This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer File: cpIiZWfact2GiDyt1fPeb_1bNXM.cer (raw, json) Hash identifier: 0UCIaynQUjZFzTUy0JEQbP+jmtcJWR32Z4rY5+wIHX4= Subject key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AE438599AA50623A500E76463B6D32E9D Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Wed 03 Dec 2025 12:38:09 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 215385 IP: 45.117.232.0/22 IP: 85.155.104.0/22 IP: 176.119.217.0/24 IP: 2a07:9340::/32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:38:59:9a:a5:06:23:a5:00:e7:64:63:b6:d3:2e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 3 12:38:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7292226567da72dd86883cadd5f3de6ffd5b3573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:b4:74:1b:54:1d:bd:a3:80:25:a3:9d:97: b7:ce:56:2f:46:40:a3:e1:30:b2:51:6a:ed:22:5e: 7d:91:1f:f5:a8:c3:75:c3:ec:8c:ad:54:5e:c5:6c: 03:4f:5f:13:42:74:a1:c1:10:bb:c6:42:81:0f:ee: fb:bc:8a:12:4d:c5:5f:59:ba:3c:40:fd:54:75:b9: e6:e6:56:53:6f:06:cd:75:c8:5c:e9:91:5d:2c:3f: 0e:3a:60:68:5e:40:d5:6f:75:92:41:c5:6c:88:bb: 78:e7:fc:ca:0d:c9:cb:26:7f:4f:cd:cd:d7:76:d9: 3d:1d:79:54:45:23:4d:c3:6e:c8:db:9c:49:26:b7: 4a:68:3e:f4:e6:7f:70:3b:c7:61:10:fa:af:27:f0: 3a:a1:63:d9:bb:4f:28:1d:97:a5:f5:ab:59:29:5c: 33:8b:45:6c:3b:06:4d:eb:60:6c:66:e1:ec:d7:99: 2b:9e:c5:a3:08:a4:ec:b3:85:8f:e2:93:80:f7:38: 32:fa:cd:e1:10:1c:96:cf:f5:85:21:aa:e1:23:5c: 1c:3e:1a:12:fb:11:26:db:77:55:88:b3:a8:9c:49: 2a:27:18:e4:48:53:ed:0a:26:33:f9:66:bd:ab:d4: 1b:17:cf:0f:39:64:78:90:8a:dc:46:00:ad:a6:66: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.117.232.0/22 85.155.104.0/22 176.119.217.0/24 IPv6: 2a07:9340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 215385 Signature Algorithm: sha256WithRSAEncryption 1e:ec:5d:bc:83:b8:43:77:84:24:ca:a9:78:30:10:2d:23:c1: a7:a7:b8:7a:1a:93:2a:30:d2:35:7f:85:2e:09:7b:72:e3:99: 86:0b:22:0e:b9:30:02:30:19:b6:bf:17:8b:ec:c6:a2:25:b2: 5f:de:4f:c7:88:05:95:fc:63:c1:d2:a4:c7:29:3a:0e:18:00: 5d:f4:85:f8:c6:1c:72:ab:14:ed:7f:7d:0b:b6:08:6c:ae:73: 2b:fa:0a:26:10:fa:25:b0:a3:84:ee:4b:4a:74:92:60:bd:e5: 0d:87:79:1c:57:b1:8c:cf:ee:8f:6d:d1:49:bc:f3:9d:30:a6: 28:6a:bd:96:ca:cd:c6:9f:6a:81:05:d6:21:83:b8:21:8f:67: 2b:7c:bf:ac:bf:06:0e:32:d0:70:a6:da:da:be:3b:bc:f8:f6: 43:a8:55:bc:e0:6b:dd:ed:9d:e6:97:09:98:26:30:71:6f:22: ee:4d:a5:51:92:86:af:f2:67:35:b0:6b:e0:47:6e:8c:47:44: ee:db:f6:af:5f:03:8d:f9:05:f5:dd:1f:8d:8c:9c:f9:a9:13: 03:70:57:ec:12:bb:09:82:1b:ac:7c:e9:73:73:a3:8a:1a:fd: 6f:43:c0:d2:26:35:f1:5d:a8:2e:d4:b5:b1:59:af:1f:28:7b: dc:ae:70:7b -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgISAZrkOFmapQYjpQDnZGO20y6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjAzMTIzODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjkyMjI2NTY3ZGE3MmRkODY4ODNjYWRkNWYzZGU2ZmZkNWIzNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CO0dBtUHb2jgCWjnZe3zlYvRkCj 4TCyUWrtIl59kR/1qMN1w+yMrVRexWwDT18TQnShwRC7xkKBD+77vIoSTcVfWbo8 QP1Udbnm5lZTbwbNdchc6ZFdLD8OOmBoXkDVb3WSQcVsiLt45/zKDcnLJn9Pzc3X dtk9HXlURSNNw27I25xJJrdKaD705n9wO8dhEPqvJ/A6oWPZu08oHZel9atZKVwz i0VsOwZN62BsZuHs15krnsWjCKTss4WP4pOA9zgy+s3hEByWz/WFIarhI1wcPhoS +xEm23dViLOonEkqJxjkSFPtCiYz+Wa9q9QbF88POWR4kIrcRgCtpmZLXwIDAQAB o4ICuzCCArcwHQYDVR0OBBYEFHKSImVn2nLdhog8rdXz3m/9WzVzMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVkLzRlYzIx Ny1lOGQ3LTRlODAtODdjZC0wMzlkZTc4NGQ5NDEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQvNGVjMjE3 LWU4ZDctNGU4MC04N2NkLTAzOWRlNzg0ZDk0MS8xL2NwSWlaV2ZhY3QyR2lEeXQx ZlBlYl8xYk5YTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF BwEHAQH/BCswKTAYBAIAATASAwQCLXXoAwQCVZtoAwQAsHfZMA0EAgACMAcDBQAq B5NAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwNJWTANBgkqhkiG9w0BAQsFAAOC AQEAHuxdvIO4Q3eEJMqpeDAQLSPBp6e4ehqTKjDSNX+FLgl7cuOZhgsiDrkwAjAZ tr8Xi+zGoiWyX95Px4gFlfxjwdKkxyk6DhgAXfSF+MYccqsU7X99C7YIbK5zK/oK JhD6JbCjhO5LSnSSYL3lDYd5HFexjM/uj23RSbzznTCmKGq9lsrNxp9qgQXWIYO4 IY9nK3y/rL8GDjLQcKba2r47vPj2Q6hVvOBr3e2d5pcJmCYwcW8i7k2lUZKGr/Jn NbBr4EdujEdE7tv2r18DjfkF9d0fjYyc+akTA3BX7BK7CYIbrHzpc3Ojihr9b0PA 0iY18V2oLtS1sVmvHyh73K5wew== -----END CERTIFICATE-----Generated at Sat Dec 6 07:39:27 2025 by rpki-client