This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer File: aRJCwzvC4unkWFCg_GSrLHUGpLg.cer (raw, json) Hash identifier: znoPXn0jzXiRDnhNHhYNP5ODzLO3A9g+JE8KIoQLFjc= Subject key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA650B63AB7F20B638D150680968AE2EE Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 12:08:18 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 59711 AS: 61046 AS: 201525 AS: 202015 IP: 5.149.248.0/21 IP: 77.83.196.0/22 IP: 79.141.160.0/20 IP: 85.158.108.0/22 IP: 89.44.80.0/24 IP: 89.46.38.0/24 IP: 89.150.40.0/24 IP: 89.150.45.0/24 IP: 89.150.48.0/24 IP: 89.150.57.0/24 IP: 91.193.16.0/22 IP: 91.220.8.0/24 IP: 94.126.224.0/22 IP: 185.33.84.0/22 IP: 185.40.86.0/24 IP: 185.80.52.0/22 IP: 185.81.112.0/22 IP: 185.104.192.0/22 IP: 185.117.88.0/22 IP: 185.123.102.0/24 IP: 185.174.133.0/24 IP: 185.174.135.0/24 IP: 185.221.222.0/23 IP: 185.223.57.0/24 IP: 185.235.137.0 -- 185.235.138.255 IP: 185.253.116.0/22 IP: 188.119.148.0/23 IP: 193.42.36.0/22 IP: 193.111.208.0/24 IP: 194.124.229.0/24 IP: 195.95.155.0/24 IP: 2a01:8640::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:50:b6:3a:b7:f2:0b:63:8d:15:06:80:96:8a:e2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 12:08:18 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d6:3d:d6:1e:d5:d9:c2:28:ec:a0:d9:eb:cf: 45:70:1c:60:86:15:74:a6:b1:f8:ea:06:c0:8b:c4: e9:5d:bc:c5:62:e1:5d:b2:24:7d:0f:7a:81:29:06: 50:b8:db:df:e4:07:c1:28:97:8e:63:f6:7f:75:fa: e0:36:de:e7:e1:55:c3:74:11:5c:3a:32:a3:26:71: 1b:02:cb:63:39:61:a7:d6:a0:64:9d:de:94:d2:82: 70:62:d6:c0:40:a9:44:db:d0:78:19:84:d8:39:cf: d6:2f:6f:c0:8c:b8:13:91:8a:48:aa:49:98:99:6d: 80:d3:48:ba:fb:97:51:32:f5:29:8d:17:b3:7c:30: f9:18:36:c5:43:36:dd:81:86:eb:4e:82:00:27:7c: 1d:47:16:e7:44:7b:15:47:c8:75:e6:7a:3d:ca:e2: 04:40:c2:da:2d:ec:7f:5a:3c:43:ff:57:e0:d8:50: d8:2f:c7:ab:2c:da:eb:56:0b:0b:71:c2:17:f4:63: 30:57:7f:f9:aa:5a:a6:12:09:9d:54:1b:54:b6:60: 33:81:b1:37:bd:d7:f5:f1:87:3e:e6:56:69:18:78: d2:45:6c:99:8c:48:28:bc:2b:21:b3:05:ea:2e:c1: a2:6b:54:e4:55:e5:07:85:e3:02:23:4e:4d:07:a1: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.248.0/21 77.83.196.0/22 79.141.160.0/20 85.158.108.0/22 89.44.80.0/24 89.46.38.0/24 89.150.40.0/24 89.150.45.0/24 89.150.48.0/24 89.150.57.0/24 91.193.16.0/22 91.220.8.0/24 94.126.224.0/22 185.33.84.0/22 185.40.86.0/24 185.80.52.0/22 185.81.112.0/22 185.104.192.0/22 185.117.88.0/22 185.123.102.0/24 185.174.133.0/24 185.174.135.0/24 185.221.222.0/23 185.223.57.0/24 185.235.137.0-185.235.138.255 185.253.116.0/22 188.119.148.0/23 193.42.36.0/22 193.111.208.0/24 194.124.229.0/24 195.95.155.0/24 IPv6: 2a01:8640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 