This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer File: dXXVPbgi0l24J9A3fL6wbSykGss.cer (raw, json) Hash identifier: 8G1IeJJFOAk1U9KtOussg3t+NktJxWTiIzwZoybybYw= Subject key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019AFE7A6DE13BF682C18E7632F91B1EC098 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 08 Dec 2025 15:00:27 +0000 Certificate not after: Wed 01 Jul 2026 00:00:00 +0000 Subordinate resources: AS: 214812 IP: 91.199.124.0/24 IP: 212.5.58.0/24 IP: 2a13:a2c0::/29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:7a:6d:e1:3b:f6:82:c1:8e:76:32:f9:1b:1e:c0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Dec 8 15:00:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7575d53db822d25db827d0377cbeb06d2ca41acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:38:e3:6d:54:6c:7b:bf:84:5b:7d:03:0b: ba:8b:d2:68:fa:e4:37:30:f3:8c:f8:f0:80:85:0c: 70:54:82:91:18:6d:0b:e7:e5:2c:12:7a:61:85:d2: fe:01:e7:63:2a:e0:63:85:3c:ea:4a:f2:59:e8:f4: d5:11:9f:9b:68:39:6f:db:dc:96:21:16:4d:d8:f8: 27:aa:b5:b8:30:de:29:fe:2d:80:4d:34:5c:23:a1: ac:df:d8:3d:3c:9e:19:7e:8e:95:48:f9:80:b1:29: 79:f1:7e:8d:81:5c:58:27:a3:36:df:27:69:92:1c: 6e:a6:d7:77:24:6a:4c:74:9a:a1:5a:ef:2b:73:6d: d8:1a:ed:39:73:64:d0:ca:d8:f0:a8:0a:2e:4f:35: 4d:66:f0:41:97:08:c9:ac:fe:20:4e:df:c5:95:61: 37:8f:12:82:4a:48:d3:e3:e6:0e:03:b2:fb:49:8d: cf:3a:28:0d:f0:ae:53:95:54:73:ff:34:58:3b:d1: 26:e9:67:37:7f:3f:25:a7:f2:7e:24:4d:c5:2b:d6: a7:a8:3a:10:70:00:21:4b:6f:e0:91:f0:65:58:f9: 1f:07:47:54:74:d6:fe:20:ce:11:31:57:ae:9d:89: 11:36:18:88:00:82:c3:5b:ac:f5:5e:5f:23:97:bd: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.124.0/24 212.5.58.0/24 IPv6: 2a13:a2c0::/29 sbgp-autonomousSysNum: critical Autonomous System Numbers: 214812 Signature Algorithm: sha256WithRSAEncryption 30:fd:cb:ea:ed:66:ea:33:d1:0b:e8:38:03:57:80:63:a2:3f: 37:f6:6c:1a:5b:bd:14:ab:3f:e5:5c:f6:02:49:d3:e9:51:ab: fa:cf:b4:90:df:56:15:c9:4a:70:60:e7:7e:c6:44:9c:ba:91: 13:80:39:48:08:3b:8c:61:89:5d:42:79:da:4c:2a:2a:fc:de: 45:a1:68:7a:28:35:fd:7c:f4:50:56:b9:b4:46:33:4f:e4:32: e8:04:7b:da:96:55:c1:eb:49:55:1d:e0:26:84:c2:78:79:8b: 86:3f:17:d7:28:64:24:fa:0d:b1:7a:22:5b:4d:57:9b:a7:10: b1:ab:4a:24:3e:fb:4c:21:93:20:15:4b:83:5a:86:45:0b:f5: b8:0f:5c:f0:ca:85:ae:39:11:58:15:16:f7:45:20:d2:9b:7c: 25:ed:a0:2d:31:91:a9:14:2f:4b:02:60:3e:a1:51:74:75:ff: 87:e4:86:0c:4e:7c:55:46:7a:c5:79:61:c7:a2:5b:04:ea:c4: 1e:3f:90:24:44:22:f1:26:cd:57:8e:27:c1:c9:1b:6e:76:72: fa:97:5c:5c:8d:7c:97:ab:e1:04:26:70:cc:6e:26:b7:89:fa: 51:f1:28:18:50:2c:a3:94:70:de:a8:2e:ea:5e:80:4d:25:a4: c6:6a:0e:ed -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgISAZr+em3hO/aCwY52MvkbHsCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjUxMjA4MTUwMDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTc1ZDUzZGI4MjJkMjVkYjgyN2QwMzc3Y2JlYjA2ZDJjYTQxYWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYg4421UbHu/hFt9Awu6i9Jo+uQ3 MPOM+PCAhQxwVIKRGG0L5+UsEnphhdL+AedjKuBjhTzqSvJZ6PTVEZ+baDlv29yW IRZN2PgnqrW4MN4p/i2ATTRcI6Gs39g9PJ4Zfo6VSPmAsSl58X6NgVxYJ6M23ydp khxuptd3JGpMdJqhWu8rc23YGu05c2TQytjwqAouTzVNZvBBlwjJrP4gTt/FlWE3 jxKCSkjT4+YOA7L7SY3POigN8K5TlVRz/zRYO9Em6Wc3fz8lp/J+JE3FK9anqDoQ cAAhS2/gkfBlWPkfB0dUdNb+IM4RMVeunYkRNhiIAILDW6z1Xl8jl72nsQIDAQAB o4ICtTCCArEwHQYDVR0OBBYEFHV11T24ItJduCfQN3y+sG0spBrLMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhL2Y3ZjBm Mi00NzllLTRmMDMtYmFhMi0wNjFlZDkzNzE0NzUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvZjdmMGYy LTQ3OWUtNGYwMy1iYWEyLTA2MWVkOTM3MTQ3NS8xL2RYWFZQYmdpMGwyNEo5QTNm TDZ3YlN5a0dzcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF BwEHAQH/BCUwIzASBAIAATAMAwQAW8d8AwQA1AU6MA0EAgACMAcDBQMqE6LAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwNHHDANBgkqhkiG9w0BAQsFAAOCAQEAMP3L 6u1m6jPRC+g4A1eAY6I/N/ZsGlu9FKs/5Vz2AknT6VGr+s+0kN9WFclKcGDnfsZE nLqRE4A5SAg7jGGJXUJ52kwqKvzeRaFoeig1/Xz0UFa5tEYzT+Qy6AR72pZVwetJ VR3gJoTCeHmLhj8X1yhkJPoNsXoiW01Xm6cQsatKJD77TCGTIBVLg1qGRQv1uA9c 8MqFrjkRWBUW90Ug0pt8Je2gLTGRqRQvSwJgPqFRdHX/h+SGDE58VUZ6xXlhx6Jb BOrEHj+QJEQi8SbNV44nwckbbnZy+pdcXI18l6vhBCZwzG4mt4n6UfEoGFAso5Rw 3qgu6l6ATSWkxmoO7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 15:10:09 2025 by rpki-client