This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer File: _dD9aMG2tWm598SBOsEt7Wrl6Ks.cer (raw, json) Hash identifier: 4J9008tLg0i32XslYk1sGww4VsRGkf16512GFb5DwQ0= Subject key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B27D882FEEC6E0BACE74F18A71B183A75 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Tue 16 Dec 2025 15:47:39 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 48361 IP: 91.209.127.0/24 IP: 91.239.132.0/22 IP: 185.16.116.0/22 IP: 193.106.150.0/24 IP: 194.15.126.0/23 IP: 2001:67c:1484::/48 IP: 2a04:280::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:d8:82:fe:ec:6e:0b:ac:e7:4f:18:a7:1b:18:3a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 16 15:47:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:4c:fd:0a:8f:1b:25:cd:e3:69:68:ea:96: d6:2a:e7:7a:0d:7d:e1:32:94:c7:d1:87:8a:af:87: 9a:60:08:fa:ad:60:7e:91:61:73:8c:bd:43:2c:86: 66:c2:9f:6b:66:b0:85:f4:99:8a:eb:df:73:67:a3: b6:82:09:84:64:12:36:ba:8d:55:42:6e:b0:00:60: 4f:5c:eb:ab:f5:d2:ec:43:00:7a:21:c2:8d:97:ed: d3:5f:eb:7f:2e:39:f9:fc:f2:6c:86:ac:dd:05:f9: 7c:fd:d7:91:4d:7b:80:0a:36:17:00:41:79:f2:17: da:4b:58:fe:e9:ec:95:00:82:af:78:45:3e:2f:64: 9b:dc:8b:44:1c:55:69:8e:4e:35:44:c5:bf:08:13: ba:a2:4e:32:3f:e2:a6:44:2b:43:c0:30:18:72:79: 71:51:7a:2d:3f:84:34:c0:a2:bb:7e:df:4e:43:11: 63:56:1a:3d:f5:fe:dc:f1:4d:8e:b9:65:ae:e7:6c: 1b:d0:c4:c0:83:95:54:df:2d:8a:64:b6:3e:a3:ae: a7:c7:6b:23:fa:b7:84:b7:66:64:16:7a:2b:72:03: c3:04:3e:ac:83:37:ee:8d:04:81:ed:11:40:56:ec: 69:30:d5:33:c6:fb:fd:59:f4:fb:3f:07:2a:3f:49: c1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.127.0/24 91.239.132.0/22 185.16.116.0/22 193.106.150.0/24 194.15.126.0/23 IPv6: 2001:67c:1484::/48 2a04:280::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 48361 Signature Algorithm: sha256WithRSAEncryption 82:e4:fd:0c:56:1f:8c:9c:53:e8:11:5d:c5:79:2f:ca:a5:4b: 47:e5:7c:4d:73:89:95:1d:be:21:ea:be:48:98:9d:39:4d:28: 61:da:77:47:1f:3d:95:3e:31:fc:ca:c8:7a:4d:81:15:81:9d: 0e:0b:4c:65:36:0c:66:81:60:b7:0a:e9:fe:85:d6:f7:95:17: 40:9c:89:e4:a3:95:d8:4e:41:be:34:81:81:45:e5:cb:bf:91: ac:3c:0d:19:86:7c:7a:14:50:fe:ed:58:17:78:06:26:ec:38: a3:34:7c:a3:9c:5c:68:54:54:27:16:2e:97:3c:b8:17:20:50: 29:3d:e4:03:9c:cf:f9:9f:9b:ba:4e:c2:13:12:b0:79:7b:9a: 7d:1a:7e:68:d4:be:67:7f:96:af:aa:fb:79:67:92:04:ff:87: 89:a8:62:39:14:28:69:48:10:ce:44:55:27:3a:38:4a:8b:7f: 33:0e:83:38:ce:43:aa:74:c2:e2:a4:af:5a:9c:46:9a:eb:49: e4:12:1e:41:fe:65:2b:3f:bc:02:00:0e:40:28:da:d1:e7:72: c3:65:fd:1f:dc:ea:c3:ad:56:57:62:5a:85:be:0c:c0:50:67: 16:c8:5d:61:cb:18:9d:d2:09:2f:cc:eb:05:95:54:65:7e:f4: 2e:9c:a6:92 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZsn2IL+7G4LrOdPGKcbGDp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjE2MTU0NzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGQwZmQ2OGMxYjZiNTY5YjlmN2M0ODEzYWMxMmRlZDZhZTVlOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGdM/QqPGyXN42lo6pbWKud6DX3h MpTH0YeKr4eaYAj6rWB+kWFzjL1DLIZmwp9rZrCF9JmK699zZ6O2ggmEZBI2uo1V Qm6wAGBPXOur9dLsQwB6IcKNl+3TX+t/Ljn5/PJshqzdBfl8/deRTXuACjYXAEF5 8hfaS1j+6eyVAIKveEU+L2Sb3ItEHFVpjk41RMW/CBO6ok4yP+KmRCtDwDAYcnlx UXotP4Q0wKK7ft9OQxFjVho99f7c8U2OuWWu52wb0MTAg5VU3y2KZLY+o66nx2sj +reEt2ZkFnorcgPDBD6sgzfujQSB7RFAVuxpMNUzxvv9WfT7PwcqP0nBsQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFP3Q/WjBtrVpuffEgTrBLe1q5eirMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q0LzYyMzRj MC1hNzhjLTQzOWMtYTZlZS01Y2NmNmY0Yjc5MjAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvNjIzNGMw LWE3OGMtNDM5Yy1hNmVlLTVjY2Y2ZjRiNzkyMC8xL19kRDlhTUcydFdtNTk4U0JP c0V0N1dybDZLcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CME8GCCsGAQUF BwEHAQH/BEAwPjAkBAIAATAeAwQAW9F/AwQCW++EAwQCuRB0AwQAwWqWAwQBwg9+ MBYEAgACMBADBwAgAQZ8FIQDBQMqBAKAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwC86TANBgkqhkiG9w0BAQsFAAOCAQEAguT9DFYfjJxT6BFdxXkvyqVLR+V8TXOJ lR2+Ieq+SJidOU0oYdp3Rx89lT4x/MrIek2BFYGdDgtMZTYMZoFgtwrp/oXW95UX QJyJ5KOV2E5BvjSBgUXly7+RrDwNGYZ8ehRQ/u1YF3gGJuw4ozR8o5xcaFRUJxYu lzy4FyBQKT3kA5zP+Z+buk7CExKweXuafRp+aNS+Z3+Wr6r7eWeSBP+HiahiORQo aUgQzkRVJzo4Sot/Mw6DOM5DqnTC4qSvWpxGmutJ5BIeQf5lKz+8AgAOQCja0edy w2X9H9zqw61WV2Jahb4MwFBnFshdYcsYndIJL8zrBZVUZX70Lpymkg== -----END CERTIFICATE-----Generated at Thu Dec 18 14:08:10 2025 by rpki-client