This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer File: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer (raw, json) Hash identifier: I+PFwB7oE+BpjkzjEm521tRY1AGYDnyIZR55+q+52N8= Subject key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE3A154086DB7F2CED669CE98B136659C Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 09:53:12 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 210419 AS: 213398 IP: 62.164.144.0/24 IP: 89.23.124.0/24 IP: 89.40.30.0/24 IP: 91.234.235.0/24 IP: 194.164.224.0/24 IP: 2a10:25c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:a1:54:08:6d:b7:f2:ce:d6:69:ce:98:b1:36:65:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 09:53:12 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bf:64:d0:73:4f:74:67:44:36:5d:7e:d2:27: fa:02:c5:75:b8:40:1f:07:8f:73:81:ff:13:2a:90: ea:f2:09:24:10:c4:d1:de:68:d0:61:49:8d:74:e6: ff:06:1e:ac:ae:29:7a:72:07:2e:c2:32:8a:3a:a3: 4b:e4:b5:6f:2c:41:31:fd:77:07:32:c9:e8:63:a5: 17:f7:dd:46:bc:49:f3:b2:38:d8:9c:bd:10:3f:d8: 1e:83:06:b1:2c:14:86:86:46:57:5a:2f:65:c1:3b: 3f:cd:4e:00:54:b8:e5:16:74:1a:e1:46:bd:ca:33: 3e:da:ef:d4:93:b1:5f:64:6e:d2:47:4a:24:72:a7: 48:ff:f2:4e:5d:e1:e9:2c:05:0c:9c:b4:9b:ef:d9: 40:e8:01:29:64:2d:1d:01:f6:06:9f:0e:b0:78:99: b3:9f:56:94:61:d6:ef:af:c4:c7:c9:18:4b:d6:6e: 92:07:a3:54:bb:2c:3a:51:83:35:30:5c:26:b1:46: 56:3b:13:36:46:21:df:50:a5:f9:5a:7e:98:ab:39: a0:0c:34:78:c0:cc:79:80:f9:c6:83:65:0b:11:04: 82:29:43:63:59:e0:f3:5b:02:e9:ba:6c:72:2a:9a: 98:fe:36:45:36:d5:89:8e:8f:f7:9a:a3:33:cc:f1: 7a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.144.0/24 89.23.124.0/24 89.40.30.0/24 91.234.235.0/24 194.164.224.0/24 IPv6: 2a10:25c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 210419 213398 Signature Algorithm: sha256WithRSAEncryption 85:20:3f:64:96:01:dd:10:18:9e:cd:e0:0b:8e:94:db:7b:a8: 7d:b7:03:d9:a8:ea:80:be:3b:73:c1:5f:9b:f4:86:4a:95:77: f3:9f:72:55:44:8d:7e:cf:57:0a:21:20:10:8b:ff:9f:52:38: 49:cc:c0:c2:19:e7:98:0b:81:90:e7:04:35:cf:d7:84:37:65: a3:a5:91:06:5c:6b:b9:08:db:41:87:bd:09:00:2f:66:11:dd: a7:a0:9f:72:25:b3:28:7a:e6:c8:fb:46:20:2b:90:d5:8e:76: c9:dd:f7:4a:dd:4a:1f:8b:28:ec:8c:4b:da:cb:e4:1e:62:bf: 5d:21:5a:0b:5d:d1:ab:ec:8d:e5:9e:46:d2:21:a9:84:73:c8: 79:2f:6e:df:3f:91:3d:e8:d2:77:a6:ad:06:73:b6:19:0c:c4: 52:69:65:aa:fc:db:19:b1:5c:0c:20:db:3d:08:cb:59:10:bc: 3c:01:7a:91:ea:3c:66:95:31:ab:c1:4e:8f:46:15:23:03:91: 01:88:07:1c:2d:f1:1b:ac:1a:a0:5d:c4:dd:e4:19:e7:74:b2: 8d:6c:19:b2:02:c4:91:84:b1:21:81:2b:6a:ca:d8:f9:db:76: 1e:c2:0e:48:a4:42:10:b2:58:5f:33:b8:1c:f2:2c:1f:fa:b2: 8b:42:fe:64 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgISAZrjoVQIbbfyztZpzpixNmWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMDk1MzEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTdkMjE0NGRkMWI3MTRlOWUzY2EwOTAxZmU2NzUwNGJmNDU3ZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r9k0HNPdGdENl1+0if6AsV1uEAf B49zgf8TKpDq8gkkEMTR3mjQYUmNdOb/Bh6sril6cgcuwjKKOqNL5LVvLEEx/XcH MsnoY6UX991GvEnzsjjYnL0QP9gegwaxLBSGhkZXWi9lwTs/zU4AVLjlFnQa4Ua9 yjM+2u/Uk7FfZG7SR0okcqdI//JOXeHpLAUMnLSb79lA6AEpZC0dAfYGnw6weJmz n1aUYdbvr8THyRhL1m6SB6NUuyw6UYM1MFwmsUZWOxM2RiHfUKX5Wn6YqzmgDDR4 wMx5gPnGg2ULEQSCKUNjWeDzWwLpumxyKpqY/jZFNtWJjo/3mqMzzPF6hQIDAQAB o4ICzDCCAsgwHQYDVR0OBBYEFFV9IUTdG3FOnjygkB/mdQS/RX7rMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzFmMDgz MS1mYzZiLTQ4NjUtYThhOC1lZGY0MmQ1YzQ4MWYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMWYwODMx LWZjNmItNDg2NS1hOGE4LWVkZjQyZDVjNDgxZi8xL1ZYMGhSTjBiY1U2ZVBLQ1FI LVoxQkw5RmZ1cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF BwEHAQH/BDcwNTAkBAIAATAeAwQAPqSQAwQAWRd8AwQAWSgeAwQAW+rrAwQAwqTg MA0EAgACMAcDBQMqECXAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwM18wIDA0GW MA0GCSqGSIb3DQEBCwUAA4IBAQCFID9klgHdEBiezeALjpTbe6h9twPZqOqAvjtz wV+b9IZKlXfzn3JVRI1+z1cKISAQi/+fUjhJzMDCGeeYC4GQ5wQ1z9eEN2WjpZEG XGu5CNtBh70JAC9mEd2noJ9yJbMoeubI+0YgK5DVjnbJ3fdK3UofiyjsjEvay+Qe Yr9dIVoLXdGr7I3lnkbSIamEc8h5L27fP5E96NJ3pq0Gc7YZDMRSaWWq/NsZsVwM INs9CMtZELw8AXqR6jxmlTGrwU6PRhUjA5EBiAccLfEbrBqgXcTd5BnndLKNbBmy AsSRhLEhgStqytj523Yewg5IpEIQslhfM7gc8iwf+rKLQv5k -----END CERTIFICATE-----Generated at Sat Dec 6 06:54:39 2025 by rpki-client