59711 61046 201525 202015 Signature Algorithm: sha256WithRSAEncryption 61:5e:a5:73:8d:f0:a2:34:5f:52:15:3f:33:f7:30:15:51:af: 66:d1:53:56:8c:70:bd:21:b0:7a:06:7a:ea:27:26:8d:8a:3a: fa:1b:c1:be:ba:1d:81:aa:11:fb:e4:9c:4f:97:ea:94:97:c9: 7a:95:81:53:85:18:56:fb:4b:a1:cd:b3:0f:91:67:1e:b0:8b: 1c:96:0a:c9:0a:4e:d6:c8:4d:a9:f3:54:2c:d4:54:b2:67:2f: 17:c8:39:06:a4:81:71:d2:68:c7:aa:cc:dd:da:14:31:96:0c: ea:80:00:d5:43:f8:3d:2b:5e:27:60:3a:15:dc:76:c9:7e:79: 9d:10:b7:33:d2:24:ec:12:f6:31:33:9b:a9:83:17:1b:1a:6b: b0:66:24:1e:88:15:17:e5:35:ce:8b:fa:e9:da:35:d2:8a:88: 49:8c:c5:d1:5a:5e:63:d7:9d:39:eb:c8:fb:e8:f5:ae:cb:30: 42:33:9b:b1:dd:4b:69:01:e8:12:63:d1:64:d1:aa:04:4c:21: 60:48:3b:d1:27:bd:8d:2a:6b:fd:47:e5:97:c4:58:43:7b:67: 37:7e:32:f6:39:6a:9b:65:a3:f1:4b:b4:e9:8d:de:0a:8b:b5: c1:cf:90:51:47:1e:00:3f:56:4f:ed:a4:87:3c:85:d8:5a:27: 21:a4:98:ca -----BEGIN CERTIFICATE----- MIIGczCCBVugAwIBAgISAZqmULY6t/ILY40VBoCWiuLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMTIwODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTEyNDJjMzNiYzJlMmU5ZTQ1ODUwYTBmYzY0YWIyYzc1MDZhNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNY91h7V2cIo7KDZ689FcBxghhV0 prH46gbAi8TpXbzFYuFdsiR9D3qBKQZQuNvf5AfBKJeOY/Z/dfrgNt7n4VXDdBFc OjKjJnEbAstjOWGn1qBknd6U0oJwYtbAQKlE29B4GYTYOc/WL2/AjLgTkYpIqkmY mW2A00i6+5dRMvUpjRezfDD5GDbFQzbdgYbrToIAJ3wdRxbnRHsVR8h15no9yuIE QMLaLex/WjxD/1fg2FDYL8erLNrrVgsLccIX9GMwV3/5qlqmEgmdVBtUtmAzgbE3 vdf18Yc+5lZpGHjSRWyZjEgovCshswXqLsGia1TkVeUHheMCI05NB6GitwIDAQAB o4IDfzCCA3swHQYDVR0OBBYEFGkSQsM7wuLp5FhQoPxkqyx1BqS4MB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M3LzYzNTZi OS1jNDlmLTRiNGQtOGUyOS0zNjJmZmU4ZWUyNzAvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvNjM1NmI5 LWM0OWYtNGI0ZC04ZTI5LTM2MmZmZThlZTI3MC8xL2FSSkN3enZDNHVua1dGQ2df R1NyTEhVR3BMZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIHuBggrBgEF BQcBBwEB/wSB3jCB2zCByQQCAAEwgcIDBAMFlfgDBAJNU8QDBARPjaADBAJVnmwD BABZLFADBABZLiYDBABZligDBABZli0DBABZljADBABZljkDBAJbwRADBABb3AgD BAJefuADBAK5IVQDBAC5KFYDBAK5UDQDBAK5UXADBAK5aMADBAK5dVgDBAC5e2YD BAC5roUDBAC5rocDBAG53d4DBAC53zkwDAMEALnriQMEALnrigMEArn9dAMEAbx3 lAMEAsEqJAMEAMFv0AMEAMJ85QMEAMNfmzANBAIAAjAHAwUAKgGGQDApBggrBgEF BQcBCAEB/wQaMBigFjAUAgMA6T8CAwDudgIDAxM1AgMDFR8wDQYJKoZIhvcNAQEL BQADggEBAGFepXON8KI0X1IVPzP3MBVRr2bRU1aMcL0hsHoGeuonJo2KOvobwb66 HYGqEfvknE+X6pSXyXqVgVOFGFb7S6HNsw+RZx6wixyWCskKTtbITanzVCzUVLJn LxfIOQakgXHSaMeqzN3aFDGWDOqAANVD+D0rXidgOhXcdsl+eZ0QtzPSJOwS9jEz m6mDFxsaa7BmJB6IFRflNc6L+unaNdKKiEmMxdFaXmPXnTnryPvo9a7LMEIzm7Hd S2kB6BJj0WTRqgRMIWBIO9EnvY0qa/1H5ZfEWEN7Zzd+MvY5aptlo/FLtOmN3gqL tcHPkFFHHgA/Vk/tpIc8hdhaJyGkmMo= -----END CERTIFICATE-----Generated at Sat Dec 6 06:55:20 2025 by rpki-client