt1EoBZV_cdAA.cer File: V1TRlSf9hdDURKyt1EoBZV_cdAA.cer (raw, json) Hash identifier: hngfbKuxGNhVeoaZXmkQ0lu9VoxcaPJuoLKhO+eoARE= Subject key identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3CA723BB03A44D2DF7C23590EB10B07 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 10:38:06 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 199196 AS: 211267 IP: 62.69.136.0/21 IP: 62.109.192.0/18 IP: 185.29.44.0/22 IP: 193.219.115.0/24 IP: 2a00:a640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:ca:72:3b:b0:3a:44:d2:df:7c:23:59:0e:b1:0b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 10:38:06 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5754d19527fd85d0d444acadd44a01655fdc7400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ac:0b:fa:e6:64:06:b6:2e:79:be:ae:f2:b1: f0:c3:b9:29:e3:72:9b:6d:cd:62:ad:42:f6:b6:19: 89:c7:e1:ef:24:4a:81:28:d7:6e:ce:ae:78:83:e9: d4:ba:9d:c7:7c:0b:50:ca:7c:46:38:1d:93:f2:9b: 93:5d:05:03:8b:22:d4:78:8b:c7:c1:8c:d8:40:24: 33:f9:45:a7:82:8f:21:c8:b0:a4:e8:0a:0a:c3:82: b4:3d:b0:52:a1:9a:37:fd:a4:bd:a8:37:1f:1e:a9: 43:11:7e:85:39:ec:3d:6b:03:6c:3a:60:ef:75:24: cb:cb:2f:95:19:b2:22:c7:07:56:d1:4f:3c:06:dc: 36:2b:91:8d:1a:f9:1a:3f:c9:b4:43:9a:45:80:a8: 2c:18:dd:c8:74:82:9b:53:86:42:82:f7:fa:ed:61: a3:84:97:b1:04:cc:fc:52:f0:d7:47:47:30:a1:1a: f3:7f:fd:e8:75:37:80:37:68:09:2a:a2:70:6e:b5: 18:c2:84:0b:77:3f:4b:49:51:be:28:f9:64:5a:d0: a4:20:d2:6f:4b:2e:19:a3:0f:75:d3:eb:0a:aa:b6: ed:5c:79:77:3b:ae:ad:68:22:f4:70:0c:69:d3:b2: be:41:e0:bf:89:d6:03:37:4b:01:ea:50:52:6f:1d: 19:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:54:D1:95:27:FD:85:D0:D4:44:AC:AD:D4:4A:01:65:5F:DC:74:00 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/7c9fcc-8fce-44b7-b6bf-11776031415f/1/V1TRlSf9hdDURKyt1EoBZV_cdAA.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.69.136.0/21 62.109.192.0/18 185.29.44.0/22 193.219.115.0/24 IPv6: 2a00:a640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 199196 211267 Signature Algorithm: sha256WithRSAEncryption 78:fa:c3:53:d0:b1:5a:d7:8b:bb:bf:f0:94:9e:b9:2e:b6:ab: 2f:3c:2f:9d:c9:00:f6:5d:92:a9:6b:12:9a:75:7c:7f:96:da: 51:c7:d2:0c:bc:9d:82:85:85:7d:5d:9c:82:70:e5:49:13:01: ca:1b:d5:d4:d2:1b:01:34:6c:24:fe:d4:8a:ea:70:b1:81:90: 7a:b1:e5:e3:ab:cc:eb:90:04:51:48:0b:8a:70:d9:7d:00:0d: 5b:e2:7a:0c:33:d1:a4:08:e5:f6:25:37:5c:a4:da:6b:83:c2: 05:13:75:b8:42:8a:96:f5:26:b0:b1:97:53:b7:c1:21:e1:d0: 2f:6e:03:c1:e3:e3:d8:98:b7:fd:a0:65:01:12:91:21:c9:b8: 0f:5c:df:37:15:d0:d2:71:10:a0:3a:df:a1:55:8a:9c:af:a3: 81:48:9a:81:fd:0e:4a:b2:74:43:dd:f4:fc:98:c7:8c:bc:bc: 6c:d8:56:dd:55:83:47:43:b8:a5:f2:cd:6e:c7:af:a5:90:d1: ca:1a:02:d2:35:b6:66:ce:84:ab:66:8a:cf:26:e2:fd:5b:5f: a0:01:d1:f0:36:3c:f7:54:80:34:b3:ca:dd:0f:a5:87:90:c8: e2:21:1f:10:8c:51:fd:a7:a1:97:c4:ab:6c:f0:0f:f0:4c:dd: e2:cd:b5:6a -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZrjynI7sDpE0t98I1kOsQsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTAzODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzU0ZDE5NTI3ZmQ4NWQwZDQ0NGFjYWRkNDRhMDE2NTVmZGM3NDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KwL+uZkBrYueb6u8rHww7kp43Kb bc1irUL2thmJx+HvJEqBKNduzq54g+nUup3HfAtQynxGOB2T8puTXQUDiyLUeIvH wYzYQCQz+UWngo8hyLCk6AoKw4K0PbBSoZo3/aS9qDcfHqlDEX6FOew9awNsOmDv dSTLyy+VGbIixwdW0U88Btw2K5GNGvkaP8m0Q5pFgKgsGN3IdIKbU4ZCgvf67WGj hJexBMz8UvDXR0cwoRrzf/3odTeAN2gJKqJwbrUYwoQLdz9LSVG+KPlkWtCkINJv Sy4Zow910+sKqrbtXHl3O66taCL0cAxp07K+QeC/idYDN0sB6lBSbx0Z9QIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFFdU0ZUn/YXQ1ESsrdRKAWVf3HQAMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgxLzdjOWZj Yy04ZmNlLTQ0YjctYjZiZi0xMTc3NjAzMTQxNWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvN2M5ZmNj LThmY2UtNDRiNy1iNmJmLTExNzc2MDMxNDE1Zi8xL1YxVFJsU2Y5aGREVVJLeXQx RW9CWlZfY2RBQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF BwEHAQH/BDEwLzAeBAIAATAYAwQDPkWIAwQGPm3AAwQCuR0sAwQAwdtzMA0EAgAC MAcDBQAqAKZAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwMKHAIDAzlDMA0GCSqG SIb3DQEBCwUAA4IBAQB4+sNT0LFa14u7v/CUnrkutqsvPC+dyQD2XZKpaxKadXx/ ltpRx9IMvJ2ChYV9XZyCcOVJEwHKG9XU0hsBNGwk/tSK6nCxgZB6seXjq8zrkARR SAuKcNl9AA1b4noMM9GkCOX2JTdcpNprg8IFE3W4QoqW9SawsZdTt8Eh4dAvbgPB 4+PYmLf9oGUBEpEhybgPXN83FdDScRCgOt+hVYqcr6OBSJqB/Q5KsnRD3fT8mMeM vLxs2FbdVYNHQ7il8s1ux6+lkNHKGgLSNbZmzoSrZorPJuL9W1+gAdHwNjz3VIA0 s8rdD6WHkMjiIR8QjFH9p6GXxKts8A/wTN3izbVq -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:58 2025 by rpki-client