This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer (raw, json) Hash identifier: m7+1XPOBHSs1YUGl2BwNvhzZEbbd5fc/r+QRth2JxwE= Subject key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019ABAC0DD7134C944C217914161A625521B Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 25 Nov 2025 11:23:13 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 205836 AS: 207579 AS: 209909 -- 209910 IP: 5.252.92.0/22 IP: 5.253.156.0/22 IP: 45.65.64.0/22 IP: 45.92.184.0/22 IP: 46.149.106.0/24 IP: 62.122.228.0/22 IP: 81.172.68.0/22 IP: 91.210.126.0/24 IP: 185.85.254.0/24 IP: 185.146.67.0/24 IP: 185.157.128.0/22 IP: 185.200.76.0/22 IP: 185.204.202.0/24 IP: 185.210.192.0/22 IP: 185.218.160.0/22 IP: 185.236.248.0/22 IP: 193.84.48.0/23 IP: 193.84.92.0/23 IP: 2a07:a4c0::/29 IP: 2a0b:d940::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:c0:dd:71:34:c9:44:c2:17:91:41:61:a6:25:52:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 25 11:23:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ad:fc:e0:24:fc:e4:f7:f1:cc:73:e7:00:96: 62:49:8a:41:80:d2:43:22:15:4a:5a:45:14:a3:34: ef:48:bb:47:89:4e:d7:3a:0c:e9:82:a2:cb:e1:47: de:87:d8:73:de:c2:42:c6:ef:ba:a1:92:58:ca:a0: 0f:7a:8f:2c:57:82:44:6c:7e:9b:89:03:eb:af:01: 89:12:a1:04:76:94:d8:8d:e5:45:77:4c:68:8d:93: 83:ac:8d:1b:93:ba:c2:f2:bc:ab:c6:c1:cb:7f:a1: 75:f3:f2:96:ce:86:3d:6c:91:80:9a:36:91:c7:fa: 2d:ab:0e:45:00:36:f0:fc:bb:4c:7a:7d:52:fe:2d: 16:9c:61:a4:f1:74:e7:c4:9d:87:70:a4:7f:c2:df: fc:8b:8a:d0:92:da:c7:1f:a0:d5:ff:d7:54:37:ae: 46:4b:3a:a7:f7:b8:07:d6:85:ff:cc:c8:3a:4e:30: 15:6d:6e:02:20:e3:1c:b9:87:f1:a4:16:d7:68:aa: 82:f9:40:a7:e1:c4:77:b4:69:cd:57:c6:03:7c:c8: 35:07:38:ec:3e:df:fb:ac:4a:38:f0:ce:6c:e4:48: 65:03:e8:5b:98:32:ac:54:6d:f1:ef:56:eb:c5:b3: 15:c3:e0:20:6e:4a:7b:05:79:95:42:42:d6:12:8d: c5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.92.0/22 5.253.156.0/22 45.65.64.0/22 45.92.184.0/22 46.149.106.0/24 62.122.228.0/22 81.172.68.0/22 91.210.126.0/24 185.85.254.0/24 185.146.67.0/24 185.157.128.0/22 185.200.76.0/22 185.204.202.0/24 185.210.192.0/22 185.218.160.0/22 185.236.248.0/22 193.84.48.0/23 193.84.92.0/23 IPv6: 2a07:a4c0::/29 2a0b:d940::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 205836 207579 209909-209910 Signature Algorithm: sha256WithRSAEncryption 4f:60:62:07:66:c6:00:8c:75:fd:b3:34:6c:c3:1e:fa:ec:b9: bd:b6:b3:da:f1:f6:d9:fb:f0:be:ea:2d:a7:5a:8c:cf:c0:8c: