This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cMbVNbDydaJhhfj03KWA0m16l0Y.cer File: cMbVNbDydaJhhfj03KWA0m16l0Y.cer (raw, json) Hash identifier: n0XWivkwyB7gQAVqaq8ANVXigpa05VtU6m0+vaKHXXM= Subject key identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AA5F0804ACE23D70079069875DAC9549F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 21 Nov 2025 10:23:13 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 204183 IP: 80.173.200.0/22 IP: 2a0f:c000::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:f0:80:4a:ce:23:d7:00:79:06:98:75:da:c9:54:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Nov 21 10:23:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70c6d535b0f275a26185f8f4dca580d26d7a9746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e0:16:99:2a:4b:c3:65:0e:e2:c2:77:60:91: 6d:2b:e2:ce:1f:d6:36:31:e5:8b:de:19:87:a3:96: 75:a3:4f:4b:92:28:e0:a6:a9:2f:54:3f:be:b8:73: 0d:89:11:d7:ad:48:36:1d:64:a8:26:f1:a6:2f:45: 05:b0:93:d2:23:9b:44:c7:72:88:df:b0:bf:9e:b4: d8:95:81:93:5a:ae:16:69:cf:89:40:71:d8:75:d0: 3d:c6:49:ac:43:9a:ef:3d:3d:f0:c6:62:78:71:fd: cc:56:24:92:2f:05:d9:ef:68:96:03:1d:23:51:a0: 9e:16:66:63:50:79:6a:2a:30:4f:3d:68:46:13:87: 5b:5a:07:63:10:b2:be:af:c2:f0:a7:32:cd:6b:68: 50:7c:b0:e8:f1:16:10:9b:d9:70:0a:28:56:56:0a: 32:77:9d:d0:d1:35:5c:cc:49:77:84:94:f8:cf:8b: 83:75:0e:c8:5a:54:ec:2a:5d:a1:9c:e7:ea:4a:d0: d2:32:72:e0:39:81:cb:b1:f5:8e:09:f9:ca:eb:40: f2:e0:36:b3:ae:08:c3:d0:0d:31:a7:36:66:db:f6: 31:cc:0e:c9:c1:35:de:57:37:95:fb:e2:7c:40:a2: 3c:b6:93:16:36:78:b7:64:ef:67:75:45:62:94:e3: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:D5:35:B0:F2:75:A2:61:85:F8:F4:DC:A5:80:D2:6D:7A:97:46 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3533d0-1367-44b2-9048-00281a5ba6c7/1/cMbVNbDydaJhhfj03KWA0m16l0Y.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.173.200.0/22 IPv6: 2a0f:c000::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 204183 Signature Algorithm: sha256WithRSAEncryption 60:40:c7:8b:22:f1:0d:2b:2b:81:60:54:b4:00:c1:12:60:7d: 7f:0d:db:3c:6f:69:47:65:df:ab:77:e5:25:b8:68:74:9f:c9: 2c:25:45:af:c6:76:53:f6:7d:6d:b3:7e:60:6d:1b:22:34:25: b0:af:da:73:4e:c8:30:7e:9c:0c:ac:e6:64:a2:96:b1:48:a6: 39:2e:ad:16:b4:25:1e:29:2d:6c:52:ae:32:92:24:7b:bc:f4: e8:a6:64:1e:06:a3:f3:d6:12:a5:39:07:9a:5d:bc:8d:ad:0b: e3:67:cd:d6:79:38:1b:c9:5e:07:90:9f:fe:43:b7:8e:c8:68: 67:ca:bf:21:5f:94:6e:fe:36:f5:e4:29:ad:f0:70:51:a2:6e: b5:91:28:38:17:3c:07:da:43:bb:35:76:2e:5a:27:7a:ee:87: 19:3c:8c:5a:61:a2:5e:be:80:95:f9:a3:5f:44:39:4b:04:d5: 0b:b2:37:11:62:21:3a:ba:2e:d8:a0:ec:1b:20:b2:8b:71:ec: 64:4b:f1:fb:50:84:62:1c:8d:b0:ae:61:9f:28:cd:ad:6c:df: 68:a2:00:a1:ab:06:55:51:dd:da:98:5d:3d:4d:83:a5:75:0b: 0b:06:fc:5b:74:2e:19:9d:98:e1:d4:1c:40:62:d3:3c:da:2c: 2a:10:e7:87 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgISAZql8IBKziPXAHkGmHXayVSfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMTIxMTAyMzEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGM2ZDUzNWIwZjI3NWEyNjE4NWY4ZjRkY2E1ODBkMjZkN2E5NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheAWmSpLw2UO4sJ3YJFtK+LOH9Y2 MeWL3hmHo5Z1o09LkijgpqkvVD++uHMNiRHXrUg2HWSoJvGmL0UFsJPSI5tEx3KI 37C/nrTYlYGTWq4Wac+JQHHYddA9xkmsQ5rvPT3wxmJ4cf3MViSSLwXZ72iWAx0j UaCeFmZjUHlqKjBPPWhGE4dbWgdjELK+r8LwpzLNa2hQfLDo8RYQm9lwCihWVgoy d53Q0TVczEl3hJT4z4uDdQ7IWlTsKl2hnOfqStDSMnLgOYHLsfWOCfnK60Dy4Daz rgjD0A0xpzZm2/YxzA7JwTXeVzeV++J8QKI8tpMWNni3ZO9ndUVilOOCQwIDAQAB o4ICrzCCAqswHQYDVR0OBBYEFHDG1TWw8nWiYYX49NylgNJtepdGMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIwLzM1MzNk MC0xMzY3LTQ0YjItOTA0OC0wMDI4MWE1YmE2YzcvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAvMzUzM2Qw LTEzNjctNDRiMi05MDQ4LTAwMjgxYTViYTZjNy8xL2NNYlZOYkR5ZGFKaGhmajAz S1dBMG0xNmwwWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF BwEHAQH/BB8wHTAMBAIAATAGAwQCUK3IMA0EAgACMAcDBQMqD8AAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwMdlzANBgkqhkiG9w0BAQsFAAOCAQEAYEDHiyLxDSsr gWBUtADBEmB9fw3bPG9pR2Xfq3flJbhodJ/JLCVFr8Z2U/Z9bbN+YG0bIjQlsK/a c07IMH6cDKzmZKKWsUimOS6tFrQlHiktbFKuMpIke7z06KZkHgaj89YSpTkHml28 ja0L42fN1nk4G8leB5Cf/kO3jshoZ8q/IV+Ubv429eQprfBwUaJutZEoOBc8B9pD uzV2Lloneu6HGTyMWmGiXr6AlfmjX0Q5SwTVC7I3EWIhOrou2KDsGyCyi3HsZEvx +1CEYhyNsK5hnyjNrWzfaKIAoasGVVHd2phdPU2DpXULCwb8W3QuGZ2Y4dQcQGLT PNosKhDnhw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:54:06 2025 by rpki-client