f2:ef:2d:a6:4e:9c:c9:2a:d1:02:28:55:70:f8:41:9b:b4:3b: b2:01:8e:4e:1e:92:b5:3c:d4:ca:63:f4:49:b7:e4:bc:0b:d8: cf:7e:49:f5:10:ee:66:86:36:7b:80:3a:01:67:f6:b1:b5:82: 3c:72:ea:8c:6b:fa:00:4f:62:ec:6b:9a:69:df:a6:3f:47:2b: 6b:6f:63:95:ef:5c:1c:79:f6:4e:8b:23:14:66:77:ea:4c:3d: 7c:c9:ac:08:36:29:2d:a2:5e:c9:41:bb:62:77:a3:31:3c:75: 66:d7:d4:34:38:29:d3:dc:67:9b:78:04:bc:46:4b:48:73:76: 5e:df:cd:52:ce:36:c5:44:98:20:51:b1:3e:fa:8f:57:42:2e: 3e:31:0f:6d:29:0a:01:1b:55:5d:ad:02:13:6e:92:1c:2e:2b: b2:e0:6f:69:06:da:68:9b:ec:45:d3:ba:d3:aa:aa:fd:32:fc: 00:7c:a9:1e:0c:79:53:15:93:4a:51:74:44:05:8a:d0:13:9a: db:85:d3:fe:e1:13:16:f4:5f:a2:35:7e:95:f8:8c:2b:48:e1: 77:69:c2:12 -----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgISAZq6wN1xNMlEwheRQWGmJVIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTI1MTEyMzEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzcwMjFkY2RmNDRiNmFmZGQzODEwNTQ3YzU1YTc5YmQxYTlmYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5K384CT85PfxzHPnAJZiSYpBgNJD IhVKWkUUozTvSLtHiU7XOgzpgqLL4Ufeh9hz3sJCxu+6oZJYyqAPeo8sV4JEbH6b iQPrrwGJEqEEdpTYjeVFd0xojZODrI0bk7rC8ryrxsHLf6F18/KWzoY9bJGAmjaR x/otqw5FADbw/LtMen1S/i0WnGGk8XTnxJ2HcKR/wt/8i4rQktrHH6DV/9dUN65G Szqn97gH1oX/zMg6TjAVbW4CIOMcuYfxpBbXaKqC+UCn4cR3tGnNV8YDfMg1Bzjs Pt/7rEo48M5s5EhlA+hbmDKsVG3x71brxbMVw+Agbkp7BXmVQkLWEo3F4wIDAQAB o4IDMDCCAywwHQYDVR0OBBYEFFdwIdzfRLav3TgQVHxVp5vRqfo7MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk5LzBhYzI3 YS0yMTU5LTQ4ZDctOGJmZC1jOTA3YWUxYzIxMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvMGFjMjdh LTIxNTktNDhkNy04YmZkLWM5MDdhZTFjMjExZS8xL1YzQWgzTjlFdHFfZE9CQlVm RldubTlHcC1qcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGdBggrBgEF BQcBBwEB/wSBjTCBijByBAIAATBsAwQCBfxcAwQCBf2cAwQCLUFAAwQCLVy4AwQA LpVqAwQCPnrkAwQCUaxEAwQAW9J+AwQAuVX+AwQAuZJDAwQCuZ2AAwQCuchMAwQA uczKAwQCudLAAwQCudqgAwQCuez4AwQBwVQwAwQBwVRcMBQEAgACMA4DBQMqB6TA AwUDKgvZQDArBggrBgEFBQcBCAEB/wQcMBqgGDAWAgMDJAwCAwMq2zAKAgMDM/UC AwMz9jANBgkqhkiG9w0BAQsFAAOCAQEAT2BiB2bGAIx1/bM0bMMe+uy5vbaz2vH2 2fvwvuotp1qMz8CM8u8tpk6cySrRAihVcPhBm7Q7sgGOTh6StTzUymP0SbfkvAvY z35J9RDuZoY2e4A6AWf2sbWCPHLqjGv6AE9i7Guaad+mP0cra29jle9cHHn2Tosj FGZ36kw9fMmsCDYpLaJeyUG7YnejMTx1ZtfUNDgp09xnm3gEvEZLSHN2Xt/NUs42 xUSYIFGxPvqPV0IuPjEPbSkKARtVXa0CE26SHC4rsuBvaQbaaJvsRdO606qq/TL8 AHypHgx5UxWTSlF0RAWK0BOa24XT/uETFvRfojV+lfiMK0jhd2nCEg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:31 2025 by rpki-client